last executing test programs: 5m19.370160448s ago: executing program 0 (id=107): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x458, 0x2}, {0x0, 0x4a}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 5m19.153023987s ago: executing program 0 (id=109): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) write$FUSE_INTERRUPT(r1, 0x0, 0x0) 5m18.013314147s ago: executing program 0 (id=121): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000000)=""/56, 0x4) 5m17.868809035s ago: executing program 0 (id=123): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 5m17.657735587s ago: executing program 0 (id=125): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a481, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xbd2f, 0x3, 0x8, 0x7ffffffe, 0x2, "48b4299abf3991c75ba90fb7ee13ed2ee2f419"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0x6e3, 0x7, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) 5m15.446439421s ago: executing program 0 (id=137): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0xe9db8df3, @local, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) 5m15.137910103s ago: executing program 32 (id=137): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0xe9db8df3, @local, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000180)={0x200000000000001}, 0x8) 3m30.620668908s ago: executing program 1 (id=1275): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x80802, 0xf7) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) sendfile(r0, r0, 0x0, 0x2000000000409) 3m30.188489698s ago: executing program 1 (id=1281): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 3m29.144565425s ago: executing program 1 (id=1295): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m27.168261469s ago: executing program 1 (id=1313): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 3m27.03099451s ago: executing program 1 (id=1316): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) close(r0) 3m26.113678976s ago: executing program 1 (id=1323): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 3m25.847573423s ago: executing program 33 (id=1323): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 2m25.88587312s ago: executing program 3 (id=1970): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept$inet6(r0, 0x0, 0x0) 2m25.660321038s ago: executing program 3 (id=1975): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m25.221902907s ago: executing program 3 (id=1983): ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x1000c, 0x0, 0x0, 0x369db5, 0x8, 0xc, 0x3e8682}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2m25.051191793s ago: executing program 3 (id=1985): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x5, 0x70bd24, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x34}}, 0x4004054) 2m24.791697058s ago: executing program 3 (id=1991): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m24.612019808s ago: executing program 3 (id=1995): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x13, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 2m9.521993369s ago: executing program 34 (id=1995): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x13, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 36.758539475s ago: executing program 5 (id=2917): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) 36.485933049s ago: executing program 5 (id=2920): syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 34.924371633s ago: executing program 5 (id=2927): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 34.793392059s ago: executing program 5 (id=2929): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 34.478314487s ago: executing program 5 (id=2931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) 33.818199845s ago: executing program 5 (id=2936): r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0) fanotify_mark(r0, 0x1, 0x103b, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 33.507998653s ago: executing program 35 (id=2936): r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0) fanotify_mark(r0, 0x1, 0x103b, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 5.303060513s ago: executing program 2 (id=3139): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 4.73747975s ago: executing program 2 (id=3140): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 4.420405472s ago: executing program 2 (id=3143): mkdir(&(0x7f00000020c0)='./file0\x00', 0x10) syz_open_dev$video4linux(&(0x7f0000000280), 0xb9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 3.053228139s ago: executing program 2 (id=3148): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x324) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) 2.905868285s ago: executing program 2 (id=3150): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.808920615s ago: executing program 6 (id=3152): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) pwritev(r1, &(0x7f0000002400)=[{&(0x7f00000012c0)="d1", 0x1}], 0x1, 0xa, 0x8) 2.723203361s ago: executing program 6 (id=3153): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 2.524064451s ago: executing program 6 (id=3156): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) 2.332556731s ago: executing program 6 (id=3160): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 2.105478175s ago: executing program 6 (id=3161): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)=ANY=[], 0x12) 2.104020207s ago: executing program 4 (id=3169): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x20}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 1.614058603s ago: executing program 6 (id=3162): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.57113843s ago: executing program 4 (id=3163): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="93d7", 0x2}], 0x1}, 0x4011) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10061) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000000680)="9857", 0x2}], 0x1}, 0x20000011) 946.649242ms ago: executing program 7 (id=3164): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r0, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) close(r0) 712.505928ms ago: executing program 7 (id=3165): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) pwritev(r1, &(0x7f0000002400)=[{&(0x7f00000012c0)="d1", 0x1}], 0x1, 0xa, 0x8) 576.259238ms ago: executing program 7 (id=3166): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 576.120009ms ago: executing program 2 (id=3167): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 534.415709ms ago: executing program 4 (id=3168): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)="d2406a0f7e1644343a1aac6fe83987224577e21085355bec84a4fa89c894e5e7e9713c150953073ec07be38272b0cf53c57aebdbb1f366216c4e5155305b59f0025a7a4c3945369e95c6fccf136023bd991e94904b4a0461a5ff8b5ce59844b6dabb39c0b3f73b7c5cfc13939d0aa70cc098e20142029f0552193add5e4f3e0b4e42277fa5e0662374ce935edaf222446f9009bbb210adfbfed15a50153b0c00001e07f52c5bcb22f66a28753803ecb60bce2943b4fc5364ae2c6d2316a69b12a24b954f04f5f3519216b09c9d59e5ec106567c2e226cb311954e8a6f3987fc9c343a5d86d168b6c913cffa465a8842f63fa5dbd6f2aaa5b11bea5ccf4129bd497a10d0000767672d858e3bd1013fe4a1a50b3e4ddae4fd3ce43652bb082f7c2272a15909fa5cef48627a9c13c478609fce68acae6284e8f697811e9d3cf3b55342a2e4c6dd22ef39734d8306b92e95cbe0224f9667f4704003d9cacb7f63bdbd860ab1d15f1795c200201f75d1386202cd19870862e6609de0502565e20681e84cee707e7848df10eb1d3170dfe6fb40ccf712d00420000000009485b35d8c8b9ebb767acb084369913c137184800472c9ed63c42947aad3e0f56de7d585d2220a75934eb11b0f77eaa8de8ef76bc877ed371b10ee74cf33c05c5edfd51594c44d95a6759f3be2635d44358825245948a531230a3d7bcf0998500ae6d4ab71b6f9591e62ffce7eeaac3f5526a30c0cc15bed75c0a50374ca5aeac4bf3803f248fbc4d743255bc9feb0bd8d90bf0bbaf65a822a9ad4d7b2fad3e2f03142b3727fa2abb1ded6c00027127b60e00113e8240cab15016cf0f1cf5632aad07fed7d01d380000020000dde48851cdb9aaae508a88b34d9f9568860b966fc651e222fa16123f3d92fc7e5c3bc63a4edf901fc03b74d148cee2ac1064d12e5ed4aab32944161281a924149cad8a792cd91b1495b62ba47210eb2d00a2f882fc64f9f518bcf8c531dc52962f55db67919cbdc6c85e1f9334b20c67cfca6ce195d12310877e33d56f7e2bb871d3e7be2ad774f785b1d0a0cd811701582bcca380e68cb339e8b21c88b3dc2e", 0xfffffdfa}, 0x1, 0x0, 0x0, 0x8001}, 0x20000041) 463.159989ms ago: executing program 7 (id=3170): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 440.944136ms ago: executing program 4 (id=3171): r0 = socket$alg(0x26, 0x5, 0x0) setuid(0xee01) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) 366.00231ms ago: executing program 7 (id=3172): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x1f, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 314.242753ms ago: executing program 4 (id=3173): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) 142.032026ms ago: executing program 4 (id=3174): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000002200)=ANY=[], 0xff2e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0x1, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0xf, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x7, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=3175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef) kernel console output (not intermixed with test programs): s 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 303.944026][ T822] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 303.944049][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.029474][ T822] usb 5-1: config 0 descriptor?? [ 304.031647][ T5819] Bluetooth: hci0: command tx timeout [ 304.492519][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492554][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492579][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492603][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492628][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492665][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492691][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492715][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492740][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.492764][ T822] aquacomputer_d5next 0003:0C70:F003.0019: unknown main item tag 0x0 [ 304.626281][ T822] aquacomputer_d5next 0003:0C70:F003.0019: hidraw0: USB HID v0.0a Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 304.759258][ T5485] 8021q: adding VLAN 0 to HW filter on device eth5 [ 304.808259][T10896] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 304.824695][ T822] usb 5-1: USB disconnect, device number 25 [ 304.897463][T10894] fido_id[10894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 304.922808][ T5819] Bluetooth: hci4: command tx timeout [ 305.228208][T10900] input: syz1 as /devices/virtual/input/input19 [ 305.944081][ T57] hsr_slave_0: left promiscuous mode [ 305.982307][ T57] hsr_slave_1: left promiscuous mode [ 306.019977][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.020008][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.042867][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.042894][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.191043][ T57] veth1_macvtap: left promiscuous mode [ 306.191112][ T57] veth0_macvtap: left promiscuous mode [ 306.191296][ T57] veth1_vlan: left promiscuous mode [ 306.191420][ T57] veth0_vlan: left promiscuous mode [ 306.731946][ T821] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 306.881682][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 306.883872][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.887350][ T821] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 306.887379][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.887392][ T821] usb 5-1: Product: syz [ 306.887402][ T821] usb 5-1: Manufacturer: syz [ 306.887411][ T821] usb 5-1: SerialNumber: syz [ 306.991639][ T5819] Bluetooth: hci4: command tx timeout [ 307.139653][ T821] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 307.272333][ T57] team0 (unregistering): Port device team_slave_1 removed [ 307.332964][ T57] team0 (unregistering): Port device team_slave_0 removed [ 307.739756][ T821] gspca_vc032x: reg_r err -71 [ 307.739788][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739799][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739808][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739816][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739825][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739834][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739842][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739850][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739858][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739875][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739883][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739892][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739900][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739909][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739918][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739927][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739935][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739944][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739952][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 307.739965][ T821] gspca_vc032x: Unknown sensor... [ 307.740039][ T821] vc032x 5-1:12.0: probe with driver vc032x failed with error -22 [ 307.878478][ T821] usb 5-1: USB disconnect, device number 26 [ 308.067912][ T38] audit: type=1326 audit(1776499259.386:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dd3ac819 code=0x7fc00000 [ 308.447969][T10850] chnl_net:caif_netlink_parms(): no params data found [ 309.004794][ T821] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 309.081755][ T5819] Bluetooth: hci4: command tx timeout [ 309.164287][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 309.166629][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.186042][ T821] usb 5-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 309.186069][ T821] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.186092][ T821] usb 5-1: config 1 has no interface number 0 [ 309.187102][ T821] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 36, changing to 7 [ 309.187132][ T821] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 58400, setting to 1024 [ 309.218748][T10850] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.224306][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.225134][T10850] bridge_slave_0: entered allmulticast mode [ 309.277802][ T821] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 309.277831][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.277852][ T821] usb 5-1: Product: syz [ 309.277866][ T821] usb 5-1: Manufacturer: syz [ 309.277880][ T821] usb 5-1: SerialNumber: syz [ 309.356180][T10850] bridge_slave_0: entered promiscuous mode [ 309.433103][T10850] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.433425][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.433758][T10850] bridge_slave_1: entered allmulticast mode [ 309.509526][T10850] bridge_slave_1: entered promiscuous mode [ 309.982986][T10850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.018151][T10850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.301296][T10850] team0: Port device team_slave_0 added [ 310.347488][T10850] team0: Port device team_slave_1 added [ 310.370540][ T821] usb 5-1: USB disconnect, device number 27 [ 