last executing test programs: 2m38.664692985s ago: executing program 2 (id=2730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d4d63767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 2m38.24411721s ago: executing program 2 (id=2734): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 2m36.286762904s ago: executing program 2 (id=2743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b1000040"]) 2m35.772962846s ago: executing program 2 (id=2747): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 2m34.77723044s ago: executing program 2 (id=2759): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x104) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) read$eventfd(r1, &(0x7f0000000140), 0x8) 2m34.353193388s ago: executing program 2 (id=2763): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x141, 0xfffffffd, 0x6, 0x6106, 0xc, "dba2983e4eb9d51b5bbf4dcce3c9b929b41680", 0x1012, 0xf}) write(r1, &(0x7f00000002c0)="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", 0x143) 2m33.761257587s ago: executing program 32 (id=2763): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x141, 0xfffffffd, 0x6, 0x6106, 0xc, "dba2983e4eb9d51b5bbf4dcce3c9b929b41680", 0x1012, 0xf}) write(r1, &(0x7f00000002c0)="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", 0x143) 49.847589123s ago: executing program 0 (id=3740): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4005}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close_range(r0, 0xffffffffffffffff, 0x0) 49.119625935s ago: executing program 0 (id=3747): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1", 0x79}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) 48.129620239s ago: executing program 0 (id=3752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007300004000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[]) 47.936713082s ago: executing program 0 (id=3754): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 47.850202127s ago: executing program 0 (id=3755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 47.503553421s ago: executing program 0 (id=3757): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = eventfd(0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0xd000, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r2, 0x4}) 47.081010915s ago: executing program 33 (id=3757): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) r3 = eventfd(0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0xd000, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r2, 0x4}) 7.457041964s ago: executing program 3 (id=4063): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() syz_io_uring_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 6.99340857s ago: executing program 3 (id=4065): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 6.937386545s ago: executing program 3 (id=4066): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102030109022400010000000009042902abda66830009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000580)={0x40, 0x15, 0x7, "da5ae6c3b868b6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.761245546s ago: executing program 1 (id=4086): r0 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) close_range(r0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x720c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x0, 0x41, 0x1, {0x22, 0x5ac}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0xdd, &(0x7f0000000e40)=ANY=[@ANYBLOB="dd03460b"]}]}) 4.513732067s ago: executing program 3 (id=4088): r0 = mq_open(&(0x7f00000000c0)='batadv_slave_1\x00\x85\x1c\x12\x05\xdb\xadf\xce\xc7;8]\x1fE\xaf\x94RS\x14\x1dUd\x8e', 0x8c2, 0x30, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 4.453357873s ago: executing program 3 (id=4089): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 4.406150381s ago: executing program 3 (id=4090): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) 4.202485256s ago: executing program 6 (id=4092): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="401506"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.733732632s ago: executing program 4 (id=4099): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 2.540733863s ago: executing program 4 (id=4100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) 2.203436613s ago: executing program 4 (id=4101): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x402) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 2.055754766s ago: executing program 1 (id=4102): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42002, 0x113) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="12", 0x1}], 0x1, 0xcfbc, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000001c0)={0x17c04, 0xffffffffffffffff, 0xfff, 0xfff, 0x9}) 1.916933222s ago: executing program 4 (id=4103): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) 1.858312335s ago: executing program 1 (id=4104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 1.546284515s ago: executing program 4 (id=4105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x200000000000001, 0x9, 0x7, 0x0, 0x3, 0x400000000010, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x20001, 0x5], 0x8000000, 0x471ca5563f61139c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.544889018s ago: executing program 6 (id=4106): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xed]}, 0x8) ppoll(&(0x7f0000000000)=[{r2}, {r2, 0x2000}], 0x2, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000080)={[0x81]}, 0x8, 0x0) 1.497437759s ago: executing program 1 (id=4107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x81) r1 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.155727539s ago: executing program 1 (id=4109): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)='K', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4008014) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 1.124646152s ago: executing program 4 (id=4110): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.091809608s ago: executing program 5 (id=4111): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0x2) 963.70846ms ago: executing program 1 (id=4112): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001380)="16", 0x1}, {&(0x7f00000002c0)="15", 0x1}], 0x2) 780.395082ms ago: executing program 5 (id=4113): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @empty, 0xe}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 621.008052ms ago: executing program 5 (id=4114): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 508.340167ms ago: executing program 5 (id=4115): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180), 0x3, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x2, r3, r1}) 321.819022ms ago: executing program 5 (id=4116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 308.309581ms ago: executing program 6 (id=4117): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 214.535863ms ago: executing program 6 (id=4118): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 200.637761ms ago: executing program 5 (id=4119): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x53467f791816cd9, 0xf, 0x6, "03feed7c2dd7"}, 0x0, 0x0, 0x0, 0x0}) 125.635157ms ago: executing program 6 (id=4120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1}, 0x0) 0s ago: executing program 6 (id=4121): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x0, 0x0, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): deactivated: batadv_slave_1 [ 401.378498][T13291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.489668][T13335] syzkaller1: entered promiscuous mode [ 402.544510][T13335] syzkaller1: entered allmulticast mode [ 403.396354][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 403.540858][T13360] syzkaller1: entered promiscuous mode [ 403.571405][T13360] syzkaller1: entered allmulticast mode [ 403.628637][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 403.670419][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.707291][ T9] usb 5-1: config 0 descriptor?? [ 403.759117][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 403.818131][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 404.009320][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 404.055253][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.098562][ T10] usb 2-1: config 0 descriptor?? [ 404.564680][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 404.599454][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 404.613590][ T9] gspca_cpia1: usb_control_msg 04, error -71 [ 404.646289][ T9] cpia1 5-1:0.0: probe with driver cpia1 failed with error -71 [ 404.657398][ T9] usb 5-1: USB disconnect, device number 55 [ 404.936407][ T10] usb 2-1: Cannot set autoneg [ 404.966246][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 405.007748][ T10] usb 2-1: USB disconnect, device number 39 [ 405.117059][T13397] kvm: user requested TSC rate below hardware speed [ 405.399032][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 405.558725][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.587532][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 405.598289][ T9] usb 1-1: config 1 has no interface number 0 [ 405.604794][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.621327][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 405.637609][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 405.655546][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 405.688823][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.739887][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.764881][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.778644][ T9] usb 1-1: Product: syz [ 405.783126][ T9] usb 1-1: Manufacturer: syz [ 405.806360][ T9] usb 1-1: SerialNumber: syz [ 405.833578][T13399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.073156][T13399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.303438][T13399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.743145][T13399] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.780451][ T9] cdc_ncm 1-1:1.1: bind() failure [ 407.010488][T13453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3003'. [ 407.044188][ T24] usb 1-1: USB disconnect, device number 50 [ 408.126573][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 408.316281][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 408.333956][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.352439][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.405606][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 408.443897][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 408.483816][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.526210][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 408.538921][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 408.559350][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.576289][ T10] usb 4-1: Manufacturer: syz [ 408.600797][ T10] usb 4-1: config 0 descriptor?? [ 408.708643][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.742428][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.756226][ T5920] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 408.760915][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.781326][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.791153][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.809926][ T9] usb 1-1: config 0 descriptor?? [ 408.908906][ T10] rc_core: IR keymap rc-hauppauge not found [ 408.915199][ T10] Registered IR keymap rc-empty [ 408.917830][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.923980][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 408.936169][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.956207][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 408.976279][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.976401][ T5896] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 408.996209][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.998805][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.019170][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.047347][ T5920] usb 5-1: config 0 descriptor?? [ 409.047781][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 409.076804][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 409.109036][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.136620][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.156823][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.177362][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.187061][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 409.198726][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.209439][ T5896] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 409.219835][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.235120][ T5896] usb 6-1: config 0 descriptor?? [ 409.242910][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.255514][ T9] plantronics 0003:047F:FFFF.0033: reserved main item tag 0xe [ 409.273842][ T9] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 409.284309][T13498] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 409.292016][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.320092][ T9] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 409.333548][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.356701][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.397160][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.426383][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.450589][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 409.465435][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 409.485777][ T5920] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 409.507824][ T5920] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 409.529220][ T5920] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 409.531272][ T10] usb 4-1: USB disconnect, device number 41 [ 409.541064][ T5920] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 409.581153][ T24] usb 1-1: USB disconnect, device number 51 [ 409.613992][ T5920] plantronics 0003:047F:FFFF.0034: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 409.641364][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 409.760206][ T5896] elan 0003:04F3:0755.0035: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 409.773132][ T5920] usb 5-1: USB disconnect, device number 56 [ 409.808465][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.818453][T13506] fido_id[13506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 409.841188][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.864778][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.885687][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.894263][ T9] usb 2-1: Product: syz [ 409.900757][ T9] usb 2-1: Manufacturer: syz [ 409.905402][ T9] usb 2-1: SerialNumber: syz [ 410.141134][ T9] usb 2-1: 0:2 : does not exist [ 410.165457][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 410.209526][ T9] usb 2-1: USB disconnect, device number 40 [ 410.352669][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.401228][T13515] validate_nla: 43 callbacks suppressed [ 410.401249][T13515] netlink: 'syz.0.3024': attribute type 1 has an invalid length. [ 410.418581][T13515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.426282][T13515] IPv6: NLM_F_CREATE should be set when creating new route [ 410.433872][T13515] IPv6: NLM_F_CREATE should be set when creating new route [ 410.479990][T13515] netlink: 'syz.0.3024': attribute type 1 has an invalid length. [ 410.485302][T13517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3025'. [ 410.488503][T13515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.916726][ T5920] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 411.081209][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 411.086201][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 411.120892][ T5920] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 411.145799][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.176573][ T5920] usb 5-1: Product: syz [ 411.180889][ T5920] usb 5-1: Manufacturer: syz [ 411.185693][ T5920] usb 5-1: SerialNumber: syz [ 411.242730][ T5920] usb 5-1: config 0 descriptor?? [ 411.265358][ T5920] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 411.274591][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 411.297855][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 411.322011][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.353933][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 411.406218][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 411.442727][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.497892][ T10] usb 2-1: config 0 descriptor?? [ 411.512460][ T5920] gp8psk: usb in 128 operation failed. [ 411.538108][ T5920] gp8psk: usb in 137 operation failed. [ 411.552543][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.575006][ T5920] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 411.596889][ T5920] usb 5-1: media controller created [ 411.630327][ T5903] usb 6-1: USB disconnect, device number 4 [ 411.646555][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.698742][ T5920] gp8psk_fe: Frontend revision 1 attached [ 411.718512][ T10] usb 2-1: string descriptor 0 read error: -71 [ 411.725300][ T5920] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 411.754226][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 411.755356][ T5920] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 411.776735][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 411.806780][ T10] usb 2-1: USB disconnect, device number 41 [ 411.957830][ T5920] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 411.970437][ T5920] gp8psk: found Genpix USB device pID = 201 (hex) [ 412.218864][ T10] usb 5-1: USB disconnect, device number 57 [ 412.450023][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 412.652689][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 412.713340][T13568] ip_vti0: Master is either lo or non-ether device [ 413.247824][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 413.379647][T13596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.438260][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.460466][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.486672][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.505175][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.515607][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.534513][ T10] usb 5-1: config 0 descriptor?? [ 413.576221][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 413.738748][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.781864][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.807776][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.826617][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.836652][ T9] usb 6-1: SerialNumber: syz [ 413.853891][T13610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3066'. [ 414.008310][ T10] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 414.080538][ T9] usb 6-1: 0:2 : does not exist [ 414.140293][ T9] usb 6-1: USB disconnect, device number 5 [ 414.182702][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.332114][ T5970] usb 5-1: USB disconnect, device number 58 [ 414.779568][T13628] syzkaller1: entered promiscuous mode [ 414.799561][T13628] syzkaller1: entered allmulticast mode [ 415.873353][T13661] loop7: detected capacity change from 0 to 7 [ 415.909056][T13661] Dev loop7: unable to read RDB block 7 [ 415.924647][T13661] loop7: unable to read partition table [ 415.946609][T13661] loop7: partition table beyond EOD, truncated [ 415.963412][T13661] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 416.540261][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 417.389991][T13705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.682385][T13718] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 418.104554][T13733] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3109'. [ 418.234345][T13739] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3110'. [ 419.920487][T13806] syzkaller1: entered promiscuous mode [ 419.928756][T13806] syzkaller1: entered allmulticast mode [ 420.936424][ T5970] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 421.109310][ T5970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 421.144794][ T5970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 421.176236][ T5970] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 421.198578][ T5970] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 421.251484][ T5970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.273217][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.295114][ T5970] usb 1-1: Product: syz [ 421.305261][ T5970] usb 1-1: Manufacturer: syz [ 421.329445][ T5970] usb 1-1: SerialNumber: syz [ 421.375585][T13822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 421.397742][ T5970] cdc_mbim 1-1:1.0: skipping garbage [ 421.614688][T13822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 421.646741][T13822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 421.896737][ T30] audit: type=1326 audit(1760598994.221:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13856 comm="syz.1.3160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4345f8eec9 code=0x0 [ 422.272739][T13822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 422.281515][T13822] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 422.291957][ T5970] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 422.300539][ T5970] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 422.319212][ T5970] wwan wwan0: port wwan0mbim0 attached [ 422.332182][ T5970] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 16:51:d3:15:17:a9 [ 422.530808][ T10] usb 1-1: USB disconnect, device number 52 [ 422.537225][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 422.551552][ T10] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 422.640482][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 422.698380][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 422.719687][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 422.742435][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 422.774607][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.795750][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.837111][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.852294][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.082543][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 423.096187][ T9] usbtmc 5-1:16.0: can't read capabilities [ 423.281111][T13909] input: syz1 as /devices/virtual/input/input71 [ 423.293116][T13879] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 423.301974][ T10] usb 5-1: USB disconnect, device number 59 [ 423.407487][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 423.534106][T13916] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 423.597342][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 423.619824][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.649358][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.680017][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.700809][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.726165][ T9] usb 2-1: Product: syz [ 423.730727][ T9] usb 2-1: Manufacturer: syz [ 423.740742][ T9] usb 2-1: SerialNumber: syz [ 423.972016][ T9] usb 2-1: 0:2 : does not exist [ 423.990836][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 424.078875][ T9] usb 2-1: USB disconnect, device number 42 [ 424.222124][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.343794][T13971] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3200'. [ 425.478193][T13976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.227744][T14001] batadv_slave_0: entered promiscuous mode [ 426.250030][T14000] batadv_slave_0: left promiscuous mode [ 426.277539][T13996] syzkaller1: entered promiscuous mode [ 426.283194][T13996] syzkaller1: entered allmulticast mode [ 426.479290][T14006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3215'. [ 426.843216][ T30] audit: type=1326 audit(1760598999.161:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.0.3223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19d4d8eec9 code=0x0 [ 426.949662][T14031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.334830][T14041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.093330][T14091] ip6gre1: entered allmulticast mode [ 429.527792][ T5920] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 429.692724][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 429.712752][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.740481][ T5970] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 429.753282][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.767070][ T5920] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 429.779517][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.804956][ T5920] usb 6-1: config 0 descriptor?? [ 429.920683][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.950132][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.968798][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.005963][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.024110][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.045515][ T30] audit: type=1326 audit(1760599002.361:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.1.3256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4345f8eec9 code=0x0 [ 430.069343][ T5970] usb 4-1: config 0 descriptor?? [ 430.272532][ T5920] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.0037/input/input72 [ 430.365610][ T5920] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.0037/input/input73 [ 430.445418][ T5920] kye 0003:0458:5012.0037: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 430.518345][ T5920] usb 6-1: USB disconnect, device number 6 [ 430.578141][ T5970] plantronics 0003:047F:FFFF.0038: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 430.679978][T14128] fido_id[14128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 430.777242][T13528] usb 4-1: USB disconnect, device number 42 [ 430.872821][T14129] fido_id[14129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 431.422171][T14144] binder: 14143:14144 ioctl c0306201 2000000001c0 returned -14 [ 431.547393][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 431.719733][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.776188][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 431.799319][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.829698][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.864459][ T10] usb 6-1: Product: syz [ 431.875658][ T10] usb 6-1: Manufacturer: syz [ 431.887586][ T10] usb 6-1: SerialNumber: syz [ 431.930650][T14141] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 431.967113][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 432.396166][T13528] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 432.556185][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 432.572195][T13528] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 432.596236][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.623782][T13528] usb 1-1: Product: syz [ 432.633812][T13528] usb 1-1: Manufacturer: syz [ 432.644686][T13528] usb 1-1: SerialNumber: syz [ 432.675863][T13528] usb 1-1: config 0 descriptor?? [ 432.715729][T13528] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 432.738537][T13528] usb 1-1: Detected FT-X [ 432.962369][T13528] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 432.986190][ T10] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 433.018065][ T10] cdc_ncm 6-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 433.056328][ T10] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 433.188883][ T10] cdc_ncm 6-1:1.0: setting tx_max = 48 [ 433.292387][ T10] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 433.362881][ T10] usb 6-1: USB disconnect, device number 7 [ 433.408616][ T10] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 433.429460][T13528] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 433.661580][ T5920] usb 1-1: USB disconnect, device number 53 [ 433.769114][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 433.828574][ T5920] ftdi_sio 1-1:0.0: device disconnected [ 433.926333][T14190] loop2: detected capacity change from 0 to 7 [ 433.950117][T14190] Dev loop2: unable to read RDB block 7 [ 433.966210][T14190] loop2: unable to read partition table [ 433.978142][T14190] loop2: partition table beyond EOD, truncated [ 434.015429][T14190] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 434.066676][T14194] input: syz0 as /devices/virtual/input/input75 [ 435.066814][ T5970] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 435.247378][ T5970] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.255558][ T5970] usb 4-1: config 0 has no interface number 0 [ 435.293095][ T5970] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 435.334705][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.367861][ T5970] usb 4-1: config 0 descriptor?? [ 435.418853][ T5970] cp210x 4-1:0.1: cp210x converter detected [ 435.782651][ T5970] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 436.017876][ T5970] usb 4-1: cp210x converter now attached to ttyUSB0 [ 436.252506][ T5970] usb 4-1: USB disconnect, device number 43 [ 436.279739][ T5970] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 436.356534][ T5970] cp210x 4-1:0.1: device disconnected [ 437.706733][ T5920] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 437.936536][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 437.971278][ T5920] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 438.001187][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.025647][ T5920] usb 5-1: Product: syz [ 438.036193][ T5920] usb 5-1: Manufacturer: syz [ 438.041957][ T5920] usb 5-1: SerialNumber: syz [ 438.058251][ T5920] usb 5-1: config 0 descriptor?? [ 438.074951][ T5920] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 438.903570][T14301] vivid-002: disconnect [ 438.913078][T14301] vivid-002: reconnect [ 438.999094][T14304] dummy0: entered allmulticast mode [ 439.046161][ T10] psmouse serio6: Failed to reset mouse on : -5 [ 439.208038][T14302] dummy0: left allmulticast mode [ 439.288525][ T5920] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 439.314905][ T5920] usb 5-1: USB disconnect, device number 60 [ 439.486245][T13528] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 439.712804][T13528] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.722402][T13528] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 439.730233][T13528] usb 2-1: can't read configurations, error -71 [ 440.109506][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.117797][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.622769][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 440.791806][T14360] loop6: detected capacity change from 0 to 1 [ 440.800913][T14360] Dev loop6: unable to read RDB block 1 [ 440.807934][T14360] loop6: unable to read partition table [ 440.815522][T14360] loop6: partition table beyond EOD, truncated [ 440.833869][T14360] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 440.886176][ T5920] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 441.046195][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 441.068687][ T5920] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 441.090476][ T5920] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 441.107779][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 441.118351][ T5920] usb 4-1: config 1 has no interface number 0 [ 441.125686][ T5920] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.138426][ T5920] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 441.155538][ T5920] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 441.168964][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.192312][ T5920] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 441.393379][ T5920] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 441.825336][ T5920] usb 4-1: USB disconnect, device number 44 [ 441.853900][ T5920] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 442.086221][T13528] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 442.247838][T13528] usb 2-1: Using ep0 maxpacket: 8 [ 442.266135][T13528] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 442.274860][T13528] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.286562][T13528] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.297238][T13528] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.308760][T13528] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.325119][T13528] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 442.335222][T13528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.582603][T13528] usb 2-1: GET_CAPABILITIES returned 0 [ 442.599747][T13528] usbtmc 2-1:16.0: can't read capabilities [ 442.915570][ T5920] usb 2-1: USB disconnect, device number 45 [ 442.928031][T14390] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 442.935791][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 443.383718][T14425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.992737][ T10] input: PS/2 Generic Mouse as /devices/serio6/input/input76 [ 444.094105][T14447] sctp: [Deprecated]: syz.4.3399 (pid 14447) Use of int in max_burst socket option deprecated. [ 444.094105][T14447] Use struct sctp_assoc_value instead [ 444.267050][ T10] psmouse serio6: Failed to enable mouse on [ 444.406351][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 444.567541][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 444.590622][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.595071][T14460] loop7: detected capacity change from 0 to 7 [ 444.623088][ T9] usb 2-1: config 0 has no interfaces? [ 444.645624][ T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 444.666276][ T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 444.674810][ T9] usb 2-1: Product: syz [ 444.681422][ T9] usb 2-1: Manufacturer: syz [ 444.697264][ T9] usb 2-1: SerialNumber: syz [ 444.736691][ T9] usb 2-1: config 0 descriptor?? [ 445.007952][ T9] usb 2-1: USB disconnect, device number 46 [ 445.296341][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 445.306682][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 445.486291][ T5920] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 445.666125][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 445.681167][ T5920] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 445.696501][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.705522][ T5920] usb 5-1: Product: syz [ 445.721521][ T5920] usb 5-1: Manufacturer: syz [ 445.763765][ T5920] usb 5-1: SerialNumber: syz [ 445.785410][ T5920] usb 5-1: config 0 descriptor?? [ 445.865294][T14478] netlink: 'syz.5.3410': attribute type 7 has an invalid length. [ 445.994089][T14478] netlink: 'syz.5.3410': attribute type 7 has an invalid length. [ 446.002915][ T51] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.035786][ T51] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.047477][ T5920] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 061 [ 446.067414][ T51] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.089975][ T51] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.174459][ T30] audit: type=1326 audit(1760599018.491:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d4d8eec9 code=0x7fc00000 [ 446.287305][ T5920] usb 5-1: USB disconnect, device number 61 [ 446.746488][ T30] audit: type=1326 audit(1760599019.071:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.0.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19d4d8eec9 code=0x7fc00000 [ 447.119491][T14509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.416431][ T5920] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 447.596173][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 447.622598][ T5920] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 447.636230][ T10] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 447.656277][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.687978][ T5920] usb 5-1: config 0 descriptor?? [ 447.719058][ T5920] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 447.818474][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.836254][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.889873][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 447.903624][ T5920] usb 5-1: USB disconnect, device number 62 [ 447.910035][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.135579][ T10] usb 4-1: usb_control_msg returned -32 [ 448.149598][ T10] usbtmc 4-1:16.0: can't read capabilities [ 448.393675][T14530] bridge: RTM_NEWNEIGH with invalid ether address [ 448.437830][T14530] bridge: RTM_NEWNEIGH with invalid ether address [ 449.113367][ T5920] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 449.276290][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 449.286895][ T5920] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 449.313718][ T5920] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 449.339888][ T5920] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.383970][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.399918][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.418869][ T5920] usb 5-1: Product: syz [ 449.448847][T14552] sctp: [Deprecated]: syz.1.3443 (pid 14552) Use of int in max_burst socket option. [ 449.448847][T14552] Use struct sctp_assoc_value instead [ 449.451173][ T5920] usb 5-1: Manufacturer: syz [ 449.496287][ T5920] usb 5-1: SerialNumber: syz [ 449.911923][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3450'. [ 449.930667][ T5920] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 449.946201][T13528] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 450.106875][T13528] usb 1-1: Using ep0 maxpacket: 8 [ 450.114552][T13528] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 450.136292][T13528] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.164134][T13528] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.177910][T13528] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.191841][T13528] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.206467][T13528] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.217640][T13528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.426607][ T5970] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 450.429840][ T10] usb 4-1: USB disconnect, device number 45 [ 450.460044][T13528] usb 1-1: usb_control_msg returned -32 [ 450.482652][T13528] usbtmc 1-1:16.0: can't read capabilities [ 450.606447][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 450.614417][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.627020][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.639166][ T5970] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 450.649640][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.665183][ T5970] usb 6-1: config 0 descriptor?? [ 450.735337][ T5920] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 450.840818][ T5920] usb 5-1: USB disconnect, device number 63 [ 450.908488][ T7854] udevd[7854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.006767][ T5931] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 451.122979][ T5970] savu 0003:1E7D:2D5A.0039: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 451.179118][ T5931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.209413][ T5931] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.223835][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.233180][ T5931] usb 4-1: Product: syz [ 451.238220][ T5931] usb 4-1: Manufacturer: syz [ 451.243693][ T5931] usb 4-1: SerialNumber: syz [ 451.351065][ T10] usb 6-1: USB disconnect, device number 8 [ 452.307303][ T5931] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 452.351227][ T5931] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 452.386793][ T5931] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 452.486121][ T30] audit: type=1326 audit(1760599024.801:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.4.3464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04d2b8eec9 code=0x0 [ 452.515698][ T5931] cdc_ncm 4-1:1.0: setting tx_max = 36 [ 452.577056][ T5931] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 452.604051][ T5931] usb 4-1: USB disconnect, device number 46 [ 452.612683][ T5931] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 452.801330][ T9] usb 1-1: USB disconnect, device number 54 [ 453.510136][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3477'. [ 453.729214][T14645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.769898][T14645] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 453.896189][ T5931] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 453.988052][ T5920] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 454.056300][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 454.083135][ T5931] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.138290][ T5931] usb 5-1: config 0 has no interface number 0 [ 454.151575][ T5931] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 454.178760][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.191264][ T5920] usb 1-1: config 0 has no interfaces? [ 454.207689][ T5920] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 454.220628][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.229575][ T5931] usb 5-1: Product: syz [ 454.233994][ T5931] usb 5-1: Manufacturer: syz [ 454.252833][ T5920] usb 1-1: Product: syz [ 454.260306][ T5931] usb 5-1: SerialNumber: syz [ 454.265364][ T5920] usb 1-1: Manufacturer: syz [ 454.294448][ T5931] usb 5-1: config 0 descriptor?? [ 454.300622][ T5920] usb 1-1: SerialNumber: syz [ 454.315610][ T5920] usb 1-1: config 0 descriptor?? [ 454.324991][ T5931] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.412061][ T5931] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 454.425569][T14666] warning: `syz.1.3492' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 454.479425][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.506159][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 454.592672][T13528] usb 5-1: USB disconnect, device number 64 [ 454.682947][ T5903] usb 1-1: USB disconnect, device number 55 [ 454.706186][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 454.718324][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.731137][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.742648][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.760228][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.778200][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.792444][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.886250][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 455.014483][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 455.023963][ T9] usbtmc 4-1:16.0: can't read capabilities [ 455.052413][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.063772][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.075495][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 455.087069][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 455.099767][ T24] usb 6-1: SerialNumber: syz [ 455.266997][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 455.282997][T14661] usbtmc 4-1:16.0: Unable to send data, error -71 [ 455.358490][ T5920] usb 4-1: USB disconnect, device number 47 [ 455.371246][ T24] usb 6-1: 0:2 : does not exist [ 455.495311][ T24] usb 6-1: USB disconnect, device number 9 [ 455.644780][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.937612][T14694] sctp: [Deprecated]: syz.1.3504 (pid 14694) Use of int in max_burst socket option. [ 455.937612][T14694] Use struct sctp_assoc_value instead [ 455.986647][ T5931] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 456.228186][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.255607][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.293242][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.324991][ T5931] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.366941][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.417830][ T5931] usb 5-1: config 0 descriptor?? [ 456.503322][T14707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.855039][ T5931] plantronics 0003:047F:FFFF.003A: reserved main item tag 0xd [ 456.903929][ T5931] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 457.183323][ T9] usb 5-1: USB disconnect, device number 65 [ 457.309994][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3525'. [ 457.322801][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3525'. [ 457.779660][T14750] loop6: detected capacity change from 0 to 7 [ 457.789432][ T5881] Dev loop6: unable to read RDB block 7 [ 457.795528][ T5881] loop6: unable to read partition table [ 457.805992][ T5881] loop6: partition table beyond EOD, truncated [ 457.814232][T14750] Dev loop6: unable to read RDB block 7 [ 457.823337][T14750] loop6: unable to read partition table [ 457.829885][T14750] loop6: partition table beyond EOD, truncated [ 457.836968][T14750] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 457.939644][ T5931] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 458.109046][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 458.129582][ T5931] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 458.139041][ T5931] usb 2-1: config 0 has no interface number 0 [ 458.151679][ T5931] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 458.166331][ T5931] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 458.178467][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.189441][T14757] sctp: [Deprecated]: syz.3.3527 (pid 14757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.189441][T14757] Use struct sctp_sack_info instead [ 458.198880][ T5931] usb 2-1: Product: syz [ 458.212234][ T5931] usb 2-1: Manufacturer: syz [ 458.217715][ T5931] usb 2-1: SerialNumber: syz [ 458.228935][ T5931] usb 2-1: config 0 descriptor?? [ 458.249817][ T5931] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 458.263312][ T5931] em28xx 2-1:0.132: Video interface 132 found: [ 458.663127][ T5931] em28xx 2-1:0.132: chip ID is em2884 [ 458.716375][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 458.876185][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 458.889948][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 458.902494][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.911607][ T9] usb 5-1: Product: syz [ 458.916512][ T5903] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 458.924767][ T9] usb 5-1: Manufacturer: syz [ 458.930474][ T9] usb 5-1: SerialNumber: syz [ 458.950892][ T9] usb 5-1: config 0 descriptor?? [ 458.962065][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 459.086437][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 459.112979][ T5903] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 459.126673][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.135218][ T5903] usb 6-1: Product: syz [ 459.143230][ T5903] usb 6-1: Manufacturer: syz [ 459.155807][ T5903] usb 6-1: SerialNumber: syz [ 459.198178][ T5903] usb 6-1: config 0 descriptor?? [ 459.442132][ T5903] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 459.481143][ T5931] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 459.509178][ T5931] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 459.534685][ T5931] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 459.560279][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 459.571168][T14791] netlink: 'syz.3.3543': attribute type 20 has an invalid length. [ 459.579714][T14791] netlink: 'syz.3.3543': attribute type 21 has an invalid length. [ 459.606358][ T5931] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 459.625950][ T5931] em28xx 2-1:0.132: analog set to bulk mode. [ 459.638064][ T5920] em28xx 2-1:0.132: Registering V4L2 extension [ 459.667188][ T5931] usb 2-1: USB disconnect, device number 47 [ 459.674856][ T5931] em28xx 2-1:0.132: Disconnecting em28xx [ 459.885001][ T5920] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 459.895823][ T5920] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 459.903469][ T5920] em28xx 2-1:0.132: No AC97 audio processor [ 459.912880][ T5920] usb 2-1: Decoder not found [ 459.917851][ T5920] em28xx 2-1:0.132: failed to create media graph [ 459.924925][ T5920] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 459.940145][ T5920] em28xx 2-1:0.132: Remote control support is not available for this card. [ 459.949681][ T5931] em28xx 2-1:0.132: Closing input extension [ 459.961809][ T5931] em28xx 2-1:0.132: Freeing device [ 459.996160][ T5970] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 460.152924][ T5970] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 460.166724][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.175328][ T5970] usb 4-1: Product: syz [ 460.185726][ T5970] usb 4-1: Manufacturer: syz [ 460.192455][ T5970] usb 4-1: SerialNumber: syz [ 460.202381][ T5970] usb 4-1: config 0 descriptor?? [ 460.220280][ T5970] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 460.221484][ T9] gspca_stk1135: reg_w 0xd err -71 [ 460.237982][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.246568][ T9] gspca_stk1135: Sensor write failed [ 460.252897][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.260221][ T9] gspca_stk1135: Sensor write failed [ 460.262273][T14800] loop6: detected capacity change from 0 to 7 [ 460.276744][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.283310][ T9] gspca_stk1135: Sensor read failed [ 460.291214][ T6863] Dev loop6: unable to read RDB block 7 [ 460.298346][ T6863] loop6: AHDI p1 p2 p3 [ 460.304831][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.311850][ T6863] loop6: partition table partially beyond EOD, truncated [ 460.313588][ T6863] loop6: p1 start 4217409618 is beyond EOD, [ 460.321259][ T9] gspca_stk1135: Sensor read failed [ 460.322315][ T6863] truncated [ 460.329135][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 460.333956][ T6863] loop6: p2 size 108 extends beyond EOD, truncated [ 460.352211][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.359520][ T9] gspca_stk1135: Sensor read failed [ 460.365653][T14800] Dev loop6: unable to read RDB block 7 [ 460.365906][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.371661][T14800] loop6: AHDI p1 p2 p3 [ 460.381825][ T9] gspca_stk1135: Sensor read failed [ 460.383079][T14800] loop6: partition table partially beyond EOD, [ 460.388696][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.393252][T14800] truncated [ 460.395484][ T9] gspca_stk1135: Sensor write failed [ 460.405913][T14800] loop6: p1 start 4217409618 is beyond EOD, [ 460.411057][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 460.412667][T14800] truncated [ 460.420610][ T9] gspca_stk1135: Sensor write failed [ 460.430558][T14800] loop6: p2 size 108 extends beyond EOD, truncated [ 460.438264][ T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 460.492637][ T9] usb 5-1: USB disconnect, device number 66 [ 460.616781][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 460.657053][ T5903] usb write operation failed. (-71) [ 460.673349][ T5903] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 460.698097][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 460.712738][ T5903] dvbdev: DVB: registering new adapter (Terratec H7) [ 460.722306][ T5903] usb 6-1: media controller created [ 460.746259][ T5903] usb read operation failed. (-71) [ 460.755709][ T5903] usb write operation failed. (-71) [ 460.774650][ T5903] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 460.809453][ T5903] usb 6-1: USB disconnect, device number 10 [ 460.846218][ T5931] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 461.008236][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 461.037061][ T5931] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 461.066359][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.089088][ T5931] usb 1-1: Product: syz [ 461.093684][ T5931] usb 1-1: Manufacturer: syz [ 461.120892][ T5931] usb 1-1: SerialNumber: syz [ 461.148380][ T5931] usb 1-1: config 0 descriptor?? [ 461.169070][ T5931] gspca_main: sq905-2.14.0 probing 2770:9120 [ 461.442488][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030f9bc00: rx timeout, send abort [ 461.505974][ T5970] usb 4-1: USB disconnect, device number 48 [ 461.944104][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058dfa400: rx timeout, send abort [ 461.953689][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030f9bc00: abort rx timeout. Force session deactivation [ 462.180346][ T5931] gspca_sq905: bulk read fail (-22) len 0/4 [ 462.187341][ T5931] sq905 1-1:0.0: probe with driver sq905 failed with error -5 [ 462.386127][ T5931] usb 1-1: USB disconnect, device number 56 [ 462.453212][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058dfa400: abort rx timeout. Force session deactivation [ 463.216275][ T5931] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 463.396164][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 463.418922][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.450115][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.494818][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 463.528039][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.553209][ T5931] usb 1-1: config 0 descriptor?? [ 463.615271][T14847] delete_channel: no stack [ 463.992772][ T5931] HID 045e:07da: Invalid code 65791 type 1 [ 464.022337][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.003B/input/input78 [ 464.127199][ T5931] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 464.641109][T14869] binder: 14867:14869 ioctl c0306201 200000000480 returned -14 [ 464.917900][ T5931] usb 1-1: USB disconnect, device number 57 [ 465.026370][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 465.194242][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.206222][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.218292][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.232272][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.241661][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.271285][ T10] usb 4-1: config 0 descriptor?? [ 465.721360][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.758475][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.780084][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.799117][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.827665][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.856128][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.876806][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.884559][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.911503][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.939235][ T10] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 465.970597][ T10] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 466.012163][ T10] usb 4-1: USB disconnect, device number 49 [ 466.069431][ T5931] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 466.123316][T14900] fido_id[14900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 466.248334][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.268613][ T5931] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 466.293890][ T5931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.306183][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.314448][ T5931] usb 1-1: Product: syz [ 466.319499][ T5931] usb 1-1: Manufacturer: syz [ 466.324327][ T5931] usb 1-1: SerialNumber: syz [ 466.585451][T14895] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 467.205885][T14895] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 467.316180][ T5970] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 467.429652][ T5931] cdc_ncm 1-1:1.0: failed to get mac address [ 467.486287][ T5970] usb 4-1: Using ep0 maxpacket: 32 [ 467.503213][ T5970] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=eb.4c [ 467.520592][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.568430][ T5970] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.580811][T14937] ip6gre1: entered allmulticast mode [ 467.606228][ T5970] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.612865][ T5970] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.633260][ T5931] cdc_ncm 1-1:1.0: bind() failure [ 467.665740][ T5931] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 467.679950][ T5931] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 467.700837][ T5931] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 467.717027][ T5931] usb 1-1: USB disconnect, device number 58 [ 467.729736][ T5970] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.755543][ T5970] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.866172][ T5970] usb 4-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 467.914112][ T5970] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 467.949354][ T5970] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 467.966148][ T5970] usb 4-1: media controller created [ 467.972088][ T5970] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 467.986113][ T5970] usb 4-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 468.023365][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.221078][ T5970] usb 4-1: USB disconnect, device number 50 [ 468.337327][T14954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3605'. [ 468.370097][T14954] vxlan0: entered promiscuous mode [ 468.462459][ T30] audit: type=1326 audit(1760599040.781:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.492156][ T30] audit: type=1326 audit(1760599040.781:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.545874][ T30] audit: type=1326 audit(1760599040.781:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.570874][ T30] audit: type=1326 audit(1760599040.781:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.599584][ T30] audit: type=1326 audit(1760599040.781:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.624374][ T30] audit: type=1326 audit(1760599040.781:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.792846][ T30] audit: type=1326 audit(1760599040.781:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.910767][ T30] audit: type=1326 audit(1760599040.781:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.935639][ T30] audit: type=1326 audit(1760599040.781:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 468.959146][ T30] audit: type=1326 audit(1760599040.781:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.0.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f19d4d2af79 code=0x7ffc0000 [ 469.389898][T14971] netlink: 'syz.5.3614': attribute type 5 has an invalid length. [ 469.688148][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 469.859557][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 469.883963][ T9] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 469.898485][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.908057][ T9] usb 2-1: Product: syz [ 469.912705][ T9] usb 2-1: Manufacturer: syz [ 469.917971][ T9] usb 2-1: SerialNumber: syz [ 469.929675][ T9] usb 2-1: config 0 descriptor?? [ 470.201685][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 470.536310][ T5970] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 470.768571][ T5970] usb 6-1: Using ep0 maxpacket: 16 [ 470.856745][ T5970] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 470.885659][ T5970] usb 6-1: config 0 has no interface number 0 [ 470.902589][ T5970] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.948454][ T5970] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 470.968400][ T5970] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 470.985655][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 471.005659][ T5970] usb 6-1: Product: syz [ 471.019352][ T5970] usb 6-1: SerialNumber: syz [ 471.039141][ T5970] usb 6-1: config 0 descriptor?? [ 471.057118][ T5970] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 471.078394][ T5970] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input79 [ 471.218588][ T9] gspca_sunplus: reg_w_riv err -71 [ 471.223864][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 471.245077][ T9] usb 2-1: USB disconnect, device number 48 [ 471.368364][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.376047][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.383980][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.391629][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.399876][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.407267][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.414819][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.423534][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.430744][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.438498][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.445965][ T5889] usb 6-1: USB disconnect, device number 11 [ 471.452242][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 471.515695][ T5889] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 472.226140][ T5889] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 472.476581][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 472.483639][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 472.512431][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.557836][ T5889] usb 2-1: config 0 descriptor?? [ 473.062521][T15065] kvm: Disabled LAPIC found during irq injection [ 473.070648][T15065] kvm: apic: phys broadcast and lowest prio [ 473.589853][ T5889] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 473.648989][T15084] netlink: 'syz.5.3660': attribute type 29 has an invalid length. [ 473.678024][T15084] netlink: 'syz.5.3660': attribute type 29 has an invalid length. [ 473.695671][T15084] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3660'. [ 473.805710][ T5970] usb 2-1: USB disconnect, device number 49 [ 473.926205][ T5889] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 474.078567][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.097161][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.115533][ T5889] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 474.126677][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.154777][ T5889] usb 4-1: config 0 descriptor?? [ 474.591387][ T5889] hid_parser_main: 5 callbacks suppressed [ 474.591416][ T5889] waterforce 0003:1044:7A4D.003D: unknown main item tag 0x0 [ 474.616825][ T5889] waterforce 0003:1044:7A4D.003D: unknown main item tag 0x0 [ 474.647883][ T5889] waterforce 0003:1044:7A4D.003D: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 474.728818][ T5889] waterforce 0003:1044:7A4D.003D: fw version request failed with -38 [ 474.751413][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 474.834831][ T9] usb 4-1: USB disconnect, device number 51 [ 474.909475][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 474.931706][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.947881][T15115] syzkaller1: entered promiscuous mode [ 474.953845][T15115] syzkaller1: entered allmulticast mode [ 474.960171][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 474.970161][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.987404][ T10] usb 2-1: config 0 descriptor?? [ 475.222942][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 475.785303][ T5889] usb 2-1: USB disconnect, device number 50 [ 476.117187][T15144] input: syz0 as /devices/virtual/input/input80 [ 476.316817][T15150] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3688'. [ 476.606638][T15160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.766640][ T5970] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 477.849186][T15194] team0: Port device syz_tun added [ 477.938021][ T5970] usb 4-1: Using ep0 maxpacket: 32 [ 477.964455][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.993009][ T5970] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 