last executing test programs: 23.172420476s ago: executing program 1 (id=1159): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000597000/0x2000)=nil, 0x2000, 0x1000007, 0x4028011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.69593995s ago: executing program 1 (id=1162): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = dup2(r0, r0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$hidraw(r1, 0x0, 0x0) 21.34514212s ago: executing program 1 (id=1171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 21.249373497s ago: executing program 1 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 21.118310379s ago: executing program 1 (id=1175): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 20.742575286s ago: executing program 1 (id=1177): r0 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x808, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x4000000, 0x0, 0x0, 0x2}) close(r0) 20.329391559s ago: executing program 32 (id=1177): r0 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x808, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x4000000, 0x0, 0x0, 0x2}) close(r0) 4.035152078s ago: executing program 0 (id=1328): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r2}}], 0x1c, 0x24042044}, 0x6) 3.866683196s ago: executing program 0 (id=1330): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3aefa000) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) getpgid(r0) 3.620205609s ago: executing program 5 (id=1334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0001002cbd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB='m'], 0x1c}, 0x1, 0x0, 0x0, 0x2004e904}, 0x4000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.556780653s ago: executing program 5 (id=1335): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 3.433496746s ago: executing program 5 (id=1336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) 3.285659737s ago: executing program 5 (id=1338): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x4000400) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 3.163886369s ago: executing program 0 (id=1341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a40)=""/215, 0xd7}, {&(0x7f0000000b40)=""/4096, 0xc0}], 0x2}, 0x1) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f00000044c0)={0x198, 0x21, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x185, 0x138, 0x0, 0x1, [@nested={0x4, 0x112}, @generic="87baa4740d1c33fe3865c2db1d8de34ee871ca3dd265ff62e6c48902e5515860d6ffdb96d7fd1c546a9a09e5eed175c94514f3fc1da21653a77e6d92783514ec30f439be9a4f56543a1d859c62c21857382bed88d17d9c378db307ddcc432bd8ffcd4312", @generic="efbf4c3f0e24b58468e28e3f76012618309f052348cdc06325a36a4a5ef0766dc19435c0fc04b17e8ded89a2ecbc4f9ea83cf5deaa45e53f8713644ef39aed23958e7fea0f35e485b24048e45a4dfb34659927835d92543d9424254611c1a2cc33cd5d9bc90f574b9b2d77d933e3c02ce8c55ba2fcb75b316d7a90f1c58d34c31d0919281de909e00a4f7d01bc294721a35832adfdaa2f07e9d64b7248b696f691494c90cfcb6af548874c0b7b74959d5d195ffe179d596c71fb564ed463de1aeda6a4619a613027221d6444a46e", @generic="b8e64bde068f9c48d7e2f8e8d4c641031debd11a068306e3d380c0f3c92d1e535dff27726508ded62898c34aa3ecfbed3091b3ef7cee52aa4007c4cbb8343833a0007901ffe8eba43a27b7"]}]}, 0x198}], 0x1, 0x0, 0x0, 0x3a630fc1f7620b5c}, 0x0) 3.0399697s ago: executing program 0 (id=1344): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) write$char_usb(r1, &(0x7f00000000c0)='V', 0x1) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 2.723225482s ago: executing program 2 (id=1350): socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x3, 0x40000333}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.71104917s ago: executing program 4 (id=1351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f00000018c0)="3c17", 0x2}], 0x2}, 0x0) 2.596616307s ago: executing program 4 (id=1353): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) 2.405272399s ago: executing program 4 (id=1355): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0xfffffffe}) rt_tgsigqueueinfo(r1, r0, 0xe, &(0x7f0000001000)={0x21, 0x8, 0xfffffffe}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) 2.300113914s ago: executing program 5 (id=1356): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r2, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 2.263122609s ago: executing program 2 (id=1358): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xcb6, 0x400, 0x0, 0x1bb}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x40}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.143967916s ago: executing program 4 (id=1359): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) 1.740281704s ago: executing program 5 (id=1361): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.524320691s ago: executing program 4 (id=1363): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 1.248202487s ago: executing program 2 (id=1364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}], 0x1, 0x10000, 0x0) 1.088388923s ago: executing program 3 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x3, 0x0, 0x4, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x27800000000, 0x0, 0x1, r2, 0x1}) 1.051361143s ago: executing program 2 (id=1366): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) 782.704008ms ago: executing program 2 (id=1367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) listen(r0, 0x100101) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x12}) accept4(r0, 0x0, 0x0, 0x80800) 684.017617ms ago: executing program 3 (id=1368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001780)=""/1, 0x1}], 0x1}}], 0x1, 0x40000001, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000300)='8', 0x1}], 0x1) 594.465595ms ago: executing program 2 (id=1369): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0xffffffffffffff3d, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x94}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}], 0x1, 0x40000000, 0x0) write(r3, 0x0, 0x0) 508.706577ms ago: executing program 3 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pimreg1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 403.964007ms ago: executing program 0 (id=1371): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e12080016", 0x2b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000000000a0000002950000000000e7ff009ec2ffff"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 281.144296ms ago: executing program 3 (id=1372): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) 208.893874ms ago: executing program 0 (id=1373): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x0, 0x17, 0x1, "0f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 80.099619ms ago: executing program 3 (id=1374): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 74.940825ms ago: executing program 4 (id=1375): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1376): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): nable to read RDB block 7 [ 130.999228][ T6206] loop9: unable to read partition table [ 131.006448][ T6206] loop9: partition table beyond EOD, truncated [ 131.018393][ T6877] Dev loop9: unable to read RDB block 7 [ 131.034003][ T6877] loop9: unable to read partition table [ 131.040726][ T6877] loop9: partition table beyond EOD, truncated [ 131.070680][ T6877] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 131.244087][ T5924] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.414091][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 131.427357][ T5924] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 131.436851][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.454326][ T5924] usb 4-1: Product: syz [ 131.458660][ T5924] usb 4-1: Manufacturer: syz [ 131.463283][ T5924] usb 4-1: SerialNumber: syz [ 131.477736][ T5924] usb 4-1: config 0 descriptor?? [ 131.521024][ T5924] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 131.560293][ T5924] usb 4-1: Detected FT232H [ 131.600510][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 131.753895][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 132.093935][ T980] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 132.168039][ T6813] Set syz1 is full, maxelem 65536 reached [ 132.191910][ T5924] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 132.268334][ T980] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 132.294868][ T980] usb 1-1: config 0 has no interface number 0 [ 132.301034][ T980] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.325779][ T980] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 132.347663][ T980] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 132.404207][ T980] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 132.412033][ T5924] usb 4-1: USB disconnect, device number 8 [ 132.425369][ T980] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 132.436662][ T980] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.451685][ T980] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.461347][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.491520][ T5924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 132.513031][ T980] usb 1-1: config 0 descriptor?? [ 132.515362][ T5924] ftdi_sio 4-1:0.0: device disconnected [ 132.526262][ T6901] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.536345][ T6901] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.555194][ T980] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 132.778574][ T980] usb 1-1: USB disconnect, device number 10 [ 132.784777][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 132.813454][ T980] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 132.836893][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.846158][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.984327][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.175482][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.193757][ T24] usb 3-1: config 0 has no interface number 0 [ 134.200742][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.239941][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.267407][ T24] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 134.413639][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.437226][ T24] usb 3-1: config 0 descriptor?? [ 134.812173][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 134.871428][ T6956] netlink: 173 bytes leftover after parsing attributes in process `syz.0.421'. [ 134.938528][ T24] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0008/input/input15 [ 135.116129][ T24] holtek_kbd 0003:04D9:A055.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 135.154001][ T5924] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.183303][ T24] usb 3-1: USB disconnect, device number 6 [ 135.318770][ T6967] fido_id[6967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 135.340631][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 135.380843][ T5924] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 135.382735][ T6970] syzkaller1: entered promiscuous mode [ 135.393645][ T5924] usb 5-1: config 0 has no interface number 0 [ 135.415265][ T5924] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 123, changing to 10 [ 135.431925][ T6970] syzkaller1: entered allmulticast mode [ 135.464228][ T5924] usb 5-1: config 0 interface 85 has no altsetting 0 [ 135.488038][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 135.503865][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.514820][ T5924] usb 5-1: Product: syz [ 135.519024][ T5924] usb 5-1: Manufacturer: syz [ 135.525719][ T5924] usb 5-1: SerialNumber: syz [ 135.541776][ T5924] usb 5-1: config 0 descriptor?? [ 136.111821][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 136.173139][ T5924] appletouch 5-1:0.85: Geyser mode initialized. [ 136.202833][ T5924] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input16 [ 136.293144][ T7001] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 136.298053][ T5849] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 136.424734][ T5968] usb 5-1: USB disconnect, device number 6 [ 136.482412][ T5968] appletouch 5-1:0.85: input: appletouch disconnected [ 137.201804][ T30] audit: type=1326 audit(1756327915.313:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 137.223760][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.253683][ T30] audit: type=1326 audit(1756327915.313:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 137.280345][ T30] audit: type=1326 audit(1756327915.313:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 137.308810][ T30] audit: type=1326 audit(1756327915.313:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 137.356129][ T30] audit: type=1326 audit(1756327915.313:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 137.388922][ T30] audit: type=1326 audit(1756327915.313:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 137.461536][ T30] audit: type=1326 audit(1756327915.313:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 137.512414][ T30] audit: type=1326 audit(1756327915.313:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 137.543746][ T30] audit: type=1326 audit(1756327915.313:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 137.679309][ T30] audit: type=1326 audit(1756327915.313:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.0.451" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 137.703872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 137.803756][ T5938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.972434][ T5938] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.982432][ T5938] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 137.995731][ T5938] usb 3-1: config 6 has no interface number 0 [ 138.009248][ T5938] usb 3-1: config 6 interface 200 has no altsetting 0 [ 138.028722][ T5938] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 138.038495][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.090231][ T5938] usb 3-1: Product: syz [ 138.094713][ T5938] usb 3-1: Manufacturer: syz [ 138.099477][ T5938] usb 3-1: SerialNumber: syz [ 138.598921][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 138.612114][ T7062] openvswitch: netlink: nsh attr 0 has unexpected len 152 expected 0 [ 138.630275][ T7062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.906591][ T5938] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 138.933233][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.945548][ T5938] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 138.951339][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 138.955182][ T5938] usb 3-1: media controller created [ 138.971330][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 138.995162][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.115654][ T5938] dvb-usb: recv bulk message failed: -22 [ 139.219830][ T7086] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 139.320222][ T5938] dvb-usb: bulk message failed: -71 (6/0) [ 139.327115][ T5938] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 139.347710][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 139.362709][ T5938] dvb-usb: schedule remote query interval to 150 msecs. [ 139.370399][ T5938] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 139.388004][ T5938] usb 3-1: USB disconnect, device number 7 [ 139.533110][ T5938] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 140.473747][ T5968] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.633804][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 140.644506][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.660156][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.678857][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.692583][ T5968] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.706611][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.723154][ T5968] usb 3-1: config 0 descriptor?? [ 141.154098][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.163988][ T5968] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 141.192603][ T5968] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 141.214970][ T5968] microsoft 0003:045E:07DA.0009: implement() called with n (152) > 32! (kworker/0:5) [ 141.323781][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 141.343925][ T980] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 141.353702][ T5968] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 141.372244][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.395804][ T5968] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 141.412745][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.434947][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.445488][ T5968] microsoft 0003:045E:07DA.0009: no inputs found [ 141.451858][ T5968] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 141.457883][ T7142] loop9: detected capacity change from 0 to 7 [ 141.461098][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.493871][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.513239][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.540921][ T7142] Dev loop9: unable to read RDB block 7 [ 141.550722][ T7142] loop9: unable to read partition table [ 141.564856][ T7142] loop9: partition table beyond EOD, truncated [ 141.571224][ T7142] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 141.575797][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.625772][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.659397][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.669480][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.712208][ T5924] usb 3-1: USB disconnect, device number 8 [ 141.730915][ T980] usb 5-1: Product: syz [ 141.751040][ T980] usb 5-1: Manufacturer: syz [ 141.764206][ T980] usb 5-1: SerialNumber: syz [ 141.815601][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 141.821202][ T9] usbtmc 2-1:16.0: can't read capabilities [ 142.013905][ T980] usb 5-1: 0:2 : does not exist [ 142.061929][ T980] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 142.062369][ T24] usb 2-1: USB disconnect, device number 8 [ 142.162700][ T980] usb 5-1: USB disconnect, device number 7 [ 142.172582][ T7153] dummy0: entered promiscuous mode [ 142.180833][ T7153] macsec1: entered promiscuous mode [ 142.188259][ T7153] macsec1: entered allmulticast mode [ 142.197196][ T7153] dummy0: entered allmulticast mode [ 142.210361][ T7153] dummy0: left allmulticast mode [ 142.216854][ T7153] dummy0: left promiscuous mode [ 142.241544][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.784281][ T9] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 142.955452][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 142.965872][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.998809][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.042593][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.075912][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.123302][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 143.151646][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.164947][ T7189] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.522'. [ 143.183169][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.213617][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.233629][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.266619][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 143.280966][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.327516][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.381329][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.425938][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.452320][ T9] usb 3-1: string descriptor 0 read error: -22 [ 143.459544][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 143.497465][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.524929][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 143.968255][ T5968] usb 3-1: USB disconnect, device number 9 [ 145.272830][ T7248] loop2: detected capacity change from 0 to 7 [ 145.289320][ T7248] Dev loop2: unable to read RDB block 7 [ 145.302931][ T7248] loop2: unable to read partition table [ 145.311122][ T7248] loop2: partition table beyond EOD, truncated [ 145.323589][ T7248] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 145.453736][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 145.625388][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.645441][ T7260] loop9: detected capacity change from 0 to 7 [ 145.653719][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 145.683128][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.699737][ T7260] Dev loop9: unable to read RDB block 7 [ 145.725887][ T7260] loop9: unable to read partition table [ 145.737294][ T9] usb 1-1: config 0 descriptor?? [ 145.765125][ T7260] loop9: partition table beyond EOD, truncated [ 145.773700][ T7260] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 146.269587][ T7281] syzkaller1: entered promiscuous mode [ 146.275412][ T7281] syzkaller1: entered allmulticast mode [ 146.293943][ T5924] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.400208][ T9] usb 1-1: USB disconnect, device number 11 [ 146.460707][ T5924] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.489339][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.500595][ T5924] usb 3-1: Product: syz [ 146.519204][ T5924] usb 3-1: Manufacturer: syz [ 146.533802][ T5924] usb 3-1: SerialNumber: syz [ 146.693679][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.742080][ T7291] loop2: detected capacity change from 0 to 7 [ 146.742312][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 146.757773][ T5937] Dev loop2: unable to read RDB block 7 [ 146.758611][ T30] audit: type=1326 audit(1756327924.853:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.1.565" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x0 [ 146.763369][ T5937] loop2: AHDI p2 p3 [ 146.784719][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.798582][ T5937] loop2: partition table partially beyond EOD, truncated [ 146.807143][ T5937] loop2: p2 size 150995456 extends beyond EOD, truncated [ 146.829174][ T7291] Dev loop2: unable to read RDB block 7 [ 146.834994][ T7291] loop2: AHDI p2 p3 [ 146.839200][ T7291] loop2: partition table partially beyond EOD, truncated [ 146.847052][ T7291] loop2: p2 size 150995456 extends beyond EOD, truncated [ 146.890584][ T980] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 146.903505][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.940151][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 146.942327][ T980] usb 5-1: Product: syz [ 146.962613][ T980] usb 5-1: Manufacturer: syz [ 146.967602][ T980] usb 5-1: SerialNumber: syz [ 146.980334][ T980] usb 5-1: config 0 descriptor?? [ 147.056433][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 147.404426][ T5924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 147.425342][ T5924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 147.440847][ T5924] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 147.470544][ T5924] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 147.514214][ T5924] usb 3-1: USB disconnect, device number 10 [ 147.637439][ T7310] netlink: 188 bytes leftover after parsing attributes in process `syz.1.574'. [ 147.783693][ T5938] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 147.971057][ T5938] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 148.015513][ T5938] usb 4-1: config 0 has no interface number 0 [ 148.055493][ T980] usb 5-1: Firmware version (0.0) predates our first public release. [ 148.086866][ T980] usb 5-1: Please update to version 0.2 or newer [ 148.089149][ T5938] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 148.169797][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.202995][ T5938] usb 4-1: Product: syz [ 148.224738][ T5938] usb 4-1: Manufacturer: syz [ 148.259706][ T5938] usb 4-1: SerialNumber: syz [ 148.265195][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.283863][ T980] usb 5-1: USB disconnect, device number 8 [ 148.324522][ T5938] usb 4-1: config 0 descriptor?? [ 148.469711][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.497727][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.539391][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.582852][ T24] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.618545][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.630556][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.653103][ T24] usb 2-1: Product: syz [ 148.663401][ T24] usb 2-1: Manufacturer: syz [ 148.680282][ T24] usb 2-1: SerialNumber: syz [ 148.760293][ T5938] usb 4-1: Firmware version (0.0) predates our first public release. [ 148.782392][ T5938] usb 4-1: Please update to version 0.2 or newer [ 148.807931][ T5938] usb 4-1: Firmware: build [ 149.031228][ T5938] usb 4-1: USB disconnect, device number 9 [ 149.044541][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.143699][ T5924] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.218816][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.240598][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.263612][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.281540][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.300843][ T7333] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.312582][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.320881][ T5924] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 149.334610][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.361664][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.377634][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.391806][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.407683][ T5924] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.422617][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.424898][ T980] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.445734][ T5924] usb 1-1: config 0 descriptor?? [ 149.451767][ T7339] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 149.522117][ T9] usb 5-1: USB disconnect, device number 9 [ 149.585282][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 149.593159][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.605469][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.623743][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.632830][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.662907][ T980] usb 3-1: config 0 descriptor?? [ 149.678935][ T980] hub 3-1:0.0: USB hub found [ 149.731101][ T24] cdc_mbim 2-1:1.0: bind() failure [ 149.751312][ T24] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 149.762440][ T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 149.777477][ T24] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 149.796144][ T24] usb 2-1: USB disconnect, device number 9 [ 149.876705][ T5924] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 149.883264][ T980] hub 3-1:0.0: 2 ports detected [ 149.906401][ T5924] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 150.140853][ T5924] usb 1-1: USB disconnect, device number 12 [ 150.678698][ T7366] capability: warning: `syz.4.596' uses deprecated v2 capabilities in a way that may be insecure [ 150.920617][ T980] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 150.942240][ T980] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 150.978878][ T980] usbhid 3-1:0.0: can't add hid device: -32 [ 151.004278][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 151.106999][ T7382] pimreg: entered allmulticast mode [ 151.120334][ T7382] pimreg: left allmulticast mode [ 151.203967][ T5968] usb 3-1: USB disconnect, device number 11 [ 151.269527][ T5872] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.433824][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 151.443974][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.467232][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.476589][ T7388] syzkaller1: entered promiscuous mode [ 151.482563][ T7388] syzkaller1: entered allmulticast mode [ 151.493674][ T5872] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 151.502910][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.525238][ T5872] usb 4-1: config 0 descriptor?? [ 151.861152][ T7400] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.612'. [ 151.987897][ T5872] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 152.173782][ T980] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.182561][ T7412] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 152.267979][ T24] usb 4-1: USB disconnect, device number 10 [ 152.345636][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 152.393626][ T980] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 152.419935][ T980] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 152.439077][ T980] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.463107][ T980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.474618][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.482639][ T980] usb 3-1: SerialNumber: syz [ 152.501457][ T7393] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.761381][ T980] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 152.789404][ T980] usb 3-1: USB disconnect, device number 12 [ 153.533758][ T5968] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 153.620928][ T7459] veth0_to_hsr: entered promiscuous mode [ 153.628037][ T7459] veth0_to_hsr: entered allmulticast mode [ 153.636467][ T7458] veth0_to_hsr: left allmulticast mode [ 153.642199][ T7458] veth0_to_hsr: left promiscuous mode [ 153.707972][ T5968] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 153.717435][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.725793][ T5968] usb 3-1: Product: syz [ 153.730454][ T5968] usb 3-1: Manufacturer: syz [ 153.739948][ T5968] usb 3-1: SerialNumber: syz [ 153.755112][ T5968] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.764293][ T980] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.793899][ T5980] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 153.814322][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 153.908585][ T7467] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 153.933752][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 153.951259][ T980] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 153.984955][ T5980] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 153.999847][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.022007][ T5980] usb 5-1: config 0 has no interface number 0 [ 154.059717][ T980] usb 4-1: Product: syz [ 154.066280][ T5980] usb 5-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 154.077567][ T980] usb 4-1: Manufacturer: syz [ 154.082283][ T980] usb 4-1: SerialNumber: syz [ 154.099578][ T5980] usb 5-1: config 0 interface 20 altsetting 119 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 154.114707][ T980] usb 4-1: config 0 descriptor?? [ 154.120075][ T5980] usb 5-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 154.131475][ T5980] usb 5-1: config 0 interface 20 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 154.146313][ T980] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 154.153137][ T5980] usb 5-1: config 0 interface 20 has no altsetting 0 [ 154.166726][ T5980] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 154.190457][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.204761][ T5980] usb 5-1: Product: syz [ 154.209047][ T5980] usb 5-1: Manufacturer: syz [ 154.214385][ T5980] usb 5-1: SerialNumber: syz [ 154.223022][ T5980] usb 5-1: config 0 descriptor?? [ 154.295998][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.318446][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.352151][ T24] usb 3-1: USB disconnect, device number 13 [ 154.447360][ T5980] keyspan 5-1:0.20: Keyspan 1 port adapter converter detected [ 154.462208][ T5980] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 87 [ 154.482091][ T5980] keyspan 5-1:0.20: unsupported endpoint type 0 [ 154.492576][ T5980] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 81 [ 154.505226][ T5980] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 1 [ 154.513068][ T5980] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 2 [ 154.531251][ T5980] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 85 [ 154.539515][ T5980] keyspan 5-1:0.20: found no endpoint descriptor for endpoint 5 [ 154.560735][ T5980] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 154.602425][ T5980] usb 