310.636023][T10850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.636040][T10850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.636067][T10850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.703034][T10850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.703050][T10850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.703078][T10850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.902500][T10789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 310.957553][T10789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.023827][T10789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 311.059553][T10789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.148104][T10850] hsr_slave_0: entered promiscuous mode [ 311.150228][T10850] hsr_slave_1: entered promiscuous mode [ 311.151667][ T5819] Bluetooth: hci4: command tx timeout [ 311.155296][T10850] debugfs: 'hsr0' already exists in 'hsr' [ 311.155362][T10850] Cannot create hsr debugfs directory [ 311.179837][T10789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 311.245941][T10789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.250800][T10789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 311.289051][T10789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.823901][T10850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 312.874728][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.898029][T10850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.959539][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.974718][T10850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.050181][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 313.204093][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.207443][T10850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.345869][T10850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.391837][ T32] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 313.419179][T10789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.548927][T10789] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.572760][ T32] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 313.572789][ T32] usb 5-1: config 150 has no interface number 0 [ 313.572832][ T32] usb 5-1: config 150 interface 204 has no altsetting 0 [ 313.580530][ T32] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 313.580566][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.580587][ T32] usb 5-1: Product: syz [ 313.580603][ T32] usb 5-1: Manufacturer: syz [ 313.580618][ T32] usb 5-1: SerialNumber: syz [ 313.640008][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.640157][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.711082][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.711215][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.904331][ T32] xr_serial 5-1:150.204: xr_serial converter detected [ 314.315154][T11049] sctp: [Deprecated]: syz.2.2194 (pid 11049) Use of int in max_burst socket option deprecated. [ 314.315154][T11049] Use struct sctp_assoc_value instead [ 314.412787][T10850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.509387][ T32] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 314.509449][ T32] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 314.533912][ T32] usb 5-1: USB disconnect, device number 28 [ 314.563090][ T32] xr_serial 5-1:150.204: device disconnected [ 314.622850][T10850] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.690164][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.690384][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.775256][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.775413][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.973354][T10789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.444994][T10850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.017495][T10789] veth0_vlan: entered promiscuous mode [ 316.204796][T10789] veth1_vlan: entered promiscuous mode [ 316.444078][T10789] veth0_macvtap: entered promiscuous mode [ 316.514169][T10789] veth1_macvtap: entered promiscuous mode [ 316.736993][T10850] veth0_vlan: entered promiscuous mode [ 316.754331][T10789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.796667][T10789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.839557][T10850] veth1_vlan: entered promiscuous mode [ 316.849613][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.853278][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.889307][ T480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.907539][ T480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.008481][T11101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2207'. [ 317.078704][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.078786][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.467921][T10850] veth0_macvtap: entered promiscuous mode [ 317.621390][T10850] veth1_macvtap: entered promiscuous mode [ 318.097121][T10850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.151797][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.151817][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.206816][T10850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.306529][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.489274][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.490782][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2219'. [ 318.524824][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.554669][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.554689][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.590784][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.657662][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'. [ 318.762946][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 320.014082][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.014102][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.501879][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.501908][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.751613][ T32] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 321.984750][ T32] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.984783][ T32] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.984805][ T32] usb 7-1: config 1 interface 0 has no altsetting 0 [ 322.081252][ T32] usb 7-1: string descriptor 0 read error: -22 [ 322.081403][ T32] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 322.084398][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.645930][ T32] hid_parser_main: 28 callbacks suppressed [ 322.645972][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646003][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646031][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646058][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646086][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646111][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646138][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646165][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646192][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.646218][ T32] glorious 0003:258A:0033.001A: unknown main item tag 0x0 [ 322.648691][ T32] glorious 0003:258A:0033.001A: unexpected long global item [ 322.649549][ T32] glorious 0003:258A:0033.001A: probe with driver glorious failed with error -22 [ 322.817786][ T32] usb 7-1: USB disconnect, device number 2 [ 322.878028][T11223] bridge0: port 3(veth1_macvtap) entered blocking state [ 322.879261][T11223] bridge0: port 3(veth1_macvtap) entered disabled state [ 322.881184][T11223] veth1_macvtap: entered allmulticast mode [ 323.047588][T11223] veth1_macvtap: left allmulticast mode [ 323.130406][T11227] loop4: detected capacity change from 0 to 65536 [ 323.171841][T11227] loop4: detected capacity change from 65536 to 523370496 [ 323.878910][T11244] input: syz0 as /devices/virtual/input/input20 [ 323.971852][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 324.149971][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 324.150004][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.150026][ T9] usb 3-1: Product: syz [ 324.150053][ T9] usb 3-1: Manufacturer: syz [ 324.150068][ T9] usb 3-1: SerialNumber: syz [ 324.203260][ T9] usb 3-1: config 0 descriptor?? [ 324.627148][ T9] usb 3-1: Firmware: major: 163, minor: 102, hardware type: UNKNOWN (62) [ 324.846577][ T9] usb 3-1: failed to fetch extended address, random address set [ 324.846606][ T9] usb 3-1: atusb_probe: initialization failed, error = -524 [ 324.903852][ T9] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 324.953477][ T9] usb 3-1: USB disconnect, device number 18 [ 325.002245][T11270] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2282'. [ 325.093939][T11272] netlink: 'syz.6.2283': attribute type 11 has an invalid length. [ 325.093959][T11272] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.2283'. [ 325.344482][T11278] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 327.409104][T11353] loop4: detected capacity change from 0 to 524287936 [ 327.504585][T11354] macvlan1: entered promiscuous mode [ 327.504890][T11354] macvlan1: entered allmulticast mode [ 327.504907][T11354] veth1_vlan: entered allmulticast mode [ 327.621564][ T32] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 327.771942][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 327.777412][ T32] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 327.777442][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 327.777464][ T32] usb 5-1: Product: syz [ 327.777504][ T32] usb 5-1: Manufacturer: syz [ 327.777520][ T32] usb 5-1: SerialNumber: syz [ 327.835618][ T32] usb 5-1: config 0 descriptor?? [ 327.856599][ T32] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 328.049061][ T32] gspca_sn9c2028: read1 error -32 [ 328.050489][ T32] gspca_sn9c2028: read1 error -32 [ 328.324607][ T32] usb 5-1: USB disconnect, device number 29 [ 329.011675][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 329.163369][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 329.170473][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 329.170497][ T10] usb 3-1: config 0 has no interface number 0 [ 329.196327][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 329.196355][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.196375][ T10] usb 3-1: Product: syz [ 329.196389][ T10] usb 3-1: Manufacturer: syz [ 329.196403][ T10] usb 3-1: SerialNumber: syz [ 329.309771][T11387] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2333'. [ 329.324656][ T10] usb 3-1: config 0 descriptor?? [ 329.359369][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 329.511090][T11392] vxcan0: tx address claim with dlc 0 [ 329.564738][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.565352][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.696221][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 329.771358][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 329.909175][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 329.982257][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 330.103828][ T10] usb 3-1: USB disconnect, device number 19 [ 330.235690][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 330.279265][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 330.297278][ T10] quatech2 3-1:0.51: device disconnected [ 330.487200][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 330.811753][T11417] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 330.811798][T11417] netlink: 'syz.4.2349': attribute type 2 has an invalid length. [ 330.811812][T11417] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 330.811825][T11417] netlink: 'syz.4.2349': attribute type 3 has an invalid length. [ 330.811839][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2349'. [ 331.041850][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.267850][T11432] Bluetooth: MGMT ver 1.23 [ 331.559951][ T38] audit: type=1326 audit(1776499282.876:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bb78c819 code=0x7fc00000 [ 332.090794][T11432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.098129][T11432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.098657][T11432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.112212][T11432] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.112503][T11432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 332.220830][T11432] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 332.594578][ T37] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 332.741603][ T37] usb 7-1: Using ep0 maxpacket: 16 [ 332.758908][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.758960][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.758984][ T37] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.759027][ T37] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.759052][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.836614][ T37] usb 7-1: config 0 descriptor?? [ 333.314609][ T5819] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 333.314635][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 333.335698][ T37] hid_parser_main: 246 callbacks suppressed [ 333.335720][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.335750][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.335777][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.335803][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.335828][ T37] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 333.338374][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.338405][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.338432][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.338458][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.338484][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.338511][ T37] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 333.444061][ T37] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001B/input/input21 [ 333.534357][ T37] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 333.566018][ T37] usb 7-1: USB disconnect, device number 3 [ 333.632104][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 333.864089][T11478] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2376'. [ 333.905245][T11475] fido_id[11475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 334.111577][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 334.111661][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 334.111704][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 334.438142][T11489] input: syz0 as /devices/virtual/input/input22 [ 335.673339][ T37] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 335.848255][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 335.856166][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.856196][ T37] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.856235][ T37] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.856257][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.913462][ T37] usb 5-1: config 0 descriptor?? [ 335.999899][ T32] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 336.166204][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.166231][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.191705][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.195225][ T32] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.195246][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.195301][ T32] usb 7-1: SerialNumber: syz [ 336.483701][ T32] usb 7-1: 0:2 : does not exist [ 336.882191][ T32] usb 7-1: USB disconnect, device number 4 [ 337.102217][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 337.223010][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.261641][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 337.264185][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.264243][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.264373][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.264399][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 337.264424][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.269077][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 337.269103][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 337.269122][ T9] usb 6-1: Manufacturer: syz [ 337.363390][ T9] usb 6-1: config 0 descriptor?? [ 337.713869][ T9] rc_core: IR keymap rc-hauppauge not found [ 337.713889][ T9] Registered IR keymap rc-empty [ 337.714580][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.744554][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.827703][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 337.835349][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 337.884591][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.901719][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.921864][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.941827][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.961665][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 337.981955][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.002333][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.032325][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.051571][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.082668][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 338.271768][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 338.276201][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 338.276225][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 338.333518][ T9] usb 6-1: USB disconnect, device number 6 [ 338.457775][ T37] usbhid 5-1:0.0: can't add hid device: -71 [ 338.457917][ T37] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 338.551916][ T37] usb 5-1: USB disconnect, device number 30 [ 339.097589][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 341.434378][T11627] tap0: tun_chr_ioctl cmd 1074025672 [ 341.434402][T11627] tap0: ignored: set checksum enabled [ 341.461281][T11634] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2446'. [ 341.671051][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2449'. [ 341.684251][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2449'. [ 342.271596][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 342.553303][T11658] pim6reg: entered allmulticast mode [ 342.573297][T11656] pim6reg: left allmulticast mode [ 342.985224][ T822] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 343.130846][T11669] hugetlbfs: syz.5.2462 (11669): Using mlock ulimits for SHM_HUGETLB is obsolete [ 343.144933][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 343.147145][ T822] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 343.147172][ T822] usb 5-1: config 0 has no interface number 0 [ 343.171334][ T822] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 343.171365][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.171388][ T822] usb 5-1: Product: syz [ 343.171404][ T822] usb 5-1: Manufacturer: syz [ 343.172910][ T822] usb 5-1: SerialNumber: syz [ 343.243043][ T822] usb 5-1: config 0 descriptor?? [ 343.269185][ T822] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 343.549358][ T822] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 343.604305][ T822] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 343.945282][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 343.947408][ T822] usb 5-1: USB disconnect, device number 31 [ 344.002223][ T822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 344.036899][ T822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 344.105644][ T822] quatech2 5-1:0.51: device disconnected [ 344.484403][T11698] input: syz1 as /devices/virtual/input/input24 [ 344.627720][T11700] Bluetooth: MGMT ver 1.23 [ 344.765420][ T822] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 344.810746][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2477'. [ 344.928438][ T822] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 344.928469][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.928488][ T822] usb 6-1: Product: syz [ 344.928502][ T822] usb 6-1: Manufacturer: syz [ 344.928522][ T822] usb 6-1: SerialNumber: syz [ 345.333465][ T822] rtl8150 6-1:1.0: couldn't reset the device [ 345.334047][ T822] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 345.379383][ T822] usb 6-1: USB disconnect, device number 7 [ 347.321611][ T6011] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 347.503517][ T6011] usb 5-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 347.503539][ T6011] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.504765][ T6011] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.504792][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.504816][ T6011] usb 5-1: SerialNumber: syz [ 347.747593][ T6011] usb 5-1: 0:2 : does not exist [ 347.747685][ T6011] usb 5-1: unit 108 not found! [ 347.747702][ T6011] usb 5-1: unit 219 not found! [ 347.747718][ T6011] usb 5-1: unit 169 not found! [ 347.807995][T11787] tipc: Started in network mode [ 347.808023][T11787] tipc: Node identity ac14140f, cluster identity 4711 [ 347.808288][T11787] tipc: New replicast peer: 255.255.255.255 [ 347.822008][T11787] tipc: Enabled bearer , priority 10 [ 347.909712][ T6011] usb 5-1: USB disconnect, device number 32 [ 348.173507][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.237245][T11800] Attempt to restore checkpoint with obsolete wellknown handles [ 348.683813][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 348.766933][T11819] C: renamed from team_slave_0 (while UP) [ 348.814986][T11819] netlink: 'syz.6.2531': attribute type 1 has an invalid length. [ 348.815009][T11819] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2531'. [ 348.865754][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 348.865802][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 348.865826][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.910195][ T9] usb 3-1: config 0 descriptor?? [ 348.911172][T11804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.923775][ T822] tipc: Node number set to 2886997007 [ 349.339925][ T9] hid (null): global environment stack underflow [ 349.339949][ T9] hid (null): unknown global tag 0xd [ 349.393392][ T9] hid_parser_main: 7 callbacks suppressed [ 349.393415][ T9] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 349.393443][ T9] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 349.393468][ T9] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 349.393494][ T9] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 349.393530][ T9] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 349.393556][ T9] asus 0003:0B05:1ABE.001C: unknown main item tag 0x0 [ 349.393582][ T9] asus 0003:0B05:1ABE.001C: global environment stack underflow [ 349.393597][ T9] asus 0003:0B05:1ABE.001C: item 0 4 1 11 parsing failed [ 349.394329][ T9] asus 0003:0B05:1ABE.001C: Asus hid parse failed: -22 [ 349.399617][ T9] asus 0003:0B05:1ABE.001C: probe with driver asus failed with error -22 [ 349.562513][ T9] usb 3-1: USB disconnect, device number 20 [ 349.624554][T11842] overlayfs: workdir and upperdir must be separate subtrees [ 350.021581][ T6024] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 350.172130][ T6024] usb 6-1: Using ep0 maxpacket: 8 [ 350.174977][ T6024] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 350.175001][ T6024] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 350.175022][ T6024] usb 6-1: config 0 has no interface number 0 [ 350.175063][ T6024] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.175090][ T6024] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 350.175118][ T6024] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 350.176804][ T6024] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 350.176840][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 350.176861][ T6024] usb 6-1: Product: syz [ 350.282549][ T6024] usb 6-1: config 0 descriptor?? [ 350.285766][T11846] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.451640][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 350.601609][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 350.617270][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 350.617301][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.617380][ T9] usb 3-1: Product: syz [ 350.617396][ T9] usb 3-1: Manufacturer: syz [ 350.617410][ T9] usb 3-1: SerialNumber: syz [ 350.695808][ T9] usb 3-1: config 0 descriptor?? [ 350.748771][ T6024] usb 6-1: USB disconnect, device number 8 [ 350.921793][ T6011] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 351.091750][ T6011] usb 7-1: Using ep0 maxpacket: 32 [ 351.094468][ T6011] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 351.094486][ T6011] usb 7-1: config 0 has no interface number 0 [ 351.097229][ T6011] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 351.097256][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.097277][ T6011] usb 7-1: Product: syz [ 351.097290][ T6011] usb 7-1: Manufacturer: syz [ 351.097305][ T6011] usb 7-1: SerialNumber: syz [ 351.117829][ T9] airspy 3-1:0.0: Board ID: 00 [ 351.117847][ T9] airspy 3-1:0.0: Firmware version: [ 351.117889][ T6011] usb 7-1: config 0 descriptor?? [ 351.212666][ T6011] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 351.453311][ T6011] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 351.507511][ T6011] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 351.682456][T11865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.717964][T11865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.733100][ T9] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 351.752657][ T9] airspy 3-1:0.0: Registered as swradio24 [ 351.752676][ T9] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 351.760294][ T9] usb 3-1: USB disconnect, device number 21 [ 351.940076][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 352.013486][ T822] usb 7-1: USB disconnect, device number 5 [ 352.078877][ T822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 352.145595][ T822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 352.154146][ T822] quatech2 7-1:0.51: device disconnected [ 352.743214][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 352.750219][T11903] input: syz1 as /devices/virtual/input/input26 [ 352.750251][T11903] input: failed to attach handler leds to device input26, error: -6 [ 352.910493][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 352.933197][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 352.933566][ T9] usb 5-1: config 0 has no interface number 0 [ 352.933613][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 352.970899][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 352.970927][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.970946][ T9] usb 5-1: Product: syz [ 352.970960][ T9] usb 5-1: Manufacturer: syz [ 352.970986][ T9] usb 5-1: SerialNumber: syz [ 353.023128][ T9] usb 5-1: config 0 descriptor?? [ 353.023932][T11896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.273325][T11896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.491544][ T822] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 353.513089][ T38] audit: type=1326 audit(1776499304.836:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.6.2574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3324e7c819 code=0x0 [ 353.645791][ T822] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 353.645839][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.645870][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.645887][ T822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 353.647464][ T822] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 353.647490][ T822] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 353.647522][ T822] usb 6-1: Manufacturer: syz [ 353.657642][ T822] usb 6-1: config 0 descriptor?? [ 353.791717][ T6024] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 353.891349][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 353.905640][ T9] asix 5-1:0.188: probe with driver asix failed with error -71 [ 353.950530][ T9] usb 5-1: USB disconnect, device number 33 [ 353.971806][ T6024] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.971837][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.005374][ T6024] usb 3-1: config 0 descriptor?? [ 354.029018][ T6024] cp210x 3-1:0.0: cp210x converter detected [ 354.228454][ T822] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 354.248093][ T822] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 354.514701][ T6011] usb 6-1: USB disconnect, device number 9 [ 354.635367][ T6024] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 354.635425][ T6024] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 354.674861][ T6024] usb 3-1: cp210x converter now attached to ttyUSB0 [ 354.696212][ T6024] usb 3-1: USB disconnect, device number 22 [ 354.753919][ T6024] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 354.754775][ T6024] cp210x 3-1:0.0: device disconnected [ 354.920821][T11926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2580'. [ 355.329290][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2586'. [ 355.361709][ T6011] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 355.513114][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 355.527678][ T6011] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 355.527723][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.527744][ T6011] usb 5-1: Product: syz [ 355.527759][ T6011] usb 5-1: Manufacturer: syz [ 355.527772][ T6011] usb 5-1: SerialNumber: syz [ 355.588162][ T6011] usb 5-1: config 0 descriptor?? [ 355.609712][ T6011] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 355.699197][T11950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2590'. [ 356.617246][ T6011] gspca_sonixj: reg_w1 err -71 [ 356.651713][ T6011] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 356.696594][ T6011] usb 5-1: USB disconnect, device number 34 [ 356.842463][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 356.859490][T11977] kvm: apic: phys broadcast and lowest prio [ 356.991810][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 356.999651][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 356.999692][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.999709][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.999727][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.999744][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.999774][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.999792][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.300887][ T10] usb 3-1: usb_control_msg returned -32 [ 357.300936][ T10] usbtmc 3-1:16.0: can't read capabilities [ 357.344105][T11984] batadv_slave_0: entered promiscuous mode [ 357.349089][T11984] batadv_slave_0: left promiscuous mode [ 