478.018812][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.035823][ T5970] usb 4-1: Product: syz [ 478.040893][ T5970] usb 4-1: Manufacturer: syz [ 478.047175][ T5970] usb 4-1: SerialNumber: syz [ 478.064386][ T5970] usb 4-1: config 0 descriptor?? [ 478.088387][ T5970] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 478.325903][ T5970] gspca_sunplus: reg_r err -32 [ 478.915771][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3718'. [ 479.083670][ T30] kauditd_printk_skb: 533 callbacks suppressed [ 479.083690][ T30] audit: type=1326 audit(1760599051.391:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15229 comm="syz.4.3719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04d2b8eec9 code=0x0 [ 479.356289][ T5970] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 479.607342][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 479.768172][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.782022][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.795617][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.809195][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.818964][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.829541][ T10] usb 2-1: config 0 descriptor?? [ 479.836195][ T5889] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 479.996303][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 480.009071][ T5889] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 480.023823][ T5889] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 480.049493][ T5889] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.072733][ T5889] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 480.092514][ T5889] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 480.103655][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.112397][ T5889] usb 1-1: Product: syz [ 480.117487][ T5889] usb 1-1: Manufacturer: syz [ 480.122469][ T5889] usb 1-1: SerialNumber: syz [ 480.140418][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 480.150964][ T5889] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input81 [ 480.279684][ T10] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 480.386122][ T5889] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 480.394775][ T5889] (id 0x00) [ 480.536433][ T5889] rc_core: IR keymap rc-imon-pad not found [ 480.542655][ T5889] Registered IR keymap rc-empty [ 480.557665][ T5889] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 480.577850][ T5889] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 480.610865][ C0] plantronics 0003:047F:FFFF.003E: hid_field_extract() called with n (132) > 32! (syz.4.3728) [ 480.627537][ T5889] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 480.650976][ T10] usb 4-1: USB disconnect, device number 52 [ 480.652004][ T5889] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input82 [ 480.756701][ T5889] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:59> initialized [ 480.846765][ T5889] usb 2-1: USB disconnect, device number 51 [ 480.966482][ T5931] usb 1-1: USB disconnect, device number 59 [ 481.474914][ T30] audit: type=1326 audit(1760599053.791:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 481.576263][ T30] audit: type=1326 audit(1760599053.791:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 481.646156][ T30] audit: type=1326 audit(1760599053.791:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece9d2af79 code=0x7ffc0000 [ 481.695206][ T30] audit: type=1326 audit(1760599053.791:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece9d2af79 code=0x7ffc0000 [ 481.723120][ T30] audit: type=1326 audit(1760599053.791:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece9d2af79 code=0x7ffc0000 [ 481.774785][ T30] audit: type=1326 audit(1760599053.791:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece9d2af79 code=0x7ffc0000 [ 481.815920][T15282] use of bytesused == 0 is deprecated and will be removed in the future, [ 481.833686][T15287] netlink: 'syz.0.3740': attribute type 13 has an invalid length. [ 481.852126][T15282] use the actual size instead. [ 481.861253][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 481.872223][ T30] audit: type=1326 audit(1760599053.791:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 481.896985][ T30] audit: type=1326 audit(1760599053.881:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece9d2af79 code=0x7ffc0000 [ 481.927076][ T30] audit: type=1326 audit(1760599053.891:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15271 comm="syz.3.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fece9d2af79 code=0x7ffc0000 [ 482.050734][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 482.061106][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 482.088500][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.125567][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 482.144320][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.184474][ T10] usb 2-1: Product: syz [ 482.193677][ T10] usb 2-1: Manufacturer: syz [ 482.207578][ T10] usb 2-1: SerialNumber: syz [ 482.229828][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 482.247208][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 482.260692][T15294] syzkaller1: entered promiscuous mode [ 482.269103][T15294] syzkaller1: entered allmulticast mode [ 482.439885][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 483.108735][T15280] usb 2-1: reset high-speed USB device number 52 using dummy_hcd [ 483.561239][ T10] usb 2-1: USB disconnect, device number 52 [ 483.577037][ T10] usblp0: removed [ 484.033100][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.218311][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.371583][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.712813][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.831020][T15339] kvm: MONITOR instruction emulated as NOP! [ 485.115006][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 485.127068][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 485.137545][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 485.155083][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 485.162362][T15344] netlink: 'syz.3.3764': attribute type 12 has an invalid length. [ 485.172453][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 487.049191][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.062627][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.095089][ T67] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 487.147818][ T5970] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 487.157473][ T67] bond0 (unregistering): Released all slaves [ 487.226430][ T5838] Bluetooth: hci3: command tx timeout [ 487.308422][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 487.362407][ T5970] usb 2-1: config 179 has an invalid interface number: 97 but max is 0 [ 487.383336][ T5970] usb 2-1: config 179 has no interface number 0 [ 487.390822][ T5970] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 487.422694][ T5970] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 487.486146][ T5970] usb 2-1: config 179 interface 97 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 487.538739][ T5970] usb 2-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 487.583637][ T5970] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 487.606223][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.631602][T15378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 487.893390][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3772'. [ 487.915896][ T10] usb 2-1: USB disconnect, device number 53 [ 488.087251][ T67] batman_adv: batadv0: Removing interface: ipvlan2 [ 488.926137][ T67] hsr_slave_0: left promiscuous mode [ 488.949271][ T67] hsr_slave_1: left promiscuous mode [ 488.965859][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.975283][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.988178][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.996318][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.057323][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'. [ 489.103620][ T67] veth1_macvtap: left promiscuous mode [ 489.110188][ T67] veth0_macvtap: left promiscuous mode [ 489.115981][ T67] veth1_vlan: left promiscuous mode [ 489.125997][ T67] veth0_vlan: left promiscuous mode [ 489.309599][ T5838] Bluetooth: hci3: command tx timeout [ 490.950278][ T67] team0 (unregistering): Port device team_slave_1 removed [ 491.012253][ T5931] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 491.132376][ T67] team0 (unregistering): Port device team_slave_0 removed [ 491.187445][ T5931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.202678][ T5931] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.239832][ T5931] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.265727][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.386204][ T5838] Bluetooth: hci3: command tx timeout [ 491.506951][ T5931] usb 2-1: usb_control_msg returned -32 [ 491.512904][ T5931] usbtmc 2-1:16.0: can't read capabilities [ 491.832268][T15333] Set syz1 is full, maxelem 65536 reached [ 492.072478][T15347] chnl_net:caif_netlink_parms(): no params data found [ 492.100816][ T10] usb 2-1: USB disconnect, device number 54 [ 492.595776][T15347] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.623022][T15347] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.632060][T15347] bridge_slave_0: entered allmulticast mode [ 492.641535][T15347] bridge_slave_0: entered promiscuous mode [ 492.704947][T15347] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.730990][T15347] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.739446][T15347] bridge_slave_1: entered allmulticast mode [ 492.750356][T15347] bridge_slave_1: entered promiscuous mode [ 492.784919][ T67] IPVS: stop unused estimator thread 0... [ 492.919352][T15347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.944888][T15347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.077191][T15347] team0: Port device team_slave_0 added [ 493.088252][T15347] team0: Port device team_slave_1 added [ 493.136129][ T5931] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 493.171662][T15347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.182738][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.226756][T15347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.249348][T15347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.257196][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.327781][ T5931] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 493.337619][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.345736][ T5931] usb 6-1: Product: syz [ 493.352636][T15347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.364193][ T5931] usb 6-1: Manufacturer: syz [ 493.373842][ T5931] usb 6-1: SerialNumber: syz [ 493.391784][ T5931] usb 6-1: config 0 descriptor?? [ 493.404898][ T5931] ch341 6-1:0.0: ch341-uart converter detected [ 493.467458][ T5838] Bluetooth: hci3: command tx timeout [ 493.509907][T15347] hsr_slave_0: entered promiscuous mode [ 493.518481][T15347] hsr_slave_1: entered promiscuous mode [ 493.525676][T15347] debugfs: 'hsr0' already exists in 'hsr' [ 493.533649][T15347] Cannot create hsr debugfs directory [ 493.936215][ T5970] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 494.131379][ T5970] usb 2-1: Using ep0 maxpacket: 16 [ 494.140909][ T5970] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.196715][ T5970] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.226618][ T5970] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.240361][ T5970] usb 2-1: config 1 interface 0 has no altsetting 0 [ 494.270769][ T5970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 494.301210][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.314537][T15347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 494.326539][ T5970] usb 2-1: Product: syz [ 494.331320][ T5970] usb 2-1: Manufacturer: syz [ 494.386167][ T5970] usb 2-1: SerialNumber: syz [ 494.390154][T15347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 494.420481][ T5931] ch341-uart ttyUSB0: break control not supported, using simulated break [ 494.442786][ T5931] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 494.451763][T15347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 494.512681][ T5931] usb 6-1: USB disconnect, device number 12 [ 494.565344][ T5931] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 494.625647][ T5931] ch341 6-1:0.0: device disconnected [ 494.662646][T15520] syzkaller1: entered promiscuous mode [ 494.677819][ T5970] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 494.689624][T15520] syzkaller1: entered allmulticast mode [ 494.713272][T15347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 494.928972][ T5970] usb 2-1: USB disconnect, device number 55 [ 494.974057][ T5970] usblp0: removed [ 495.272460][T15347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.377307][T15347] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.440203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.447636][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.508339][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.515744][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.775875][T15347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.783618][T15553] sctp: [Deprecated]: syz.1.3820 (pid 15553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.783618][T15553] Use struct sctp_sack_info instead [ 495.919173][T15347] veth0_vlan: entered promiscuous mode [ 495.939113][T15347] veth1_vlan: entered promiscuous mode [ 496.127406][T15347] veth0_macvtap: entered promiscuous mode [ 496.140904][T15347] veth1_macvtap: entered promiscuous mode [ 496.204183][T15347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.281177][T15347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.351475][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.383587][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.421651][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.466162][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.764195][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.781854][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.860072][T15580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.873533][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.892660][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.376925][ T5970] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 497.538165][ T5970] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 497.556574][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.587226][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.601074][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 497.619036][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.640605][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.650531][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.669500][ T5970] usb 4-1: config 0 descriptor?? [ 497.688488][T15589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 497.696419][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 497.766160][T13528] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 497.856464][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 497.863648][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.876433][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.887531][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.898450][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.912446][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.922501][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.926160][T13528] usb 5-1: Using ep0 maxpacket: 8 [ 497.942311][T13528] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 497.960439][T13528] usb 5-1: config 179 has no interface number 0 [ 497.968427][T13528] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 497.979827][T13528] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 