5-1: USB disconnect, device number 10 [ 154.633353][ T5980] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 154.645882][ T5980] keyspan 5-1:0.20: device disconnected [ 154.648933][ T7480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.833833][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 154.841339][ T9] ath9k_htc: Failed to initialize the device [ 154.867914][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 155.002615][ T30] audit: type=1326 audit(1756327933.113:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.651" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 155.023874][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.174679][ T980] gspca_ov534_9: reg_w failed -71 [ 155.761921][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 155.773637][ T980] gspca_ov534_9: Unknown sensor 0000 [ 155.773724][ T980] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 155.810830][ T980] usb 4-1: USB disconnect, device number 11 [ 155.823724][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.996229][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.010894][ T24] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 156.040454][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.063980][ T24] usb 2-1: config 0 descriptor?? [ 156.225128][ T980] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.385689][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.406193][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.420328][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.440812][ T980] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.450729][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.480737][ T980] usb 4-1: config 0 descriptor?? [ 156.488871][ T24] ortek 0003:05A4:8003.000D: unknown main item tag 0x0 [ 156.506233][ T24] ortek 0003:05A4:8003.000D: unknown main item tag 0x0 [ 156.542329][ T5924] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.552547][ T24] ortek 0003:05A4:8003.000D: unknown main item tag 0x0 [ 156.582889][ T24] ortek 0003:05A4:8003.000D: unknown main item tag 0x0 [ 156.590124][ T24] ortek 0003:05A4:8003.000D: unknown main item tag 0x0 [ 156.607437][ T24] ortek 0003:05A4:8003.000D: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.1-1/input0 [ 156.688444][ T24] usb 2-1: USB disconnect, device number 10 [ 156.753765][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 156.780359][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.792503][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 156.816948][ T5924] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 156.833578][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.847149][ T5924] usb 1-1: Product: syz [ 156.862058][ T5924] usb 1-1: Manufacturer: syz [ 156.876615][ T5924] usb 1-1: SerialNumber: syz [ 156.893220][ T5924] usb 1-1: config 0 descriptor?? [ 156.921745][ T980] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 156.965926][ T980] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.138093][ T5924] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 157.393636][ T5938] usb 1-1: USB disconnect, device number 13 [ 157.567063][ T5924] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.620904][ T7551] process 'syz.2.677' launched '/dev/fd/3' with NULL argv: empty string added [ 157.734121][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 157.742086][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.771098][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.809376][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.836746][ T5924] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.858048][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.890614][ T5924] usb 2-1: config 0 descriptor?? [ 158.311642][ T5924] HID 045e:07da: Invalid code 65791 type 1 [ 158.319940][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input19 [ 158.342502][ T5924] microsoft 0003:045E:07DA.000F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 158.522472][ T5938] usb 2-1: USB disconnect, device number 11 [ 158.967269][ T9] usb 4-1: USB disconnect, device number 12 [ 159.136981][ T7584] syzkaller1: entered promiscuous mode [ 159.158044][ T7584] syzkaller1: entered allmulticast mode [ 159.215410][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 159.244126][ T7589] bridge_slave_1: left allmulticast mode [ 159.257802][ T7589] bridge_slave_1: left promiscuous mode [ 159.271395][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.298178][ T7589] bridge_slave_0: left allmulticast mode [ 159.304337][ T7589] bridge_slave_0: left promiscuous mode [ 159.311192][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.683673][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.703670][ T980] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.847318][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 159.870161][ T980] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.884475][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 159.898321][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.907774][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.918969][ T5951] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.932436][ T980] usb 4-1: config 0 descriptor?? [ 159.946272][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 159.973800][ T980] cp210x 4-1:0.0: cp210x converter detected [ 159.980693][ T9] pvrusb2: ********** [ 159.988308][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 160.003975][ T9] pvrusb2: Important functionality might not be entirely working. [ 160.011851][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 160.026172][ T9] pvrusb2: ********** [ 160.163066][ T2346] pvrusb2: Invalid write control endpoint [ 160.253010][ T2346] pvrusb2: Invalid write control endpoint [ 160.260138][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 160.272728][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 160.280505][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 160.291213][ T2346] pvrusb2: Device being rendered inoperable [ 160.302337][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 160.312394][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 160.327971][ T2346] pvrusb2: Attached sub-driver cx25840 [ 160.334898][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 160.349538][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 160.358101][ T980] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 160.383217][ T7595] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 160.396150][ T5968] usb 2-1: USB disconnect, device number 12 [ 160.574081][ T980] usb 4-1: cp210x converter now attached to ttyUSB0 [ 160.770851][ T980] usb 4-1: USB disconnect, device number 13 [ 160.783949][ T980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.795773][ T980] cp210x 4-1:0.0: device disconnected [ 161.147473][ T7635] syzkaller1: entered promiscuous mode [ 161.162944][ T7635] syzkaller1: entered allmulticast mode [ 161.244044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.253890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 161.743656][ T5951] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 161.756061][ T7654] openvswitch: netlink: IPv6 tunnel dst address is zero [ 161.916127][ T30] audit: type=1326 audit(1756327940.033:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 161.953449][ T30] audit: type=1326 audit(1756327940.033:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 161.982184][ T30] audit: type=1326 audit(1756327940.033:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 162.029444][ T5951] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.038028][ T5951] usb 2-1: config 179 has no interface number 0 [ 162.067711][ T30] audit: type=1326 audit(1756327940.043:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 162.070241][ T5951] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 162.152863][ T30] audit: type=1326 audit(1756327940.043:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 162.175719][ T5951] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 162.239948][ T5951] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 162.242719][ T30] audit: type=1326 audit(1756327940.043:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 162.286957][ T5951] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 162.320181][ T30] audit: type=1326 audit(1756327940.043:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 162.388491][ T30] audit: type=1326 audit(1756327940.043:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 162.392481][ T5951] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 162.490661][ T30] audit: type=1326 audit(1756327940.043:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 162.524307][ T5951] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 162.543660][ T30] audit: type=1326 audit(1756327940.043:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 162.654662][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.701035][ T7648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.717030][ T7648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.885257][ T5938] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 163.068949][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 163.079857][ T5938] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 163.120478][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.132545][ T5924] usb 2-1: USB disconnect, device number 13 [ 163.132577][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.146992][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.170543][ T5938] usb 4-1: Product: syz [ 163.204224][ T5938] usb 4-1: Manufacturer: syz [ 163.208874][ T5938] usb 4-1: SerialNumber: syz [ 163.238445][ T5938] usb 4-1: config 0 descriptor?? [ 163.254011][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.264050][ T5938] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 163.423625][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 163.431057][ T43] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 163.439797][ T43] usb 5-1: config 1 has no interface number 0 [ 163.446578][ T43] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 163.462155][ T43] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 163.472955][ T43] usb 5-1: config 1 interface 105 has no altsetting 0 [ 163.491482][ T43] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 163.501949][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.511127][ T43] usb 5-1: Product: syz [ 163.515724][ T43] usb 5-1: Manufacturer: syz [ 163.520359][ T43] usb 5-1: SerialNumber: syz [ 163.531342][ T7682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 163.539095][ T7682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 163.957845][ T7682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 163.973681][ T7682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 164.045702][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 164.056944][ T7705] bridge_slave_1: left allmulticast mode [ 164.062763][ T7705] bridge_slave_1: left promiscuous mode [ 164.069729][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.081545][ T7705] bridge_slave_0: left allmulticast mode [ 164.087711][ T7705] bridge_slave_0: left promiscuous mode [ 164.094478][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.279048][ T5938] gspca_sonixj: reg_w1 err -71 [ 164.325706][ T5938] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 164.382399][ T5938] usb 4-1: USB disconnect, device number 14 [ 164.593664][ T5951] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 164.606572][ T43] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 164.623907][ T43] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 164.652667][ T43] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 164.670424][ T43] usb 5-1: USB disconnect, device number 12 [ 164.679688][ T43] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 164.747952][ T43] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 164.758298][ T43] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 164.769545][ T43] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 164.773616][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 164.796311][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.847786][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.883677][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.900670][ T5951] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 164.931135][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.951520][ T5951] usb 3-1: config 0 descriptor?? [ 165.405526][ T7734] loop8: detected capacity change from 0 to 8 [ 165.408959][ T5951] hid (null): report_id 11059 is invalid [ 165.438581][ T5951] hid (null): unknown global tag 0xfa [ 165.445264][ T7734] Dev loop8: unable to read RDB block 8 [ 165.485286][ T7734] loop8: unable to read partition table [ 165.488868][ T5951] cougar 0003:060B:500A.0010: usage count exceeds max: fixing up report descriptor [ 165.502821][ T7734] loop8: partition table beyond EOD, truncated [ 165.514736][ T5951] cougar 0003:060B:500A.0010: unexpected long global item [ 165.524997][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 165.539753][ T7734] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 165.539940][ T5951] cougar 0003:060B:500A.0010: parse failed [ 165.601052][ T5951] cougar 0003:060B:500A.0010: probe with driver cougar failed with error -22 [ 165.692293][ T5951] usb 3-1: USB disconnect, device number 14 [ 165.904038][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.100015][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 166.111906][ T43] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 166.123518][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.134856][ T43] usb 1-1: Product: syz [ 166.139130][ T43] usb 1-1: Manufacturer: syz [ 166.153770][ T43] usb 1-1: SerialNumber: syz [ 166.161212][ T43] usb 1-1: config 0 descriptor?? [ 166.175657][ T43] gspca_main: sq930x-2.14.0 probing 2770:930c [ 166.393641][ T5924] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 166.585969][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 166.624778][ T5924] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 166.633034][ T5924] usb 5-1: config 0 has no interface number 0 [ 166.652169][ T5924] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 166.686506][ T5924] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 166.717765][ T5924] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 166.733605][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.741721][ T5924] usb 5-1: Product: syz [ 166.756083][ T5924] usb 5-1: Manufacturer: syz [ 166.760781][ T5924] usb 5-1: SerialNumber: syz [ 166.782759][ T5924] usb 5-1: config 0 descriptor?? [ 166.814392][ T7749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 166.943876][ T7749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.168134][ T7749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.179734][ T7749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.273972][ T43] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 167.280115][ T43] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 167.318374][ T43] usb 1-1: USB disconnect, device number 14 [ 167.671227][ T7766] netlink: 156 bytes leftover after parsing attributes in process `syz.1.764'. [ 167.803265][ T5924] asix 5-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x80 [ 168.019780][ T5924] usb 5-1: USB disconnect, device number 13 [ 168.252158][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 168.348733][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 168.373146][ T7787] bridge_slave_1: left allmulticast mode [ 168.379564][ T7787] bridge_slave_1: left promiscuous mode [ 168.389444][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.411864][ T7787] bridge_slave_0: left allmulticast mode [ 168.423216][ T7787] bridge_slave_0: left promiscuous mode [ 168.450559][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.498536][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.693616][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 169.741557][ T43] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 169.760568][ T43] usb 2-1: config 1 has no