357.694586][T11996] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 357.890664][ T10] usb 3-1: USB disconnect, device number 23 [ 357.950381][ T822] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 358.011597][ T6011] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 358.106168][ T822] usb 7-1: Using ep0 maxpacket: 16 [ 358.110837][ T822] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.110877][ T822] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.110910][ T822] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 358.110933][ T822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.166498][ T6011] usb 5-1: Using ep0 maxpacket: 16 [ 358.170477][ T6011] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 358.170670][ T822] usb 7-1: config 0 descriptor?? [ 358.209076][ T6011] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 358.209108][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.209130][ T6011] usb 5-1: Product: syz [ 358.209146][ T6011] usb 5-1: Manufacturer: syz [ 358.209162][ T6011] usb 5-1: SerialNumber: syz [ 358.265264][ T6011] usb 5-1: config 0 descriptor?? [ 358.297482][ T6011] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 358.343270][ T6011] usb 5-1: Detected FT232R [ 358.824530][ T822] mcp2221 0003:04D8:00DD.001E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 359.112777][ T6011] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 359.180637][ T6011] usb 5-1: USB disconnect, device number 35 [ 359.226767][ T822] usb 7-1: USB disconnect, device number 6 [ 359.377082][ T6011] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 359.390133][ T6011] ftdi_sio 5-1:0.0: device disconnected [ 359.717418][T12031] syzkaller1: entered promiscuous mode [ 359.717442][T12031] syzkaller1: entered allmulticast mode [ 359.833911][T12037] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 360.432033][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2637'. [ 360.432143][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2637'. [ 360.771621][ T6011] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 360.900375][T12071] input: syz0 as /devices/virtual/input/input27 [ 360.924266][ T6011] usb 5-1: config 1 interface 0 has no altsetting 0 [ 360.928517][ T6011] usb 5-1: string descriptor 0 read error: -22 [ 360.928649][ T6011] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 360.928674][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.983104][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 361.164293][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.165690][ T9] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 361.165713][ T9] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 361.165730][ T9] usb 3-1: config 63 has no interface number 0 [ 361.165755][ T9] usb 3-1: config 63 interface 66 has no altsetting 0 [ 361.168795][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 361.168822][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.168849][ T9] usb 3-1: Product: syz [ 361.168864][ T9] usb 3-1: Manufacturer: syz [ 361.168879][ T9] usb 3-1: SerialNumber: syz [ 361.588737][ T9] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 361.589385][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 361.610742][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 361.627502][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 361.641603][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 361.642187][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 361.642267][ T9] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 361.642300][ T9] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 361.693949][ T9] usb 3-1: USB disconnect, device number 24 [ 362.162470][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 362.365230][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 362.366949][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 362.387757][ T9] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 362.387785][ T9] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 362.387805][ T9] usb 3-1: config 63 has no interface number 0 [ 362.387839][ T9] usb 3-1: config 63 interface 66 has no altsetting 0 [ 362.430006][ T9] usb 3-1: string descriptor 0 read error: -22 [ 362.430135][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 362.430154][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.476911][ T9] uvcvideo 3-1:63.66: Found UVC 0.07 device (174f:8acf) [ 362.584286][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584319][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584344][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584370][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584393][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584417][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584438][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584461][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584484][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.584508][ T6011] glorious 0003:258A:0033.001F: unknown main item tag 0x0 [ 362.678917][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC error code control 6 on unit 1: -71 (exp. 1). [ 362.708408][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 362.708860][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 362.709366][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 362.709833][ T9] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 362.709901][ T9] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 362.709920][ T9] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 362.779270][ T9] usb 3-1: USB disconnect, device number 25 [ 362.824734][ T6011] glorious 0003:258A:0033.001F: hidraw0: USB HID vff.7f Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 362.876346][ T6011] usb 5-1: USB disconnect, device number 36 [ 363.107490][T12086] fido_id[12086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 363.424297][ T1244] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 363.581706][ T1244] usb 7-1: Using ep0 maxpacket: 8 [ 363.584474][ T1244] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.584502][ T1244] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.584528][ T1244] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.584551][ T1244] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.584593][ T1244] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.584616][ T1244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.601586][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 363.790378][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 363.794115][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 363.794140][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.834741][ T9] usb 3-1: config 0 descriptor?? [ 363.900935][ T1244] usb 7-1: GET_CAPABILITIES returned 0 [ 363.900980][ T1244] usbtmc 7-1:16.0: can't read capabilities [ 364.056507][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 364.076859][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.092461][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 364.092514][ T9] usb 3-1: media controller created [ 364.142692][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.143159][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.171260][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.187725][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.187799][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.187875][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.189669][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.189743][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.189849][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.190233][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.190300][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.279555][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.279635][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.279710][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.334982][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.335039][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.335084][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.396493][ T10] usb 7-1: USB disconnect, device number 7 [ 364.733851][ T9] az6027: usb out operation failed. (-71) [ 364.733869][ T9] stb0899_attach: Driver disabled by Kconfig [ 364.733879][ T9] az6027: no front-end attached [ 364.733879][ T9] [ 364.737860][ T9] az6027: usb out operation failed. (-71) [ 364.737877][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 364.784664][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 364.794103][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 364.794125][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 364.822403][ T9] usb 3-1: USB disconnect, device number 26 [ 365.060421][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 365.283928][T12114] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2661'. [ 365.991853][ T1244] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 366.144216][ T1244] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.144250][ T1244] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.144270][ T1244] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.144289][ T1244] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.144315][ T1244] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 366.144330][ T1244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.150698][ T1244] usb 3-1: config 0 descriptor?? [ 366.626443][ T1244] sony 0003:054C:0374.0020: reserved main item tag 0xe [ 366.693038][T12150] loop5: detected capacity change from 0 to 7 [ 366.713284][ T1244] sony 0003:054C:0374.0020: hiddev0,hidraw0: USB HID v0.20 Device [HID 054c:0374] on usb-dummy_hcd.2-1/input0 [ 366.713317][ T1244] sony 0003:054C:0374.0020: failed to claim input [ 366.751203][T12150] Dev loop5: unable to read RDB block 7 [ 366.751241][T12150] loop5: unable to read partition table [ 366.752658][T12150] loop5: partition table beyond EOD, truncated [ 366.752709][T12150] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 366.846873][ T1244] usb 3-1: USB disconnect, device number 27 [ 367.246304][T12166] loop8: detected capacity change from 0 to 7 [ 367.276929][T12166] Dev loop8: unable to read RDB block 7 [ 367.276970][T12166] loop8: AHDI p1 p2 [ 367.276993][T12166] loop8: partition table partially beyond EOD, truncated [ 367.277204][T12166] loop8: p1 start 1702000233 is beyond EOD, truncated [ 367.425272][T12171] netlink: 'syz.2.2687': attribute type 83 has an invalid length. [ 367.644773][T12167] syzkaller1: entered promiscuous mode [ 367.644798][T12167] syzkaller1: entered allmulticast mode [ 367.808913][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 368.190507][T12191] overlayfs: overlapping lowerdir path [ 368.309539][T12198] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2696'. [ 368.389986][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2699'. [ 368.528585][T12206] netlink: 762 bytes leftover after parsing attributes in process `syz.6.2702'. [ 369.489536][T12248] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2719'. [ 369.661552][ T6011] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 369.814460][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.814482][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.814496][ T6011] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.814523][ T6011] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 369.814538][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.887558][ T37] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 369.927297][ T6011] usb 5-1: config 0 descriptor?? [ 370.057319][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.057357][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.057434][ T37] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.057473][ T37] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10 [ 370.057495][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.144521][ T37] usb 7-1: config 0 descriptor?? [ 370.396404][ T6011] kye 0003:0458:501A.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 370.397306][ T6011] hid_parser_main: 4003 callbacks suppressed [ 370.397381][ T6011] kye 0003:0458:501A.0021: unknown main item tag 0x5 [ 370.478411][ T6011] kye 0003:0458:501A.0021: hidraw0: USB HID vff.fc Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 370.478444][ T6011] kye 0003:0458:501A.0021: tablet-enabling feature report not found [ 370.478459][ T6011] kye 0003:0458:501A.0021: tablet enabling failed [ 370.588181][ T10] usb 5-1: USB disconnect, device number 37 [ 370.636177][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636212][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636239][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636265][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636302][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636333][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636357][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636381][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.636405][ T37] dragonrise 0003:0079:0011.0022: unknown main item tag 0x0 [ 370.763234][ T37] dragonrise 0003:0079:0011.0022: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.6-1/input0 [ 370.837706][ T37] usb 7-1: USB disconnect, device number 8 [ 370.950253][T12270] fido_id[12270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 371.196992][T12273] fido_id[12273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 372.171568][ T6024] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 372.321897][ T6024] usb 7-1: Using ep0 maxpacket: 8 [ 372.324735][ T6024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.324779][ T6024] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.324804][ T6024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.374559][ T6024] usb 7-1: config 0 descriptor?? [ 372.613767][ T6024] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 372.818379][ T37] usb 7-1: USB disconnect, device number 9 [ 372.818488][ C1] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 372.893712][ T38] audit: type=1326 audit(1776499324.206:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bb78c819 code=0x7ffc0000 [ 372.893760][ T38] audit: type=1326 audit(1776499324.216:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bb78c819 code=0x7ffc0000 [ 372.893797][ T38] audit: type=1326 audit(1776499324.216:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe9bb78c819 code=0x7ffc0000 [ 372.893833][ T38] audit: type=1326 audit(1776499324.216:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bb78c819 code=0x7ffc0000 [ 372.986880][ T38] audit: type=1326 audit(1776499324.306:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12311 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bb78c819 code=0x7ffc0000 [ 373.643540][ T822] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 373.801615][ T822] usb 5-1: Using ep0 maxpacket: 8 [ 373.809859][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.809901][ T822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 373.809945][ T822] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 373.809969][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.837179][ T822] usb 5-1: config 0 descriptor?? [ 374.001893][ T6011] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 374.211560][ T6011] usb 