last executing test programs: 2m1.583253651s ago: executing program 4 (id=19221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff7f, {0x0, 0x20200000000000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) 2m1.392127859s ago: executing program 4 (id=19224): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m1.237538351s ago: executing program 4 (id=19226): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{}], 0x1) semop(r0, &(0x7f0000000280)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2m1.014179062s ago: executing program 4 (id=19228): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m0.121869178s ago: executing program 4 (id=19245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '('}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000015000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m59.69147301s ago: executing program 4 (id=19253): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x100, 0x2}) 1m59.372331417s ago: executing program 32 (id=19253): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x100, 0x2}) 3.781566367s ago: executing program 0 (id=20489): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 3.559433003s ago: executing program 0 (id=20492): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.52243878s ago: executing program 1 (id=20500): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) lseek(r2, 0x5, 0x3) 2.464614651s ago: executing program 1 (id=20501): unshare(0x4000400) write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, 0x0) 2.460377536s ago: executing program 0 (id=20502): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1}) 2.334905433s ago: executing program 1 (id=20503): unshare(0x66000080) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.675493253s ago: executing program 3 (id=20509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0xb5d6) 1.549704379s ago: executing program 0 (id=20511): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/ip6_mr_cache\x00') 1.54942394s ago: executing program 5 (id=20512): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0x7], &(0x7f0000000300)=[r3], &(0x7f0000000180)=[0x31], 0x0, 0xff}) 1.438749905s ago: executing program 5 (id=20513): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="d45006000200000024001a80200002"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.286932601s ago: executing program 5 (id=20514): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) poll(&(0x7f0000000080)=[{r0, 0x1100}], 0x1, 0x1) 1.190520364s ago: executing program 3 (id=20515): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x0, {0x0, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 1.094064916s ago: executing program 3 (id=20517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000280)) 818.382602ms ago: executing program 3 (id=20521): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000000040)) 705.596146ms ago: executing program 3 (id=20522): openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 684.513561ms ago: executing program 1 (id=20524): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 618.514908ms ago: executing program 0 (id=20525): unshare(0x20060400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f0000000080), 0x8) fcntl$addseals(r1, 0x409, 0x8) 525.797673ms ago: executing program 2 (id=20526): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="40eeb16e", 0x4}, {0x0}], 0x2) 417.224529ms ago: executing program 2 (id=20527): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) 398.136938ms ago: executing program 3 (id=20528): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) r3 = dup3(r2, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x3}}, 0x74) 357.351604ms ago: executing program 1 (id=20529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x9, 0x2, 0x2}]}) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) 337.252309ms ago: executing program 5 (id=20530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x5}}, 0x0, 0x0, 0x5, 0x0, "00ec2ff093289349bb89de25b87376f64276337642b890d33cb5b5b423d46229bc1c7ac135fee1b32aa3b47debd38b6d889a8c986b33eb000000000000000000000000000000000300"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 336.598727ms ago: executing program 2 (id=20531): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) r1 = dup(r0) creat(&(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 235.584245ms ago: executing program 5 (id=20532): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 223.801069ms ago: executing program 0 (id=20533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 179.301013ms ago: executing program 2 (id=20534): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x20200009, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xfffffffffffffffe, 0x0}) io_uring_enter(r1, 0x3512, 0x95ff, 0x0, 0x0, 0x0) 156.377406ms ago: executing program 1 (id=20535): capset(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) splice(r2, 0x0, r0, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r1, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 85.543272ms ago: executing program 5 (id=20536): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x1, 'I'}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 19.563575ms ago: executing program 2 (id=20537): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r0, 0x0) 0s ago: executing program 2 (id=20538): read$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000400)="a96617", 0x3, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000000), 0x0, 0x3}]) kernel console output (not intermixed with test programs): promiscuous mode [ 1180.205743][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.223151][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.237734][ T49] bond0 (unregistering): Released all slaves [ 1181.145690][ T645] batadv_slave_1: entered promiscuous mode [ 1181.171331][ T644] batadv_slave_1: left promiscuous mode [ 1181.178465][ T455] Bluetooth: hci3: command tx timeout [ 1181.368547][T31059] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1181.516237][ T49] hsr_slave_0: left promiscuous mode [ 1181.528764][T31059] usb 1-1: Using ep0 maxpacket: 16 [ 1181.540294][ T49] hsr_slave_1: left promiscuous mode [ 1181.546799][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.555455][T31059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.564343][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.576916][T31059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.594208][T31059] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1181.595040][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.603959][T31059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.617874][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.634680][T31059] usb 1-1: config 0 descriptor?? [ 1181.699169][ T49] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1181.772744][ T49] veth1_macvtap: left promiscuous mode [ 1181.782926][ T49] veth0_macvtap: left promiscuous mode [ 1181.798879][ T49] veth1_vlan: left promiscuous mode [ 1181.804327][ T49] veth0_vlan: left promiscuous mode [ 1182.418455][ T727] input: syz0 as /devices/virtual/input/input207 [ 1183.254182][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1183.258451][ T51] Bluetooth: hci3: command tx timeout [ 1183.545728][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1183.808462][ T5973] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1183.960299][ T5973] usb 4-1: Using ep0 maxpacket: 16 [ 1183.973308][ T5973] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1183.987794][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.002442][ T5973] usb 4-1: Product: syz [ 1184.006767][ T5973] usb 4-1: Manufacturer: syz [ 1184.012432][ T5973] usb 4-1: SerialNumber: syz [ 1184.026476][ T5973] usb 4-1: config 0 descriptor?? [ 1184.505161][T31059] usbhid 1-1:0.0: can't add hid device: -71 [ 1184.546527][T31059] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1184.601546][T31059] usb 1-1: USB disconnect, device number 55 [ 1184.637814][ T5973] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1184.675549][ T5973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1184.704946][ T5973] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1184.711962][ T495] chnl_net:caif_netlink_parms(): no params data found [ 1184.758421][ T5973] usb 4-1: media controller created [ 1184.831557][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.912324][ T5973] zl10353_read_register: readreg error (reg=127, ret==0) [ 1184.928985][ T5973] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1184.936914][ T5973] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1184.977199][ T5973] usb 4-1: USB disconnect, device number 107 [ 1185.041992][ T5973] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1185.273214][ T49] IPVS: stop unused estimator thread 0... [ 1185.290655][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.297809][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.338564][ T51] Bluetooth: hci3: command tx timeout [ 1185.358002][ T495] bridge_slave_0: entered allmulticast mode [ 1185.408869][ T495] bridge_slave_0: entered promiscuous mode [ 1185.458221][ T495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.478684][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.491442][ T495] bridge_slave_1: entered allmulticast mode [ 1185.509979][ T495] bridge_slave_1: entered promiscuous mode [ 1185.658144][ T495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.678751][T31092] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1185.705197][ T495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.838974][T31092] usb 3-1: Using ep0 maxpacket: 16 [ 1185.856941][T31092] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1185.873704][ T495] team0: Port device team_slave_0 added [ 1185.879883][T31092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.887885][T31092] usb 3-1: Product: syz [ 1185.901027][ T495] team0: Port device team_slave_1 added [ 1185.913087][T31092] usb 3-1: Manufacturer: syz [ 1185.917792][T31092] usb 3-1: SerialNumber: syz [ 1185.936625][T31092] usb 3-1: config 0 descriptor?? [ 1185.964045][T31092] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1185.976343][T31092] usb 3-1: Detected FT-X [ 1186.026612][T31059] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1186.047464][ T1004] all (unregistering): Released all slaves [ 1186.165596][T31092] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1186.183240][ T495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.194556][ T495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.227673][ T495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.230370][T31059] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1186.260740][ T495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.267710][ T495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.273763][T31059] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1186.293649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1186.304698][ T495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.354716][T31059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1186.367400][T31059] usb 1-1: SerialNumber: syz [ 1186.486242][ T495] hsr_slave_0: entered promiscuous mode [ 1186.510803][ T495] hsr_slave_1: entered promiscuous mode [ 1186.608802][T31092] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1186.799694][T31092] usb 3-1: USB disconnect, device number 13 [ 1186.838958][T31092] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1186.874959][T31092] ftdi_sio 3-1:0.0: device disconnected [ 1187.056474][T31059] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1187.275728][ T1273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19326'. [ 1187.354399][ T1265] input: syz1 as /devices/virtual/input/input208 [ 1187.363717][ T495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1187.429792][ T495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1187.525552][ T495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1187.559659][ T495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1187.570421][T31059] usb 1-1: USB disconnect, device number 56 [ 1187.600539][T31059] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1188.062868][ T495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.152730][ T495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.213615][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.220819][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.340035][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.347239][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.644232][ T495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.788919][T31059] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1188.803375][ T495] veth0_vlan: entered promiscuous mode [ 1188.841796][ T495] veth1_vlan: entered promiscuous mode [ 1188.960095][T31059] usb 3-1: Using ep0 maxpacket: 16 [ 1188.975390][T31059] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.992814][T31059] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1189.023789][T31059] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1189.035144][T31059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.055882][T31059] usb 3-1: Product: syz [ 1189.068080][T31059] usb 3-1: Manufacturer: syz [ 1189.083810][T31059] usb 3-1: SerialNumber: syz [ 1189.120972][ T495] veth0_macvtap: entered promiscuous mode [ 1189.192094][ T495] veth1_macvtap: entered promiscuous mode [ 1189.299699][ T495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.325209][T31059] usb 3-1: 0:2 : does not exist [ 1189.342894][T31059] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1189.354132][ T495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.403027][T31059] usb 3-1: USB disconnect, device number 14 [ 1189.530764][T26272] udevd[26272]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.674563][T20185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.708668][T20185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.801689][T20185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.831334][T20185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.219143][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.233932][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.413481][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.441580][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.949867][ T1483] netlink: 'syz.5.19358': attribute type 1 has an invalid length. [ 1190.964539][ T1483] netlink: 'syz.5.19358': attribute type 6 has an invalid length. [ 1190.995102][ T1483] netlink: 52 bytes leftover after parsing attributes in process `syz.5.19358'. [ 1191.773666][ T5973] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1191.931105][ T1525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19370'. [ 1191.962501][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 1191.989847][ T5973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.002929][ T5973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1192.032677][ T5973] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1192.047489][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.064293][ T5973] usb 6-1: Product: syz [ 1192.073124][ T5973] usb 6-1: Manufacturer: syz [ 1192.089128][ T5973] usb 6-1: SerialNumber: syz [ 1192.340409][ T5973] usb 6-1: 0:2 : does not exist [ 1192.371158][ T5973] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1192.424423][ T5973] usb 6-1: USB disconnect, device number 2 [ 1192.496367][T26272] udevd[26272]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1192.910441][ T5973] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1193.100038][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 1193.107217][ T5973] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1193.117071][ T5973] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1193.136155][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.153802][ T5973] usb 2-1: Product: syz [ 1193.161928][ T5973] usb 2-1: Manufacturer: syz [ 1193.166552][ T5973] usb 2-1: SerialNumber: syz [ 1193.214992][ T5973] usb 2-1: config 0 descriptor?? [ 1193.633606][ T5973] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1194.240749][ T5941] usb 2-1: USB disconnect, device number 5 [ 1194.258612][ T5933] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1194.428487][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 1194.464260][ T5933] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.483313][ T5933] usb 1-1: config 0 has no interface number 0 [ 1194.494088][ T5933] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 1194.529106][ T5933] usb 1-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 1194.549608][ T5933] usb 1-1: Product: syz [ 1194.568619][ T5933] usb 1-1: Manufacturer: syz [ 1194.579298][ T5933] usb 1-1: SerialNumber: syz [ 1194.600176][ T5933] usb 1-1: config 0 descriptor?? [ 1194.615206][ T5933] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1194.634486][ T5933] usb 1-1: selecting invalid altsetting 1 [ 1194.679231][ T5933] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1194.719285][ T5933] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1194.751487][ T5933] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1194.778589][ T5933] usb 1-1: media controller created [ 1194.813749][ T1714] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.19395'. [ 1194.815730][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.903306][ T5933] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1194.923255][ T5933] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1194.954016][ T5933] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1195.116151][ T5933] usb 1-1: USB disconnect, device number 57 [ 1195.559582][ T8148] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1195.728376][ T8148] usb 2-1: Using ep0 maxpacket: 32 [ 1195.754395][ T8148] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1195.762918][T31092] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1195.779889][ T8148] usb 2-1: config 0 has no interface number 0 [ 1195.787493][ T8148] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1195.805800][ T8148] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1195.821162][ T8148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.837326][ T8148] usb 2-1: Product: syz [ 1195.842542][ T8148] usb 2-1: Manufacturer: syz [ 1195.860870][ T8148] usb 2-1: SerialNumber: syz [ 1195.886514][ T8148] usb 2-1: config 0 descriptor?? [ 1195.902757][ T8148] smsc75xx v1.0.0 [ 1195.944252][T31092] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 1195.959400][T31092] usb 3-1: config 0 has no interface number 0 [ 1195.977120][T31092] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1195.997385][T31092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.021863][T31092] usb 3-1: config 0 descriptor?? [ 1196.038401][ T5933] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1196.201309][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1196.213877][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1196.231013][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1196.241164][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1196.245436][T31059] usb 3-1: USB disconnect, device number 15 [ 1196.275985][ T5933] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1196.312316][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.342263][ T5933] usb 1-1: config 0 descriptor?? [ 1196.524073][ T8148] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1196.545077][ T8148] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1196.758490][ T8148] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1196.771907][ T8148] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1196.795432][ T8148] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1196.805441][ T5933] plantronics 0003:047F:FFFF.00AE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1196.830261][ T8148] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1196.889321][ T8148] usb 2-1: USB disconnect, device number 6 [ 1196.953101][ T1849] cifs: Unknown parameter 'f,' [ 1197.010771][ T5973] usb 1-1: USB disconnect, device number 58 [ 1197.194758][ T1868] batadv_slave_1: entered promiscuous mode [ 1197.220166][ T1867] batadv_slave_1: left promiscuous mode [ 1198.330805][T31059] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1198.516137][T31059] usb 3-1: Using ep0 maxpacket: 8 [ 1198.521872][ T8148] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1198.551885][T31059] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1198.568422][T31059] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1198.581372][T31059] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1198.599347][T31059] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1198.614879][T31059] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1198.652966][T31059] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1198.677779][T31059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.712243][ T8148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.731658][ T8148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.764338][ T8148] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1198.781366][ T8148] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1198.790949][ T8148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.804864][ T8148] usb 4-1: config 0 descriptor?? [ 1198.952098][T31059] usb 3-1: usb_control_msg returned -32 [ 1198.959003][T31059] usbtmc 3-1:16.0: can't read capabilities [ 1199.096410][ T1963] netlink: 27 bytes leftover after parsing attributes in process `syz.0.19443'. [ 1199.325221][ T1976] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 1199.356156][ T8148] plantronics 0003:047F:FFFF.00AF: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1199.531394][ T8148] usb 3-1: USB disconnect, device number 16 [ 1199.715613][ T5933] usb 4-1: USB disconnect, device number 108 [ 1199.949009][ T5954] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1200.059044][ T8148] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1200.140230][ T5954] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1200.158773][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.199680][ T5954] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1200.233622][ T5954] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1200.241918][ T8148] usb 6-1: Using ep0 maxpacket: 32 [ 1200.255024][ T5954] usb 2-1: Manufacturer: syz [ 1200.263223][ T8148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.275806][ T8148] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.286697][ T5954] usb 2-1: config 0 descriptor?? [ 1200.307494][ T8148] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1200.318143][ T8148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.330239][ T8148] usb 6-1: config 0 descriptor?? [ 1200.458416][ T5954] rc_core: IR keymap rc-hauppauge not found [ 1200.464382][ T5954] Registered IR keymap rc-empty [ 1200.472124][ T5954] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1200.488094][ T5954] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input210 [ 1200.514725][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1200.559852][ T5954] usb 2-1: USB disconnect, device number 7 [ 1200.751981][ T2086] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1200.766111][ T8148] savu 0003:1E7D:2D5A.00B0: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1201.021433][ T8148] usb 6-1: USB disconnect, device number 3 [ 1201.214400][ T2121] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.19468'. [ 1201.673006][ T2139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1201.703988][ T2139] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1201.774914][ T2139] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1202.038961][ T8148] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1202.216465][ T8148] usb 6-1: Using ep0 maxpacket: 8 [ 1202.278758][ T8148] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1202.287001][ T8148] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1202.326509][ T8148] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1202.349974][ T8148] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1202.378528][ T8148] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.408441][ T8148] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1202.424259][ T8148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.495781][ T2216] syzkaller1: entered promiscuous mode [ 1202.526069][ T2216] syzkaller1: entered allmulticast mode [ 1202.650678][ T8148] usb 6-1: GET_CAPABILITIES returned 0 [ 1202.664223][ T8148] usbtmc 6-1:16.0: can't read capabilities [ 1202.872596][ T5933] usb 6-1: USB disconnect, device number 4 [ 1203.741661][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1203.908486][ T5941] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1204.081726][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 1204.096687][ T5941] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1204.118024][ T5941] usb 1-1: config 0 has no interface number 0 [ 1204.145479][ T5941] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1204.169019][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.177072][ T5941] usb 1-1: Product: syz [ 1204.503662][ T5941] usb 1-1: Manufacturer: syz [ 1204.508974][ T5941] usb 1-1: SerialNumber: syz [ 1204.517387][ T5941] usb 1-1: config 0 descriptor?? [ 1204.591323][ T5941] smsc95xx v2.0.0 [ 1205.138766][T31059] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1205.332497][T31059] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1205.347282][T31059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.363664][T31059] usb 6-1: Product: syz [ 1205.384531][T31059] usb 6-1: Manufacturer: syz [ 1205.397599][T31059] usb 6-1: SerialNumber: syz [ 1205.407856][T31059] usb 6-1: config 0 descriptor?? [ 1205.590544][ T5941] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1205.622433][ T5941] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1205.640791][ T5941] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1205.652631][ T5941] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1205.653643][ T5954] usb 6-1: USB disconnect, device number 5 [ 1205.665366][ T5941] usb 1-1: USB disconnect, device number 59 [ 1205.745580][ T2435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1205.778599][T31059] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1205.819275][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1205.961454][T31059] usb 2-1: Using ep0 maxpacket: 16 [ 1205.969175][T31059] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1205.977314][T31059] usb 2-1: config 0 has no interface number 0 [ 1205.984003][T31059] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 1205.995396][T31059] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1206.005250][T31059] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1206.015211][T31059] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1206.028546][T31059] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1206.037237][T31059] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1206.046959][T31059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.055083][ T8148] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1206.063085][T31059] usb 2-1: Product: syz [ 1206.067258][T31059] usb 2-1: Manufacturer: syz [ 1206.073530][T31059] usb 2-1: SerialNumber: syz [ 1206.082466][T31059] usb 2-1: config 0 descriptor?? [ 1206.088770][ T2402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1206.096042][ T2402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1206.229611][ T8148] usb 4-1: Using ep0 maxpacket: 16 [ 1206.316489][ T2402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1206.324033][ T2402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1206.493260][ T2437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.535408][ T2437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.555186][ T8148] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1206.571406][ T8148] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1206.586221][ T8148] usb 4-1: can't read configurations, error -71 [ 1206.692291][ T2497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.718554][ T5933] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1206.826689][ T30] audit: type=1326 audit(1758926373.326:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2506 comm="syz.2.19531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dd198eec9 code=0x0 [ 1206.880527][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 1206.887480][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 1206.899092][ T5933] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 1206.910833][ T5933] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1206.923380][ T5933] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.932926][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.941403][ T5933] usb 1-1: Product: syz [ 1206.945802][ T5933] usb 1-1: Manufacturer: syz [ 1206.950976][ T5933] usb 1-1: SerialNumber: syz [ 1207.155803][T31059] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 1207.180493][T31059] usb 2-1: USB disconnect, device number 8 [ 1207.394869][ T5933] cdc_ncm 1-1:1.0: bind() failure [ 1207.413067][ T5933] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1207.426012][ T5933] cdc_ncm 1-1:1.1: bind() failure [ 1207.437861][ T5933] usb 1-1: USB disconnect, device number 60 [ 1207.454189][ T2536] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1207.568164][ T2556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.893722][ T2583] syzkaller1: entered promiscuous mode [ 1207.901512][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1207.916733][ T2583] syzkaller1: entered allmulticast mode [ 1208.387509][ T2659] loop3: detected capacity change from 0 to 1 [ 1208.404606][ T2659] Dev loop3: unable to read RDB block 1 [ 1208.415931][ T2659] loop3: AHDI p1 [ 1208.436666][ T2659] loop3: partition table partially beyond EOD, truncated [ 1208.609578][ T2675] ipvlan0: left promiscuous mode [ 1208.623187][ T2675] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1208.709628][ T2675] bond1: left promiscuous mode [ 1208.842642][ T2675] bond4: left promiscuous mode [ 1208.849371][ T2675] ipvlan2: left promiscuous mode [ 1208.922967][ T2675] macvlan2: left promiscuous mode [ 1208.961736][ T2675] vxlan0: left promiscuous mode [ 1208.984634][ T2675] bridge0: left promiscuous mode [ 1208.996322][ T2675] macvlan0: left promiscuous mode [ 1208.999319][ T2705] netlink: 'syz.3.19563': attribute type 21 has an invalid length. [ 1209.083862][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.133479][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.149432][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.166161][ T2709] netlink: 'syz.3.19563': attribute type 21 has an invalid length. [ 1209.167373][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.224758][ T2705] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19563'. [ 1209.379384][ T2709] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19563'. [ 1209.655982][ T2747] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.19569'. [ 1210.166814][ T2787] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19578'. [ 1210.191779][ T2787] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19578'. [ 1210.255744][ T2787] team0: entered promiscuous mode [ 1210.294435][ T2787] team_slave_0: entered promiscuous mode [ 1210.305241][ T2787] team_slave_1: entered promiscuous mode [ 1210.314779][ T2787] gretap0: entered promiscuous mode [ 1210.340602][T31059] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1210.534357][T31059] usb 2-1: Using ep0 maxpacket: 16 [ 1210.585879][T31059] usb 2-1: config 0 has no interfaces? [ 1210.612052][T31059] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1210.631374][T31059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1210.674649][T31059] usb 2-1: SerialNumber: syz [ 1210.704552][T31059] usb 2-1: config 0 descriptor?? [ 1211.024122][ T1006] tipc: Subscription rejected, illegal request [ 1211.040282][T31059] usb 2-1: USB disconnect, device number 9 [ 1211.545604][ T2857] netlink: 'syz.5.19589': attribute type 39 has an invalid length. [ 1211.635956][ T5933] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1211.748880][ T2866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1211.770522][ T2877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19592'. [ 1211.804483][ T2877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19592'. [ 1211.822776][ T5933] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1211.856827][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.875970][ T5933] usb 1-1: Product: syz [ 1211.881303][ T5933] usb 1-1: Manufacturer: syz [ 1211.886086][ T5933] usb 1-1: SerialNumber: syz [ 1211.913230][ T5933] usb 1-1: config 0 descriptor?? [ 1211.998358][T31059] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1212.025051][ T2895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.048486][ T8148] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1212.158538][T31059] usb 2-1: Using ep0 maxpacket: 32 [ 1212.165237][T31059] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1212.174511][T31059] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1212.183391][T31059] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1212.193404][T31059] usb 2-1: config 1 has no interface number 0 [ 1212.199662][T31059] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.210857][T31059] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1212.223892][T31059] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1212.233978][T31059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.244140][ T8148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.257469][ T8148] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1212.262383][T31059] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1212.281783][ T8148] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.291805][ T8148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.311977][ T8148] usb 4-1: Product: syz [ 1212.316205][ T8148] usb 4-1: Manufacturer: syz [ 1212.330452][ T8148] usb 4-1: SerialNumber: syz [ 1212.345410][ T8148] cdc_mbim 4-1:1.0: skipping garbage [ 1212.466510][T31059] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1212.547142][ T5933] mos7840 1-1:0.0: required endpoints missing [ 1212.566378][ T2880] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1212.592888][ T5933] usb 1-1: USB disconnect, device number 61 [ 1212.880555][T31059] usb 2-1: USB disconnect, device number 10 [ 1212.890932][T31059] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1213.246975][ T2880] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1213.274525][ T8148] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 1213.295266][ T8148] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1213.327978][ T8148] wwan wwan0: port wwan0mbim0 attached [ 1213.360406][ T8148] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, da:55:bb:e1:0a:42 [ 1213.518646][T31059] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1213.547799][ T5933] usb 4-1: USB disconnect, device number 111 [ 1213.595814][ T5933] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1213.630782][ T2999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19616'. [ 1213.700802][T31059] usb 3-1: Using ep0 maxpacket: 16 [ 1213.714599][T31059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.760764][T31059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.760770][ T5933] wwan wwan0: port wwan0mbim0 disconnected [ 1213.760791][T31059] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1213.820569][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1213.836845][T31059] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1213.854180][T31059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.876908][T31059] usb 3-1: config 0 descriptor?? [ 1214.311494][T31059] HID 045e:07da: Invalid code 65791 type 1 [ 1214.383496][T31059] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00B1/input/input211 [ 1214.418070][T31059] microsoft 0003:045E:07DA.00B1: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1214.592248][T31059] usb 3-1: USB disconnect, device number 17 [ 1214.662093][ T3060] fido_id[3060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1215.365349][ T3120] û]þ5¯\P€: renamed from bond_slave_0 [ 1217.048365][ T8148] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1217.198733][ T5941] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1217.221083][ T8148] usb 2-1: Using ep0 maxpacket: 8 [ 1217.242046][ T8148] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1217.257702][ T8148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.273381][ T8148] usb 2-1: Product: syz [ 1217.277585][ T8148] usb 2-1: Manufacturer: syz [ 1217.284851][ T8148] usb 2-1: SerialNumber: syz [ 1217.299179][ T8148] usb 2-1: config 0 descriptor?? [ 1217.319776][ T8148] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1217.350161][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.367334][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1217.390938][ T5941] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1217.408613][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.426973][ T5941] usb 3-1: Product: syz [ 1217.431692][ T5941] usb 3-1: Manufacturer: syz [ 1217.436307][ T5941] usb 3-1: SerialNumber: syz [ 1217.678843][ T5941] usb 3-1: 0:2 : does not exist [ 1217.693128][ T5941] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1217.740872][ T5941] usb 3-1: USB disconnect, device number 18 [ 1217.808876][T32181] udevd[32181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.058844][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1218.218598][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 1218.232195][ T5926] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1218.248141][ T5926] usb 6-1: config 0 has no interface number 0 [ 1218.255706][ T5926] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1218.272159][ T5926] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1218.284803][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.304642][ T5926] usb 6-1: config 0 descriptor?? [ 1218.320657][ T5926] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1218.334931][ T8148] gspca_sonixj: reg_w1 err -71 [ 1218.430632][ T8148] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1218.444972][ T8148] usb 2-1: USB disconnect, device number 11 [ 1218.565577][ T5941] usb 6-1: USB disconnect, device number 6 [ 1219.049586][ T3299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.236563][ T3311] syzkaller1: entered promiscuous mode [ 1219.250862][ T3311] syzkaller1: entered allmulticast mode [ 1219.376303][ T3325] input: syz1 as /devices/virtual/input/input212 [ 1220.699404][ T3411] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1221.115477][ T3440] kernel read not supported for file /eth0 (pid: 3440 comm: syz.2.19711) [ 1221.128162][ T30] audit: type=1800 audit(1758926387.636:5593): pid=3440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19711" name="eth0" dev="mqueue" ino=157369 res=0 errno=0 [ 1221.395001][ T3455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.519220][ T3466] vcan0: tx drop: invalid sa for name 0x0000020000000000 [ 1221.968426][ T5933] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1222.079015][ T8148] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1222.138739][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 1222.152883][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1222.164774][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1222.178703][ T5933] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1222.187763][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.196090][ T5933] usb 1-1: Product: syz [ 1222.200457][ T5933] usb 1-1: Manufacturer: syz [ 1222.205062][ T5933] usb 1-1: SerialNumber: syz [ 1222.231094][ T5933] usb 1-1: config 0 descriptor?? [ 1222.247569][ T5933] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1222.268375][ T8148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.268650][ T5933] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1222.297144][ T8148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.323010][ T8148] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1222.347017][ T8148] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1222.363308][ T8148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.384939][ T8148] usb 2-1: config 0 descriptor?? [ 1222.411671][ T3521] ALSA: mixer_oss: invalid OSS volume '' [ 1222.819444][ T8148] plantronics 0003:047F:FFFF.00B2: reserved main item tag 0xd [ 1222.853091][ T8148] plantronics 0003:047F:FFFF.00B2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1222.876764][ T5933] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1222.889328][ T5933] em28xx 1-1:0.0: Config register raw data: 0x41 [ 1223.098666][ T5933] usb 2-1: USB disconnect, device number 12 [ 1223.156734][ T5941] usb 1-1: USB disconnect, device number 62 [ 1223.164323][ T5941] em28xx 1-1:0.0: Disconnecting em28xx [ 1223.195271][ T5941] em28xx 1-1:0.0: Freeing device [ 1224.129316][ T8148] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1224.441866][ T8148] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.452787][ T8148] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1224.462345][ T8148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.482384][ T8148] usb 3-1: config 0 descriptor?? [ 1224.492618][ T8148] pwc: Askey VC010 type 2 USB webcam detected. [ 1224.512568][ T3632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19755'. [ 1224.656756][ T30] audit: type=1326 audit(1758926391.136:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ce5f2af79 code=0x7ffc0000 [ 1224.742121][ T30] audit: type=1326 audit(1758926391.136:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ce5f2af79 code=0x7ffc0000 [ 1224.828075][ T30] audit: type=1326 audit(1758926391.136:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce5f8eec9 code=0x7ffc0000 [ 1224.848891][ T3675] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 1224.880261][ T30] audit: type=1326 audit(1758926391.136:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ce5f2af79 code=0x7ffc0000 [ 1224.898632][ T8148] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1224.923434][ T8148] pwc: recv_control_msg error -32 req 02 val 2700 [ 1224.933751][ T30] audit: type=1326 audit(1758926391.136:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ce5f2af79 code=0x7ffc0000 [ 1224.997868][ T30] audit: type=1326 audit(1758926391.136:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce5f8eec9 code=0x7ffc0000 [ 1225.055114][ T30] audit: type=1326 audit(1758926391.146:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ce5f2af79 code=0x7ffc0000 [ 1225.107125][ T30] audit: type=1326 audit(1758926391.146:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce5f8eec9 code=0x7ffc0000 [ 1225.171204][ T8148] pwc: recv_control_msg error -71 req 04 val 1000 [ 1225.183117][ T30] audit: type=1326 audit(1758926391.146:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3660 comm="syz.1.19756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce5f8eec9 code=0x7ffc0000 [ 1225.194516][ T8148] pwc: recv_control_msg error -71 req 04 val 1300 [ 1225.218383][ T8148] pwc: recv_control_msg error -71 req 04 val 1400 [ 1225.226444][ T8148] pwc: recv_control_msg error -71 req 02 val 2000 [ 1225.233760][ T8148] pwc: recv_control_msg error -71 req 02 val 2100 [ 1225.242430][ T8148] pwc: recv_control_msg error -71 req 04 val 1500 [ 1225.249398][ T8148] pwc: recv_control_msg error -71 req 02 val 2500 [ 1225.256236][ T8148] pwc: recv_control_msg error -71 req 02 val 2400 [ 1225.265095][ T8148] pwc: recv_control_msg error -71 req 02 val 2600 [ 1225.273305][ T8148] pwc: recv_control_msg error -71 req 02 val 2900 [ 1225.292043][ T8148] pwc: recv_control_msg error -71 req 02 val 2800 [ 1225.342556][ T8148] pwc: recv_control_msg error -71 req 04 val 1100 [ 1225.368534][ T8148] pwc: recv_control_msg error -71 req 04 val 1200 [ 1225.408678][ T8148] pwc: Registered as video103. [ 1225.438710][ T8148] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input215 [ 1225.509629][ T8148] usb 3-1: USB disconnect, device number 19 [ 1225.792108][ T3710] input: syz1 as /devices/virtual/input/input216 [ 1225.807380][ T3710] input: failed to attach handler leds to device input216, error: -6 [ 1226.170264][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19773'. [ 1227.417166][ T3826] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63 [ 1227.637524][ T3846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1227.658833][ T5941] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1227.739596][ T5926] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1227.808497][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 1227.823150][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.834598][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.844695][ T5941] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1227.855033][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.867108][ T5941] usb 2-1: config 0 descriptor?? [ 1227.911729][ T5926] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1227.923065][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.936573][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.946671][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1227.963099][ T5926] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1227.988319][ T5926] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1227.996521][ T5926] usb 3-1: Manufacturer: syz [ 1228.009456][ T5926] usb 3-1: config 0 descriptor?? [ 1228.306477][ T5941] ft260 0003:0403:6030.00B3: unknown main item tag 0x7 [ 1228.438999][ T5926] appleir 0003:05AC:8243.00B4: unknown main item tag 0x0 [ 1228.448639][ T8148] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1228.458594][ T5926] appleir 0003:05AC:8243.00B4: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1228.502976][ T5941] ft260 0003:0403:6030.00B3: chip code: 6424 8183 [ 1228.519057][ T5973] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1228.640062][ T8148] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1228.652364][ T8148] usb 6-1: config 0 has no interface number 0 [ 1228.663791][ T8148] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1228.674197][ T8148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.682560][ T8148] usb 6-1: Product: syz [ 1228.687270][ T8148] usb 6-1: Manufacturer: syz [ 1228.688601][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 1228.692597][ T8148] usb 6-1: SerialNumber: syz [ 1228.705086][ T5973] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1228.718136][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.729406][ T8148] usb 6-1: config 0 descriptor?? [ 1228.743876][ T5941] usb 3-1: USB disconnect, device number 20 [ 1228.752109][ T5973] usb 1-1: config 0 descriptor?? [ 1228.928074][ T5926] usb 2-1: USB disconnect, device number 13 [ 1228.965091][ T8148] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 1228.993180][ T8148] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 1229.003733][ T8148] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 1229.011712][ T8148] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 1229.021845][ T8148] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1229.041227][ T8148] usb 6-1: USB disconnect, device number 7 [ 1229.056257][ T8148] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1229.072566][ T8148] keyspan 6-1:0.133: device disconnected [ 1229.181726][ T5973] usbhid 1-1:0.0: can't add hid device: -71 [ 1229.187929][ T5973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1229.195806][ T5941] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1229.206186][ T5973] usb 1-1: USB disconnect, device number 63 [ 1229.360495][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.371751][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.382302][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1229.395339][ T5941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1229.404475][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.418637][ T5941] usb 4-1: config 0 descriptor?? [ 1229.562546][ T8148] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1229.738845][ T8148] usb 3-1: Using ep0 maxpacket: 32 [ 1229.755503][ T8148] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1229.775505][ T8148] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1229.791156][ T8148] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1229.803637][ T8148] usb 3-1: Product: syz [ 1229.808082][ T8148] usb 3-1: Manufacturer: syz [ 1229.823591][ T8148] usb 3-1: SerialNumber: syz [ 1229.860069][ T8148] usb 3-1: config 0 descriptor?? [ 1229.864070][ T5941] plantronics 0003:047F:FFFF.00B5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1229.879413][ T3950] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1229.888347][ T8148] hub 3-1:0.0: bad descriptor, ignoring hub [ 1229.930709][ T8148] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1229.959704][T31092] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1230.047715][ T3997] sctp: [Deprecated]: syz.0.19811 (pid 3997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1230.047715][ T3997] Use struct sctp_sack_info instead [ 1230.102656][ T8148] usb 4-1: USB disconnect, device number 112 [ 1230.138825][T31092] usb 6-1: Using ep0 maxpacket: 8 [ 1230.161193][T31092] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1230.178435][T31092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.186456][T31092] usb 6-1: Product: syz [ 1230.191315][T31092] usb 6-1: Manufacturer: syz [ 1230.195919][T31092] usb 6-1: SerialNumber: syz [ 1230.202798][T31092] usb 6-1: config 0 descriptor?? [ 1230.239089][ T5941] usb 3-1: USB disconnect, device number 21 [ 1230.412380][T31092] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1230.578462][ T5941] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1230.728473][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 1230.735183][ T5941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1230.755216][ T5941] usb 3-1: string descriptor 0 read error: -22 [ 1230.761742][ T5941] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1230.770884][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1230.788760][ T5941] usb 3-1: config 0 descriptor?? [ 1230.794976][ T3950] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1230.804722][ T5941] hub 3-1:0.0: bad descriptor, ignoring hub [ 1230.810795][ T5941] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1231.120023][ T8148] usb 3-1: USB disconnect, device number 22 [ 1231.222292][T31092] usb write operation failed. (-71) [ 1231.243053][T31092] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1231.254758][T31092] dvbdev: DVB: registering new adapter (Terratec H7) [ 1231.262424][T31092] usb 6-1: media controller created [ 1231.273332][T31092] usb read operation failed. (-71) [ 1231.281208][T31092] usb write operation failed. (-71) [ 1231.292401][T31092] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1231.307322][T31092] usb 6-1: USB disconnect, device number 8 [ 1231.358777][ T5926] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1231.520814][ T5926] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1231.530497][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.549160][ T5926] usb 1-1: config 0 descriptor?? [ 1231.569023][ T5926] cp210x 1-1:0.0: cp210x converter detected [ 1231.705370][ T4101] input: syz0 as /devices/virtual/input/input217 [ 1231.982617][ T5926] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1231.994577][ T5926] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 1232.022431][ T5926] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1232.032824][ T4138] loop4: detected capacity change from 0 to 7 [ 1232.057306][ T4138] Dev loop4: unable to read RDB block 7 [ 1232.067675][ T4138] loop4: AHDI p1 p2 [ 1232.070426][ T8148] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1232.104922][ T4138] loop4: partition table partially beyond EOD, truncated [ 1232.129728][ T4138] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 1232.158607][ T5941] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1232.221465][ T5933] usb 1-1: USB disconnect, device number 64 [ 1232.242373][ T8148] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.259888][ T8148] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1232.260987][ T5933] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1232.279964][ T8148] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1232.298934][ T8148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.310519][ T8148] usb 2-1: Product: syz [ 1232.310654][ T5933] cp210x 1-1:0.0: device disconnected [ 1232.314696][ T8148] usb 2-1: Manufacturer: syz [ 1232.314715][ T8148] usb 2-1: SerialNumber: syz [ 1232.334590][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 1232.344578][T26272] udevd[26272]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1232.362860][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1232.394903][ T5941] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1232.406473][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.429579][ T5941] usb 3-1: Product: syz [ 1232.434272][ T5941] usb 3-1: Manufacturer: syz [ 1232.451372][ T5941] usb 3-1: SerialNumber: syz [ 1232.464528][ T5941] usb 3-1: config 0 descriptor?? [ 1232.514882][ T5941] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1232.548004][ T8148] usb 2-1: 0:2 : does not exist [ 1232.562324][ T8148] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1232.618713][ T8148] usb 2-1: USB disconnect, device number 14 [ 1232.759781][T26272] udevd[26272]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.589138][T13994] usb 3-1: Failed to submit usb control message: -110 [ 1233.611546][T13994] usb 3-1: unable to send the bmi data to the device: -110 [ 1233.641501][T13994] usb 3-1: unable to get target info from device [ 1233.654797][T13994] usb 3-1: could not get target info (-110) [ 1233.670578][T13994] usb 3-1: could not probe fw (-110) [ 1234.144465][ T5941] usb 3-1: USB disconnect, device number 23 [ 1234.479196][ T5926] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1234.644090][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.661257][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.673804][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1234.707049][ T5926] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1234.718389][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.729411][ T5926] usb 1-1: config 0 descriptor?? [ 1234.957424][ T4276] syzkaller1: entered promiscuous mode [ 1234.974932][ T4276] syzkaller1: entered allmulticast mode [ 1235.146748][ T5926] plantronics 0003:047F:FFFF.00B6: reserved main item tag 0xd [ 1235.181964][ T5926] plantronics 0003:047F:FFFF.00B6: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1235.421690][ T5926] usb 1-1: USB disconnect, device number 65 [ 1236.119470][ T5933] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1236.278384][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 1236.287392][ T5933] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1236.308362][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.329292][ T5933] usb 2-1: Product: syz [ 1236.333527][ T5933] usb 2-1: Manufacturer: syz [ 1236.350524][ T5933] usb 2-1: SerialNumber: syz [ 1236.370618][ T5933] usb 2-1: config 0 descriptor?? [ 1236.397013][ T5933] gspca_main: se401-2.14.0 probing 047d:5003 [ 1236.488846][ T5926] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1236.668620][ T5926] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1236.708050][ T4365] tipc: New replicast peer: 255.255.255.255 [ 1236.716003][ T4365] tipc: Enabled bearer , priority 10 [ 1236.718207][ T5926] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1236.751059][ T5926] usb 1-1: Product: syz [ 1236.761923][ T5926] usb 1-1: Manufacturer: syz [ 1236.771316][ T5926] usb 1-1: SerialNumber: syz [ 1236.783544][ T5933] gspca_se401: ExtraFeatures: 79 [ 1236.789796][ T5926] usb 1-1: config 0 descriptor?? [ 1236.801637][ T5933] gspca_se401: Frame size: 0x0 1/16th janggu [ 1236.814700][ T5926] ch341 1-1:0.0: ch341-uart converter detected [ 1237.003297][ T5933] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input219 [ 1237.073956][ T5933] usb 2-1: USB disconnect, device number 15 [ 1237.388623][ T5941] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1237.478539][ T979] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1237.562039][ T5941] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1237.577797][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.601737][ T5941] usb 3-1: config 0 descriptor?? [ 1237.614138][ T5941] cp210x 3-1:0.0: cp210x converter detected [ 1237.654030][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 1237.724451][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.745271][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.757502][ T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1237.777650][ T979] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1237.787324][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.824601][ T5926] ch341-uart ttyUSB0: failed to read break control: -71 [ 1237.828614][ T5933] tipc: Node number set to 4278204951 [ 1237.836864][ T5926] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1237.858402][ T979] usb 4-1: config 0 descriptor?? [ 1237.888695][ T5926] usb 1-1: USB disconnect, device number 66 [ 1237.910468][ T5926] ch341 1-1:0.0: device disconnected [ 1238.053536][ T5941] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1238.274493][ T5941] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1238.327919][ T979] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x2 [ 1238.345995][ T979] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x6 [ 1238.364692][ T979] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x6 [ 1238.396313][ T979] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x6 [ 1238.419286][ T979] microsoft 0003:045E:07DA.00B7: unknown main item tag 0x6 [ 1238.443379][ T979] microsoft 0003:045E:07DA.00B7: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1238.483782][ T5941] usb 3-1: USB disconnect, device number 24 [ 1238.507093][ T979] microsoft 0003:045E:07DA.00B7: no inputs found [ 1238.514561][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1238.541540][ T979] microsoft 0003:045E:07DA.00B7: could not initialize ff, continuing anyway [ 1238.574389][ T5941] cp210x 3-1:0.0: device disconnected [ 1238.592378][ T979] usb 4-1: USB disconnect, device number 113 [ 1238.702637][ T4458] fido_id[4458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1238.784750][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.791267][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.124962][ T4496] input: syz1 as /devices/virtual/input/input221 [ 1239.408566][ T5926] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1239.460962][ T4524] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19908'. [ 1239.474237][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19908'. [ 1239.484880][ T4524] netlink: 80 bytes leftover after parsing attributes in process `syz.5.19908'. [ 1239.494926][ T4524] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19908'. [ 1239.504484][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19908'. [ 1239.514000][ T979] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1239.522672][ T4524] netlink: 80 bytes leftover after parsing attributes in process `syz.5.19908'. [ 1239.558505][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 1239.565275][ T5926] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1239.578483][T31059] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1239.597410][ T5926] usb 1-1: config 179 has no interface number 0 [ 1239.617700][ T5926] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1239.631895][ T5926] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1239.655241][ T5926] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1239.673678][ T5926] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1239.678416][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 1239.686114][ T5926] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1239.702267][ T979] usb 3-1: config 32 has an invalid interface number: 32 but max is 0 [ 1239.724806][ T979] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.731829][ T5926] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1239.745540][ T979] usb 3-1: config 32 has no interface number 0 [ 1239.748178][ T5926] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1239.761545][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.765869][ T979] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1239.771091][T31059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.788408][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.832608][T31059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.849074][ T5926] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input222 [ 1239.851372][ T979] hub 3-1:32.32: bad descriptor, ignoring hub [ 1239.878290][T31059] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1239.897033][ T979] hub 3-1:32.32: probe with driver hub failed with error -5 [ 1239.911287][T31059] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1239.920763][T31059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.968719][ T5220] input input222: unable to receive magic message: -110 [ 1240.001847][T31059] usb 2-1: config 0 descriptor?? [ 1240.101815][ T5220] input input222: unable to receive magic message: -32 [ 1240.136704][ T5220] input input222: unable to receive magic message: -32 [ 1240.154726][ T5220] input input222: unable to receive magic message: -32 [ 1240.174366][ T5220] input input222: unable to receive magic message: -32 [ 1240.274682][ T4500] input input222: unable to receive magic message: -32 [ 1240.329346][ T5926] usb 1-1: USB disconnect, device number 67 [ 1240.335330][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1240.423493][T31059] plantronics 0003:047F:FFFF.00B8: reserved main item tag 0xe [ 1240.436972][T31059] plantronics 0003:047F:FFFF.00B8: unknown main item tag 0x0 [ 1240.443351][ T979] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 1240.479134][T31059] plantronics 0003:047F:FFFF.00B8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1240.713795][T31059] usb 2-1: USB disconnect, device number 16 [ 1240.825783][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19917'. [ 1241.489002][ T979] usb 3-1: USB disconnect, device number 25 [ 1241.495049][ T5941] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1241.572686][ T4675] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19933'. [ 1241.609095][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19933'. [ 1241.668354][ T5926] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1241.684069][ T5941] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1241.704308][ T5941] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1241.731160][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.756262][ T5941] usb 1-1: config 0 descriptor?? [ 1241.801954][ C1] hrtimer: interrupt took 13227 ns [ 1241.828408][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 1241.840685][ T5926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.857432][ T5926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.881513][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1241.905083][ T5926] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1241.917093][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.938180][ T5926] usb 6-1: config 0 descriptor?? [ 1242.365479][ T5926] hid (null): global environment stack underflow [ 1242.406544][ T5926] cougar 0003:060B:500A.00B9: usage count exceeds max: fixing up report descriptor [ 1242.418968][ T5926] cougar 0003:060B:500A.00B9: unexpected long global item [ 1242.426878][ T5926] cougar 0003:060B:500A.00B9: parse failed [ 1242.432882][ T5926] cougar 0003:060B:500A.00B9: probe with driver cougar failed with error -22 [ 1242.592692][ T5926] usb 6-1: USB disconnect, device number 9 [ 1242.786999][ T5941] video4linux radio48: keene_cmd_set failed (-71) [ 1242.796615][ T5941] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1242.816708][ T5941] usb 1-1: USB disconnect, device number 68 [ 1244.128390][ T5926] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1244.358406][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 