interface number 0 [ 169.780332][ T43] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 169.810580][ T43] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 169.829979][ T43] usb 2-1: config 1 interface 105 has no altsetting 0 [ 169.849557][ T43] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 169.860098][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.868700][ T43] usb 2-1: Product: syz [ 169.883499][ T43] usb 2-1: Manufacturer: syz [ 169.889090][ T43] usb 2-1: SerialNumber: syz [ 169.905284][ T7819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.912612][ T7819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.083704][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 170.270265][ T5872] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 170.295773][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.313616][ T5872] usb 5-1: Product: syz [ 170.318026][ T5872] usb 5-1: Manufacturer: syz [ 170.322674][ T5872] usb 5-1: SerialNumber: syz [ 170.343321][ T7819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.352261][ T5872] usb 5-1: config 0 descriptor?? [ 170.369595][ T7819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.384393][ T5872] ch341 5-1:0.0: ch341-uart converter detected [ 171.011511][ T43] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 171.079034][ T43] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 171.144273][ T43] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 171.215660][ T43] usb 2-1: USB disconnect, device number 14 [ 171.266754][ T43] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 171.396674][ T5872] usb 5-1: failed to send control message: -71 [ 171.405383][ T5872] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 171.443672][ T5872] usb 5-1: USB disconnect, device number 14 [ 171.482124][ T43] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 171.494283][ T5872] ch341 5-1:0.0: device disconnected [ 171.524760][ T43] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 171.567707][ T43] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 172.333602][ T5968] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 172.505532][ T5968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.539204][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 172.613588][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.655925][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 172.705582][ T5968] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.735619][ T5968] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.762627][ T5968] usb 3-1: Manufacturer: syz [ 172.814539][ T5968] usb 3-1: config 0 descriptor?? [ 173.010642][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 173.221213][ T5968] rc_core: IR keymap rc-hauppauge not found [ 173.253627][ T5968] Registered IR keymap rc-empty [ 173.266438][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.333892][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.360485][ T5968] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 173.426251][ T5968] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 173.495867][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.550859][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.586026][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.644168][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.665195][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.714385][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.743740][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.793965][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.843671][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.884385][ T5968] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 173.929967][ T5968] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 173.962998][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 173.972016][ T5968] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.013946][ T5968] usb 3-1: USB disconnect, device number 15 [ 174.616004][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 175.013655][ T5872] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 175.070617][ T7968] syzkaller1: entered promiscuous mode [ 175.078445][ T7968] syzkaller1: entered allmulticast mode [ 175.189416][ T5872] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.204190][ T7972] sctp: [Deprecated]: syz.0.844 (pid 7972) Use of int in maxseg socket option. [ 175.204190][ T7972] Use struct sctp_assoc_value instead [ 175.221075][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.253867][ T5872] usb 3-1: config 0 descriptor?? [ 175.271581][ T5872] cp210x 3-1:0.0: cp210x converter detected [ 175.633918][ T5924] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.764205][ T5951] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.796114][ T5924] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 175.816622][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.834039][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.853649][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.865369][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.874658][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.888440][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.898180][ T5872] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 175.908722][ T5872] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 175.914018][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 175.916957][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.926399][ T5951] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 175.939978][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 175.941482][ T5872] usb 3-1: cp210x converter now attached to ttyUSB0 [ 175.958015][ T5951] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.969400][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.980977][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 175.993362][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.013992][ T5872] usb 3-1: USB disconnect, device number 16 [ 176.014244][ T5951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.033339][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 176.043238][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.067131][ T5872] cp210x 3-1:0.0: device disconnected [ 176.076297][ T5951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.077579][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.093685][ T5951] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.108493][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.108524][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.109755][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.138163][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.153585][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.166226][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.169371][ T5951] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.175785][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.220509][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.229402][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.230480][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.239542][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.266466][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.292010][ T5924] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 176.301676][ T5924] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 176.320165][ T5924] usb 2-1: Product: syz [ 176.325618][ T5924] usb 2-1: Manufacturer: syz [ 176.330243][ T5924] usb 2-1: SerialNumber: syz [ 176.354484][ T5924] usb 2-1: config 0 descriptor?? [ 176.368528][ T5924] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 176.495349][ T5951] usb 5-1: usb_control_msg returned -32 [ 176.501002][ T5951] usbtmc 5-1:16.0: can't read capabilities [ 176.514511][ T43] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 176.696465][ T43] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 176.706079][ T43] usb 1-1: config 179 has no interface number 0 [ 176.713330][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 176.771146][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 176.812785][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 176.843481][ T43] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 176.857532][ T43] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 176.857596][ T43] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 176.857620][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.858000][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 176.860617][ T5951] usb 2-1: USB disconnect, device number 15 [ 176.876211][ T5951] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 176.899723][ T7996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.899879][ T7996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.289700][ T5872] usb 1-1: USB disconnect, device number 15 [ 177.289770][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 177.289815][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 177.664289][ T5924] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 177.836796][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 177.854498][ T5924] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 177.866546][ T5924] usb 3-1: config 179 has no interface number 0 [ 177.872896][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 177.884415][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 177.897400][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.908856][ T5924] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 177.920803][ T5924] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.936750][ T5924] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.946879][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.959777][ T8012] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.973398][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 178.021228][ T8028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.866'. [ 178.205399][ T5924] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 178.424131][ T5951] usb 3-1: USB disconnect, device number 17 [ 178.424131][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 178.424274][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 178.613901][ T5968] usb 5-1: USB disconnect, device number 15 [ 178.761893][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 178.787017][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 178.841471][ T8045] netlink: 104 bytes leftover after parsing attributes in process `syz.4.874'. [ 178.871847][ T8045] netlink: 104 bytes leftover after parsing attributes in process `syz.4.874'. [ 178.942133][ T8049] syzkaller1: entered promiscuous mode [ 178.948192][ T8049] syzkaller1: entered allmulticast mode [ 179.265301][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 179.896372][ T5951] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 180.077107][ T5951] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 180.090059][ T5951] usb 2-1: config 0 has no interface number 0 [ 180.095146][ T8085] netlink: 'syz.0.889': attribute type 30 has an invalid length. [ 180.102836][ T5951] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 180.118721][ T5951] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 180.132571][ T5951] usb 2-1: config 0 interface 255 has no altsetting 0 [ 180.143061][ T5951] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 180.152404][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.179622][ T5951] usb 2-1: config 0 descriptor?? [ 180.198704][ T5951] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 180.442452][ T5924] usb 2-1: USB disconnect, device number 16 [ 181.244831][ T5924] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 181.426558][ T5924] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 181.439422][ T5924] usb 3-1: config 0 has no interface number 0 [ 181.443789][ T5968] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 181.461010][ T5924] usb 3-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=ab.07 [ 181.470525][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.480402][ T5924] usb 3-1: Product: syz [ 181.484970][ T5924] usb 3-1: Manufacturer: syz [ 181.489691][ T5924] usb 3-1: SerialNumber: syz [ 181.497672][ T5924] usb 3-1: config 0 descriptor?? [ 181.507174][ T5924] ftdi_sio 3-1:0.67: FTDI USB Serial Device converter detected [ 181.517072][ T5924] ftdi_sio ttyUSB0: unknown device type: 0xab07 [ 181.558584][ T5951] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 181.605861][ T5968] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.615704][ T5968] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.626119][ T5968] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.636998][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.653605][ T980] psmouse serio2: Failed to reset mouse on : -5 [ 181.659902][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.673011][ T5968] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.683005][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.692206][ T5968] usb 4-1: Product: syz [ 181.696792][ T5968] usb 4-1: Manufacturer: syz [ 181.713723][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 181.721094][ T5968] cdc_wdm 4-1:1.0: skipping garbage [ 181.728310][ T5968] cdc_wdm 4-1:1.0: skipping garbage [ 181.736857][ T5951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.748849][ T5924] usb 3-1: USB disconnect, device number 18 [ 181.749700][ T5951] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.768053][ T5968] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 181.776734][ T5968] cdc_wdm 4-1:1.0: Unknown control protocol [ 181.783487][ T5951] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.787513][ T5924] ftdi_sio 3-1:0.67: device disconnected [ 181.791071][ T5951] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 181.812968][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.828947][ T5951] usb 2-1: config 0 descriptor?? [ 182.264678][ T5951] apple 0003:05AC:0247.0011: unexpected long global item [ 182.276896][ T5951] apple 0003:05AC:0247.0011: parse failed [ 182.282768][ T5951] apple 0003:05AC:0247.0011: probe with driver apple failed with error -22 [ 182.361485][ T5951] usb 4-1: USB disconnect, device number 15 [ 182.576559][ T5951] usb 2-1: USB disconnect, device number 17 [ 183.183000][ T8165] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 183.188928][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 183.211329][ T8165] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 183.222720][ T8166] bridge_slave_1: left allmulticast mode [ 183.241837][ T8166] bridge_slave_1: left promiscuous mode [ 183.255685][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.285141][ T8166] bridge_slave_0: left allmulticast mode [ 183.312977][ T8166] bridge_slave_0: left promiscuous mode [ 183.323236][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.627974][ T8176] netlink: 'syz.3.932': attribute type 30 has an invalid length. [ 183.922339][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 183.983708][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 184.383787][ T5951] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 184.499813][ T8208] loop5: detected capacity change from 0 to 3327 [ 184.540736][ T6764] loop5: [POWERTEC] [ 184.556807][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 184.574916][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.589555][ T8208] loop5: [POWERTEC] [ 184.594879][ T6764] Buffer I/O error on dev loop5, logical block 415, async page read [ 184.606489][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.638276][ T5951] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.652976][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.675370][ T5951] usb 3-1: config 0 descriptor?? [ 184.682870][ T6764] Buffer I/O error on dev loop5, logical block 415, async page read [ 184.748847][ T6764] Buffer I/O error on dev loop5, logical block 415, async page read [ 185.144207][ T5951] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 185.413734][ T980] misc userio: Buffer overflowed, userio client isn't keeping