6-1: Using ep0 maxpacket: 16 [ 374.228494][ T6011] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 374.228545][ T6011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.245427][ T6011] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 374.245475][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.245778][ T6011] usb 6-1: Product: syz [ 374.245818][ T6011] usb 6-1: Manufacturer: syz [ 374.245994][ T6011] usb 6-1: SerialNumber: syz [ 374.306438][ T6011] usb 6-1: config 0 descriptor?? [ 374.330670][ T6011] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 374.330692][ T6011] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 374.390241][ T822] sony 0003:054C:0268.0023: hiddev0,hidraw0: USB HID vff.fc Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 374.390278][ T822] sony 0003:054C:0268.0023: failed to claim input [ 374.608016][ T822] usb 5-1: USB disconnect, device number 38 [ 374.631804][T12349] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2762'. [ 374.631826][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2762'. [ 374.936114][ T6011] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 374.937054][ T6011] em28xx 6-1:0.0: Config register raw data: 0x41 [ 375.021552][ T6024] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 375.156312][ T822] usb 6-1: USB disconnect, device number 10 [ 375.168780][ T822] em28xx 6-1:0.0: Disconnecting em28xx [ 375.191611][ T6024] usb 3-1: Using ep0 maxpacket: 32 [ 375.193438][ T6024] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 375.193459][ T6024] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 375.193477][ T6024] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 375.193517][ T6024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.193536][ T6024] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.193557][ T6024] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 375.193593][ T6024] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 375.193612][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.319846][ T6024] usb 3-1: config 0 descriptor?? [ 375.346087][ T822] em28xx 6-1:0.0: Freeing device [ 375.361558][ T6011] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 375.511612][ T6011] usb 7-1: Using ep0 maxpacket: 16 [ 375.521322][ T6011] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 375.521346][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.521362][ T6011] usb 7-1: Product: syz [ 375.521373][ T6011] usb 7-1: Manufacturer: syz [ 375.521385][ T6011] usb 7-1: SerialNumber: syz [ 375.608728][ T6024] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 375.784225][T12368] syz.5.2770 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 375.838864][ C0] usblp0: nonzero read bulk status received: -71 [ 375.847377][ T6024] usb 3-1: USB disconnect, device number 28 [ 376.070353][T12352] usblp0: removed [ 376.580729][ T6011] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 376.592943][ T6011] usb 7-1: USB disconnect, device number 10 [ 376.771640][ T822] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 376.924273][ T822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.924300][ T822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.925602][ T822] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 376.925630][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 376.925644][ T822] usb 5-1: SerialNumber: syz [ 377.164766][ T822] usb 5-1: 0:2 : does not exist [ 377.300000][ T822] usb 5-1: USB disconnect, device number 39 [ 377.399403][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.501621][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 377.611529][ T6024] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 377.657821][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 377.657849][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.657867][ T10] usb 7-1: Product: syz [ 377.657876][ T10] usb 7-1: Manufacturer: syz [ 377.657885][ T10] usb 7-1: SerialNumber: syz [ 377.691518][ T10] usb 7-1: config 0 descriptor?? [ 377.784679][ T6024] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 377.784707][ T6024] usb 6-1: config 0 has no interface number 0 [ 377.784808][ T6024] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 377.784835][ T6024] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 377.784862][ T6024] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 377.786913][ T6024] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 377.786947][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 377.787026][ T6024] usb 6-1: Product: syz [ 377.787043][ T6024] usb 6-1: SerialNumber: syz [ 377.966174][ T6024] usb 6-1: config 0 descriptor?? [ 377.987437][ T6024] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 378.026307][ T6024] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input29 [ 378.193151][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 378.537035][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.543363][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.737482][ T10] usb 7-1: Firmware version (0.0) predates our first public release. [ 378.737511][ T10] usb 7-1: Please update to version 0.2 or newer [ 378.843751][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.848519][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.848751][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.848983][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.849222][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.850754][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.850974][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.851185][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.851398][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.853443][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.862675][ T821] usb 6-1: USB disconnect, device number 11 [ 378.862832][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 379.039779][ T821] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 379.439080][ T10] usb 7-1: USB disconnect, device number 11 [ 379.819137][T12430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2794'. [ 380.216642][T12446] Bluetooth: MGMT ver 1.23 [ 380.753224][T12464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.831687][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 380.984313][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.984340][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.985626][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.985653][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.985674][ T10] usb 7-1: SerialNumber: syz [ 381.254757][ T10] usb 7-1: 0:2 : does not exist [ 381.382808][ T10] usb 7-1: USB disconnect, device number 12 [ 381.580610][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.221600][ T5890] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 382.371611][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 382.373623][ T5890] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 382.373656][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 382.373679][ T5890] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 382.373694][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.387650][ T5890] usb 3-1: config 0 descriptor?? [ 382.414405][ T822] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 382.500213][ T10] kernel write not supported for file /uinput (pid: 10 comm: kworker/0:1) [ 382.571580][ T822] usb 6-1: Using ep0 maxpacket: 32 [ 382.574038][ T822] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 382.574065][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.614830][ T822] usb 6-1: config 0 descriptor?? [ 382.726155][T12526] Bluetooth: hci1: invalid length 3, exp 2 for type 3 [ 382.833207][ T822] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 382.891391][ T5890] hid_parser_main: 67 callbacks suppressed [ 382.891538][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.891610][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.891701][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.891793][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.891857][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.891923][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.891982][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.892055][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.892120][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.892184][ T5890] greenasia 0003:0E8F:0012.0024: unknown main item tag 0x0 [ 382.955300][ T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 382.957122][ T822] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 382.957304][ T822] usb 6-1: media controller created [ 382.967544][ T5890] greenasia 0003:0E8F:0012.0024: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 382.967646][ T5890] greenasia 0003:0E8F:0012.0024: no inputs found [ 383.077803][ T6011] usb 3-1: USB disconnect, device number 29 [ 383.114224][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.117342][T12531] fido_id[12531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 383.550050][ T10] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.701927][ T6011] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 383.803222][ T822] az6027: usb out operation failed. (-71) [ 383.803240][ T822] stb0899_attach: Driver disabled by Kconfig [ 383.803249][ T822] az6027: no front-end attached [ 383.803249][ T822] [ 383.803598][ T822] az6027: usb out operation failed. (-71) [ 383.803612][ T822] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 383.808597][ T822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 383.877631][ T6011] usb 5-1: config 0 has no interfaces? [ 383.878741][ T6011] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.878770][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 383.878784][ T6011] usb 5-1: SerialNumber: syz [ 383.911223][ T822] dvb-usb: schedule remote query interval to 400 msecs. [ 383.911243][ T822] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 383.931621][ T821] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 383.933453][ T6011] usb 5-1: config 0 descriptor?? [ 383.963602][ T822] usb 6-1: USB disconnect, device number 12 [ 384.091878][ T821] usb 7-1: Using ep0 maxpacket: 8 [ 384.094785][ T821] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 384.098397][ T821] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 384.098423][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.098443][ T821] usb 7-1: Product: syz [ 384.098458][ T821] usb 7-1: Manufacturer: syz [ 384.098472][ T821] usb 7-1: SerialNumber: syz [ 384.156371][ T821] usb 7-1: config 0 descriptor?? [ 384.167670][ T821] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 384.167724][ T821] usb 7-1: setting power ON [ 384.188411][ T821] dvb-usb: bulk message failed: -22 (2/0) [ 384.202648][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.203323][ T821] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 384.203373][ T821] usb 7-1: media controller created [ 384.239678][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.403762][ T6011] usb 5-1: USB disconnect, device number 40 [ 384.479360][ T821] usb 7-1: selecting invalid altsetting 6 [ 384.479382][ T821] usb 7-1: digital interface selection failed (-22) [ 384.479398][ T821] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 384.480610][ T821] usb 7-1: setting power OFF [ 384.480787][ T821] dvb-usb: bulk message failed: -22 (2/0) [ 384.480804][ T821] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 384.480815][ T821] (NULL device *): no alternate interface [ 384.522932][ T822] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 384.604339][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 384.707820][T12551] dvmrp0: entered allmulticast mode [ 384.753413][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 384.772154][ T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 384.772183][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.772203][ T10] usb 3-1: Product: syz [ 384.772217][ T10] usb 3-1: Manufacturer: syz [ 384.772230][ T10] usb 3-1: SerialNumber: syz [ 384.820971][ T10] usb 3-1: config 0 descriptor?? [ 384.857136][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 384.896685][ T821] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 384.921358][ T821] usb 7-1: USB disconnect, device number 13 [ 385.364725][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'. [ 385.717963][T12573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.852388][ T10] gspca_ov534_9: reg_w failed -71 [ 386.171904][ T10] gspca_ov534_9: Unknown sensor 0000 [ 386.171993][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 386.205131][ T821] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 386.233706][ T10] usb 3-1: USB disconnect, device number 30 [ 386.384274][ T821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 386.384889][ T821] usb 6-1: not running at top speed; connect to a high speed hub [ 386.386133][ T821] usb 6-1: config 61 has an invalid interface number: 37 but max is 0 [ 386.386166][ T821] usb 6-1: config 61 has no interface number 0 [ 386.386301][ T821] usb 6-1: config 61 interface 37 has no altsetting 0 [ 386.389201][ T821] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 386.389229][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.389251][ T821] usb 6-1: Product: syz [ 386.389266][ T821] usb 6-1: Manufacturer: syz [ 386.389282][ T821] usb 6-1: SerialNumber: syz [ 386.584831][T12588] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2864'. [ 386.955190][T12592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.959988][ T821] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 387.322604][ T32] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 387.481589][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 387.485759][ T32] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 387.485788][ T32] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 387.485811][ T32] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 387.485834][ T32] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 387.485855][ T32] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 387.485878][ T32] usb 5-1: config 0 has no interface number 0 [ 387.485926][ T32] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 387.485956][ T32] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 387.485981][ T32] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 387.486020][ T32] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.486050][ T32] usb 5-1: config 0 interface 125 has no altsetting 0 [ 387.486069][ T32] usb 5-1: config 0 interface 125 has no altsetting 2 [ 387.490625][ T32] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 387.490653][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.490674][ T32] usb 5-1: Product: syz [ 387.490689][ T32] usb 5-1: Manufacturer: syz [ 387.490702][ T32] usb 5-1: SerialNumber: syz [ 387.530600][ T821] gp8psk: usb out operation failed. [ 387.530615][ T821] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 387.530649][ T821] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 387.675620][ T32] usb 5-1: config 0 descriptor?? [ 387.692653][ T821] usb 6-1: USB disconnect, device number 13 [ 387.700362][ T32] usb 5-1: selecting invalid altsetting 2 [ 388.206159][T12610] syzkaller1: entered promiscuous mode [ 388.206179][T12610] syzkaller1: entered