1244.381224][ T5926] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 1244.415895][ T4784] ipvlan0: entered promiscuous mode [ 1244.433946][ T5926] usb 4-1: config 0 has no interface number 0 [ 1244.448129][ T5926] usb 4-1: config 0 interface 230 has no altsetting 0 [ 1244.459392][ T4784] ipvlan0: left promiscuous mode [ 1244.488420][ T5926] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1244.515571][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.552594][ T5926] usb 4-1: Product: syz [ 1244.573634][ T5926] usb 4-1: Manufacturer: syz [ 1244.598761][ T5926] usb 4-1: SerialNumber: syz [ 1244.625240][ T5926] usb 4-1: config 0 descriptor?? [ 1244.643651][ T5926] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 1244.686227][ T5926] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1245.198986][T31059] hid-generic 0000:0004:0000.00BA: unknown main item tag 0x0 [ 1245.226838][T31059] hid-generic 0000:0004:0000.00BA: unknown main item tag 0x0 [ 1245.247061][T31059] hid-generic 0000:0004:0000.00BA: unknown main item tag 0x0 [ 1245.288817][T31059] hid-generic 0000:0004:0000.00BA: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1245.414094][ T4808] fido_id[4808]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1246.139068][T31059] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1246.308713][T31059] usb 1-1: Using ep0 maxpacket: 32 [ 1246.330211][T31059] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1246.348411][T31059] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1246.357184][T31059] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1246.377333][T31059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.406787][T31059] usb 1-1: config 0 descriptor?? [ 1247.112573][ T5926] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 1247.147006][ T5926] usb 4-1: USB disconnect, device number 114 [ 1247.205853][T31059] corsair-cpro 0003:1B1C:0C10.00BB: unknown main item tag 0x0 [ 1247.225943][T31059] corsair-cpro 0003:1B1C:0C10.00BB: unknown main item tag 0x0 [ 1247.245163][T31059] corsair-cpro 0003:1B1C:0C10.00BB: unknown main item tag 0x0 [ 1247.256093][T31059] corsair-cpro 0003:1B1C:0C10.00BB: unknown main item tag 0x0 [ 1247.271252][T31059] corsair-cpro 0003:1B1C:0C10.00BB: unknown main item tag 0x0 [ 1247.284050][T31059] corsair-cpro 0003:1B1C:0C10.00BB: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 1247.367298][ T4928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1247.670511][T31059] corsair-cpro 0003:1B1C:0C10.00BB: probe with driver corsair-cpro failed with error -110 [ 1247.710685][T31059] usb 1-1: USB disconnect, device number 69 [ 1248.096962][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19997'. [ 1248.402996][ T4999] fuse: Bad value for 'fd' [ 1248.731535][ T5005] netlink: 104 bytes leftover after parsing attributes in process `syz.1.20003'. [ 1250.138402][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1250.138732][ T4958] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1250.310529][ T5029] input: syz1 as /devices/virtual/input/input223 [ 1250.528394][ T5941] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1250.725108][ T5941] usb 4-1: config 0 has an invalid interface number: 129 but max is 0 [ 1250.745420][ T5941] usb 4-1: config 0 has no interface number 0 [ 1250.757925][ T5941] usb 4-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1250.795766][ T5941] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 1250.806543][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.821097][ T5941] usb 4-1: Product: syz [ 1250.825418][ T5941] usb 4-1: Manufacturer: syz [ 1250.833486][ T5941] usb 4-1: SerialNumber: syz [ 1250.865058][ T5941] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1250.894168][ T5941] r8152-cfgselector 4-1: config 0 descriptor?? [ 1250.915627][ T5941] r8152 4-1:0.129: Expected endpoints are not found [ 1251.117586][T31059] r8152-cfgselector 4-1: USB disconnect, device number 115 [ 1251.161935][ T5083] bridge1: entered allmulticast mode [ 1251.175336][ T5083] team0: Port device bridge1 added [ 1251.187328][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20025'. [ 1251.708383][ T5941] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1251.868521][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 1251.877382][ T5941] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 1251.891669][ T5941] usb 3-1: config 0 has no interface number 0 [ 1251.897854][ T5941] usb 3-1: config 0 interface 38 has no altsetting 0 [ 1251.916301][ T5941] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 1251.927882][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.940406][ T5941] usb 3-1: Product: syz [ 1251.944599][ T5941] usb 3-1: Manufacturer: syz [ 1251.951732][ T5941] usb 3-1: SerialNumber: syz [ 1251.964114][ T5941] usb 3-1: config 0 descriptor?? [ 1251.985649][ T5941] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1252.028631][ T5933] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1252.191376][ T5933] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.209589][ T5933] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1252.224856][ T5933] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1252.234711][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.245789][ T5933] usb 6-1: Product: syz [ 1252.255447][ T5933] usb 6-1: Manufacturer: syz [ 1252.265324][ T5933] usb 6-1: SerialNumber: syz [ 1252.301568][ T5933] cdc_mbim 6-1:1.0: skipping garbage [ 1252.501995][ T5114] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1252.678463][ T979] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1252.816975][ T5941] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input224 [ 1252.861446][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.872158][ T979] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1252.881667][ T979] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1252.891318][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.917966][ T979] usb 2-1: config 0 descriptor?? [ 1253.035578][ T5941] usb 3-1: USB disconnect, device number 26 [ 1253.136003][ T5114] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1253.151529][ T5933] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 1253.171126][ T5933] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1253.185702][ T5933] wwan wwan0: port wwan0mbim0 attached [ 1253.202454][ T5933] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 2e:f2:39:98:b0:7c [ 1253.225387][ T979] usb 2-1: USB disconnect, device number 17 [ 1253.372236][T31059] usb 6-1: USB disconnect, device number 10 [ 1253.389635][T31059] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1253.451511][T31059] wwan wwan0: port wwan0mbim0 disconnected [ 1255.728529][T31059] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1255.768611][ T5933] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1255.899781][T31059] usb 2-1: Using ep0 maxpacket: 16 [ 1255.913193][T31059] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1255.928374][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 1255.933440][T31059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.954378][T31059] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1255.967591][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.969135][T31059] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1255.988673][ T5933] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1256.000252][ T5941] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1256.005581][T31059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.010152][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.036850][ T5933] usb 6-1: config 0 descriptor?? [ 1256.037073][T31059] usb 2-1: config 0 descriptor?? [ 1256.184093][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 1256.193453][ T5941] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1256.203053][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.214279][ T5941] usb 3-1: Product: syz [ 1256.218942][ T5941] usb 3-1: Manufacturer: syz [ 1256.223601][ T5941] usb 3-1: SerialNumber: syz [ 1256.239998][ T5941] usb 3-1: config 0 descriptor?? [ 1256.252292][ T5941] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1256.278218][T31059] usb 2-1: string descriptor 0 read error: -71 [ 1256.291507][T31059] usbhid 2-1:0.0: can't add hid device: -71 [ 1256.292613][ T5933] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1256.297743][T31059] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1256.329079][T31059] usb 2-1: USB disconnect, device number 18 [ 1256.767383][ T5933] usb 6-1: USB disconnect, device number 11 [ 1257.471782][ T5941] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1257.506369][ T5941] usb 3-1: USB disconnect, device number 27 [ 1258.282040][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 1258.282056][ T30] audit: type=1326 audit(1758926424.776:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.5.20108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1258.348375][T31059] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1258.350908][ T30] audit: type=1326 audit(1758926424.786:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.5.20108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1258.447043][ T30] audit: type=1326 audit(1758926424.786:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.5.20108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1258.515037][ T30] audit: type=1326 audit(1758926424.786:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.5.20108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1258.520320][T31059] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1258.539675][ T30] audit: type=1326 audit(1758926424.786:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.5.20108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1258.604718][T31059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.617639][T31059] usb 3-1: Product: syz [ 1258.648529][T31059] usb 3-1: Manufacturer: syz [ 1258.653204][T31059] usb 3-1: SerialNumber: syz [ 1258.696293][T31059] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1258.740159][ T5926] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1259.288517][T31092] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1259.418521][ T8148] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1259.448355][T31092] usb 2-1: Using ep0 maxpacket: 32 [ 1259.456519][T31092] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1259.465675][T31092] usb 2-1: config 0 has no interface number 0 [ 1259.472321][T31092] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1259.487128][ T5973] usb 3-1: USB disconnect, device number 28 [ 1259.492270][T31092] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1259.504436][T31092] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1259.514837][T31092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.523534][T31092] usb 2-1: Product: syz [ 1259.527935][T31092] usb 2-1: Manufacturer: syz [ 1259.533191][T31092] usb 2-1: SerialNumber: syz [ 1259.545330][T31092] usb 2-1: config 0 descriptor?? [ 1259.587545][ T8148] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.600203][ T8148] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1259.610761][ T8148] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1259.620493][ T8148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.634124][ T8148] usb 6-1: config 0 descriptor?? [ 1259.645450][ T8148] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1259.653154][ T8148] dvb-usb: bulk message failed: -22 (3/0) [ 1259.666758][ T8148] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1259.680238][ T8148] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1259.690817][ T8148] usb 6-1: media controller created [ 1259.701580][ T8148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1259.725854][ T8148] dvb-usb: bulk message failed: -22 (6/0) [ 1259.787095][ T8148] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1259.809978][ T8148] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input226 [ 1259.840965][ T8148] dvb-usb: schedule remote query interval to 150 msecs. [ 1259.857014][ T8148] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1260.008448][ T8148] dvb-usb: bulk message failed: -22 (1/0) [ 1260.014496][ T8148] dvb-usb: error while querying for an remote control event. [ 1260.115949][ T8148] usb 6-1: USB disconnect, device number 12 [ 1260.138925][ T5926] usb 3-1: Service connection timeout for: 256 [ 1260.148290][ T5926] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1260.157161][ T5926] ath9k_htc: Failed to initialize the device [ 1260.174432][T31092] appletouch 2-1:0.85: Geyser mode initialized. [ 1260.188671][ T5973] usb 3-1: ath9k_htc: USB layer deinitialized [ 1260.194101][T31092] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input225 [ 1260.349870][ T8148] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1260.435316][T31092] usb 2-1: USB disconnect, device number 19 [ 1260.441599][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1260.591486][T31092] appletouch 2-1:0.85: input: appletouch disconnected [ 1261.568998][ T5933] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1261.851690][ T5933] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1261.868426][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.899794][ T5933] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1261.925113][ T5933] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1261.958635][ T5933] usb 1-1: Manufacturer: syz [ 1261.979430][ T5933] usb 1-1: config 0 descriptor?? [ 1262.116217][ T5933] rc_core: IR keymap rc-hauppauge not found [ 1262.133510][ T5933] Registered IR keymap rc-empty [ 1262.153494][ T5933] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1262.213654][ T5933] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input227 [ 1262.252521][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1262.314265][T31092] usb 1-1: USB disconnect, device number 70 [ 1262.550064][ T5784] input: syz1 as /devices/virtual/input/input228 [ 1262.958673][T31092] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1263.184541][T31092] usb 3-1: Using ep0 maxpacket: 16 [ 1263.211383][T31092] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.237660][T31092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1263.282849][T31092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1263.321833][T31092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1263.350998][T31092] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.403118][T31092] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1263.421706][T31092] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1263.455766][T31092] usb 3-1: Manufacturer: syz [ 1263.472813][T31092] usb 3-1: config 0 descriptor?? [ 1263.538513][ T5933] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1263.701166][ T5933] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1263.719950][ T5933] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1263.736443][ T5933] usb 2-1: config 0 has no interface number 0 [ 1263.786147][ T5933] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1263.795446][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.803624][ T5933] usb 2-1: Product: syz [ 1263.807803][ T5933] usb 2-1: Manufacturer: syz [ 1263.812863][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20164'. [ 1263.813391][ T5933] usb 2-1: SerialNumber: syz [ 1263.828552][T31092] rc_core: IR keymap rc-hauppauge not found [ 1263.834876][T31092] Registered IR keymap rc-empty [ 1263.845874][ T5933] usb 2-1: config 0 descriptor?? [ 1263.847280][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.888854][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1263.931299][T31092] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1263.953710][T31092] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input229 [ 1264.016307][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.048921][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.092907][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.122426][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.152543][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.179295][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.218544][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.249771][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.277447][ T5933] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 1264.291556][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.293720][ T5933] usb 2-1: No valid video chain found. [ 1264.317199][ T5933] usb 2-1: USB disconnect, device number 20 [ 1264.328440][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.350387][T31092] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1264.390547][T31092] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1264.400071][T31092] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1264.434725][T31092] usb 3-1: USB disconnect, device number 29 [ 1264.438581][ T5941] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1264.609361][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 1264.616842][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.634306][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.644698][ T5941] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1264.660666][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.686035][ T5941] usb 6-1: config 0 descriptor?? [ 1264.914602][ T5906] input: syz0 as /devices/virtual/input/input230 [ 1265.141955][ T5941] savu 0003:1E7D:2D5A.00BC: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1265.422580][ T5941] usb 6-1: USB disconnect, device number 13 [ 1265.495763][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20188'. [ 1265.677547][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20191'. [ 1265.699476][ T5982] syzkaller0: entered allmulticast mode [ 1265.724132][ T5982] syzkaller0 (unregistering): left allmulticast mode [ 1265.845073][ T5999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1266.679818][ T6043] dvmrp0: entered allmulticast mode [ 1267.514614][ T6110] netlink: 'syz.0.20224': attribute type 4 has an invalid length. [ 1267.530164][ T5926] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1267.728649][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1267.743826][ T5926] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1267.753651][ T5926] usb 2-1: config 179 has no interface number 0 [ 1267.764090][ T5926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1267.775573][ T5926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1267.792466][ T5926] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1267.824303][ T5926] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1267.849331][ T5926] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1267.865231][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.888666][ T6099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1268.176675][T31092] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input231 [ 1268.414761][ T5941] usb 2-1: USB disconnect, device number 21 [ 1268.417473][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1268.430127][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1269.500259][ T6186] syzkaller1: entered promiscuous mode [ 1269.512636][ T6186] syzkaller1: entered allmulticast mode [ 1269.518345][ T6190] input: syz1 as /devices/virtual/input/input232 [ 1269.618627][T31092] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1269.734718][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20241'. [ 1269.788356][T31092] usb 2-1: Using ep0 maxpacket: 8 [ 1269.796867][T31092] usb 2-1: config index 0 descriptor too short (expected 30768, got 18) [ 1269.828768][T31092] usb 2-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1269.839032][T31092] usb 2-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1269.853182][T31092] usb 2-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1269.895164][T31092] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1269.905117][T31092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.906946][ T6205] kvm: kvm [6204]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1270.158529][T31092] usb 2-1: string descriptor 0 read error: -22 [ 1270.359768][ T5926] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1270.361232][ T5933] usb 2-1: USB disconnect, device number 22 [ 1270.385782][ T30] audit: type=1800 audit(1758926436.866:5693): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.20250" name="nullb0" dev="devtmpfs" ino=6781 res=0 errno=0 [ 1270.508475][ T5941] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1270.518772][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 1270.548797][ T5926] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1270.568345][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.583532][ T5926] usb 1-1: config 0 has no interface number 0 [ 1270.591273][ T5926] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1270.600569][ T6253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.608700][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.619765][ T5926] usb 1-1: config 0 descriptor?? [ 1270.635907][ T5926] usb 1-1: Found UVC 0.00 device (0bd3:05f4) [ 1270.644349][ T5926] usb 1-1: No valid video chain found. [ 1270.663047][ T30] audit: type=1800 audit(1758926437.166:5694): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20253" name="bus" dev="tmpfs" ino=17210 res=0 errno=0 [ 1270.672360][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.704946][ T5941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1270.733821][ T5941] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1270.755268][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.769970][ T5941] usb 3-1: config 0 descriptor?? [ 1270.783842][ T5941] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1270.791693][ T5941] dvb-usb: bulk message failed: -22 (3/0) [ 1270.805724][ T5941] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1270.817294][ T5941] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1270.830467][ T5941] usb 3-1: media controller created [ 1270.837764][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.841748][ T5926] usb 1-1: USB disconnect, device number 71 [ 1270.887894][ T5941] dvb-usb: bulk message failed: -22 (6/0) [ 1270.908693][ T5941] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1270.953666][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input233 [ 1270.972099][ T5941] dvb-usb: schedule remote query interval to 150 msecs. [ 1271.011908][ T5941] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1271.170486][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 1271.176344][ T5941] dvb-usb: error while querying for an remote control event. [ 1271.245152][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20258'. [ 1271.358541][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 1271.364481][ T5941] dvb-usb: error while querying for an remote control event. [ 1271.387906][ T5941] usb 3-1: USB disconnect, device number 30 [ 1271.464944][ T5941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1271.746605][ T30] audit: type=1326 audit(1758926438.246:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.20265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f630398eec9 code=0x0 [ 1272.072253][ T5926] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1272.239958][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.251776][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1272.262844][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1272.272715][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1272.285738][ T5926] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1272.295180][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.308334][ T5926] usb 6-1: config 0 descriptor?? [ 1272.732734][ T5926] plantronics 0003:047F:FFFF.00BD: ignoring exceeding usage max [ 1272.765690][ T5926] plantronics 0003:047F:FFFF.00BD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1273.147980][ T6398] syzkaller0: entered allmulticast mode [ 1273.167029][ T6398] syzkaller0 (unregistering): left allmulticast mode [ 1273.193274][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20282'. [ 1273.331327][ T5926] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1273.523509][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.552949][ T5926] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1273.579757][ T5926] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1273.600859][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.616978][ T5926] usb 2-1: config 0 descriptor?? [ 1273.639228][ T6426] syzkaller1: entered promiscuous mode [ 1273.642654][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1273.644837][ T6426] syzkaller1: entered allmulticast mode [ 1273.653744][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 1273.670816][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1273.687574][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1273.695049][ T5926] usb 2-1: media controller created [ 1273.703363][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1273.724903][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 1273.738581][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1273.752597][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input234 [ 1273.766930][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 1273.778388][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1273.938406][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 1273.944672][ T5926] dvb-usb: error while querying for an remote control event. [ 1274.098333][ T5941] usb 2-1: USB disconnect, device number 23 [ 1274.133785][ T5941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1274.744039][ T6481] netlink: 'syz.2.20295': attribute type 4 has an invalid length. [ 1274.769864][ T6481] netlink: 'syz.2.20295': attribute type 4 has an invalid length. [ 1274.836686][ T5926] usb 6-1: USB disconnect, device number 14 [ 1277.926860][ T6629] pim6reg1: entered promiscuous mode [ 1277.954237][ T6629] pim6reg1: entered allmulticast mode [ 1278.222682][ T6643] netlink: 56 bytes leftover after parsing attributes in process `syz.1.20333'. [ 1278.278929][ T5926] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1278.468354][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 1278.478213][ T5926] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 1278.504918][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.527516][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.550054][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.566050][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.587869][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.600532][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.621328][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.632244][T31092] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1278.661219][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.672958][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1278.688295][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1278.706636][ T5926] usb 1-1: SerialNumber: syz [ 1278.714095][ T5926] usb 1-1: config 0 descriptor?? [ 1278.745498][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input235 [ 1278.798971][T31092] usb 6-1: Using ep0 maxpacket: 16 [ 1278.816077][T31092] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1278.834386][T31092] usb 6-1: config 0 has no interface number 0 [ 1278.846791][T31092] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1278.867375][T31092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.903172][T31092] usb 6-1: Product: syz [ 1278.907381][T31092] usb 6-1: Manufacturer: syz [ 1278.918931][T31092] usb 6-1: SerialNumber: syz [ 1278.935804][T31092] usb 6-1: config 0 descriptor?? [ 1278.965972][T31092] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1278.973138][ T5220] bcm5974 1-1:0.0: could not read from device [ 1279.003978][ T5220] bcm5974 1-1:0.0: could not read from device [ 1279.009964][ T5926] usb 1-1: USB disconnect, device number 72 [ 1279.016800][ T5220] bcm5974 1-1:0.0: could not read from device [ 1279.055159][ T5220] bcm5974 1-1:0.0: could not read from device [ 1279.158548][ T5941] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1279.311724][ T5941] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1279.326990][ T5941] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 107, changing to 10 [ 1279.350716][ T5941] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 40974, setting to 1024 [ 1279.362484][ T5941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1279.372761][ T5941] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1279.382059][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1279.397878][ T5941] usb 3-1: Product: syz [ 1279.410749][ T5941] usb 3-1: Manufacturer: syz [ 1279.415388][ T5941] usb 3-1: SerialNumber: syz [ 1279.439598][ T5941] usb 3-1: config 0 descriptor?? [ 1279.449879][ T5941] hub 3-1:0.0: bad descriptor, ignoring hub [ 1279.455913][ T5941] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1279.491472][ T5941] usb 3-1: selecting invalid altsetting 0 [ 1279.896821][ T30] audit: type=1326 audit(1758926446.396:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1279.919287][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.930133][ T30] audit: type=1326 audit(1758926446.426:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1279.952563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.981789][ T30] audit: type=1326 audit(1758926446.486:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.042443][ T30] audit: type=1326 audit(1758926446.486:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.082228][ T30] audit: type=1326 audit(1758926446.486:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.105015][ T30] audit: type=1326 audit(1758926446.486:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.112989][ T6667] usb 3-1: reset high-speed USB device number 31 using dummy_hcd [ 1280.138524][ T30] audit: type=1326 audit(1758926446.486:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.165971][ T30] audit: type=1326 audit(1758926446.486:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.197785][ T30] audit: type=1326 audit(1758926446.486:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.221622][T31092] gspca_spca1528: reg_w err -71 [ 1280.227538][T31092] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1280.246145][T31092] usb 6-1: USB disconnect, device number 15 [ 1280.252334][ T30] audit: type=1326 audit(1758926446.486:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.3.20348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f630398eec9 code=0x7ffc0000 [ 1280.322126][ T6667] usb 3-1: device firmware changed [ 1280.343499][ T8148] usb 3-1: USB disconnect, device number 31 [ 1280.538342][ T8148] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1280.705846][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20356'. [ 1280.751599][ T8148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1280.768112][ T8148] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1280.776772][ T8148] usb 3-1: can't read configurations, error -71 [ 1281.078505][ T5973] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1281.240717][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1281.256243][ T5973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1281.269737][ T5973] usb 6-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 1281.280153][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.297102][ T5973] usb 6-1: config 0 descriptor?? [ 1281.303195][ T6788] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1281.523206][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20358'. [ 1282.009000][T31092] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1282.109559][ T5973] usbhid 6-1:0.0: can't add hid device: -71 [ 1282.115593][ T5973] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1282.147023][ T5973] usb 6-1: USB disconnect, device number 16 [ 1282.192274][T31092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.196670][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20378'. [ 1282.219803][T31092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.231386][ T6861] netlink: 48 bytes leftover after parsing attributes