up [ 185.416843][ T5924] usb 3-1: USB disconnect, device number 19 [ 186.476733][ T980] input: PS/2 Generic Mouse as /devices/serio2/input/input22 [ 186.713631][ T980] psmouse serio2: Failed to enable mouse on [ 187.231663][ T5872] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 187.352148][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 187.413666][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 187.424437][ T8284] netlink: 104 bytes leftover after parsing attributes in process `syz.0.972'. [ 187.444555][ T5872] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.461739][ T8284] netlink: 104 bytes leftover after parsing attributes in process `syz.0.972'. [ 187.475767][ T5872] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 187.498664][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.529008][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.562514][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.603559][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.658316][ T5872] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.690173][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.749816][ T5872] usb 5-1: config 0 descriptor?? [ 188.011929][ T5872] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 188.252218][ T5872] usb 5-1: USB disconnect, device number 16 [ 188.290860][ T5872] usblp0: removed [ 188.704008][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 188.733895][ T8317] netlink: 'syz.3.986': attribute type 5 has an invalid length. [ 188.791525][ T8317] vxlan0: entered promiscuous mode [ 188.837147][ T1094] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.852062][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 188.866704][ T1094] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.887791][ T1094] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.961754][ T1094] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.663864][ T5951] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 189.823815][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 189.829067][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 189.838781][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.852531][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.862399][ T5951] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.871512][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.884318][ T5951] usb 2-1: config 0 descriptor?? [ 189.901929][ T5951] hub 2-1:0.0: USB hub found [ 189.985813][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.997496][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.009029][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.019252][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.033018][ T8355] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 190.046019][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.104037][ T5951] hub 2-1:0.0: 1 port detected [ 190.265392][ T43] usb 5-1: USB disconnect, device number 17 [ 190.710057][ T5951] hub 2-1:0.0: activate --> -90 [ 191.059021][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 191.113417][ T9] usb 2-1: USB disconnect, device number 18 [ 191.334530][ T5951] usb 2-1-port1: config error [ 191.804039][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.883684][ T8357] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 192.248096][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 192.648146][ T8357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.663241][ T8357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.675012][ T8357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.681160][ T8357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.698380][ T8357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.708534][ T8357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.719641][ T8357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.728808][ T8357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.737714][ T8357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.745163][ T8357] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.753433][ T8357] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.770268][ T8357] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.777062][ T8357] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.786116][ T8357] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.788644][ T8400] sock: sock_set_timeout: `syz.1.1019' (pid 8400) tries to set negative timeout [ 193.277193][ T8425] loop2: detected capacity change from 0 to 7 [ 193.319993][ T8425] Dev loop2: unable to read RDB block 7 [ 193.327850][ T8425] loop2: AHDI p2 p3 [ 193.339071][ T8425] loop2: partition table partially beyond EOD, truncated [ 193.354238][ T8425] loop2: p3 start 335544320 is beyond EOD, truncated [ 193.696791][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 193.878481][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 193.914681][ T8445] vxlan0: entered promiscuous mode [ 193.924595][ T1162] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.941884][ T1162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.953393][ T1162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.974806][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.992831][ T1162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.277710][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288089][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.478064][ T5924] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 194.640399][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 194.665195][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 194.683396][ T5924] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.700914][ T5924] usb 2-1: config 179 has no interface number 0 [ 194.717617][ T5924] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 194.754398][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.754812][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.760447][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.773199][ T5924] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 194.796528][ T8482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1050'. [ 194.805964][ T5924] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.823803][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 194.830824][ T5924] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 194.850533][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.864347][ T5924] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 194.884016][ T5924] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 194.893917][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.926019][ T8460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.982227][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 194.993392][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.008330][ T9] usb 4-1: Product: syz [ 195.012532][ T9] usb 4-1: Manufacturer: syz [ 195.019055][ T9] usb 4-1: SerialNumber: syz [ 195.241043][ T5872] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input23 [ 195.441521][ T5951] usb 2-1: USB disconnect, device number 19 [ 195.441558][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 195.455879][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 195.621937][ T8484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.628306][ T8484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.635139][ T8484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.643295][ T8484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.651672][ T8484] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.893797][ T5980] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.075709][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 196.083843][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 196.111749][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.133455][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 196.148784][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.168771][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 196.193726][ T5980] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.202864][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.218453][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 196.247518][ T5980] usb 1-1: config 0 descriptor?? [ 196.253685][ T5872] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 196.270561][ T5980] hub 1-1:0.0: USB hub found [ 196.295339][ T9] usb 4-1: USB disconnect, device number 16 [ 196.353227][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.371772][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.382074][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.397477][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.405976][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.413426][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.428256][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.436836][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.448148][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.457203][ T5938] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 196.464745][ T5980] hub 1-1:0.0: 1 port detected [ 196.475425][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 196.490052][ T5872] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 196.502787][ T5872] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.519014][ T5938] hid-generic 00A0:0006:0003.0013: hidraw0: HID v0.05 Device [syz1] on syz0 [ 196.529954][ T5872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.552443][ T5872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.562803][ T5872] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.582065][ T5872] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.591448][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.603729][ T5924] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 196.766132][ T5924] usb 2-1: config 0 has no interfaces? [ 196.781999][ T5924] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 196.795389][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.813457][ T5924] usb 2-1: config 0 descriptor?? [ 196.838677][ T5872] usb 3-1: GET_CAPABILITIES returned 0 [ 196.851100][ T5872] usbtmc 3-1:16.0: can't read capabilities [ 196.913646][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.048251][ T5872] usb 2-1: USB disconnect, device number 20 [ 197.118604][ T5980] hub 1-1:0.0: activate --> -90 [ 197.178606][ T5951] usb 3-1: USB disconnect, device number 20 [ 197.184823][ T8497] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 197.283592][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 197.283608][ T30] audit: type=1326 audit(1756327975.393:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.4.1065" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e539 code=0x0 [ 197.328626][ T9] usb 1-1: USB disconnect, device number 16 [ 197.633802][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.713881][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.713927][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.726455][ T5870] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.763792][ T5951] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.903629][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 197.954327][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.970135][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.980097][ T5951] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 197.993645][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.015496][ T5951] usb 4-1: config 0 descriptor?? [ 198.025736][ T8534] netlink: 'syz.2.1072': attribute type 2 has an invalid length. [ 198.037501][ T8534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1072'. [ 198.085498][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 198.107307][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 198.130366][ T9] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 198.139679][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.163810][ T9] usb 2-1: config 0 descriptor?? [ 198.169682][ T8528] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 198.243746][ T5872] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.381883][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.390887][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.402281][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.409481][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 198.421100][ T30] audit: type=1326 audit(1756327976.533:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.4.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7fc00000 [ 198.426517][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 198.453268][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 198.462412][ T9] usb 2-1: USB disconnect, device number 21 [ 198.482714][ T5951] cm6533_jd 0003:0D8C:0022.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 198.511870][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.528662][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.539999][ T5872] usb 1-1: Product: syz [ 198.546567][ T5872] usb 1-1: Manufacturer: syz [ 198.551397][ T5872] usb 1-1: SerialNumber: syz [ 198.738058][ T5951] usb 4-1: USB disconnect, device number 17 [ 198.777876][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.786797][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.808231][ T5872] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 198.820867][ T5872] usb 1-1: USB disconnect, device number 17 [ 198.933645][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.022946][ T30] audit: type=1326 audit(1756327977.133:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8538 comm="syz.4.1074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703e539 code=0x7fc00000 [ 199.124650][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 199.131559][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 199.147583][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 199.170228][ T9] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 199.179890][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.204290][ T9] usb 2-1: config 0 descriptor?? [ 199.221064][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 199.227349][ T5951] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 199.251621][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 199.323647][ T5872] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 199.398088][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 199.424503][ T5951] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 199.432748][ T5951] usb 3-1: config 0 has no interface number 0 [ 199.462159][ T5951] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 199.483949][ T5951] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 199.504685][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 199.509211][ T5951] usb 3-1: config 0 interface 41 has no altsetting 0 [ 199.527399][ T5872] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 199.528792][ T5951] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 199.543568][ T5872] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 199.563859][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.572610][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.582085][ T5951] usb 3-1: Product: syz [ 199.585071][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.587645][ T5951] usb 3-1: Manufacturer: syz [ 199.600756][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 199.611500][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 199.623836][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 199.653401][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.653877][ T9] betop 0003:20BC:5500.0015: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0 [ 199.677857][ T5951] usb 3-1: SerialNumber: syz [ 199.681094][ T5872] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.703925][ T5951] usb 3-1: config 0 descriptor?? [ 199.712110][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.722531][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.730714][ T5870] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.740092][ T9] betop 0003:20BC:5500.0015: no inputs found [ 199.746570][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.793702][ T5870] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.794518][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.799768][ T5870] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.933896][ T9] usb 2-1: USB disconnect, device number 22 [ 199.990133][ T5872] usb 1-1: usb_control_msg returned -32 [ 199.994365][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 200.003068][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 200.010497][ T5872] usbtmc 1-1:16.0: can't read capabilities [ 200.027369][ C1] usbtmc 1-1:16.0: overflow with length 1024, actual length is 1024 [ 200.252989][ T5924] usb 1-1: USB disconnect, device number 18 [ 200.327041][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 200.422078][ T5951] Error reading MAC address [ 200.441827][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 200.454089][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 200.497323][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.521489][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.541617][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.556696][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.593659][ T9] usb 4-1: Product: syz [ 200.604092][ T9] usb 4-1: Manufacturer: syz [ 200.613996][ T9] usb 4-1: SerialNumber: syz [ 200.719726][ T5951] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 200.761734][ T5951] usb 3-1: USB disconnect, device number 21 [ 201.118824][ T9] usb 4-1: cannot find UAC_HEADER [ 201.149059][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.169430][ T9] usb 4-1: USB disconnect, device number 18 [ 201.213605][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.173856][ T5924] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.301397][ T30] audit: type=1326 audit(1756327980.413:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.4.1102" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 202.375318][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 202.386075][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 202.412968][ T5924] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 202.452984][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.477277][ T5924] usb 4-1: Product: syz [ 202.484179][ T5924] usb 4-1: Manufacturer: syz [ 202.489247][ T5924] usb 4-1: SerialNumber: syz [ 202.505700][ T5924] usb 4-1: config 0 descriptor?? [ 202.524479][ T8596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.560690][ T8596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.802096][ T8596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.820140][ T8596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.692718][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'. [ 203.886295][ T5924] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 204.182168][ T5924] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 204.237201][ T5924] usb 4-1: USB disconnect, device number 19 [ 204.262377][ T5924] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 204.983905][ T5924] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 205.179021][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.208966][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.229537][ T5924] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.260890][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.270007][ T8694] loop2: detected capacity change from 0 to 7 [ 205.286910][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 205.304313][ T5924] usb 2-1: SerialNumber: syz [ 205.319336][ T8694] Dev loop2: unable to read RDB block 7 [ 205.334025][ T8694] loop2: unable to read partition table [ 205.373996][ T8694] loop2: partition table beyond EOD, truncated [ 205.405856][ T8694] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 205.576078][ T5924] usb 2-1: 0:2 : does not exist [ 205.639048][ T5924] usb 2-1: USB disconnect, device number 23 [ 205.729629][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.443752][ T5951] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 208.619504][ T5951] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.630816][ T5951] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.644801][ T5951] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.656476][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.707642][ T8750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.738104][ T5951] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.979278][ T5951] usb 2-1: USB disconnect, device number 24 [ 209.473644][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 209.603736][ T5924] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 209.640596][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.653764][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.690267][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.703644][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.735793][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.766252][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.776582][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 209.783587][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.807534][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 209.812964][ T9] usb 3-1: Product: syz [ 209.836462][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.843585][ T9] usb 3-1: Manufacturer: syz [ 209.864940][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.868191][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 209.885847][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.903772][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 209.920094][ T5924] usb 4-1: Product: syz [ 209.927263][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 209.936162][ T5924] usb 4-1: Manufacturer: syz [ 209.940922][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 209.954953][ T5924] usb 4-1: SerialNumber: syz [ 209.980063][ T5924] usb 4-1: config 0 descriptor?? [ 210.014402][ T5924] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.034101][ T5924] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 210.164239][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.295552][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.390059][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 210.397061][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 210.403855][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 210.411743][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 210.418390][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 210.425027][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 210.431651][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 210.437130][ T5968] usb 3-1: USB disconnect, device number 22 [ 210.437727][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 210.510357][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.612843][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.667121][ T5924] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 210.675108][ T5924] em28xx 4-1:0.0: Config register raw data: 0x30 [ 210.681479][ T5924] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 210.690252][ T5924] em28xx 4-1:0.0: No AC97 audio processor [ 210.722240][ T8794] input: syz1 as /devices/virtual/input/input24 [ 210.824084][ T5938] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 211.013999][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 211.028306][ T5938] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 211.047916][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.109896][ T5924] usb 4-1: USB disconnect, device number 20 [ 211.118465][ T5938] usb 5-1: config 0 descriptor?? [ 211.226134][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.239709][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.258702][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.275202][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.290688][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.362715][ T5938] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 211.568015][ T30] audit: type=1326 audit(1756327989.683:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.2.1184" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 211.850349][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.910679][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.938574][ T36] bond0 (unregistering): Released all slaves [ 211.948836][ T8824] binder: 8823:8824 ioctl 4018620d 0 returned -22 [ 212.016480][ T8825] binder: 8823:8825 ioctl c0306201 0 returned -14 [ 212.384060][ T5938] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 212.409948][ T5938] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 212.423768][ T36] hsr_slave_0: left promiscuous mode [ 212.424234][ T5938] asix 5-1:0.0: probe with driver asix failed with error -71 [ 212.452388][ T5938] usb 5-1: USB disconnect, device number 18 [ 212.458792][ T36] hsr_slave_1: left promiscuous mode [ 212.503047][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.532468][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.559941][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.571285][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.617234][ T36] veth1_macvtap: left promiscuous mode [ 212.623217][ T36] veth0_macvtap: left promiscuous mode [ 213.407525][ T5870] Bluetooth: hci2: command tx timeout [ 213.833132][ T36] team0 (unregistering): Port device team_slave_1 removed [ 213.889703][ T36] team0 (unregistering): Port device team_slave_0 removed [ 213.916908][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 214.388635][ T8806] chnl_net:caif_netlink_parms(): no params data found [ 214.623913][ T5938] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 214.803688][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 214.827015][ T5938] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 214.841636][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.857439][ T5938] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.871182][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.892365][ T8806] bridge_slave_0: entered allmulticast mode [ 214.900417][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.919968][ T8806] bridge_slave_0: entered promiscuous mode [ 214.927993][ T5938] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.951672][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.970827][ T5938] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.996009][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.003273][ T8806] bridge_slave_1: entered allmulticast mode [ 215.017211][ T5938] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.037108][ T8806] bridge_slave_1: entered promiscuous mode [ 215.043336][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.199817][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.207051][ T36] IPVS: stop unused estimator thread 0... [ 215.229428][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.254425][ T5968] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 215.280524][ T5938] usb 1-1: GET_CAPABILITIES returned 0 [ 215.289509][ T5938] usbtmc 1-1:16.0: can't read capabilities [ 215.392282][ T8806] team0: Port device team_slave_0 added [ 215.438778][ T5968] usb 4-1: Using ep0 maxpacket: 32 [ 215.475593][ T5968] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 215.483992][ T5870] Bluetooth: hci2: command tx timeout [ 215.485270][ T8806] team0: Port device team_slave_1 added [ 215.493561][ T5968] usb 4-1: config 0 has no interface number 0 [ 215.513701][ T5968] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 215.533381][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.568688][ T5968] usb 4-1: Product: syz [ 215.572903][ T5968] usb 4-1: Manufacturer: syz [ 215.584079][ T5968] usb 4-1: SerialNumber: syz [ 215.602398][ T5968] usb 4-1: config 0 descriptor?? [ 215.620369][ T5968] smsc95xx v2.0.0 [ 215.667174][ T8900] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 215.670029][ T9] usb 1-1: USB disconnect, device number 19 [ 215.777111][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.809642][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.835629][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.927952][ T8806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.959181][ T30] audit: type=1800 audit(1756327994.073:271): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1221" name="file0" dev="tmpfs" ino=1206 res=0 errno=0 [ 215.965941][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.055294][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.103268][ T8806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.346459][ T8806] hsr_slave_0: entered promiscuous mode [ 216.394685][ T8806] hsr_slave_1: entered promiscuous mode [ 216.401180][ T8806] debugfs: 'hsr0' already exists in 'hsr' [ 216.442471][ T8806] Cannot create hsr debugfs directory [ 216.645516][ T5968] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 216.669314][ T5968] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 216.699461][ T5968] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 216.732755][ T5968] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 216.775153][ T5968] usb 4-1: USB disconnect, device number 21 [ 216.834095][ T5951] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 217.023672][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 217.030860][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.052550][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.078407][ T5951] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 217.091190][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.113083][ T5951] usb 1-1: config 0 descriptor?? [ 217.317643][ T8806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.382639][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 217.412902][ T8806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.496583][ T8806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.561708][ T8806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.569109][ T5870] Bluetooth: hci2: command tx timeout [ 217.863940][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 217.978740][ T5951] letsketch 0003:6161:4D15.0016: Device info: ᣍ [ 218.009294][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.054537][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 218.067012][ T8806] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.076798][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 218.092999][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.108871][ T43] usb 4-1: Product: syz [ 218.113234][ T43] usb 4-1: Manufacturer: syz [ 218.118590][ T43] usb 4-1: SerialNumber: syz [ 218.129283][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.137325][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.147417][ T8994] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 218.163735][ T43] usb 4-1: config 0 descriptor?? [ 218.180048][ T5951] letsketch 0003:6161:4D15.0016: Device info: ఁ [ 218.182590][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 218.221538][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.228791][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.420912][ T5951] usb 1-1: Max retries (5) exceeded reading string descriptor 202 [ 218.447918][ T5951] letsketch 0003:6161:4D15.0016: probe with driver letsketch failed with error -71 [ 218.487930][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.518591][ T5951] usb 1-1: USB disconnect, device number 20 [ 218.639992][ T8806] veth0_vlan: entered promiscuous mode [ 218.689379][ T8806] veth1_vlan: entered promiscuous mode [ 218.765618][ T8806] veth0_macvtap: entered promiscuous mode [ 218.783895][ T8806] veth1_macvtap: entered promiscuous mode [ 218.815662][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.856099][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.874882][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.896917][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.903984][ T5938] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 218.932751][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.978984][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.076654][ T5938] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 219.111739][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.144611][ T5938] usb 5-1: config 0 descriptor?? [ 219.197746][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.224550][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.371576][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.387300][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.412837][ T43] gspca_sonixj: reg_w1 err -71 [ 219.458014][ T43] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 219.493153][ T43] usb 4-1: USB disconnect, device number 22 [ 219.634053][ T5870] Bluetooth: hci2: command tx timeout [ 220.387391][ T5938] usb 5-1: Cannot set autoneg [ 220.392557][ T5938] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 220.472166][ T5938] usb 5-1: USB disconnect, device number 19 [ 221.353897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.586909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.599163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.975604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 222.803913][ T5951] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 222.977190][ T5951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.002062][ T5951] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.040445][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.069125][ T5951] usb 4-1: Product: syz [ 223.079241][ T5951] usb 4-1: Manufacturer: syz [ 223.086134][ T5951] usb 4-1: SerialNumber: syz [ 223.261501][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 223.675904][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 223.728290][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1291'. [ 223.863867][ T5980] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 224.035530][ T980] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 224.047431][ T5980] usb 6-1: Using ep0 maxpacket: 16 [ 224.075322][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.097198][ T5980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.112142][ T5980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.158199][ T5980] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.175335][ T5951] cdc_ncm 4-1:1.0: failed to get mac address [ 224.197961][ T5951] cdc_ncm 4-1:1.0: bind() failure [ 224.208018][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.223916][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 224.234670][ T980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.246015][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.246192][ T5951] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 224.270996][ T5980] usb 6-1: config 0 descriptor?? [ 224.289584][ T980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.312200][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.320917][ T5951] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 224.339422][ T980] usb 1-1: Product: syz [ 224.349567][ T5951] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 224.359269][ T980] usb 1-1: Manufacturer: syz [ 224.364154][ T980] usb 1-1: SerialNumber: syz [ 224.396009][ T5951] usb 4-1: USB disconnect, device number 23 [ 224.600689][ T980] usb 1-1: 0:2 : does not exist [ 224.628226][ T980] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 224.679058][ T980] usb 1-1: USB disconnect, device number 21 [ 224.728402][ T5980] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 224.744666][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.762662][ T9168] input: syz1 as /devices/virtual/input/input26 [ 224.795424][ T5980] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 224.916205][ T5980] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 224.924360][ T9175] netlink: 'syz.3.1303': attribute type 29 has an invalid length. [ 224.926295][ T9175] netlink: 'syz.3.1303': attribute type 29 has an invalid length. [ 224.975454][ T5980] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 224.984689][ T9175] netlink: 'syz.3.1303': attribute type 27 has an invalid length. [ 225.006207][ T5980] microsoft 0003:045E:07DA.0017: no inputs found [ 225.012925][ T5980] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 225.170852][ T980] usb 6-1: USB disconnect, device number 2 [ 225.323918][ T5968] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 225.474276][ T5968] usb 3-1: Using ep0 maxpacket: 8 [ 225.491143][ T5968] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 225.500020][ T5968] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.510431][ T5968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.520392][ T5968] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.530405][ T5968] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.544863][ T5968] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.554455][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.673664][ T5951] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 225.785653][ T5968] usb 3-1: usb_control_msg returned -32 [ 225.803656][ T5968] usbtmc 3-1:16.0: can't read capabilities [ 225.835717][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 225.857270][ T5951] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 225.874133][ T5951] usb 1-1: config 0 has no interface number 0 [ 225.880509][ T5951] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.899490][ T5951] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 225.912972][ T5951] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.927951][ T5951] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.947943][ T5951] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 225.972795][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.002559][ T5951] usb 1-1: config 0 descriptor?? [ 226.029490][ T5951] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 226.258522][ T5938] usb 1-1: USB disconnect, device number 22 [ 226.286663][ T5938] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 226.528600][ T9220] syzkaller1: entered promiscuous mode [ 226.552995][ T9220] syzkaller1: entered allmulticast mode [ 226.682891][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 226.694245][ T9228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.773431][ T9228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.126534][ T5872] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 228.134363][ T980] usb 3-1: USB disconnect, device number 23 [ 228.299948][ T5872] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 228.324995][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.346196][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.365922][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.374359][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.400843][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.412294][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.424832][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.479830][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.509093][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.548736][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.568944][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.597807][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.656549][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.693877][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.725313][ T30] audit: type=1326 audit(1756328006.833:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9298 comm="syz.2.1358" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x0 [ 228.755089][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.790930][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.811869][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.849601][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.870660][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.885042][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.913767][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.929888][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.975642][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.007243][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.044015][ T5872] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 229.073690][ T5872] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 229.082112][ T5872] usb 1-1: Product: syz [ 229.103693][ T5872] usb 1-1: Manufacturer: syz [ 229.108341][ T5872] usb 1-1: SerialNumber: syz [ 229.183442][ T5872] usb 1-1: config 0 descriptor?? [ 229.224431][ T5872] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 229.403627][ T5968] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.480770][ T9312] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 229.493894][ T5980] syzkaller1: tun_net_xmit 90 [ 229.501966][ T9312] syzkaller1: Linktype set failed because interface is up [ 229.564267][ T5968] usb 6-1: Using ep0 maxpacket: 8 [ 229.571401][ T5968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.602812][ T5968] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.615987][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.620764][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 229.631967][ T5872] usb 1-1: USB disconnect, device number 23 [ 229.674359][ T9315] yurex 1-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 229.676258][ T5968] usb 6-1: config 0 descriptor?? [ 229.682350][ T5872] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 229.991649][ T5968] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 230.519676][ T9347] netlink: 'syz.0.1371': attribute type 22 has an invalid length. [ 230.531278][ T5872] usb 6-1: USB disconnect, device number 3 [ 230.546669][ T9347] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1371'. [ 230.942869][ T9362] [ 230.945258][ T9362] ===================================================== [ 230.952206][ T9362] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 230.953579][ T5968] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 230.959675][ T9362] syzkaller #0 Not tainted [ 230.959687][ T9362] ----------------------------------------------------- [ 230.978600][ T9362] syz.3.1376/9362 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 230.986239][ T9362] ffff888077d62408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 230.994976][ T9362] [ 230.994976][ T9362] and this task is already holding: [ 231.002333][ T9362] ffff88803437c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 231.012111][ T9362] which would create a new lock dependency: [ 231.017999][ T9362] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 231.026097][ T9362] [ 231.026097][ T9362] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 231.035545][ T9362] (&dev->event_lock#2){..-.}-{3:3} [ 231.035577][ T9362] [ 231.035577][ T9362] ... which became SOFTIRQ-irq-safe at: [ 231.048482][ T9362] lock_acquire+0x120/0x360 [ 231.053086][ T9362] _raw_spin_lock_irqsave+0xa7/0xf0 [ 231.058371][ T9362] input_event+0x76/0xe0 [ 231.062708][ T9362] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 231.068440][ T9362] __usb_hcd_giveback_urb+0x376/0x540 [ 231.073908][ T9362] dummy_timer+0x862/0x4550 [ 231.078521][ T9362] __hrtimer_run_queues+0x529/0xc60 [ 231.083809][ T9362] hrtimer_run_softirq+0x187/0x2b0 [ 231.089009][ T9362] handle_softirqs+0x283/0x870 [ 231.093857][ T9362] __irq_exit_rcu+0xca/0x1f0 [ 231.098552][ T9362] irq_exit_rcu+0x9/0x30 [ 231.102873][ T9362] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 231.108595][ T9362] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.114656][ T9362] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 231.120472][ T9362] dummy_urb_enqueue+0x58a/0x780 [ 231.125499][ T9362] usb_hcd_submit_urb+0x325/0x1aa0 [ 231.130704][ T9362] atp_open+0x63/0xc0 [ 231.134768][ T9362] input_open_device+0x1d0/0x390 [ 231.139801][ T9362] mousedev_open_device+0xcc/0x150 [ 231.145009][ T9362] mousedev_open+0x2ef/0x4a0 [ 231.149687][ T9362] chrdev_open+0x4c9/0x5e0 [ 231.154194][ T9362] do_dentry_open+0x950/0x13f0 [ 231.159049][ T9362] vfs_open+0x3b/0x340 [ 231.163204][ T9362] path_openat+0x2ee5/0x3830 [ 231.167882][ T9362] do_filp_open+0x1fa/0x410 [ 231.172476][ T9362] do_sys_openat2+0x121/0x1c0 [ 231.177241][ T9362] __x64_sys_openat+0x138/0x170 [ 231.182184][ T9362] do_syscall_64+0xfa/0x3b0 [ 231.186782][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.192767][ T9362] [ 231.192767][ T9362] to a SOFTIRQ-irq-unsafe lock: [ 231.200215][ T9362] (tasklist_lock){.+.+}-{3:3} [ 231.200352][ T9362] [ 231.200352][ T9362] ... which became SOFTIRQ-irq-unsafe at: [ 231.213215][ T9362] ... [ 231.213223][ T9362] lock_acquire+0x120/0x360 [ 231.220387][ T9362] _raw_read_lock+0x36/0x50 [ 231.224975][ T9362] __do_wait+0xde/0x740 [ 231.229214][ T9362] do_wait+0x1f8/0x520 [ 231.233370][ T9362] kernel_wait+0xab/0x170 [ 231.237794][ T9362] call_usermodehelper_exec_work+0xbe/0x230 [ 231.243793][ T9362] process_scheduled_works+0xae1/0x17b0 [ 231.249447][ T9362] worker_thread+0x8a0/0xda0 [ 231.254137][ T9362] kthread+0x70e/0x8a0 [ 231.258291][ T9362] ret_from_fork+0x3f9/0x770 [ 231.262964][ T9362] ret_from_fork_asm+0x1a/0x30 [ 231.267819][ T9362] [ 231.267819][ T9362] other info that might help us debug this: [ 231.267819][ T9362] [ 231.278042][ T9362] Chain exists of: [ 231.278042][ T9362] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 231.278042][ T9362] [ 231.291608][ T9362] Possible interrupt unsafe locking scenario: [ 231.291608][ T9362] [ 231.299927][ T9362] CPU0 CPU1 [ 231.305302][ T9362] ---- ---- [ 231.310669][ T9362] lock(tasklist_lock); [ 231.314920][ T9362] local_irq_disable(); [ 231.321670][ T9362] lock(&dev->event_lock#2); [ 231.328864][ T9362] lock(&client->buffer_lock); [ 231.336227][ T9362] [ 231.339676][ T9362] lock(&dev->event_lock#2); [ 231.344554][ T9362] [ 231.344554][ T9362] *** DEADLOCK *** [ 231.344554][ T9362] [ 231.352697][ T9362] 7 locks held by syz.3.1376/9362: [ 231.357805][ T9362] #0: ffff88814733e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 231.366956][ T9362] #1: ffff888145ac7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 231.377067][ T9362] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 231.386744][ T9362] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 231.396340][ T9362] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 231.405519][ T9362] #5: ffff88803437c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 231.415723][ T9362] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 231.424791][ T9362] [ 231.424791][ T9362] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 231.435190][ T9362] -> (&dev->event_lock#2){..-.}-{3:3} { [ 231.440840][ T9362] IN-SOFTIRQ-W at: [ 231.444903][ T9362] lock_acquire+0x120/0x360 [ 231.451233][ T9362] _raw_spin_lock_irqsave+0xa7/0xf0 [ 231.458256][ T9362] input_event+0x76/0xe0 [ 231.464325][ T9362] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 231.471792][ T9362] __usb_hcd_giveback_urb+0x376/0x540 [ 231.479003][ T9362] dummy_timer+0x862/0x4550 [ 231.485338][ T9362] __hrtimer_run_queues+0x529/0xc60 [ 231.492361][ T9362] hrtimer_run_softirq+0x187/0x2b0 [ 231.499297][ T9362] handle_softirqs+0x283/0x870 [ 231.505885][ T9362] __irq_exit_rcu+0xca/0x1f0 [ 231.512304][ T9362] irq_exit_rcu+0x9/0x30 [ 231.518370][ T9362] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 231.525829][ T9362] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.533636][ T9362] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 231.541188][ T9362] dummy_urb_enqueue+0x58a/0x780 [ 231.547976][ T9362] usb_hcd_submit_urb+0x325/0x1aa0 [ 231.554921][ T9362] atp_open+0x63/0xc0 [ 231.560732][ T9362] input_open_device+0x1d0/0x390 [ 231.567512][ T9362] mousedev_open_device+0xcc/0x150 [ 231.574475][ T9362] mousedev_open+0x2ef/0x4a0 [ 231.580897][ T9362] chrdev_open+0x4c9/0x5e0 [ 231.587146][ T9362] do_dentry_open+0x950/0x13f0 [ 231.593740][ T9362] vfs_open+0x3b/0x340 [ 231.599654][ T9362] path_openat+0x2ee5/0x3830 [ 231.606075][ T9362] do_filp_open+0x1fa/0x410 [ 231.612414][ T9362] do_sys_openat2+0x121/0x1c0 [ 231.618924][ T9362] __x64_sys_openat+0x138/0x170 [ 231.625601][ T9362] do_syscall_64+0xfa/0x3b0 [ 231.631944][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.639677][ T9362] INITIAL USE at: [ 231.643665][ T9362] lock_acquire+0x120/0x360 [ 231.649917][ T9362] _raw_spin_lock_irqsave+0xa7/0xf0 [ 231.656859][ T9362] input_inject_event+0xa5/0x340 [ 231.663545][ T9362] kbd_led_trigger_activate+0xbc/0x100 [ 231.670751][ T9362] led_trigger_set+0x52a/0x950 [ 231.677268][ T9362] led_trigger_set_default+0x260/0x2a0 [ 231.684469][ T9362] led_classdev_register_ext+0x73d/0x930 [ 231.691856][ T9362] input_leds_connect+0x517/0x790 [ 231.698625][ T9362] input_register_device+0xcfd/0x1140 [ 231.705740][ T9362] atkbd_connect+0x72e/0xa00 [ 231.712083][ T9362] serio_driver_probe+0x82/0xd0 [ 231.718679][ T9362] really_probe+0x26d/0x9e0 [ 231.724925][ T9362] __driver_probe_device+0x18c/0x2f0 [ 231.731944][ T9362] driver_probe_device+0x4f/0x430 [ 231.738702][ T9362] __driver_attach+0x452/0x700 [ 231.745197][ T9362] bus_for_each_dev+0x233/0x2b0 [ 231.751791][ T9362] serio_handle_event+0x1f9/0x8d0 [ 231.758575][ T9362] process_scheduled_works+0xae1/0x17b0 [ 231.765854][ T9362] worker_thread+0x8a0/0xda0 [ 231.772189][ T9362] kthread+0x70e/0x8a0 [ 231.778013][ T9362] ret_from_fork+0x3f9/0x770 [ 231.784350][ T9362] ret_from_fork_asm+0x1a/0x30 [ 231.790854][ T9362] } [ 231.793453][ T9362] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 231.802562][ T9362] -> (&client->buffer_lock){....