allmulticast mode [ 388.759174][ T32] usb 5-1: USB disconnect, device number 41 [ 388.957708][T12630] syzkaller1: entered promiscuous mode [ 388.957731][T12630] syzkaller1: entered allmulticast mode [ 389.081597][ T5890] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 389.232821][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 389.234979][ T5890] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 389.235015][ T5890] usb 3-1: config 0 has no interface number 0 [ 389.238292][ T5890] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 389.238311][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.238325][ T5890] usb 3-1: Product: syz [ 389.238334][ T5890] usb 3-1: Manufacturer: syz [ 389.238345][ T5890] usb 3-1: SerialNumber: syz [ 389.260028][ T5890] usb 3-1: config 0 descriptor?? [ 390.284139][ T6024] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 390.328841][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 390.328874][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 390.330760][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 390.331044][ T5890] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 390.378739][ T5890] usb 3-1: USB disconnect, device number 31 [ 390.444372][ T6024] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 390.444416][ T6024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.444442][ T6024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.444464][ T6024] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 390.447481][ T6024] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 390.447506][ T6024] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 390.447525][ T6024] usb 7-1: Manufacturer: syz [ 390.543093][ T6024] usb 7-1: config 0 descriptor?? [ 391.016883][ T6024] hid_parser_main: 29 callbacks suppressed [ 391.016905][ T6024] appleir 0003:05AC:8243.0026: unknown main item tag 0x0 [ 391.089199][ T6024] appleir 0003:05AC:8243.0026: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 391.443648][ T32] usb 7-1: USB disconnect, device number 14 [ 391.499468][T12690] fido_id[12690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 391.876974][T12702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.054900][T12707] kvm: apic: phys broadcast and lowest prio [ 392.581590][ T5890] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 392.743722][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 392.746249][ T5890] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 392.746291][ T5890] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.746310][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.746332][ T5890] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.746353][ T5890] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.746387][ T5890] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.746407][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.057457][ T5890] usb 5-1: usb_control_msg returned -32 [ 393.057504][ T5890] usbtmc 5-1:16.0: can't read capabilities [ 393.362816][ T821] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 393.373857][T12748] pim6reg1: entered promiscuous mode [ 393.373872][T12748] pim6reg1: entered allmulticast mode [ 393.416756][T12749] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 393.511592][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 393.513497][ T821] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 393.513520][ T821] usb 7-1: config 0 has no interface number 0 [ 393.513557][ T821] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 393.515794][ T821] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 393.515817][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.515835][ T821] usb 7-1: Product: syz [ 393.515848][ T821] usb 7-1: Manufacturer: syz [ 393.515860][ T821] usb 7-1: SerialNumber: syz [ 393.593448][ T821] usb 7-1: config 0 descriptor?? [ 393.599025][T12738] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 393.618770][ T32] usb 5-1: USB disconnect, device number 42 [ 393.810330][T12738] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 394.416715][ T821] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 394.416903][ T821] asix 7-1:0.188: probe with driver asix failed with error -71 [ 394.465849][ T821] usb 7-1: USB disconnect, device number 15 [ 394.621823][ T5890] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 394.781587][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 394.783470][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.783500][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.783514][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 394.783541][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.783556][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.788320][ T5890] usb 5-1: config 0 descriptor?? [ 395.260809][ T5890] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 395.269465][ T5890] microsoft 0003:045E:07DA.0027: report is too long [ 395.269496][ T5890] microsoft 0003:045E:07DA.0027: item 0 4 0 8 parsing failed [ 395.271732][ T5890] microsoft 0003:045E:07DA.0027: parse failed [ 395.272076][ T5890] microsoft 0003:045E:07DA.0027: probe with driver microsoft failed with error -22 [ 395.428915][ T9] usb 5-1: USB disconnect, device number 43 [ 395.821630][ T5890] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 395.973834][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 395.980742][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.980766][ T5890] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.033526][ T5890] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 396.033553][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.033572][ T5890] usb 3-1: Product: syz [ 396.033586][ T5890] usb 3-1: Manufacturer: syz [ 396.033601][ T5890] usb 3-1: SerialNumber: syz [ 396.074723][ T5890] usb 3-1: config 0 descriptor?? [ 396.426983][ T6024] usb 3-1: USB disconnect, device number 32 [ 396.459453][T12677] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.610877][T12786] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2939'. [ 396.765252][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.821868][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.827761][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.884042][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.939173][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.376691][T12677] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.552991][ T32] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 397.715588][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 397.717471][ T32] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 397.717493][ T32] usb 3-1: config 0 has no interface number 0 [ 397.717535][ T32] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 397.717558][ T32] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 397.719753][ T32] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 397.719780][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.719799][ T32] usb 3-1: Product: syz [ 397.719814][ T32] usb 3-1: Manufacturer: syz [ 397.719827][ T32] usb 3-1: SerialNumber: syz [ 397.800339][ T32] usb 3-1: config 0 descriptor?? [ 397.812786][T12802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.812958][T12802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.904299][T12806] Bluetooth: hci1: unsupported parameter 496 [ 397.904320][T12806] Bluetooth: hci1: unsupported parameter 496 [ 398.018858][T12802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.018996][T12802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.288847][T12677] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.343647][T12809] syzkaller1: entered promiscuous mode [ 398.343664][T12809] syzkaller1: entered allmulticast mode [ 398.431694][ T32] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 398.431731][ T32] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 398.431961][ T32] asix 3-1:0.251: probe with driver asix failed with error -71 [ 398.478099][ T32] usb 3-1: USB disconnect, device number 33 [ 398.795328][T12825] Bluetooth: MGMT ver 1.23 [ 398.873775][T12677] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.000253][ T5819] Bluetooth: hci0: command tx timeout [ 399.876257][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2962'. [ 399.879943][T12841] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2962'. [ 400.321631][ T6024] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 400.481660][ T6024] usb 7-1: Using ep0 maxpacket: 16 [ 400.489500][ T6024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.489533][ T6024] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.489573][ T6024] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 400.489597][ T6024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.508946][ T6024] usb 7-1: config 0 descriptor?? [ 400.732319][T12677] bridge_slave_1: left allmulticast mode [ 400.732345][T12677] bridge_slave_1: left promiscuous mode [ 400.732580][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.772721][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.773703][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.837320][T12677] bridge_slave_0: left allmulticast mode [ 400.837353][T12677] bridge_slave_0: left promiscuous mode [ 400.837576][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.963149][T12677] dvmrp0: left allmulticast mode [ 400.983679][ T6024] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x0 [ 400.983701][ T6024] hid-multitouch 0003:1FD2:6007.0028: unknown main item tag 0x4 [ 401.032495][ T6024] hid-multitouch 0003:1FD2:6007.0028: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 401.077865][ T5819] Bluetooth: hci0: command tx timeout [ 401.185284][ T6024] usb 7-1: USB disconnect, device number 16 [ 401.954089][T12677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.012704][T12677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.056311][T12677] bond0 (unregistering): Released all slaves [ 402.133544][ T5485] 8021q: adding VLAN 0 to HW filter on device eth5 [ 402.771610][ T32] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 402.916770][T12787] chnl_net:caif_netlink_parms(): no params data found [ 402.923186][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 402.926290][ T32] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 402.926313][ T32] usb 5-1: config 0 has no interface number 0 [ 402.926353][ T32] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.930751][ T32] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 402.930777][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.930795][ T32] usb 5-1: Product: syz [ 402.930808][ T32] usb 5-1: Manufacturer: syz [ 402.930821][ T32] usb 5-1: SerialNumber: syz [ 402.931547][ T822] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 403.058840][ T32] usb 5-1: config 0 descriptor?? [ 403.125226][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.125286][ T822] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 403.125309][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.139751][ T32] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 403.139785][ T32] em28xx 5-1:0.132: Video interface 132 found: [ 403.152591][ T5819] Bluetooth: hci0: command tx timeout [ 403.213553][ T822] usb 3-1: config 0 descriptor?? [ 403.290387][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 403.336278][T12910] input: syz0 as /devices/virtual/input/input31 [ 403.572768][ T32] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 403.645924][ T822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 403.647388][ T822] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.863506][ T822] pwc: recv_control_msg error -71 req 04 val 1000 [ 403.864014][ T822] pwc: recv_control_msg error -71 req 04 val 1300 [ 403.864562][ T822] pwc: recv_control_msg error -71 req 04 val 1400 [ 403.865009][ T822] pwc: recv_control_msg error -71 req 02 val 2000 [ 403.869173][ T822] pwc: recv_control_msg error -71 req 02 val 2100 [ 403.877535][ T822] pwc: recv_control_msg error -71 req 04 val 1500 [ 403.899235][ T822] pwc: recv_control_msg error -71 req 02 val 2500 [ 403.907345][ T822] pwc: recv_control_msg error -71 req 02 val 2400 [ 403.909759][ T822] pwc: recv_control_msg error -71 req 02 val 2600 [ 403.940054][ T822] pwc: recv_control_msg error -71 req 02 val 2900 [ 403.940521][ T822] pwc: recv_control_msg error -71 req 02 val 2800 [ 403.941314][ T822] pwc: recv_control_msg error -71 req 04 val 1100 [ 403.960476][ T822] pwc: recv_control_msg error -71 req 04 val 1200 [ 404.036319][ T822] pwc: Registered as video103. [ 404.046798][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 404.159729][ T822] usb 3-1: USB disconnect, device number 34 [ 404.242461][ T32] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 404.242493][ T32] em28xx 5-1:0.132: board has no eeprom [ 404.308774][ T32] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 404.308803][ T32] em28xx 5-1:0.132: analog set to bulk mode. [ 404.309169][ T5890] em28xx 5-1:0.132: Registering V4L2 extension [ 404.443174][ T5890] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 404.480653][ T5890] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 404.481062][ T5890] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 404.483298][ T5890] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 404.649844][ T32] usb 5-1: USB disconnect, device number 44 [ 404.671382][ T32] em28xx 5-1:0.132: Disconnecting em28xx [ 404.847729][ T5890] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 404.847750][ T5890] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 404.847762][ T5890] em28xx 5-1:0.132: No AC97 audio processor [ 404.897923][ T5890] videodev: could not get a free minor [ 404.897943][ T5890] em28xx 5-1:0.132: unable to register video device (error=-23). [ 404.898254][ T5890] em28xx 5-1:0.132: Remote control support is not available for this card. [ 404.899856][ T32] em28xx 5-1:0.132: Closing input extension [ 404.999447][ T5485] 8021q: adding VLAN 0 to HW filter on device eth6 [ 405.234807][ T5819] Bluetooth: hci0: command tx timeout [ 405.435892][ T32] em28xx 5-1:0.132: Freeing device [ 405.531587][ T822] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 405.653667][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.654001][T12787] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.654263][T12787] bridge_slave_0: entered allmulticast mode [ 405.669824][T12787] bridge_slave_0: entered promiscuous mode [ 405.694369][ T822] usb 3-1: config 1 interface 0 has no altsetting 0 [ 405.715667][ T822] usb 3-1: string descriptor 0 read error: -22 [ 405.715803][ T822] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 405.715826][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.728770][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.735312][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.736062][T12787] bridge_slave_1: entered allmulticast mode [ 405.787688][T12787] bridge_slave_1: entered promiscuous mode [ 406.551635][T12677] hsr_slave_0: left promiscuous mode [ 406.591759][T12677] hsr_slave_1: left promiscuous mode [ 406.593901][T12677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.593927][T12677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.635026][T12677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.635054][T12677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.729759][T12677] veth1_macvtap: left promiscuous mode [ 406.729862][T12677] veth0_macvtap: left promiscuous mode [ 406.730256][T12677] veth1_vlan: left promiscuous mode [ 406.730449][T12677] veth0_vlan: left promiscuous mode [ 406.804411][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804459][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804481][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804503][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804526][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804549][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804582][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804604][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804625][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.804646][ T822] glorious 0003:258A:0033.0029: unknown main item tag 0x0 [ 406.957287][ T822] glorious 0003:258A:0033.0029: hidraw0: USB HID vff.7f Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 406.981632][ T822] usb 3-1: USB disconnect, device number 35 [ 407.160276][T12972] fido_id[12972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 407.243522][T12974] loop8: detected capacity change from 0 to 7 [ 407.253462][T12974] Dev loop8: unable to read RDB block 7 [ 407.253610][T12974] loop8: AHDI p1 p2 [ 407.253637][T12974] loop8: partition table partially beyond EOD, truncated [ 407.253900][T12974] loop8: p1 start 1702000233 is beyond EOD, truncated [ 407.410522][ T6242] udevd[6242]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 407.571614][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 407.774260][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 407.775467][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.775491][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 407.775548][ T10] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 407.775580][ T10] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 407.775605][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 407.775622][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 407.778924][ T10] usb 5-1: string descriptor 0 read error: -22 [ 407.779083][ T10] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 407.779101][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.333168][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 408.333208][ T10] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 408.333226][ T10] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 408.457769][ T38] audit: type=1800 audit(1776499359.776:27): pid=12983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3006" name="file0" dev="tmpfs" ino=4141 res=0 errno=0 [ 408.772797][T12677] team0 (unregistering): Port device team_slave_1 removed [ 408.832275][T12677] team0 (unregistering): Port device team_slave_0 removed [ 408.925809][ T10] usb 5-1: USB disconnect, device number 45 [ 408.981569][ T5890] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 409.134855][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 409.139439][ T5890] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 409.139472][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.139487][ T5890] usb 3-1: Product: syz [ 409.139498][ T5890] usb 3-1: Manufacturer: syz [ 409.139508][ T5890] usb 3-1: SerialNumber: syz [ 409.186522][ T5890] usb 3-1: config 0 descriptor?? [ 409.201044][ T5890] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 409.300380][T12787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.328491][T12787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.599722][T12787] team0: Port device team_slave_0 added [ 409.617840][T12787] team0: Port device team_slave_1 added [ 409.803679][T12787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.803692][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.803748][T12787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.817639][T12787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.817838][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.818057][T12787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.017301][T12787] hsr_slave_0: entered promiscuous mode [ 410.019392][T12787] hsr_slave_1: entered promiscuous mode [ 410.310836][ T6024] usb 3-1: USB disconnect, device number 36 [ 411.200897][ T5485] 8021q: adding VLAN 0 to HW filter on device eth7 [ 412.361183][T12787] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 412.405237][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.407489][ T5485] 8021q: adding VLAN 0 to HW filter on device eth8 [ 412.408603][T12787] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.454802][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.470020][T12787] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.604466][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.619944][T12787] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 412.666395][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.884845][ T5890] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 412.994757][T12787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.042542][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 413.044460][ T5890] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 413.046825][ T5890] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 413.046854][ T5890] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 413.046868][ T5890] usb 7-1: Product: syz [ 413.046877][ T5890] usb 7-1: Manufacturer: syz [ 413.046886][ T5890] usb 7-1: SerialNumber: syz [ 413.350794][ T5890] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 413.350819][ T5890] usb 7-1: Handspring Visor / Palm OS: port 48, is for unknown use [ 413.350839][ T5890] usb 7-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 413.350857][ T5890] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 413.469282][T12787] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.562408][ T5890] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 413.562482][ T5890] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 413.565469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.565622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.667435][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.667585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.704621][ T5890] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 413.737289][ T5890] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 413.764352][ T5890] usb 7-1: USB disconnect, device number 17 [ 413.790233][ T5890] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 413.837946][ T5890] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 413.840349][ T5890] visor 7-1:1.0: device disconnected [ 414.534261][T12787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.762435][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 414.924142][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.924179][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.924204][ T10] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 414.924219][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.928387][ T10] usb 7-1: config 0 descriptor?? [ 415.345305][ T10] hid_parser_main: 4001 callbacks suppressed [ 415.345328][ T10] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 415.351185][ T10] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 415.400401][T12787] veth0_vlan: entered promiscuous mode [ 415.442730][T12787] veth1_vlan: entered promiscuous mode [ 415.567143][ T10] cp2112 0003:10C4:EA90.002A: error requesting version [ 415.616130][ T10] cp2112 0003:10C4:EA90.002A: probe with driver cp2112 failed with error -71 [ 415.645717][ T10] usb 7-1: USB disconnect, device number 18 [ 415.674855][T13124] fido_id[13124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 415.791972][T12787] veth0_macvtap: entered promiscuous mode [ 415.813811][T12787] veth1_macvtap: entered promiscuous mode [ 415.854150][T12787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.879796][T12787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.915415][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.915639][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.915676][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.915710][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.877803][ T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.877823][ T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.060536][ T8352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.060558][ T8352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.519552][T13157] Bluetooth: MGMT ver 1.23 [ 417.571884][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 417.756875][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.756910][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.756949][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 417.756971][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.823904][ T9] usb 5-1: config 0 descriptor?? [ 417.951621][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 418.112514][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 418.135077][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 418.135097][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.135111][ T10] usb 3-1: Product: syz [ 418.135161][ T10] usb 3-1: Manufacturer: syz [ 418.135172][ T10] usb 3-1: SerialNumber: syz [ 418.300259][ T9] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 418.370754][ T9] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 418.442616][ T9] cp2112 0003:10C4:EA90.002B: error requesting version [ 418.518700][ T9] cp2112 0003:10C4:EA90.002B: probe with driver cp2112 failed with error -71 [ 418.568294][ T9] usb 5-1: USB disconnect, device number 46 [ 419.280685][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 419.324830][ T10] usb 3-1: USB disconnect, device number 37 [ 420.213002][ T37] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 420.380694][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.380719][ T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.402103][ T37] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 420.402132][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 420.402153][ T37] usb 3-1: SerialNumber: syz [ 420.671264][ T37] usb 3-1: 0:2 : does not exist [ 420.741989][ T37] usb 3-1: USB disconnect, device number 38 [ 420.800700][T13234] input: syz0 as /devices/virtual/input/input33 [ 420.843591][ T6024] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 420.898757][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.004428][ T6024] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 421.004453][ T6024] usb 8-1: config 0 has no interface number 0 [ 421.004487][ T6024] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 421.004511][ T6024] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 421.004532][ T6024] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 421.006063][ T6024] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 421.006086][ T6024] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 421.006104][ T6024] usb 8-1: Product: syz [ 421.006116][ T6024] usb 8-1: SerialNumber: syz [ 421.016902][ T6024] usb 8-1: config 0 descriptor?? [ 421.097750][ T6024] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 421.138228][ T6024] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input34 [ 421.260553][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 421.542595][ C1] cm109_urb_ctl_callback: 31 callbacks suppressed [ 421.542619][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 421.542913][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 421.543146][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 421.543266][ T6024] usb 8-1: USB disconnect, device number 2 [ 421.543374][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 421.543396][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 421.615313][ T6024] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 422.521639][ T37] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 422.679445][ T37] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.679472][ T37] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.680600][ T37] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.680626][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 422.680647][ T37] usb 7-1: SerialNumber: syz [ 422.969618][ T37] usb 7-1: 0:2 : does not exist [ 423.065381][ T37] usb 7-1: USB disconnect, device number 19 [ 423.165164][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.285297][ T37] kernel write not supported for file /uinput (pid: 37 comm: kworker/1:1) [ 423.624640][T13321] Bluetooth: hci1: invalid length 3, exp 2 for type 3 [ 424.365184][ T5890] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 424.425897][T13361] Bluetooth: hci1: invalid length 3, exp 2 for type 3 [ 424.492334][ T822] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 424.521568][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 424.529936][ T5890] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 424.541644][ T5890] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 424.541673][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.541693][ T5890] usb 5-1: Product: syz [ 424.541707][ T5890] usb 5-1: Manufacturer: syz [ 424.541722][ T5890] usb 5-1: SerialNumber: syz [ 424.598408][ T5890] usb 5-1: config 0 descriptor?? [ 424.634925][ T5890] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 424.634974][ T5890] usb 5-1: setting power ON [ 424.634992][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 424.661203][ T822] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.686800][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 424.687506][ T5890] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 424.687556][ T5890] usb 5-1: media controller created [ 424.727347][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.742036][ T6024] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 424.775066][ T5890] usb 5-1: selecting invalid altsetting 6 [ 424.775088][ T5890] usb 5-1: digital interface selection failed (-22) [ 424.775103][ T5890] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 424.775860][ T5890] usb 5-1: setting power OFF [ 424.775877][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 424.775893][ T5890] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 424.775906][ T5890] (NULL device *): no alternate interface [ 424.858354][ T5890] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 424.878131][ T5890] usb 5-1: USB disconnect, device number 47 [ 424.918045][ T6024] usb 7-1: config 0 has no interfaces? [ 424.920738][ T6024] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.920759][ T6024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 424.920775][ T6024] usb 7-1: SerialNumber: syz [ 424.988384][T13368] input: syz0 as /devices/virtual/input/input35 [ 425.006659][ T6024] usb 7-1: config 0 descriptor?? [ 425.286181][ T6024] usb 7-1: USB disconnect, device number 20 [ 425.702125][ T5890] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 425.854267][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.854293][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.856246][ T5890] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 425.856273][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 425.856291][ T5890] usb 3-1: SerialNumber: syz [ 426.017572][ T821] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 426.137235][ T5890] usb 3-1: 0:2 : does not exist [ 426.188316][ T5890] usb 3-1: USB disconnect, device number 39 [ 426.201646][ T821] usb 8-1: Using ep0 maxpacket: 8 [ 426.210290][ T821] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.210318][ T821] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.210342][ T821] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.210366][ T821] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.210410][ T821] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.210433][ T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.395846][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.526387][ T821] usb 8-1: GET_CAPABILITIES returned 0 [ 426.526430][ T821] usbtmc 8-1:16.0: can't read capabilities [ 426.726584][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 426.741173][ T5890] usb 8-1: USB disconnect, device number 3 [ 426.990644][T13422] input: syz0 as /devices/virtual/input/input36 [ 427.334254][ T5890] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 427.486332][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 427.490522][ T5890] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 427.490551][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.526547][ T5890] usb 3-1: config 0 descriptor?? [ 427.611556][ T822] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 427.620303][T13450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.741086][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 427.762265][ T822] usb 8-1: Using ep0 maxpacket: 8 [ 427.778087][ T822] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 427.799559][ T822] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 427.799592][ T822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.799614][ T822] usb 8-1: Product: syz [ 427.799629][ T822] usb 8-1: Manufacturer: syz [ 427.799648][ T822] usb 8-1: SerialNumber: syz [ 427.838953][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.839946][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 427.839996][ T5890] usb 3-1: media controller created [ 427.892681][ T822] usb 8-1: config 0 descriptor?? [ 427.914951][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.940899][ T822] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 427.940946][ T822] usb 8-1: setting power ON [ 427.940965][ T822] dvb-usb: bulk message failed: -22 (2/0) [ 428.014457][ T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 428.015971][ T822] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 428.016024][ T822] usb 8-1: media controller created [ 428.071133][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.116545][ T822] usb 8-1: selecting invalid altsetting 6 [ 428.116568][ T822] usb 8-1: digital interface selection failed (-22) [ 428.116639][ T822] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 428.117552][ T822] usb 8-1: setting power OFF [ 428.117573][ T822] dvb-usb: bulk message failed: -22 (2/0) [ 428.117589][ T822] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 428.117655][ T822] (NULL device *): no alternate interface [ 428.214917][ T822] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 428.234907][ T822] usb 8-1: USB disconnect, device number 4 [ 428.581566][ T6024] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 428.621965][ T5890] az6027: usb out operation failed. (-71) [ 428.621983][ T5890] stb0899_attach: Driver disabled by Kconfig [ 428.621993][ T5890] az6027: no front-end attached [ 428.621993][ T5890] [ 428.622442][ T5890] az6027: usb out operation failed. (-71) [ 428.622456][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 428.660015][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 428.676031][ T5890] dvb-usb: schedule remote query interval to 400 msecs. [ 428.676051][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 428.703834][ T5890] usb 3-1: USB disconnect, device number 40 [ 428.732993][ T6024] usb 7-1: Using ep0 maxpacket: 32 [ 428.738440][ T6024] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 428.738469][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.738490][ T6024] usb 7-1: Product: syz [ 428.738504][ T6024] usb 7-1: Manufacturer: syz [ 428.738518][ T6024] usb 7-1: SerialNumber: syz [ 428.859692][ T6024] usb 7-1: config 0 descriptor?? [ 428.896756][ T6024] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 428.968058][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 429.407558][T13475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.553650][T13479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.554419][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 429.731471][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 429.733734][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.733760][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.733830][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.733847][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.733875][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.733891][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.915368][T13487] syzkaller1: entered promiscuous mode [ 429.915392][T13487] syzkaller1: entered allmulticast mode [ 429.934423][ T6024] gspca_ov534_9: reg_w failed -71 [ 430.105392][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 430.105435][ T10] usbtmc 3-1:16.0: can't read capabilities [ 430.251567][ T6024] gspca_ov534_9: Unknown sensor 0000 [ 430.251841][ T6024] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 430.256775][ T6024] usb 7-1: USB disconnect, device number 21 [ 430.320656][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.354026][ T39] INFO: task syz-executor:5824 blocked for more than 143 seconds. [ 430.354050][ T39] Tainted: G L syzkaller #0 [ 430.354061][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.354070][ T39] task:syz-executor state:D stack:21104 pid:5824 tgid:5824 ppid:1 task_flags:0x400140 flags:0x00080002 [ 430.354142][ T39] Call Trace: [ 430.354149][ T39] [ 430.354161][ T39] __schedule+0x169e/0x54f0 [ 430.354209][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.354233][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.354256][ T39] ? rt_spin_lock+0x1e0/0x400 [ 430.354284][ T39] ? __pfx___schedule+0x10/0x10 [ 430.354322][ T39] ? schedule+0x90/0x360 [ 430.354355][ T39] schedule+0x164/0x360 [ 430.354388][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 430.354413][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 430.354434][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 430.354459][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 430.354481][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.354509][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 430.354537][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 430.354562][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.354581][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.354602][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 430.354630][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 430.354656][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.354675][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.354695][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.354737][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 430.354772][ T39] deactivate_locked_super+0xbc/0x130 [ 430.354801][ T39] cleanup_mnt+0x437/0x4d0 [ 430.354830][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.354854][ T39] task_work_run+0x1d9/0x270 [ 430.354887][ T39] ? __pfx_task_work_run+0x10/0x10 [ 430.354922][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.354953][ T39] exit_to_user_mode_loop+0xed/0x480 [ 430.354976][ T39] ? rcu_is_watching+0x15/0xb0 [ 430.355006][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.355029][ T39] do_syscall_64+0x33e/0xf80 [ 430.355050][ T39] ? trace_irq_disable+0x3b/0x140 [ 430.355073][ T39] ? clear_bhb_loop+0x40/0x90 [ 430.355099][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.355128][ T39] RIP: 0033:0x7f21b924da57 [ 430.355154][ T39] RSP: 002b:00007fff00e846e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 430.355175][ T39] RAX: 0000000000000000 RBX: 00007f21b92e2048 RCX: 00007f21b924da57 [ 430.355189][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff00e847a0 [ 430.355202][ T39] RBP: 00007fff00e847a0 R08: 00007fff00e857a0 R09: 00000000ffffffff [ 430.355216][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff00e85830 [ 430.355229][ T39] R13: 00007f21b92e2048 R14: 00000000000458f3 R15: 00007fff00e85870 [ 430.355261][ T39] [ 430.355324][ T39] [ 430.355324][ T39] Showing all locks held in the system: [ 430.355334][ T39] 2 locks held by kworker/0:1/10: [ 430.355370][ T39] #0: ffff88813fe46538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 430.355438][ T39] #1: ffffc900000f7c40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 430.355487][ T39] 1 lock held by khungtaskd/39: [ 430.355498][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.355553][ T39] 3 locks held by kworker/u8:3/57: [ 430.355564][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 430.355630][ T39] #1: ffffc9000123fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 430.355679][ T39] #2: ffffffff8f7a2b38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 430.355757][ T39] 2 locks held by getty/5575: [ 430.355768][ T39] #0: ffff8880381160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.355827][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 430.355881][ T39] 1 lock held by syz-executor/5824: [ 430.355894][ T39] #0: ffff88803d4540d0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 430.355976][ T39] 3 locks held by kworker/0:6/6024: [ 430.355986][ T39] #0: ffff88801afda938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 430.356052][ T39] #1: ffffc90004e7fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 430.356101][ T39] #2: ffff88802b0ee210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 430.356161][ T39] 2 locks held by syz.4.3174/13484: [ 430.356173][ T39] #0: ffff88803b6090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.356239][ T39] #1: ffff88803b609120 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x217/0xa10 [ 430.356295][ T39] 1 lock held by syz.7.3175/13486: [ 430.356305][ T39] #0: ffffffff8f7a2b38 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 430.356354][ T39] [ 430.356359][ T39] ============================================= [ 430.356359][ T39] [ 430.356377][ T39] NMI backtrace for cpu 1 [ 430.356399][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.356425][ T39] Tainted: [L]=SOFTLOCKUP [ 430.356432][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.356442][ T39] Call Trace: [ 430.356450][ T39] [ 430.356458][ T39] dump_stack_lvl+0xe8/0x150 [ 430.356480][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 430.356506][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 430.356527][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 430.356555][ T39] sys_info+0x135/0x170 [ 430.356578][ T39] watchdog+0xfd3/0x1030 [ 430.356604][ T39] ? watchdog+0x1c9/0x1030 [ 430.356629][ T39] kthread+0x388/0x470 [ 430.356655][ T39] ? __pfx_watchdog+0x10/0x10 [ 430.356673][ T39] ? __pfx_kthread+0x10/0x10 [ 430.356699][ T39] ret_from_fork+0x514/0xb70 [ 430.356723][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 430.356743][ T39] ? __switch_to+0xc79/0x1410 [ 430.356774][ T39] ? __pfx_kthread+0x10/0x10 [ 430.356800][ T39] ret_from_fork_asm+0x1a/0x30 [ 430.356837][ T39] [ 430.356845][ T39] Sending NMI from CPU 1 to CPUs 0: [ 430.356870][ C0] NMI backtrace for cpu 0 [ 430.356884][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.356905][ C0] Tainted: [L]=SOFTLOCKUP [ 430.356910][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.356920][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 430.356948][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x16d/0x260 [ 430.356969][ C0] Code: 49 83 c6 28 49 39 c7 7d 43 49 83 ff 31 73 2c 41 8b 46 20 a9 00 00 04 00 74 dc 25 00 00 03 00 83 f8 01 ba 07 00 00 00 83 da 00 <48> 89 df 4c 89 f6 e8 58 62 00 00 85 c0 75 bd eb 11 48 c7 c7 30 54 [ 430.356982][ C0] RSP: 0018:ffffc900000f7998 EFLAGS: 00000006 [ 430.356995][ C0] RAX: 0000000000000000 RBX: ffff88801dac3d80 RCX: ffffffff936c76b0 [ 430.357006][ C0] RDX: 0000000000000006 RSI: ffff88801dac49a0 RDI: ffff88801dac3d80 [ 430.357017][ C0] RBP: ffffc900000f7ad8 R08: ffffffff8fcf47f7 R09: 1ffffffff1f9e8fe [ 430.357028][ C0] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: ffff88801dac49c8 [ 430.357039][ C0] R13: 1ffff9200001ef44 R14: ffff88801dac4978 R15: 0000000000000000 [ 430.357050][ C0] FS: 0000000000000000(0000) GS:ffff888125a62000(0000) knlGS:0000000000000000 [ 430.357063][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.357073][ C0] CR2: 0000001b30919ff8 CR3: 0000000039890000 CR4: 00000000003526f0 [ 430.357087][ C0] Call Trace: [ 430.357092][ C0] [ 430.357099][ C0] trace_hardirqs_on+0x28/0x40 [ 430.357116][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.357131][ C0] rt_mutex_slowunlock+0x4a7/0x8b0 [ 430.357152][ C0] ? reacquire_held_locks+0x104/0x190 [ 430.357174][ C0] ? rt_spin_lock+0x1e0/0x400 [ 430.357195][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 430.357216][ C0] ? rt_spin_unlock+0x14f/0x200 [ 430.357238][ C0] ? rt_spin_unlock+0x160/0x200 [ 430.357258][ C0] wg_ratelimiter_gc_entries+0x3a8/0x480 [ 430.357284][ C0] ? process_one_work+0x8b7/0x1710 [ 430.357300][ C0] process_one_work+0x9a3/0x1710 [ 430.357322][ C0] ? __pfx_process_one_work+0x10/0x10 [ 430.357335][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 430.357357][ C0] worker_thread+0xba8/0x11e0 [ 430.357376][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.357392][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 430.357408][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 430.357427][ C0] kthread+0x388/0x470 [ 430.357446][ C0] ? __pfx_worker_thread+0x10/0x10 [ 430.357460][ C0] ? __pfx_kthread+0x10/0x10 [ 430.357479][ C0] ret_from_fork+0x514/0xb70 [ 430.357496][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 430.357511][ C0] ? __switch_to+0xc79/0x1410 [ 430.357533][ C0] ? __pfx_kthread+0x10/0x10 [ 430.357553][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.357576][ C0] [ 430.358688][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 430.358708][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.358735][ T39] Tainted: [L]=SOFTLOCKUP [ 430.358742][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.358754][ T39] Call Trace: [ 430.358762][ T39] [ 430.358771][ T39] vpanic+0x56c/0xa60 [ 430.358798][ T39] ? __pfx___schedule+0x10/0x10 [ 430.358830][ T39] ? __pfx_vpanic+0x10/0x10 [ 430.358864][ T39] panic+0xc5/0xd0 [ 430.358890][ T39] ? __pfx_panic+0x10/0x10 [ 430.358916][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 430.358959][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 430.358991][ T39] watchdog+0x102c/0x1030 [ 430.359020][ T39] ? watchdog+0x1c9/0x1030 [ 430.359047][ T39] kthread+0x388/0x470 [ 430.359074][ T39] ? __pfx_watchdog+0x10/0x10 [ 430.359094][ T39] ? __pfx_kthread+0x10/0x10 [ 430.359120][ T39] ret_from_fork+0x514/0xb70 [ 430.359144][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 430.359166][ T39] ? __switch_to+0xc79/0x1410 [ 430.359198][ T39] ? __pfx_kthread+0x10/0x10 [ 430.359225][ T39] ret_from_fork_asm+0x1a/0x30 [ 430.359263][ T39] [ 430.359968][ T39] Kernel Offset: disabled