in process `syz.5.20379'. [ 1282.243771][T31092] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1282.253307][T31092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.296612][T31092] usb 2-1: config 0 descriptor?? [ 1282.396022][ T6869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.591617][ T6887] syzkaller1: entered promiscuous mode [ 1282.597802][ T6887] syzkaller1: entered allmulticast mode [ 1282.744923][T31092] cm6533_jd 0003:0D8C:0022.00BE: unknown main item tag 0x0 [ 1282.772030][T31092] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.00BE/input/input236 [ 1282.827045][T31092] cm6533_jd 0003:0D8C:0022.00BE: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1283.010398][T31092] usb 2-1: USB disconnect, device number 24 [ 1283.978403][T31092] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1284.119798][ T7000] syzkaller1: entered promiscuous mode [ 1284.125662][ T7000] syzkaller1: entered allmulticast mode [ 1284.147864][T31092] usb 3-1: Using ep0 maxpacket: 16 [ 1284.156264][T31092] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1284.165595][T31092] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.177279][T31092] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.189058][T31092] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.198117][T31092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.206662][T31092] usb 3-1: Product: syz [ 1284.210893][T31092] usb 3-1: Manufacturer: syz [ 1284.215490][T31092] usb 3-1: SerialNumber: syz [ 1284.259082][ T5926] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1284.298688][ T5973] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1284.391141][ T7012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 1284.445110][ T5926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1284.454063][ T5926] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1284.464844][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1284.468572][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 1284.481608][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.494810][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1284.498458][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.506029][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1284.522905][ T5973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1284.529591][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1284.547506][ T5973] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1284.563606][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.586372][ T5973] usb 1-1: config 0 descriptor?? [ 1284.594240][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1284.623416][ T5926] usb 2-1: Product: syz [ 1284.627649][ T5926] usb 2-1: Manufacturer: syz [ 1284.635131][T31092] usb 3-1: 0:2 : does not exist [ 1284.673657][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 1284.687885][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 1284.708166][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1284.734592][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 1285.086617][ T5973] microsoft 0003:045E:07DA.00BF: ignoring exceeding usage max [ 1285.119457][ T5973] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.00BF/input/input237 [ 1285.294397][ T5933] usb 2-1: USB disconnect, device number 25 [ 1285.394400][ T5973] microsoft 0003:045E:07DA.00BF: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1285.429334][ T5973] usb 1-1: USB disconnect, device number 73 [ 1285.541594][ T7073] fido_id[7073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1285.554968][T31092] usb 3-1: USB disconnect, device number 34 [ 1285.663680][T32181] udevd[32181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1285.868657][ T8148] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1286.058510][ T8148] usb 4-1: Using ep0 maxpacket: 8 [ 1286.119839][ T8148] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1286.144746][ T8148] usb 4-1: config 0 has no interface number 0 [ 1286.160532][ T8148] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1286.191646][ T8148] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1286.225982][ T8148] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.249187][ T8148] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1286.264696][ T8148] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1286.281192][ T8148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.296587][ T8148] usb 4-1: config 0 descriptor?? [ 1286.301448][ T5973] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1286.327241][ T8148] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1286.471943][ T5973] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.495018][ T5973] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.523184][ T5973] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1286.582791][ T5973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1286.597246][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.643517][ T5973] usb 1-1: Product: syz [ 1286.647720][ T5973] usb 1-1: Manufacturer: syz [ 1286.673170][ T5973] usb 1-1: SerialNumber: syz [ 1286.705541][ T5973] cdc_mbim 1-1:1.0: skipping garbage [ 1287.391423][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1287.391441][ T30] audit: type=1326 audit(1758926453.896:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d992af79 code=0x7ffc0000 [ 1287.458622][ T30] audit: type=1326 audit(1758926453.926:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1287.492896][ T30] audit: type=1326 audit(1758926453.926:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d992af79 code=0x7ffc0000 [ 1287.522116][ T30] audit: type=1326 audit(1758926453.926:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d992af79 code=0x7ffc0000 [ 1287.556585][ T30] audit: type=1326 audit(1758926453.926:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d992af79 code=0x7ffc0000 [ 1287.558357][ T5926] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1287.579515][ T30] audit: type=1326 audit(1758926453.926:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1287.640575][ T30] audit: type=1326 audit(1758926453.926:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d998eec9 code=0x7ffc0000 [ 1287.664645][ T30] audit: type=1326 audit(1758926453.926:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d992af79 code=0x7ffc0000 [ 1287.689645][ T30] audit: type=1326 audit(1758926453.926:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d992af79 code=0x7ffc0000 [ 1287.725101][ T5973] cdc_mbim 1-1:1.0: bind() failure [ 1287.751754][ T5973] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1287.761548][ T30] audit: type=1326 audit(1758926453.926:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.5.20441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92d992af79 code=0x7ffc0000 [ 1287.794212][ T5973] cdc_ncm 1-1:1.1: bind() failure [ 1287.816458][ T5973] usb 1-1: USB disconnect, device number 74 [ 1287.828648][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 1287.849375][ T5926] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1287.880130][ T5926] usb 2-1: config 0 has no interface number 0 [ 1287.918501][ T5926] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1287.935303][ T5926] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1287.966213][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.975548][ T5926] usb 2-1: Product: syz [ 1287.994065][ T5926] usb 2-1: Manufacturer: syz [ 1288.000015][ T5926] usb 2-1: SerialNumber: syz [ 1288.017369][ T5926] usb 2-1: config 0 descriptor?? [ 1288.280416][ T5973] usb 4-1: USB disconnect, device number 116 [ 1288.300521][ T5973] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1289.002630][T31092] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1289.188764][T31092] usb 1-1: Using ep0 maxpacket: 8 [ 1289.196529][T31092] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1289.207113][T31092] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1289.223865][T31092] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1289.245478][T31092] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1289.273146][T31092] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.287316][ T5926] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1289.298202][T31092] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1289.309152][ T5926] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1289.316473][ T5926] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1289.325060][T31092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.333417][ T5926] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1289.382596][ T5926] usb 2-1: USB disconnect, device number 26 [ 1289.485887][ T7287] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1289.571267][T31092] usb 1-1: GET_CAPABILITIES returned 0 [ 1289.576950][T31092] usbtmc 1-1:16.0: can't read capabilities [ 1289.897317][ T7247] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1289.905826][ T5973] usb 1-1: USB disconnect, device number 75 [ 1290.510165][ T5941] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1290.669681][ T7379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1290.676984][ T7379] IPv6: NLM_F_CREATE should be set when creating new route [ 1290.678902][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 1290.684255][ T7379] IPv6: NLM_F_CREATE should be set when creating new route [ 1290.744098][ T5941] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1290.752455][ T5941] usb 6-1: config 0 has no interface number 0 [ 1290.789893][ T5941] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1290.814496][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.843248][ T5941] usb 6-1: Product: syz [ 1290.850502][ T5941] usb 6-1: Manufacturer: syz [ 1290.861146][ T5941] usb 6-1: SerialNumber: syz [ 1290.878987][ T5941] usb 6-1: config 0 descriptor?? [ 1290.906382][ T5941] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1290.982437][ T5941] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 1291.041284][T26272] udevd[26272]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1291.124834][ T5941] usb 6-1: USB disconnect, device number 17 [ 1291.688527][ T5941] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1291.860422][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 1291.957504][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.977874][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20488'. [ 1291.987262][ T5941] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1291.987293][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.996926][ T5941] usb 4-1: config 0 descriptor?? [ 1292.039443][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20488'. [ 1292.548945][ T5941] koneplus 0003:1E7D:2D51.00C0: unknown main item tag 0x0 [ 1292.563601][ T5941] koneplus 0003:1E7D:2D51.00C0: unknown main item tag 0x0 [ 1292.590752][ T5941] koneplus 0003:1E7D:2D51.00C0: unknown main item tag 0x0 [ 1292.597928][ T5941] koneplus 0003:1E7D:2D51.00C0: unknown main item tag 0x0 [ 1292.639606][ T5941] koneplus 0003:1E7D:2D51.00C0: unknown main item tag 0x0 [ 1292.654432][ T5941] koneplus 0003:1E7D:2D51.00C0: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 1292.771477][ T5941] koneplus 0003:1E7D:2D51.00C0: couldn't init struct koneplus_device [ 1292.804542][ T5941] koneplus 0003:1E7D:2D51.00C0: couldn't install mouse [ 1292.843857][ T5941] koneplus 0003:1E7D:2D51.00C0: probe with driver koneplus failed with error -71 [ 1292.910086][ T5941] usb 4-1: USB disconnect, device number 117 [ 1293.167292][ T7505] netlink: 'syz.1.20498': attribute type 13 has an invalid length. [ 1293.178609][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20498'. [ 1293.195328][ T7505] netlink: 'syz.1.20498': attribute type 13 has an invalid length. [ 1293.213737][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20498'. [ 1293.298441][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 1293.298459][ T30] audit: type=1326 audit(1758926459.796:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.5.20499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d998eec9 code=0x0 [ 1293.597642][ T30] audit: type=1326 audit(1758926460.096:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.20502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc936f8eec9 code=0x7fc00000 [ 1293.788877][ T5933] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1293.925909][ T7560] veth0_to_bridge: entered promiscuous mode [ 1293.969230][ T7559] veth0_to_bridge: left promiscuous mode [ 1293.988422][ T5933] usb 2-1: config 0 has no interfaces? [ 1294.004757][ T5933] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1294.028895][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.053265][ T5933] usb 2-1: Product: syz [ 1294.057511][ T5933] usb 2-1: Manufacturer: syz [ 1294.093897][ T5933] usb 2-1: SerialNumber: syz [ 1294.114633][ T5933] usb 2-1: config 0 descriptor?? [ 1294.246362][ T30] audit: type=1326 audit(1758926460.746:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.20502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc936f8eec9 code=0x7fc00000 [ 1294.353862][ T30] audit: type=1326 audit(1758926460.856:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.0.20511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc936f8eec9 code=0x0 [ 1294.479888][ T7518] netlink: 'syz.1.20503': attribute type 16 has an invalid length. [ 1294.492464][ T7518] netlink: 'syz.1.20503': attribute type 17 has an invalid length. [ 1294.550961][ T7518] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1294.600441][T31092] usb 2-1: USB disconnect, device number 27 [ 1294.704419][ T7596] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1295.522307][ T7637] loop3: detected capacity change from 0 to 7 [ 1295.534178][ T7637] Dev loop3: unable to read RDB block 7 [ 1295.551312][ T7637] loop3: unable to read partition table [ 1295.561597][ T7637] loop3: partition table beyond EOD, truncated [ 1295.579055][ T7637] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1295.746286][ T7656] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1295.801913][ T7660] [ 1295.804277][ T7660] ===================================================== [ 1295.811209][ T7660] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1295.818682][ T7660] syzkaller #0 Not tainted [ 1295.823154][ T7660] ----------------------------------------------------- [ 1295.830086][ T7660] syz.5.20536/7660 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1295.837808][ T7660] ffff888024dd4d38 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1295.846529][ T7660] [ 1295.846529][ T7660] and this task is already holding: [ 1295.853893][ T7660] ffff8880338b1028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1295.863634][ T7660] which would create a new lock dependency: [ 1295.869506][ T7660] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1295.877588][ T7660] [ 1295.877588][ T7660] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1295.887013][ T7660] (&dev->event_lock#2){..-.}-{3:3} [ 1295.887041][ T7660] [ 1295.887041][ T7660] ... which became SOFTIRQ-irq-safe at: [ 1295.899900][ T7660] lock_acquire+0x120/0x360 [ 1295.904483][ T7660] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1295.909756][ T7660] input_inject_event+0xa5/0x340 [ 1295.914770][ T7660] led_trigger_event+0x138/0x210 [ 1295.919774][ T7660] kbd_bh+0x1c6/0x2e0 [ 1295.923825][ T7660] tasklet_action_common+0x36c/0x580 [ 1295.929178][ T7660] handle_softirqs+0x283/0x870 [ 1295.934013][ T7660] run_ksoftirqd+0x9b/0x100 [ 1295.938584][ T7660] smpboot_thread_fn+0x53f/0xa60 [ 1295.943590][ T7660] kthread+0x70e/0x8a0 [ 1295.947730][ T7660] ret_from_fork+0x439/0x7d0 [ 1295.952386][ T7660] ret_from_fork_asm+0x1a/0x30 [ 1295.957224][ T7660] [ 1295.957224][ T7660] to a SOFTIRQ-irq-unsafe lock: [ 1295.964221][ T7660] (tasklist_lock){.+.