497.992556][T13528] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.004467][T13528] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 498.016747][T13528] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 498.032164][T13528] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 498.041884][T13528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.055061][T15605] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 498.086426][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 498.131224][ T5970] plantronics 0003:047F:FFFF.003F: reserved main item tag 0xd [ 498.171816][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 498.182040][ T5970] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 498.201000][ T24] usbtmc 7-1:16.0: can't read capabilities [ 498.256299][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 498.281237][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 498.306236][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.345689][ T10] usb 6-1: Product: syz [ 498.351654][ T10] usb 6-1: Manufacturer: syz [ 498.382013][ T5903] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input85 [ 498.403871][ T10] usb 6-1: SerialNumber: syz [ 498.436399][ T10] usb 6-1: config 0 descriptor?? [ 498.477213][ T5931] usb 4-1: USB disconnect, device number 53 [ 498.496275][ T24] usb 7-1: USB disconnect, device number 2 [ 498.596211][T15605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.691798][T15605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.924084][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 498.945132][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.962179][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 498.974412][ T10] usb 6-1: media controller created [ 499.031908][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.174194][ T5931] usb 5-1: USB disconnect, device number 67 [ 499.174300][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 499.188848][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 499.225217][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 499.233836][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 499.246859][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 499.259789][ T10] usb 6-1: USB disconnect, device number 13 [ 499.395195][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 500.927226][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 501.013031][T15689] loop4: detected capacity change from 0 to 7 [ 501.033650][T15689] Dev loop4: unable to read RDB block 7 [ 501.047741][T15689] loop4: unable to read partition table [ 501.076975][T15689] loop4: partition table beyond EOD, truncated [ 501.086585][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 501.098243][ T5889] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 501.109663][T15689] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 501.121219][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.135421][ T5889] usb 7-1: config 0 descriptor?? [ 501.147893][ T5889] gspca_main: sunplus-2.14.0 probing 041e:400b [ 501.551632][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.572309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.902555][T15714] netlink: 'syz.5.3881': attribute type 1 has an invalid length. [ 501.910901][T15714] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3881'. [ 501.921939][T15714] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.139160][T15720] bridge1: entered promiscuous mode [ 502.150289][T15720] bridge1: entered allmulticast mode [ 502.190965][T15720] team0: Port device bridge1 added [ 502.230718][T15721] bridge0: port 3(team0) entered blocking state [ 502.246930][T15721] bridge0: port 3(team0) entered disabled state [ 502.255939][T15721] team0: entered allmulticast mode [ 502.261298][T15721] team_slave_0: entered allmulticast mode [ 502.275070][T15721] team_slave_1: entered allmulticast mode [ 502.293113][T15721] team0: left allmulticast mode [ 502.313134][T15721] team_slave_0: left allmulticast mode [ 502.336719][T15721] team_slave_1: left allmulticast mode [ 502.389257][ T5889] gspca_sunplus: reg_w_riv err -71 [ 502.402097][ T5889] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 502.427563][ T5889] usb 7-1: USB disconnect, device number 3 [ 503.626255][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 503.886578][T13528] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 504.056653][T13528] usb 6-1: Using ep0 maxpacket: 8 [ 504.100725][T13528] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 504.119809][T13528] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.153339][T13528] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.191656][T13528] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 504.196173][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 504.219632][T13528] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.249131][T13528] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 504.306343][T13528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.368151][ T24] usb 2-1: config 0 has no interfaces? [ 504.377350][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 504.388321][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.406444][ T24] usb 2-1: Product: syz [ 504.415068][ T24] usb 2-1: Manufacturer: syz [ 504.443108][ T24] usb 2-1: SerialNumber: syz [ 504.459565][ T24] usb 2-1: config 0 descriptor?? [ 504.592703][T13528] usb 6-1: GET_CAPABILITIES returned 0 [ 504.606159][T13528] usbtmc 6-1:16.0: can't read capabilities [ 504.728648][T13528] usb 2-1: USB disconnect, device number 56 [ 504.962961][T15766] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 505.006262][T15784] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 505.027400][ T5889] usb 6-1: USB disconnect, device number 14 [ 507.196361][T13528] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 507.392967][T13528] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 507.430243][T13528] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.465091][T13528] usb 7-1: Product: syz [ 507.482346][T13528] usb 7-1: Manufacturer: syz [ 507.497395][T13528] usb 7-1: SerialNumber: syz [ 507.571122][T13528] usb 7-1: config 0 descriptor?? [ 508.051113][T13528] airspy 7-1:0.0: Board ID: 00 [ 508.071455][T13528] airspy 7-1:0.0: Firmware version: [ 508.670864][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 508.703752][T15873] netlink: 'syz.1.3937': attribute type 1 has an invalid length. [ 508.720973][T15873] netlink: 'syz.1.3937': attribute type 2 has an invalid length. [ 508.743218][T15873] netlink: 'syz.1.3937': attribute type 3 has an invalid length. [ 508.755737][T15873] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3937'. [ 508.857385][T13528] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f [ 508.876258][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.890025][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.904327][T13528] airspy 7-1:0.0: Registered as swradio24 [ 508.911746][T13528] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 508.923558][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.943542][T13528] usb 7-1: USB disconnect, device number 4 [ 508.953301][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.210362][ T10] usb 6-1: usb_control_msg returned -32 [ 509.236207][ T10] usbtmc 6-1:16.0: can't read capabilities [ 509.260036][T15890] netlink: 'syz.1.3941': attribute type 22 has an invalid length. [ 509.380624][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 509.380645][ T30] audit: type=1326 audit(1760599081.701:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.3.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 509.417245][ T30] audit: type=1326 audit(1760599081.701:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.3.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 509.504425][ T30] audit: type=1326 audit(1760599081.741:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.3.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 509.525133][T15899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.600087][ T30] audit: type=1326 audit(1760599081.741:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.3.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 509.694289][ T30] audit: type=1326 audit(1760599081.741:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.3.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9d8eec9 code=0x7ffc0000 [ 509.798992][ T10] usb 6-1: USB disconnect, device number 15 [ 510.406454][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 510.531394][T15926] syzkaller1: entered promiscuous mode [ 510.546150][T15926] syzkaller1: entered allmulticast mode [ 510.621904][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 510.657622][T15930] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3954'. [ 510.658780][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.728273][ T10] usb 7-1: Product: syz [ 510.735519][ T10] usb 7-1: Manufacturer: syz [ 510.766074][ T10] usb 7-1: SerialNumber: syz [ 510.790736][ T10] usb 7-1: config 0 descriptor?? [ 511.242188][ T5889] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 511.247233][T15946] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 511.278169][ T10] usb 7-1: Firmware: major: 213, minor: 124, hardware type: UNKNOWN (48) [ 511.426485][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 511.467093][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.480098][ T10] usb 7-1: Read permanent extended address 78:d9:cf:80:c4:56:f3:e4 from device [ 511.497719][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.528228][ T10] usb 7-1: atusb_probe: initialization failed, error = -524 [ 511.546443][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.562207][ T10] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 511.600220][ T5889] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.646265][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.686790][ T5889] usb 6-1: config 0 descriptor?? [ 511.722915][ T5931] usb 7-1: USB disconnect, device number 5 [ 512.109920][ T5889] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 512.147418][ T5889] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 512.215005][ T5889] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 512.279033][ T5889] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0040/input/input86 [ 512.419881][ T5889] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 512.514647][ T5889] usb 6-1: USB disconnect, device number 16 [ 512.768065][T15986] fido_id[15986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 514.617601][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 514.850329][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.876221][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 514.929599][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 514.993718][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.057307][ T10] usb 6-1: config 0 descriptor?? [ 515.113870][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 515.143525][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 515.174934][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 515.225712][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 515.286294][ T10] usb 6-1: media controller created [ 515.300600][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.416850][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 515.459577][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 515.516402][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 515.579835][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 515.626518][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 515.787034][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 515.793092][ T10] dvb-usb: error while querying for an remote control event. [ 516.001688][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 516.025830][ T10] dvb-usb: error while querying for an remote control event. [ 516.247335][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 516.263677][ T10] dvb-usb: error while querying for an remote control event. [ 516.466413][T13528] dvb-usb: bulk message failed: -22 (1/0) [ 516.472316][T13528] dvb-usb: error while querying for an remote control event. [ 516.666170][T13528] dvb-usb: bulk message failed: -22 (1/0) [ 516.671107][T16062] loop2: detected capacity change from 0 to 7 [ 516.676124][T13528] dvb-usb: error while querying for an remote control event. [ 516.719677][T16062] Dev loop2: unable to read RDB block 7 [ 516.739949][T16062] loop2: unable to read partition table [ 516.759410][T16062] loop2: partition table beyond EOD, truncated [ 516.778236][T16062] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 516.826219][ T24] usb 6-1: USB disconnect, device number 17 [ 516.979717][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 517.077177][T16066] netlink: 'syz.3.4001': attribute type 13 has an invalid length. [ 517.481021][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.524044][T16074] bridge0: port 3(gretap0) entered blocking state [ 517.547647][T16074] bridge0: port 3(gretap0) entered disabled state [ 517.576345][T16074] gretap0: entered allmulticast mode [ 517.609132][T16074] gretap0: left allmulticast mode [ 517.666279][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 517.806457][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.877202][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.899411][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.920290][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 517.976207][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.000157][ T24] usb 5-1: config 0 descriptor?? [ 518.047403][T13528] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 518.232234][T16090] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.256395][T13528] usb 7-1: Using ep0 maxpacket: 16 [ 518.278749][T13528] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.291042][T16091] netlink: 'syz.1.4011': attribute type 16 has an invalid length. [ 518.306189][T13528] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.328555][T16090] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.336254][T13528] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 518.352216][T16091] netlink: 'syz.1.4011': attribute type 17 has an invalid length. [ 518.361783][T13528] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.397557][T13528] usb 7-1: config 0 descriptor?? [ 518.424966][ T24] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 518.453563][ T24] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 518.501420][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0041/input/input88 [ 518.614164][ T24] cm6533_jd 0003:0D8C:0022.0041: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 518.628507][T16098] sctp: [Deprecated]: syz.3.4013 (pid 16098) Use of int in max_burst socket option deprecated. [ 518.628507][T16098] Use struct sctp_assoc_value instead [ 518.746791][ T10] usb 5-1: USB disconnect, device number 68 [ 518.767601][T16091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.914523][T16099] fido_id[16099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 519.028880][T13528] usb 7-1: language id specifier not provided by device, defaulting to English [ 519.431368][T13528] letsketch 0003:6161:4D15.0042: Device info: ఁ [ 519.671291][T13528] usb 7-1: Max retries (5) exceeded reading string descriptor 201 [ 519.704386][T13528] letsketch 0003:6161:4D15.0042: probe with driver letsketch failed with error -71 [ 519.741332][T13528] usb 7-1: USB disconnect, device number 6 [ 520.156143][ T5903] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 520.246113][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 520.308885][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 520.318780][ T5903] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 520.327756][ T5903] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.342162][ T5903] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.352816][ T5903] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.371896][ T5903] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.388740][ T5903] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.399286][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.438331][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 520.458157][ T24] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 520.488336][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.520862][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.537460][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.577658][ T24] usb 4-1: Product: syz [ 520.582422][ T24] usb 4-1: Manufacturer: syz [ 520.588860][ T24] usb 4-1: SerialNumber: syz [ 520.642511][ T5903] usb 6-1: usb_control_msg returned -32 [ 520.649783][ T5903] usbtmc 6-1:16.0: can't read capabilities [ 520.878109][T16141] loop7: detected capacity change from 7 to 0 [ 521.024008][ T24] usb 4-1: 0:2 : does not exist [ 521.439543][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 521.484597][ T24] usb 4-1: USB disconnect, device number 54 [ 521.523324][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.641961][T13528] usb 6-1: USB disconnect, device number 18 [ 521.864119][T16176] input: syz0 as /devices/virtual/input/input89 [ 522.096576][T13528] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 522.278544][T13528] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.308768][T13528] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 522.330600][T13528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 522.369748][T13528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 522.382050][T13528] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 522.419092][T13528] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 522.429259][T13528] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 522.438618][T13528] usb 2-1: Product: syz [ 522.443071][T13528] usb 2-1: Manufacturer: syz [ 522.448413][T13528] usb 2-1: SerialNumber: syz [ 522.481463][T13528] usb 2-1: config 0 descriptor?? [ 522.546930][ T5903] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 522.706463][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 522.717989][ T5903] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 522.730053][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.730303][T13528] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 522.748054][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.759714][T13528] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 522.778889][ T5903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.789471][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.798226][ T5903] usb 5-1: Product: syz [ 522.802461][ T5903] usb 5-1: Manufacturer: syz [ 522.809505][ T5903] usb 5-1: SerialNumber: syz [ 522.933017][T13528] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 522.941589][T13528] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 522.955811][T13528] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 523.036364][ T5889] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 523.134052][T13528] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 523.208175][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 523.219406][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 523.233357][ T5889] usb 4-1: can't read configurations, error -71 [ 523.246681][ T5903] usb 5-1: 0:2 : does not exist [ 523.744311][T13528] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 523.756579][ T5970] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 523.765702][T13528] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 523.791942][T16214] netlink: 'syz.3.4062': attribute type 39 has an invalid length. [ 523.797927][T13528] usb 2-1: USB disconnect, device number 57 [ 523.967510][ T5970] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.986148][ T5970] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.002285][ T5970] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 524.015433][ T5970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 524.025949][ T5970] usb 7-1: SerialNumber: syz [ 524.106639][ T5903] usb 5-1: USB disconnect, device number 69 [ 524.145609][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.253045][ T5970] usb 7-1: 0:2 : does not exist [ 524.265086][ T5970] usb 7-1: unit 1 not found! [ 524.297082][ T5970] usb 7-1: USB disconnect, device number 7 [ 524.364359][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.816564][ T5970] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 524.996299][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 525.011094][ T5970] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 525.039644][ T5970] usb 4-1: config 0 has no interface number 0 [ 525.061056][ T5970] usb 4-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 525.106329][ T5970] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 525.127182][ T5970] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 525.140471][ T5970] usb 4-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 525.168503][ T5970] usb 4-1: config 0 interface 41 has no altsetting 0 [ 525.178521][ T5970] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 525.188385][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.206240][ T5970] usb 4-1: Product: syz [ 525.210555][ T5970] usb 4-1: Manufacturer: syz [ 525.215268][ T5970] usb 4-1: SerialNumber: syz [ 525.225362][ T5970] usb 4-1: config 0 descriptor?? [ 525.236936][T16223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.244399][T16223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.483288][T16223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.499065][T16223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.576127][T13528] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 525.748146][T13528] usb 2-1: Using ep0 maxpacket: 16 [ 525.755782][T13528] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.768123][T13528] usb 2-1: config 0 has no interfaces? [ 525.776160][T13528] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 525.785353][T13528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.802889][T13528] usb 2-1: config 0 descriptor?? [ 525.877711][ T5903] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 526.051373][ T5889] usb 2-1: USB disconnect, device number 58 [ 526.069437][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 526.098891][ T5903] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 526.112138][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.125368][ T5903] usb 6-1: config 0 descriptor?? [ 526.136410][ T5970] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 526.361913][ T5970] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 526.381889][ T5970] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 526.406444][ T5970] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 526.445441][ T5970] usb 4-1: USB disconnect, device number 57 [ 526.573384][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4083'. [ 526.810849][ T5903] usbhid 6-1:0.0: can't add hid device: -71 [ 526.821475][ T5903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 526.834328][ T5903] usb 6-1: USB disconnect, device number 19 [ 527.006190][ T5970] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 527.117398][T16272] binder: 16270:16272 ioctl c0306201 200000001a80 returned -14 [ 527.180690][ T5970] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 527.190338][ T5970] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 527.201595][ T5970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 527.212969][ T5970] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 527.223519][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 527.235203][ T5970] usb 2-1: Product: syz [ 527.240021][ T5970] usb 2-1: Manufacturer: syz [ 527.244755][ T5970] usb 2-1: SerialNumber: syz [ 527.255194][ T5970] usb 2-1: config 0 descriptor?? [ 527.272629][ T5970] hub 2-1:0.0: bad descriptor, ignoring hub [ 527.279580][ T5970] hub 2-1:0.0: probe with driver hub failed with error -5 [ 527.291924][ T5970] usb 2-1: selecting invalid altsetting 0 [ 527.377070][ T5903] psmouse serio8: Failed to reset mouse on : -5 [ 527.566402][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 527.752321][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 527.766954][T16267] usb 2-1: reset high-speed USB device number 59 using dummy_hcd [ 527.777342][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 527.800794][ T9] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 527.830838][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.851946][ T9] usb 7-1: Product: syz [ 527.860273][ T9] usb 7-1: Manufacturer: syz [ 527.868881][ T9] usb 7-1: SerialNumber: syz [ 527.878313][ T9] usb 7-1: config 0 descriptor?? [ 527.886806][T16285] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 527.894444][T16285] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 527.988996][T16267] usb 2-1: device firmware changed [ 527.996299][ T5889] usb 2-1: USB disconnect, device number 59 [ 528.106612][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 528.128497][T16285] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 528.138320][T16285] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 528.166190][ T5889] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 528.301271][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.312950][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.328964][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 528.341775][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 528.353853][ T10] usb 6-1: Manufacturer: syz [ 528.369573][ T10] usb 6-1: config 0 descriptor?? [ 528.388178][ T5889] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 528.398121][ T5889] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 528.408926][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 528.436582][ T5889] usb 2-1: string descriptor 0 read error: -22 [ 528.443221][ T5889] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 528.452689][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 528.464226][ T5889] usb 2-1: config 0 descriptor?? [ 528.479108][ T5889] hub 2-1:0.0: bad descriptor, ignoring hub [ 528.485349][ T5889] hub 2-1:0.0: probe with driver hub failed with error -5 [ 528.503629][ T5889] usb 2-1: selecting invalid altsetting 0 [ 528.562107][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 528.816455][ T5889] usb 2-1: USB disconnect, device number 60 [ 529.182834][ T9] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 529.228375][ T9] usb 7-1: USB disconnect, device number 8 [ 529.248195][ T10] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0043/input/input91 [ 529.352317][ T10] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0043/input/input92 [ 529.395625][ T10] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0043/input/input93 [ 529.493395][ T10] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0043/input/input94 [ 529.590402][ T10] uclogic 0003:256C:006D.0043: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 529.678866][ T10] usb 6-1: USB disconnect, device number 20 [ 530.157982][T16312] fido_id[16312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 530.676955][ T5889] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 530.776185][ T5970] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 530.836126][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 530.844468][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 530.871386][ T5889] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 530.894630][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 530.910668][ T5889] usb 5-1: Product: syz [ 530.915693][ T5889] usb 5-1: Manufacturer: syz [ 530.922998][ T5889] usb 5-1: SerialNumber: syz [ 530.933879][ T5889] usb 5-1: config 0 descriptor?? [ 530.940267][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 530.943161][ T9] IPVS: starting estimator thread 0... [ 530.954498][ T5970] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 530.966538][ T5970] usb 2-1: config 0 has no interface number 0 [ 530.975345][T16328] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 530.984147][ T5970] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 531.008015][ T5889] hub 5-1:0.0: bad descriptor, ignoring hub [ 531.014162][ T5889] hub 5-1:0.0: probe with driver hub failed with error -5 [ 531.022861][ T5970] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 531.046221][ T5970] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.046346][T16338] IPVS: using max 34 ests per chain, 81600 per kthread [ 531.066978][ T5970] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.067603][ T5970] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 531.067630][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.070390][ T5970] usb 2-1: config 0 descriptor?? [ 531.114513][ T5970] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 531.226884][ T5903] misc userio: Buffer overflowed, userio client isn't keeping up [ 531.337081][ T5970] usb 5-1: USB disconnect, device number 70 [ 531.394448][ T5970] usb 2-1: USB disconnect, device number 61 [ 531.412439][ T5970] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 531.462421][T16352] [ 531.464777][T16352] ===================================================== [ 531.471697][T16352] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 531.479364][T16352] syzkaller #0 Not tainted [ 531.483980][T16352] ----------------------------------------------------- [ 531.491334][T16352] syz.6.4121/16352 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 531.499392][T16352] ffff888069f228a0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 531.508428][T16352] [ 531.508428][T16352] and this task is already holding: [ 531.516569][T16352] ffff88807e55e028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 531.526610][T16352] which would create a new lock dependency: [ 531.532590][T16352] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 531.541021][T16352] [ 531.541021][T16352] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 531.550579][T16352] (&client->buffer_lock){..-.}-{3:3} [ 531.550601][T16352] [ 531.550601][T16352] ... which became SOFTIRQ-irq-safe at: [ 531.564099][T16352] lock_acquire+0x120/0x360 [ 531.568707][T16352] _raw_spin_lock+0x2e/0x40 [ 531.573560][T16352] evdev_pass_values+0xb9/0xbd0 [ 531.578580][T16352] evdev_events+0x1e6/0x340 [ 531.583441][T16352] input_pass_values+0x288/0x890 [ 531.588629][T16352] input_event_dispose+0x3e5/0x6b0 [ 531.593829][T16352] input_event+0x89/0xe0 [ 531.598173][T16352] hidinput_hid_event+0x1362/0x1ca0 [ 531.603574][T16352] hid_process_event+0x4be/0x620 [ 531.608647][T16352] hid_report_raw_event+0xe91/0x16d0 [ 531.614069][T16352] hid_input_report+0x43e/0x520 [ 531.619268][T16352] hid_irq_in+0x47e/0x6d0 [ 531.623690][T16352] __usb_hcd_giveback_urb+0x376/0x540 [ 531.629518][T16352] dummy_timer+0x85f/0x44c0 [ 531.634131][T16352] __hrtimer_run_queues+0x52c/0xc60 [ 531.639513][T16352] hrtimer_run_softirq+0x187/0x2b0 [ 531.644882][T16352] handle_softirqs+0x286/0x870 [ 531.650134][T16352] __irq_exit_rcu+0xca/0x1f0 [ 531.654989][T16352] irq_exit_rcu+0x9/0x30 [ 531.659317][T16352] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 531.665051][T16352] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.671122][T16352] check_preemption_disabled+0xa/0x120 [ 531.676846][T16352] rcu_is_watching+0x15/0xb0 [ 531.681570][T16352] trace_contention_end+0x39/0x120 [ 531.686850][T16352] __mutex_lock+0x32b/0x1350 [ 531.691672][T16352] deferred_probe_work_func+0x21/0x230 [ 531.697470][T16352] process_scheduled_works+0xae1/0x17b0 [ 531.703379][T16352] worker_thread+0x8a0/0xda0 [ 531.708048][T16352] kthread+0x711/0x8a0 [ 531.712210][T16352] ret_from_fork+0x4bc/0x870 [ 531.716961][T16352] ret_from_fork_asm+0x1a/0x30 [ 531.722226][T16352] [ 531.722226][T16352] to a SOFTIRQ-irq-unsafe lock: [ 531.729857][T16352] (tasklist_lock){.+.