}-{3:3} { [ 231.808295][ T9362] INITIAL USE at: [ 231.812187][ T9362] lock_acquire+0x120/0x360 [ 231.818260][ T9362] _raw_spin_lock+0x2e/0x40 [ 231.824326][ T9362] evdev_pass_values+0xb9/0xbd0 [ 231.830749][ T9362] evdev_events+0x1aa/0x340 [ 231.836822][ T9362] input_pass_values+0x1c2/0x890 [ 231.843333][ T9362] input_event_dispose+0x330/0x6b0 [ 231.850001][ T9362] input_inject_event+0x1dd/0x340 [ 231.856590][ T9362] evdev_write+0x2fc/0x480 [ 231.862577][ T9362] vfs_write+0x27e/0xb30 [ 231.868394][ T9362] ksys_write+0x145/0x250 [ 231.874285][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 231.880973][ T9362] do_fast_syscall_32+0x34/0x80 [ 231.887397][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.895296][ T9362] } [ 231.897796][ T9362] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 231.905948][ T9362] ... acquired at: [ 231.909756][ T9362] lock_acquire+0x120/0x360 [ 231.914457][ T9362] _raw_spin_lock+0x2e/0x40 [ 231.919151][ T9362] evdev_pass_values+0xb9/0xbd0 [ 231.924212][ T9362] evdev_events+0x1aa/0x340 [ 231.928896][ T9362] input_pass_values+0x1c2/0x890 [ 231.934017][ T9362] input_event_dispose+0x330/0x6b0 [ 231.939298][ T9362] input_inject_event+0x1dd/0x340 [ 231.944498][ T9362] evdev_write+0x2fc/0x480 [ 231.949097][ T9362] vfs_write+0x27e/0xb30 [ 231.953514][ T9362] ksys_write+0x145/0x250 [ 231.958028][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 231.963323][ T9362] do_fast_syscall_32+0x34/0x80 [ 231.968361][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.974863][ T9362] [ 231.977184][ T9362] [ 231.977184][ T9362] the dependencies between the lock to be acquired [ 231.977194][ T9362] and SOFTIRQ-irq-unsafe lock: [ 231.990720][ T9362] -> (tasklist_lock){.+.+}-{3:3} { [ 231.996054][ T9362] HARDIRQ-ON-R at: [ 232.000206][ T9362] lock_acquire+0x120/0x360 [ 232.006723][ T9362] _raw_read_lock+0x36/0x50 [ 232.013248][ T9362] __do_wait+0xde/0x740 [ 232.019410][ T9362] do_wait+0x1f8/0x520 [ 232.025487][ T9362] kernel_wait+0xab/0x170 [ 232.031820][ T9362] call_usermodehelper_exec_work+0xbe/0x230 [ 232.039724][ T9362] process_scheduled_works+0xae1/0x17b0 [ 232.047287][ T9362] worker_thread+0x8a0/0xda0 [ 232.053897][ T9362] kthread+0x70e/0x8a0 [ 232.059965][ T9362] ret_from_fork+0x3f9/0x770 [ 232.066553][ T9362] ret_from_fork_asm+0x1a/0x30 [ 232.073347][ T9362] SOFTIRQ-ON-R at: [ 232.077510][ T9362] lock_acquire+0x120/0x360 [ 232.084045][ T9362] _raw_read_lock+0x36/0x50 [ 232.090569][ T9362] __do_wait+0xde/0x740 [ 232.096740][ T9362] do_wait+0x1f8/0x520 [ 232.102814][ T9362] kernel_wait+0xab/0x170 [ 232.109137][ T9362] call_usermodehelper_exec_work+0xbe/0x230 [ 232.117039][ T9362] process_scheduled_works+0xae1/0x17b0 [ 232.124587][ T9362] worker_thread+0x8a0/0xda0 [ 232.131184][ T9362] kthread+0x70e/0x8a0 [ 232.137253][ T9362] ret_from_fork+0x3f9/0x770 [ 232.143845][ T9362] ret_from_fork_asm+0x1a/0x30 [ 232.150617][ T9362] INITIAL USE at: [ 232.154681][ T9362] lock_acquire+0x120/0x360 [ 232.161167][ T9362] _raw_write_lock_irq+0xa2/0xf0 [ 232.168027][ T9362] copy_process+0x224f/0x3c00 [ 232.174622][ T9362] kernel_clone+0x21e/0x840 [ 232.181042][ T9362] user_mode_thread+0xdd/0x140 [ 232.187749][ T9362] rest_init+0x23/0x300 [ 232.193821][ T9362] start_kernel+0x3a9/0x410 [ 232.200233][ T9362] x86_64_start_reservations+0x24/0x30 [ 232.207628][ T9362] x86_64_start_kernel+0x143/0x1c0 [ 232.214661][ T9362] common_startup_64+0x13e/0x147 [ 232.221520][ T9362] INITIAL READ USE at: [ 232.226068][ T9362] lock_acquire+0x120/0x360 [ 232.232924][ T9362] _raw_read_lock+0x36/0x50 [ 232.239772][ T9362] __do_wait+0xde/0x740 [ 232.246270][ T9362] do_wait+0x1f8/0x520 [ 232.252682][ T9362] kernel_wait+0xab/0x170 [ 232.259441][ T9362] call_usermodehelper_exec_work+0xbe/0x230 [ 232.267683][ T9362] process_scheduled_works+0xae1/0x17b0 [ 232.275577][ T9362] worker_thread+0x8a0/0xda0 [ 232.282523][ T9362] kthread+0x70e/0x8a0 [ 232.288933][ T9362] ret_from_fork+0x3f9/0x770 [ 232.295861][ T9362] ret_from_fork_asm+0x1a/0x30 [ 232.302965][ T9362] } [ 232.305639][ T9362] ... key at: [] tasklist_lock+0x18/0x40 [ 232.313565][ T9362] ... acquired at: [ 232.317551][ T9362] lock_acquire+0x120/0x360 [ 232.322260][ T9362] _raw_read_lock+0x36/0x50 [ 232.326948][ T9362] send_sigurg+0x12b/0x420 [ 232.331545][ T9362] sk_send_sigurg+0x6c/0x2e0 [ 232.336306][ T9362] queue_oob+0x420/0x4f0 [ 232.340818][ T9362] unix_stream_sendmsg+0xc3f/0xdf0 [ 232.346111][ T9362] __sock_sendmsg+0x21c/0x270 [ 232.351403][ T9362] ____sys_sendmsg+0x52d/0x830 [ 232.356348][ T9362] ___sys_sendmsg+0x21f/0x2a0 [ 232.361225][ T9362] __sys_sendmmsg+0x28e/0x430 [ 232.366080][ T9362] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 232.371814][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 232.377103][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.382149][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.388659][ T9362] [ 232.391000][ T9362] -> (&f_owner->lock){....}-{3:3} { [ 232.396307][ T9362] INITIAL USE at: [ 232.400294][ T9362] lock_acquire+0x120/0x360 [ 232.406548][ T9362] _raw_write_lock_irq+0xa2/0xf0 [ 232.413236][ T9362] __f_setown+0x67/0x370 [ 232.419215][ T9362] do_fcntl+0x15ff/0x1910 [ 232.425284][ T9362] do_compat_fcntl64+0x477/0x720 [ 232.431960][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 232.438800][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.445387][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.453534][ T9362] INITIAL READ USE at: [ 232.457951][ T9362] lock_acquire+0x120/0x360 [ 232.464625][ T9362] _raw_read_lock_irqsave+0xaf/0x100 [ 232.472084][ T9362] send_sigurg+0x55/0x420 [ 232.478581][ T9362] sk_send_sigurg+0x6c/0x2e0 [ 232.485361][ T9362] queue_oob+0x420/0x4f0 [ 232.491773][ T9362] unix_stream_sendmsg+0xc3f/0xdf0 [ 232.499066][ T9362] __sock_sendmsg+0x21c/0x270 [ 232.505914][ T9362] ____sys_sendmsg+0x52d/0x830 [ 232.512869][ T9362] ___sys_sendmsg+0x21f/0x2a0 [ 232.519727][ T9362] __sys_sendmmsg+0x28e/0x430 [ 232.526576][ T9362] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 232.534298][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 232.541577][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.548602][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.557099][ T9362] } [ 232.559684][ T9362] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 232.568614][ T9362] ... acquired at: [ 232.572494][ T9362] lock_acquire+0x120/0x360 [ 232.577185][ T9362] _raw_read_lock_irqsave+0xaf/0x100 [ 232.582648][ T9362] send_sigio+0x38/0x370 [ 232.587065][ T9362] kill_fasync+0x24d/0x4d0 [ 232.591658][ T9362] sock_wake_async+0x137/0x160 [ 232.596598][ T9362] sock_def_readable+0x3bb/0x550 [ 232.601713][ T9362] queue_oob+0x452/0x4f0 [ 232.606128][ T9362] unix_stream_sendmsg+0xc3f/0xdf0 [ 232.611410][ T9362] __sock_sendmsg+0x21c/0x270 [ 232.616265][ T9362] ____sys_sendmsg+0x52d/0x830 [ 232.621205][ T9362] ___sys_sendmsg+0x21f/0x2a0 [ 232.626051][ T9362] __sys_sendmmsg+0x28e/0x430 [ 232.630906][ T9362] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 232.636625][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 232.641907][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.646935][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.653442][ T9362] [ 232.655761][ T9362] -> (&new->fa_lock){....}-{3:3} { [ 232.660892][ T9362] INITIAL USE at: [ 232.664780][ T9362] lock_acquire+0x120/0x360 [ 232.670850][ T9362] _raw_write_lock_irq+0xa2/0xf0 [ 232.677391][ T9362] fasync_remove_entry+0xf1/0x1c0 [ 232.684000][ T9362] sock_fasync+0x85/0xf0 [ 232.689808][ T9362] __fput+0x89f/0xa70 [ 232.695355][ T9362] task_work_run+0x1d4/0x260 [ 232.701507][ T9362] exit_to_user_mode_loop+0xec/0x110 [ 232.708361][ T9362] __do_fast_syscall_32+0x1f4/0x2b0 [ 232.715117][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.721531][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.729437][ T9362] INITIAL READ USE at: [ 232.733763][ T9362] lock_acquire+0x120/0x360 [ 232.740276][ T9362] _raw_read_lock_irqsave+0xaf/0x100 [ 232.747569][ T9362] kill_fasync+0x199/0x4d0 [ 232.753980][ T9362] sock_wake_async+0x137/0x160 [ 232.760768][ T9362] sk_send_sigurg+0x1f1/0x2e0 [ 232.767467][ T9362] queue_oob+0x420/0x4f0 [ 232.773716][ T9362] unix_stream_sendmsg+0xc3f/0xdf0 [ 232.780844][ T9362] __sock_sendmsg+0x21c/0x270 [ 232.787526][ T9362] ____sys_sendmsg+0x52d/0x830 [ 232.794297][ T9362] ___sys_sendmsg+0x21f/0x2a0 [ 232.800964][ T9362] __sys_sendmmsg+0x28e/0x430 [ 232.807655][ T9362] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 232.815191][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 232.822288][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.829168][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.837501][ T9362] } [ 232.840020][ T9362] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 232.848709][ T9362] ... acquired at: [ 232.852507][ T9362] lock_acquire+0x120/0x360 [ 232.857192][ T9362] _raw_read_lock_irqsave+0xaf/0x100 [ 232.862666][ T9362] kill_fasync+0x199/0x4d0 [ 232.867262][ T9362] evdev_pass_values+0x627/0xbd0 [ 232.872403][ T9362] evdev_events+0x1e6/0x340 [ 232.877089][ T9362] input_pass_values+0x285/0x890 [ 232.882206][ T9362] input_event_dispose+0x330/0x6b0 [ 232.887488][ T9362] input_inject_event+0x1dd/0x340 [ 232.892687][ T9362] evdev_write+0x2fc/0x480 [ 232.897281][ T9362] vfs_write+0x27e/0xb30 [ 232.901698][ T9362] ksys_write+0x145/0x250 [ 232.906195][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 232.911480][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.916514][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.923015][ T9362] [ 232.925333][ T9362] [ 232.925333][ T9362] stack backtrace: [ 232.931226][ T9362] CPU: 1 UID: 0 PID: 9362 Comm: syz.3.1376 Not tainted syzkaller #0 PREEMPT(full) [ 232.931243][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.931259][ T9362] Call Trace: [ 232.931266][ T9362] [ 232.931273][ T9362] dump_stack_lvl+0x189/0x250 [ 232.931293][ T9362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.931309][ T9362] ? __pfx__printk+0x10/0x10 [ 232.931332][ T9362] validate_chain+0x1f05/0x2140 [ 232.931355][ T9362] __lock_acquire+0xab9/0xd20 [ 232.931378][ T9362] ? kill_fasync+0x199/0x4d0 [ 232.931393][ T9362] lock_acquire+0x120/0x360 [ 232.931417][ T9362] ? kill_fasync+0x199/0x4d0 [ 232.931437][ T9362] _raw_read_lock_irqsave+0xaf/0x100 [ 232.931456][ T9362] ? kill_fasync+0x199/0x4d0 [ 232.931471][ T9362] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 232.931489][ T9362] ? do_raw_spin_lock+0x121/0x290 [ 232.931512][ T9362] kill_fasync+0x199/0x4d0 [ 232.931528][ T9362] ? kill_fasync+0x53/0x4d0 [ 232.931546][ T9362] evdev_pass_values+0x627/0xbd0 [ 232.931574][ T9362] ? evdev_pass_values+0x671/0xbd0 [ 232.931601][ T9362] evdev_events+0x1e6/0x340 [ 232.931625][ T9362] ? evdev_events+0x79/0x340 [ 232.931651][ T9362] ? input_pass_values+0x8d/0x890 [ 232.931675][ T9362] input_pass_values+0x285/0x890 [ 232.931702][ T9362] ? input_handle_event+0x70c/0xf30 [ 232.931724][ T9362] input_event_dispose+0x330/0x6b0 [ 232.931747][ T9362] input_inject_event+0x1dd/0x340 [ 232.931768][ T9362] ? input_inject_event+0xb6/0x340 [ 232.931789][ T9362] evdev_write+0x2fc/0x480 [ 232.931818][ T9362] ? __pfx_evdev_write+0x10/0x10 [ 232.931844][ T9362] ? bpf_lsm_file_permission+0x9/0x20 [ 232.931865][ T9362] ? security_file_permission+0x75/0x290 [ 232.931888][ T9362] ? rw_verify_area+0x255/0x4d0 [ 232.931908][ T9362] ? __lock_acquire+0xab9/0xd20 [ 232.931931][ T9362] ? __pfx_evdev_write+0x10/0x10 [ 232.931957][ T9362] vfs_write+0x27e/0xb30 [ 232.931979][ T9362] ? __pfx_vfs_write+0x10/0x10 [ 232.931998][ T9362] ? __fget_files+0x2a/0x420 [ 232.932021][ T9362] ? __fget_files+0x2a/0x420 [ 232.932046][ T9362] ? __fget_files+0x3a0/0x420 [ 232.932068][ T9362] ? __fget_files+0x2a/0x420 [ 232.932091][ T9362] ksys_write+0x145/0x250 [ 232.932110][ T9362] ? __pfx_ksys_write+0x10/0x10 [ 232.932130][ T9362] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.932150][ T9362] __do_fast_syscall_32+0xb6/0x2b0 [ 232.932163][ T9362] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.932184][ T9362] do_fast_syscall_32+0x34/0x80 [ 232.932205][ T9362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.932223][ T9362] RIP: 0023:0xf7fd5539 [ 232.932240][ T9362] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.932253][ T9362] RSP: 002b:00000000f54f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 232.932268][ T9362] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 232.932278][ T9362] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.932286][ T9362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.932294][ T9362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.932302][ T9362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.932316][ T9362] [ 232.994767][ T980] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 233.346040][ T5968] usb 1-1: Using ep0 maxpacket: 32 [ 233.352595][ T5968] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 233.365056][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.378655][ T5968] usb 1-1: config 0 descriptor?? [ 233.388212][ T5968] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 233.460100][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.471977][ T980] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 233.482496][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.493309][ T980] usb 5-1: config 0 descriptor?? [ 233.511112][ T980] pwc: Askey VC010 type 2 USB webcam detected. [ 233.910462][ T980] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.918817][ T980] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.131436][ T980] pwc: recv_control_msg error -32 req 04 val 1000 [ 234.140232][ T980] pwc: recv_control_msg error -71 req 04 val 1300 [ 234.147852][ T980] pwc: recv_control_msg error -71 req 04 val 1400 [ 234.155197][ T980] pwc: recv_control_msg error -71 req 02 val 2000 [ 234.163154][ T980] pwc: recv_control_msg error -71 req 02 val 2100 [ 234.169970][ T980] pwc: recv_control_msg error -71 req 04 val 1500 [ 234.177114][ T980] pwc: recv_control_msg error -71 req 02 val 2500 [ 234.184113][ T980] pwc: recv_control_msg error -71 req 02 val 2400 [ 234.190930][ T980] pwc: recv_control_msg error -71 req 02 val 2600 [ 234.197864][ T980] pwc: recv_control_msg error -71 req 02 val 2900 [ 234.205144][ T980] pwc: recv_control_msg error -71 req 02 val 2800 [ 234.212070][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 234.218893][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 234.226561][ T980] pwc: Registered as video103. [ 234.232528][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 234.250477][ T980] usb 5-1: USB disconnect, device number 20 [ 234.608309][ T5968] gspca_nw80x: reg_w err -71 [ 234.613091][ T5968] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 234.623250][ T5968] usb 1-1: USB disconnect, device number 24