+}-{3:3} [ 1295.964245][ T7660] [ 1295.964245][ T7660] ... which became SOFTIRQ-irq-unsafe at: [ 1295.976853][ T7660] ... [ 1295.976862][ T7660] lock_acquire+0x120/0x360 [ 1295.984001][ T7660] _raw_read_lock+0x36/0x50 [ 1295.988570][ T7660] __do_wait+0xde/0x740 [ 1295.992793][ T7660] do_wait+0x1f8/0x520 [ 1295.996929][ T7660] kernel_wait+0xab/0x170 [ 1296.001328][ T7660] call_usermodehelper_exec_work+0xbe/0x230 [ 1296.007294][ T7660] process_scheduled_works+0xae1/0x17b0 [ 1296.012903][ T7660] worker_thread+0x8a0/0xda0 [ 1296.017561][ T7660] kthread+0x70e/0x8a0 [ 1296.021697][ T7660] ret_from_fork+0x439/0x7d0 [ 1296.026354][ T7660] ret_from_fork_asm+0x1a/0x30 [ 1296.031188][ T7660] [ 1296.031188][ T7660] other info that might help us debug this: [ 1296.031188][ T7660] [ 1296.041394][ T7660] Chain exists of: [ 1296.041394][ T7660] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1296.041394][ T7660] [ 1296.054942][ T7660] Possible interrupt unsafe locking scenario: [ 1296.054942][ T7660] [ 1296.063242][ T7660] CPU0 CPU1 [ 1296.068590][ T7660] ---- ---- [ 1296.073933][ T7660] lock(tasklist_lock); [ 1296.078157][ T7660] local_irq_disable(); [ 1296.084899][ T7660] lock(&dev->event_lock#2); [ 1296.092082][ T7660] lock(&client->buffer_lock); [ 1296.099437][ T7660] [ 1296.102869][ T7660] lock(&dev->event_lock#2); [ 1296.107706][ T7660] [ 1296.107706][ T7660] *** DEADLOCK *** [ 1296.107706][ T7660] [ 1296.115825][ T7660] 7 locks held by syz.5.20536/7660: [ 1296.120996][ T7660] #0: ffff88814674b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1296.130121][ T7660] #1: ffff88801eb53230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1296.140208][ T7660] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1296.149858][ T7660] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1296.159428][ T7660] #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1296.168564][ T7660] #5: ffff8880338b1028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1296.178723][ T7660] #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1296.187753][ T7660] [ 1296.187753][ T7660] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1296.198135][ T7660] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1296.203773][ T7660] IN-SOFTIRQ-W at: [ 1296.207821][ T7660] lock_acquire+0x120/0x360 [ 1296.214136][ T7660] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1296.221167][ T7660] input_inject_event+0xa5/0x340 [ 1296.227913][ T7660] led_trigger_event+0x138/0x210 [ 1296.234654][ T7660] kbd_bh+0x1c6/0x2e0 [ 1296.240446][ T7660] tasklet_action_common+0x36c/0x580 [ 1296.247534][ T7660] handle_softirqs+0x283/0x870 [ 1296.254110][ T7660] run_ksoftirqd+0x9b/0x100 [ 1296.260451][ T7660] smpboot_thread_fn+0x53f/0xa60 [ 1296.267206][ T7660] kthread+0x70e/0x8a0 [ 1296.273085][ T7660] ret_from_fork+0x439/0x7d0 [ 1296.279486][ T7660] ret_from_fork_asm+0x1a/0x30 [ 1296.286074][ T7660] INITIAL USE at: [ 1296.290042][ T7660] lock_acquire+0x120/0x360 [ 1296.296271][ T7660] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1296.303194][ T7660] input_inject_event+0xa5/0x340 [ 1296.309855][ T7660] kbd_led_trigger_activate+0xbc/0x100 [ 1296.317041][ T7660] led_trigger_set+0x52a/0x950 [ 1296.323527][ T7660] led_trigger_set_default+0x260/0x2a0 [ 1296.330704][ T7660] led_classdev_register_ext+0x73d/0x930 [ 1296.338054][ T7660] input_leds_connect+0x517/0x790 [ 1296.344803][ T7660] input_register_device+0xcfd/0x1140 [ 1296.351904][ T7660] atkbd_connect+0x72e/0xa00 [ 1296.358217][ T7660] serio_driver_probe+0x82/0xd0 [ 1296.364789][ T7660] really_probe+0x26d/0x9e0 [ 1296.371016][ T7660] __driver_probe_device+0x18c/0x2f0 [ 1296.378024][ T7660] driver_probe_device+0x4f/0x430 [ 1296.384769][ T7660] __driver_attach+0x452/0x700 [ 1296.391255][ T7660] bus_for_each_dev+0x233/0x2b0 [ 1296.397825][ T7660] serio_handle_event+0x1f9/0x8d0 [ 1296.404569][ T7660] process_scheduled_works+0xae1/0x17b0 [ 1296.411833][ T7660] worker_thread+0x8a0/0xda0 [ 1296.418144][ T7660] kthread+0x70e/0x8a0 [ 1296.423932][ T7660] ret_from_fork+0x439/0x7d0 [ 1296.430240][ T7660] ret_from_fork_asm+0x1a/0x30 [ 1296.436738][ T7660] } [ 1296.439307][ T7660] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1296.448403][ T7660] -> (&client->buffer_lock){....}-{3:3} { [ 1296.454119][ T7660] INITIAL USE at: [ 1296.457993][ T7660] lock_acquire+0x120/0x360 [ 1296.464045][ T7660] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1296.470798][ T7660] evdev_ioctl_handler+0x1095/0x1f10 [ 1296.477721][ T7660] __se_sys_ioctl+0xf9/0x170 [ 1296.483858][ T7660] do_syscall_64+0xfa/0x3b0 [ 1296.489914][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.497353][ T7660] } [ 1296.499837][ T7660] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1296.507973][ T7660] ... acquired at: [ 1296.511760][ T7660] lock_acquire+0x120/0x360 [ 1296.516448][ T7660] _raw_spin_lock+0x2e/0x40 [ 1296.521141][ T7660] evdev_handle_get_val+0x70/0x9f0 [ 1296.526409][ T7660] evdev_ioctl_handler+0x1202/0x1f10 [ 1296.532198][ T7660] __se_sys_ioctl+0xf9/0x170 [ 1296.536946][ T7660] do_syscall_64+0xfa/0x3b0 [ 1296.541612][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.547664][ T7660] [ 1296.549967][ T7660] [ 1296.549967][ T7660] the dependencies between the lock to be acquired [ 1296.549975][ T7660] and SOFTIRQ-irq-unsafe lock: [ 1296.563458][ T7660] -> (tasklist_lock){.+.+}-{3:3} { [ 1296.568743][ T7660] HARDIRQ-ON-R at: [ 1296.572886][ T7660] lock_acquire+0x120/0x360 [ 1296.579376][ T7660] _raw_read_lock+0x36/0x50 [ 1296.585856][ T7660] __do_wait+0xde/0x740 [ 1296.592014][ T7660] do_wait+0x1f8/0x520 [ 1296.598065][ T7660] kernel_wait+0xab/0x170 [ 1296.604377][ T7660] call_usermodehelper_exec_work+0xbe/0x230 [ 1296.612253][ T7660] process_scheduled_works+0xae1/0x17b0 [ 1296.619788][ T7660] worker_thread+0x8a0/0xda0 [ 1296.626360][ T7660] kthread+0x70e/0x8a0 [ 1296.632449][ T7660] ret_from_fork+0x439/0x7d0 [ 1296.639066][ T7660] ret_from_fork_asm+0x1a/0x30 [ 1296.645828][ T7660] SOFTIRQ-ON-R at: [ 1296.649974][ T7660] lock_acquire+0x120/0x360 [ 1296.656466][ T7660] _raw_read_lock+0x36/0x50 [ 1296.662952][ T7660] __do_wait+0xde/0x740 [ 1296.669180][ T7660] do_wait+0x1f8/0x520 [ 1296.675255][ T7660] kernel_wait+0xab/0x170 [ 1296.681566][ T7660] call_usermodehelper_exec_work+0xbe/0x230 [ 1296.689445][ T7660] process_scheduled_works+0xae1/0x17b0 [ 1296.696969][ T7660] worker_thread+0x8a0/0xda0 [ 1296.703539][ T7660] kthread+0x70e/0x8a0 [ 1296.709588][ T7660] ret_from_fork+0x439/0x7d0 [ 1296.716163][ T7660] ret_from_fork_asm+0x1a/0x30 [ 1296.722909][ T7660] INITIAL USE at: [ 1296.726966][ T7660] lock_acquire+0x120/0x360 [ 1296.733369][ T7660] _raw_write_lock_irq+0xa2/0xf0 [ 1296.740199][ T7660] copy_process+0x224f/0x3c00 [ 1296.746767][ T7660] kernel_clone+0x21e/0x840 [ 1296.753166][ T7660] user_mode_thread+0xdd/0x140 [ 1296.759824][ T7660] rest_init+0x23/0x300 [ 1296.765874][ T7660] start_kernel+0x3a9/0x410 [ 1296.772272][ T7660] x86_64_start_reservations+0x24/0x30 [ 1296.779627][ T7660] x86_64_start_kernel+0x143/0x1c0 [ 1296.786636][ T7660] common_startup_64+0x13e/0x147 [ 1296.793470][ T7660] INITIAL READ USE at: [ 1296.797952][ T7660] lock_acquire+0x120/0x360 [ 1296.804794][ T7660] _raw_read_lock+0x36/0x50 [ 1296.811623][ T7660] __do_wait+0xde/0x740 [ 1296.818110][ T7660] do_wait+0x1f8/0x520 [ 1296.824507][ T7660] kernel_wait+0xab/0x170 [ 1296.831168][ T7660] call_usermodehelper_exec_work+0xbe/0x230 [ 1296.839393][ T7660] process_scheduled_works+0xae1/0x17b0 [ 1296.847265][ T7660] worker_thread+0x8a0/0xda0 [ 1296.854177][ T7660] kthread+0x70e/0x8a0 [ 1296.860570][ T7660] ret_from_fork+0x439/0x7d0 [ 1296.867482][ T7660] ret_from_fork_asm+0x1a/0x30 [ 1296.874574][ T7660] } [ 1296.877228][ T7660] ... key at: [] tasklist_lock+0x18/0x40 [ 1296.885104][ T7660] ... acquired at: [ 1296.889060][ T7660] lock_acquire+0x120/0x360 [ 1296.893721][ T7660] _raw_read_lock+0x36/0x50 [ 1296.898375][ T7660] send_sigio+0x101/0x370 [ 1296.902859][ T7660] dnotify_handle_event+0x169/0x440 [ 1296.908210][ T7660] fsnotify+0x1814/0x1a80 [ 1296.912701][ T7660] vfs_mkdir+0x477/0x510 [ 1296.917103][ T7660] do_mkdirat+0x247/0x590 [ 1296.921586][ T7660] __x64_sys_mkdirat+0x87/0xa0 [ 1296.926516][ T7660] do_syscall_64+0xfa/0x3b0 [ 1296.931172][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.937218][ T7660] [ 1296.939521][ T7660] -> (&f_owner->lock){....}-{3:3} { [ 1296.944804][ T7660] INITIAL USE at: [ 1296.948762][ T7660] lock_acquire+0x120/0x360 [ 1296.954986][ T7660] _raw_write_lock_irq+0xa2/0xf0 [ 1296.961643][ T7660] __f_setown+0x67/0x370 [ 1296.967606][ T7660] f_setown+0x23a/0x300 [ 1296.973477][ T7660] sock_ioctl+0x5c5/0x790 [ 1296.979530][ T7660] __se_sys_ioctl+0xf9/0x170 [ 1296.985844][ T7660] do_syscall_64+0xfa/0x3b0 [ 1296.992068][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.999683][ T7660] INITIAL READ USE at: [ 1297.004086][ T7660] lock_acquire+0x120/0x360 [ 1297.010751][ T7660] _raw_read_lock_irqsave+0xaf/0x100 [ 1297.018188][ T7660] send_sigio+0x38/0x370 [ 1297.024596][ T7660] dnotify_handle_event+0x169/0x440 [ 1297.031965][ T7660] fsnotify+0x1814/0x1a80 [ 1297.038555][ T7660] fsnotify_access+0x22b/0x2a0 [ 1297.045485][ T7660] iterate_dir+0x3ea/0x570 [ 1297.052064][ T7660] __se_sys_getdents+0xe4/0x250 [ 1297.059075][ T7660] do_syscall_64+0xfa/0x3b0 [ 1297.065734][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.073798][ T7660] } [ 1297.076376][ T7660] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1297.085323][ T7660] ... acquired at: [ 1297.089214][ T7660] lock_acquire+0x120/0x360 [ 1297.093983][ T7660] _raw_read_lock_irqsave+0xaf/0x100 [ 1297.099435][ T7660] send_sigio+0x38/0x370 [ 1297.103842][ T7660] kill_fasync+0x24d/0x4d0 [ 1297.108422][ T7660] lease_break_callback+0x26/0x30 [ 1297.113638][ T7660] __break_lease+0x6a5/0x1620 [ 1297.118483][ T7660] do_dentry_open+0x8b7/0x13f0 [ 1297.123406][ T7660] vfs_open+0x3b/0x340 [ 1297.127632][ T7660] path_openat+0x2ee5/0x3830 [ 1297.132383][ T7660] do_filp_open+0x1fa/0x410 [ 1297.137044][ T7660] do_sys_openat2+0x121/0x1c0 [ 1297.141877][ T7660] __x64_sys_open+0x11e/0x150 [ 1297.146710][ T7660] do_syscall_64+0xfa/0x3b0 [ 1297.151371][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.157419][ T7660] [ 1297.159726][ T7660] -> (&new->fa_lock){....}-{3:3} { [ 1297.164846][ T7660] INITIAL USE at: [ 1297.168736][ T7660] lock_acquire+0x120/0x360 [ 1297.174807][ T7660] _raw_write_lock_irq+0xa2/0xf0 [ 1297.181305][ T7660] fasync_remove_entry+0xf1/0x1c0 [ 1297.187882][ T7660] tun_chr_fasync+0x87/0x1a0 [ 1297.194022][ T7660] __fput+0x89f/0xa70 [ 1297.199555][ T7660] task_work_run+0x1d1/0x260 [ 1297.205780][ T7660] exit_to_user_mode_loop+0xec/0x110 [ 1297.212616][ T7660] do_syscall_64+0x2bd/0x3b0 [ 1297.218753][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.226190][ T7660] INITIAL READ USE at: [ 1297.230503][ T7660] lock_acquire+0x120/0x360 [ 1297.236994][ T7660] _raw_read_lock_irqsave+0xaf/0x100 [ 1297.244263][ T7660] kill_fasync+0x199/0x4d0 [ 1297.250671][ T7660] sock_wake_async+0x137/0x160 [ 1297.257411][ T7660] sk_wake_async+0x184/0x280 [ 1297.263993][ T7660] unix_shutdown+0x2f5/0x3f0 [ 1297.270601][ T7660] __x64_sys_shutdown+0x13f/0x1a0 [ 1297.277620][ T7660] do_syscall_64+0xfa/0x3b0 [ 1297.284115][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.291998][ T7660] } [ 1297.294481][ T7660] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1297.303247][ T7660] ... acquired at: [ 1297.307054][ T7660] lock_acquire+0x120/0x360 [ 1297.311726][ T7660] _raw_read_lock_irqsave+0xaf/0x100 [ 1297.317167][ T7660] kill_fasync+0x199/0x4d0 [ 1297.321740][ T7660] evdev_pass_values+0x627/0xbd0 [ 1297.326833][ T7660] evdev_events+0x1e6/0x340 [ 1297.331491][ T7660] input_pass_values+0x288/0x890 [ 1297.336583][ T7660] input_event_dispose+0x330/0x6b0 [ 1297.341884][ T7660] input_inject_event+0x1dd/0x340 [ 1297.347065][ T7660] evdev_write+0x2fc/0x480 [ 1297.351638][ T7660] vfs_write+0x27e/0xb30 [ 1297.356045][ T7660] ksys_write+0x145/0x250 [ 1297.360531][ T7660] do_syscall_64+0xfa/0x3b0 [ 1297.365276][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.371326][ T7660] [ 1297.373629][ T7660] [ 1297.373629][ T7660] stack backtrace: [ 1297.379505][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.5.20536 Not tainted syzkaller #0 PREEMPT(full) [ 1297.379522][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1297.379533][ T7660] Call Trace: [ 1297.379541][ T7660] [ 1297.379549][ T7660] dump_stack_lvl+0x189/0x250 [ 1297.379567][ T7660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1297.379582][ T7660] ? __pfx__printk+0x10/0x10 [ 1297.379602][ T7660] validate_chain+0x1f05/0x2140 [ 1297.379624][ T7660] __lock_acquire+0xab9/0xd20 [ 1297.379643][ T7660] ? kill_fasync+0x199/0x4d0 [ 1297.379658][ T7660] lock_acquire+0x120/0x360 [ 1297.379675][ T7660] ? kill_fasync+0x199/0x4d0 [ 1297.379694][ T7660] _raw_read_lock_irqsave+0xaf/0x100 [ 1297.379708][ T7660] ? kill_fasync+0x199/0x4d0 [ 1297.379722][ T7660] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1297.379734][ T7660] ? do_raw_spin_lock+0x121/0x290 [ 1297.379752][ T7660] kill_fasync+0x199/0x4d0 [ 1297.379766][ T7660] ? kill_fasync+0x53/0x4d0 [ 1297.379781][ T7660] evdev_pass_values+0x627/0xbd0 [ 1297.379798][ T7660] ? evdev_pass_values+0x5c1/0xbd0 [ 1297.379814][ T7660] evdev_events+0x1e6/0x340 [ 1297.379827][ T7660] ? evdev_events+0x79/0x340 [ 1297.379840][ T7660] ? input_pass_values+0x8d/0x890 [ 1297.379853][ T7660] input_pass_values+0x288/0x890 [ 1297.379868][ T7660] ? input_handle_event+0x70c/0xf30 [ 1297.379886][ T7660] input_event_dispose+0x330/0x6b0 [ 1297.379905][ T7660] input_inject_event+0x1dd/0x340 [ 1297.379922][ T7660] ? input_inject_event+0xb6/0x340 [ 1297.379943][ T7660] evdev_write+0x2fc/0x480 [ 1297.379956][ T7660] ? futex_private_hash_put+0x245/0x280 [ 1297.379973][ T7660] ? __pfx_evdev_write+0x10/0x10 [ 1297.379987][ T7660] ? bpf_lsm_file_permission+0x9/0x20 [ 1297.380007][ T7660] ? security_file_permission+0x75/0x290 [ 1297.380029][ T7660] ? rw_verify_area+0x255/0x4d0 [ 1297.380045][ T7660] ? __lock_acquire+0xab9/0xd20 [ 1297.380061][ T7660] ? __pfx_evdev_write+0x10/0x10 [ 1297.380076][ T7660] vfs_write+0x27e/0xb30 [ 1297.380094][ T7660] ? __pfx_vfs_write+0x10/0x10 [ 1297.380111][ T7660] ? __fget_files+0x2a/0x420 [ 1297.380128][ T7660] ? __fget_files+0x2a/0x420 [ 1297.380140][ T7660] ? __fget_files+0x3a0/0x420 [ 1297.380151][ T7660] ? __fget_files+0x2a/0x420 [ 1297.380165][ T7660] ksys_write+0x145/0x250 [ 1297.380182][ T7660] ? __pfx_ksys_write+0x10/0x10 [ 1297.380197][ T7660] ? rcu_is_watching+0x15/0xb0 [ 1297.380212][ T7660] ? do_syscall_64+0xbe/0x3b0 [ 1297.380227][ T7660] do_syscall_64+0xfa/0x3b0 [ 1297.380242][ T7660] ? lockdep_hardirqs_on+0x9c/0x150 [ 1297.380255][ T7660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.380268][ T7660] ? clear_bhb_loop+0x60/0xb0 [ 1297.380283][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.380297][ T7660] RIP: 0033:0x7f92d998eec9 [ 1297.380311][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.380323][ T7660] RSP: 002b:00007f92da8c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1297.380339][ T7660] RAX: ffffffffffffffda RBX: 00007f92d9be5fa0 RCX: 00007f92d998eec9 [ 1297.380350][ T7660] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 1297.380360][ T7660] RBP: 00007f92d9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1297.380369][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.380379][ T7660] R13: 00007f92d9be6038 R14: 00007f92d9be5fa0 R15: 00007f92d9d0fa28 [ 1297.380393][ T7660] [ 1297.380561][ T30] audit: type=1800 audit(1758926462.306:5852): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20538" name="nullb0" dev="devtmpfs" ino=6781 res=0 errno=0 [ 1297.389871][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.805761][ T5926] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1297.959690][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.970691][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.981818][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1297.994749][ T5926] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1298.004254][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.013981][ T5926] usb 1-1: config 0 descriptor?? [ 1298.428004][ T5926] plantronics 0003:047F:FFFF.00C1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1298.680777][ T5933] usb 1-1: USB disconnect, device number 76 [ 1300.220483][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.226819][ T1305] ieee802154 phy1 wpan1: encryption failed: -22