+}-{3:3} [ 531.729880][T16352] [ 531.729880][T16352] ... which became SOFTIRQ-irq-unsafe at: [ 531.743539][T16352] ... [ 531.743550][T16352] lock_acquire+0x120/0x360 [ 531.750853][T16352] _raw_read_lock+0x36/0x50 [ 531.755540][T16352] __do_wait+0xde/0x740 [ 531.759807][T16352] do_wait+0x1f8/0x510 [ 531.763986][T16352] kernel_wait+0xab/0x170 [ 531.768492][T16352] call_usermodehelper_exec_work+0xbe/0x230 [ 531.774914][T16352] process_scheduled_works+0xae1/0x17b0 [ 531.780749][T16352] worker_thread+0x8a0/0xda0 [ 531.785517][T16352] kthread+0x711/0x8a0 [ 531.789767][T16352] ret_from_fork+0x4bc/0x870 [ 531.794503][T16352] ret_from_fork_asm+0x1a/0x30 [ 531.799350][T16352] [ 531.799350][T16352] other info that might help us debug this: [ 531.799350][T16352] [ 531.810259][T16352] Chain exists of: [ 531.810259][T16352] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 531.810259][T16352] [ 531.823729][T16352] Possible interrupt unsafe locking scenario: [ 531.823729][T16352] [ 531.832403][T16352] CPU0 CPU1 [ 531.838192][T16352] ---- ---- [ 531.843832][T16352] lock(tasklist_lock); [ 531.848148][T16352] local_irq_disable(); [ 531.855353][T16352] lock(&client->buffer_lock); [ 531.863160][T16352] lock(&new->fa_lock); [ 531.870307][T16352] [ 531.874097][T16352] lock(&client->buffer_lock); [ 531.879403][T16352] [ 531.879403][T16352] *** DEADLOCK *** [ 531.879403][T16352] [ 531.887718][T16352] 7 locks held by syz.6.4121/16352: [ 531.893084][T16352] #0: ffff888146f10118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 531.902411][T16352] #1: ffff888145adc230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 531.912904][T16352] #2: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 531.922981][T16352] #3: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 531.932864][T16352] #4: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 531.942095][T16352] #5: ffff88807e55e028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 531.952702][T16352] #6: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 531.961965][T16352] [ 531.961965][T16352] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 531.972464][T16352] -> (&client->buffer_lock){..-.}-{3:3} { [ 531.978523][T16352] IN-SOFTIRQ-W at: [ 531.982593][T16352] lock_acquire+0x120/0x360 [ 531.988760][T16352] _raw_spin_lock+0x2e/0x40 [ 531.994943][T16352] evdev_pass_values+0xb9/0xbd0 [ 532.001627][T16352] evdev_events+0x1e6/0x340 [ 532.008046][T16352] input_pass_values+0x288/0x890 [ 532.014847][T16352] input_event_dispose+0x3e5/0x6b0 [ 532.021879][T16352] input_event+0x89/0xe0 [ 532.028384][T16352] hidinput_hid_event+0x1362/0x1ca0 [ 532.035415][T16352] hid_process_event+0x4be/0x620 [ 532.042018][T16352] hid_report_raw_event+0xe91/0x16d0 [ 532.049050][T16352] hid_input_report+0x43e/0x520 [ 532.055642][T16352] hid_irq_in+0x47e/0x6d0 [ 532.061887][T16352] __usb_hcd_giveback_urb+0x376/0x540 [ 532.069093][T16352] dummy_timer+0x85f/0x44c0 [ 532.075417][T16352] __hrtimer_run_queues+0x52c/0xc60 [ 532.082753][T16352] hrtimer_run_softirq+0x187/0x2b0 [ 532.089873][T16352] handle_softirqs+0x286/0x870 [ 532.096297][T16352] __irq_exit_rcu+0xca/0x1f0 [ 532.102806][T16352] irq_exit_rcu+0x9/0x30 [ 532.108966][T16352] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 532.116348][T16352] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.123996][T16352] check_preemption_disabled+0xa/0x120 [ 532.131219][T16352] rcu_is_watching+0x15/0xb0 [ 532.137815][T16352] trace_contention_end+0x39/0x120 [ 532.144676][T16352] __mutex_lock+0x32b/0x1350 [ 532.150927][T16352] deferred_probe_work_func+0x21/0x230 [ 532.158049][T16352] process_scheduled_works+0xae1/0x17b0 [ 532.165866][T16352] worker_thread+0x8a0/0xda0 [ 532.172296][T16352] kthread+0x711/0x8a0 [ 532.178029][T16352] ret_from_fork+0x4bc/0x870 [ 532.184825][T16352] ret_from_fork_asm+0x1a/0x30 [ 532.191424][T16352] INITIAL USE at: [ 532.195496][T16352] lock_acquire+0x120/0x360 [ 532.202007][T16352] _raw_spin_lock+0x2e/0x40 [ 532.208170][T16352] evdev_pass_values+0xb9/0xbd0 [ 532.214938][T16352] evdev_events+0x1e6/0x340 [ 532.221282][T16352] input_pass_values+0x288/0x890 [ 532.227792][T16352] input_event_dispose+0x330/0x6b0 [ 532.234486][T16352] input_inject_event+0x1dd/0x340 [ 532.241097][T16352] evdev_write+0x2fc/0x480 [ 532.247188][T16352] vfs_write+0x27e/0xb30 [ 532.253019][T16352] ksys_write+0x145/0x250 [ 532.258941][T16352] do_syscall_64+0xfa/0xfa0 [ 532.265035][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.272501][T16352] } [ 532.275003][T16352] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 532.283608][T16352] [ 532.283608][T16352] the dependencies between the lock to be acquired [ 532.283618][T16352] and SOFTIRQ-irq-unsafe lock: [ 532.297689][T16352] -> (tasklist_lock){.+.+}-{3:3} { [ 532.303014][T16352] HARDIRQ-ON-R at: [ 532.307258][T16352] lock_acquire+0x120/0x360 [ 532.313764][T16352] _raw_read_lock+0x36/0x50 [ 532.320273][T16352] __do_wait+0xde/0x740 [ 532.326518][T16352] do_wait+0x1f8/0x510 [ 532.332895][T16352] kernel_wait+0xab/0x170 [ 532.339315][T16352] call_usermodehelper_exec_work+0xbe/0x230 [ 532.347239][T16352] process_scheduled_works+0xae1/0x17b0 [ 532.354882][T16352] worker_thread+0x8a0/0xda0 [ 532.361477][T16352] kthread+0x711/0x8a0 [ 532.367548][T16352] ret_from_fork+0x4bc/0x870 [ 532.374660][T16352] ret_from_fork_asm+0x1a/0x30 [ 532.381521][T16352] SOFTIRQ-ON-R at: [ 532.385716][T16352] lock_acquire+0x120/0x360 [ 532.392495][T16352] _raw_read_lock+0x36/0x50 [ 532.399184][T16352] __do_wait+0xde/0x740 [ 532.405693][T16352] do_wait+0x1f8/0x510 [ 532.412131][T16352] kernel_wait+0xab/0x170 [ 532.418833][T16352] call_usermodehelper_exec_work+0xbe/0x230 [ 532.426867][T16352] process_scheduled_works+0xae1/0x17b0 [ 532.434820][T16352] worker_thread+0x8a0/0xda0 [ 532.441686][T16352] kthread+0x711/0x8a0 [ 532.447845][T16352] ret_from_fork+0x4bc/0x870 [ 532.454876][T16352] ret_from_fork_asm+0x1a/0x30 [ 532.461733][T16352] INITIAL USE at: [ 532.465803][T16352] lock_acquire+0x120/0x360 [ 532.472486][T16352] _raw_write_lock_irq+0xa2/0xf0 [ 532.479604][T16352] copy_process+0x224f/0x3c00 [ 532.486371][T16352] kernel_clone+0x21e/0x840 [ 532.493063][T16352] user_mode_thread+0xdd/0x140 [ 532.500097][T16352] rest_init+0x23/0x300 [ 532.506627][T16352] start_kernel+0x3ae/0x410 [ 532.513412][T16352] x86_64_start_reservations+0x24/0x30 [ 532.520877][T16352] x86_64_start_kernel+0x143/0x1c0 [ 532.528007][T16352] common_startup_64+0x13e/0x147 [ 532.535292][T16352] INITIAL READ USE at: [ 532.539977][T16352] lock_acquire+0x120/0x360 [ 532.547189][T16352] _raw_read_lock+0x36/0x50 [ 532.554582][T16352] __do_wait+0xde/0x740 [ 532.561092][T16352] do_wait+0x1f8/0x510 [ 532.567597][T16352] kernel_wait+0xab/0x170 [ 532.574535][T16352] call_usermodehelper_exec_work+0xbe/0x230 [ 532.583171][T16352] process_scheduled_works+0xae1/0x17b0 [ 532.591764][T16352] worker_thread+0x8a0/0xda0 [ 532.598708][T16352] kthread+0x711/0x8a0 [ 532.605410][T16352] ret_from_fork+0x4bc/0x870 [ 532.613309][T16352] ret_from_fork_asm+0x1a/0x30 [ 532.620810][T16352] } [ 532.623478][T16352] ... key at: [] tasklist_lock+0x18/0x40 [ 532.631473][T16352] ... acquired at: [ 532.635535][T16352] lock_acquire+0x120/0x360 [ 532.640393][T16352] _raw_read_lock+0x36/0x50 [ 532.645180][T16352] send_sigurg+0x12b/0x420 [ 532.649891][T16352] sk_send_sigurg+0x6c/0x2e0 [ 532.654930][T16352] queue_oob+0x420/0x4f0 [ 532.659529][T16352] unix_stream_sendmsg+0xc3f/0xdf0 [ 532.664906][T16352] __sock_sendmsg+0x21c/0x270 [ 532.669942][T16352] ____sys_sendmsg+0x52d/0x830 [ 532.675063][T16352] ___sys_sendmsg+0x21f/0x2a0 [ 532.680088][T16352] __sys_sendmmsg+0x227/0x430 [ 532.685026][T16352] __x64_sys_sendmmsg+0xa0/0xc0 [ 532.690049][T16352] do_syscall_64+0xfa/0xfa0 [ 532.694736][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.700806][T16352] [ 532.703131][T16352] -> (&f_owner->lock){....}-{3:3} { [ 532.708483][T16352] INITIAL USE at: [ 532.712464][T16352] lock_acquire+0x120/0x360 [ 532.719065][T16352] _raw_write_lock_irq+0xa2/0xf0 [ 532.725932][T16352] __f_setown+0x67/0x370 [ 532.732311][T16352] fcntl_dirnotify+0x3fa/0x6a0 [ 532.738829][T16352] do_fcntl+0x6d0/0x1910 [ 532.744907][T16352] __se_sys_fcntl+0xc8/0x150 [ 532.751505][T16352] do_syscall_64+0xfa/0xfa0 [ 532.757963][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.765784][T16352] INITIAL READ USE at: [ 532.770469][T16352] lock_acquire+0x120/0x360 [ 532.777409][T16352] _raw_read_lock_irqsave+0xaf/0x100 [ 532.785226][T16352] send_sigurg+0x55/0x420 [ 532.791836][T16352] sk_send_sigurg+0x6c/0x2e0 [ 532.798700][T16352] queue_oob+0x420/0x4f0 [ 532.805140][T16352] unix_stream_sendmsg+0xc3f/0xdf0 [ 532.812428][T16352] __sock_sendmsg+0x21c/0x270 [ 532.819377][T16352] ____sys_sendmsg+0x52d/0x830 [ 532.826695][T16352] ___sys_sendmsg+0x21f/0x2a0 [ 532.833756][T16352] __sys_sendmmsg+0x227/0x430 [ 532.840724][T16352] __x64_sys_sendmmsg+0xa0/0xc0 [ 532.847924][T16352] do_syscall_64+0xfa/0xfa0 [ 532.854781][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.863139][T16352] } [ 532.865769][T16352] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 532.875067][T16352] ... acquired at: [ 532.879017][T16352] lock_acquire+0x120/0x360 [ 532.883703][T16352] _raw_read_lock_irqsave+0xaf/0x100 [ 532.889217][T16352] send_sigio+0x38/0x370 [ 532.894078][T16352] kill_fasync+0x24d/0x4d0 [ 532.898915][T16352] lease_break_callback+0x26/0x30 [ 532.904389][T16352] __break_lease+0x6a5/0x1620 [ 532.909503][T16352] do_dentry_open+0x8b7/0x13f0 [ 532.914460][T16352] vfs_open+0x3b/0x340 [ 532.919317][T16352] path_openat+0x2ee5/0x3830 [ 532.924435][T16352] do_filp_open+0x1fa/0x410 [ 532.929395][T16352] do_sys_openat2+0x121/0x1c0 [ 532.934287][T16352] __x64_sys_openat+0x138/0x170 [ 532.939833][T16352] do_syscall_64+0xfa/0xfa0 [ 532.944714][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.950877][T16352] [ 532.953212][T16352] -> (&new->fa_lock){....}-{3:3} { [ 532.958654][T16352] INITIAL USE at: [ 532.962732][T16352] lock_acquire+0x120/0x360 [ 532.969165][T16352] _raw_write_lock_irq+0xa2/0xf0 [ 532.976189][T16352] fasync_remove_entry+0xf1/0x1c0 [ 532.983390][T16352] lease_modify+0x1ca/0x3c0 [ 532.989656][T16352] locks_remove_file+0x4bf/0xea0 [ 532.996376][T16352] __fput+0x3ab/0xa70 [ 533.002382][T16352] task_work_run+0x1d4/0x260 [ 533.009069][T16352] exit_to_user_mode_loop+0xe9/0x130 [ 533.016032][T16352] do_syscall_64+0x2bd/0xfa0 [ 533.022823][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.030638][T16352] INITIAL READ USE at: [ 533.035171][T16352] lock_acquire+0x120/0x360 [ 533.042125][T16352] _raw_read_lock_irqsave+0xaf/0x100 [ 533.049598][T16352] kill_fasync+0x199/0x4d0 [ 533.056026][T16352] lease_break_callback+0x26/0x30 [ 533.063057][T16352] __break_lease+0x6a5/0x1620 [ 533.069822][T16352] do_dentry_open+0x8b7/0x13f0 [ 533.076852][T16352] vfs_open+0x3b/0x340 [ 533.083447][T16352] path_openat+0x2ee5/0x3830 [ 533.090294][T16352] do_filp_open+0x1fa/0x410 [ 533.097149][T16352] do_sys_openat2+0x121/0x1c0 [ 533.103920][T16352] __x64_sys_openat+0x138/0x170 [ 533.111561][T16352] do_syscall_64+0xfa/0xfa0 [ 533.118409][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.126827][T16352] } [ 533.129331][T16352] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 533.138851][T16352] ... acquired at: [ 533.142746][T16352] lock_acquire+0x120/0x360 [ 533.147431][T16352] _raw_read_lock_irqsave+0xaf/0x100 [ 533.152902][T16352] kill_fasync+0x199/0x4d0 [ 533.157948][T16352] evdev_pass_values+0x627/0xbd0 [ 533.163415][T16352] evdev_events+0x1e6/0x340 [ 533.168351][T16352] input_pass_values+0x288/0x890 [ 533.173867][T16352] input_event_dispose+0x330/0x6b0 [ 533.179170][T16352] input_inject_event+0x1dd/0x340 [ 533.184659][T16352] evdev_write+0x2fc/0x480 [ 533.189992][T16352] vfs_write+0x27e/0xb30 [ 533.194769][T16352] ksys_write+0x145/0x250 [ 533.199365][T16352] do_syscall_64+0xfa/0xfa0 [ 533.204238][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.210606][T16352] [ 533.213038][T16352] [ 533.213038][T16352] stack backtrace: [ 533.219021][T16352] CPU: 0 UID: 0 PID: 16352 Comm: syz.6.4121 Not tainted syzkaller #0 PREEMPT(full) [ 533.219046][T16352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.219057][T16352] Call Trace: [ 533.219063][T16352] [ 533.219069][T16352] dump_stack_lvl+0x189/0x250 [ 533.219132][T16352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.219149][T16352] ? __pfx__printk+0x10/0x10 [ 533.219169][T16352] validate_chain+0x1f05/0x2140 [ 533.219200][T16352] __lock_acquire+0xab9/0xd20 [ 533.219229][T16352] ? kill_fasync+0x199/0x4d0 [ 533.219253][T16352] lock_acquire+0x120/0x360 [ 533.219273][T16352] ? kill_fasync+0x199/0x4d0 [ 533.219300][T16352] _raw_read_lock_irqsave+0xaf/0x100 [ 533.219324][T16352] ? kill_fasync+0x199/0x4d0 [ 533.219347][T16352] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 533.219370][T16352] ? do_raw_spin_lock+0x121/0x290 [ 533.219389][T16352] kill_fasync+0x199/0x4d0 [ 533.219412][T16352] ? kill_fasync+0x53/0x4d0 [ 533.219435][T16352] evdev_pass_values+0x627/0xbd0 [ 533.219455][T16352] ? evdev_pass_values+0x5c1/0xbd0 [ 533.219476][T16352] evdev_events+0x1e6/0x340 [ 533.219492][T16352] ? evdev_events+0x79/0x340 [ 533.219508][T16352] ? input_pass_values+0x8d/0x890 [ 533.219524][T16352] input_pass_values+0x288/0x890 [ 533.219542][T16352] ? input_handle_event+0x70c/0xf30 [ 533.219566][T16352] input_event_dispose+0x330/0x6b0 [ 533.219590][T16352] input_inject_event+0x1dd/0x340 [ 533.219619][T16352] ? input_inject_event+0xb6/0x340 [ 533.219643][T16352] evdev_write+0x2fc/0x480 [ 533.219662][T16352] ? __pfx_evdev_write+0x10/0x10 [ 533.219680][T16352] ? bpf_lsm_file_permission+0x9/0x20 [ 533.219709][T16352] ? security_file_permission+0x75/0x290 [ 533.219733][T16352] ? rw_verify_area+0x255/0x4d0 [ 533.219749][T16352] ? __lock_acquire+0xab9/0xd20 [ 533.219767][T16352] ? __pfx_evdev_write+0x10/0x10 [ 533.219785][T16352] vfs_write+0x27e/0xb30 [ 533.219803][T16352] ? __pfx_vfs_write+0x10/0x10 [ 533.219820][T16352] ? __fget_files+0x2a/0x420 [ 533.219840][T16352] ? __fget_files+0x2a/0x420 [ 533.219858][T16352] ? __fget_files+0x3a0/0x420 [ 533.219876][T16352] ? __fget_files+0x2a/0x420 [ 533.219896][T16352] ksys_write+0x145/0x250 [ 533.219914][T16352] ? __pfx_ksys_write+0x10/0x10 [ 533.219939][T16352] ? do_syscall_64+0xbe/0xfa0 [ 533.219956][T16352] do_syscall_64+0xfa/0xfa0 [ 533.219971][T16352] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.219986][T16352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.220001][T16352] ? clear_bhb_loop+0x60/0xb0 [ 533.220019][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.220033][T16352] RIP: 0033:0x7f994b58eec9 [ 533.220048][T16352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.220063][T16352] RSP: 002b:00007f99497f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 533.220081][T16352] RAX: ffffffffffffffda RBX: 00007f994b7e5fa0 RCX: 00007f994b58eec9 [ 533.220093][T16352] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 533.220104][T16352] RBP: 00007f994b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 533.220114][T16352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.220124][T16352] R13: 00007f994b7e6038 R14: 00007f994b7e5fa0 R15: 00007f994b90fa28 [ 533.220140][T16352] [ 533.551958][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.686125][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 533.836146][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 533.843390][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.854796][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.864932][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 533.874571][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.883648][ T9] usb 6-1: config 0 descriptor?? [ 533.893850][ T9] hub 6-1:0.0: USB hub found [ 534.097115][ T9] hub 6-1:0.0: 1 port detected [ 534.206860][ T5903] input: PS/2 Generic Mouse as /devices/serio8/input/input90 [ 534.416108][ T5903] psmouse serio8: Failed to enable mouse on [ 534.709231][ T9] hub 6-1:0.0: activate --> -90 [ 535.110940][ T5903] usb 6-1: USB disconnect, device number 21 [ 535.346482][ T9] usb 6-1-port1: config error