last executing test programs: 3m3.785163096s ago: executing program 4 (id=2739): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3m3.705988479s ago: executing program 4 (id=2740): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3f1", 0x2}], 0x1, 0x8) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0x18c6) 3m3.481020055s ago: executing program 4 (id=2744): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m3.412175345s ago: executing program 4 (id=2745): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m2.484142662s ago: executing program 4 (id=2759): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 3m2.119727657s ago: executing program 4 (id=2763): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0x30bd, 0x2, 0x3, 0x197}) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.760548824s ago: executing program 32 (id=2763): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0x30bd, 0x2, 0x3, 0x197}) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 14.117147167s ago: executing program 0 (id=4559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 14.103825969s ago: executing program 0 (id=4560): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) 14.030465302s ago: executing program 0 (id=4561): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000200)="400001", 0x3}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f00000004c0)="9fc96e27f4a3bcdf5a971121dbd291c8c2bd8ae5edfc1850e9", 0x19, 0x20003b04, 0x0, 0x0) 13.921357438s ago: executing program 0 (id=4562): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 13.770910798s ago: executing program 0 (id=4563): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 13.515225466s ago: executing program 0 (id=4565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) 13.244006219s ago: executing program 33 (id=4565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) 4.070784124s ago: executing program 3 (id=4617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 3.840861357s ago: executing program 3 (id=4619): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x32, 0x0, 0x1}, 0x28) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) 3.674598689s ago: executing program 3 (id=4621): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x80003) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)) 3.368980361s ago: executing program 3 (id=4625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000012000300686173683a6e65742c706f727400000014000780080012400021000008000840"], 0x60}}, 0x0) 2.908902425s ago: executing program 3 (id=4627): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x430a}}}}}}, 0x0) 2.760238471s ago: executing program 3 (id=4628): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.68155442s ago: executing program 5 (id=4629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.325065746s ago: executing program 2 (id=4634): socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 2.308576349s ago: executing program 5 (id=4635): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) 2.234135207s ago: executing program 1 (id=4636): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 2.18220666s ago: executing program 2 (id=4637): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 2.117226888s ago: executing program 5 (id=4638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x30, 0x0, &(0x7f0000000580)=[@request_death, @clear_death, @request_death={0x400c630e, 0x1}], 0x0, 0x1000000, 0x0}) 2.08152725s ago: executing program 1 (id=4639): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000c80)=ANY=[@ANYBLOB="04224c"], 0x4f) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 2.062552387s ago: executing program 2 (id=4640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1b2e}) 1.866555322s ago: executing program 2 (id=4641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000000e00000020000000000200000000000000000000000000000000002000000000000000000000000000a00200000100000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000089d400000000020000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000feffffffffffff"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.811216919s ago: executing program 2 (id=4642): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) 1.73655803s ago: executing program 1 (id=4643): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c831, 0xffffffffffffffff, 0x4d2ea000) msgctl$IPC_SET(0x0, 0x1, 0x0) 1.700885326s ago: executing program 2 (id=4644): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000840)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.568425182s ago: executing program 1 (id=4645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x40, 0x7f}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) 1.499144362s ago: executing program 1 (id=4646): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 1.395230028s ago: executing program 1 (id=4648): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 1.281721284s ago: executing program 6 (id=4649): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0xfffffff5, 0x2d9406}) 1.167256394s ago: executing program 5 (id=4650): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) 1.051153069s ago: executing program 6 (id=4651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 981.585993ms ago: executing program 5 (id=4652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x2}, 0x0) 878.820422ms ago: executing program 6 (id=4653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007300004000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[]) 770.262173ms ago: executing program 5 (id=4654): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x1, 0x1, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 645.729667ms ago: executing program 6 (id=4655): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x200000000002f1b, 0xfffffffffffffffe, 0x0, 0x0, 0x24}, {0x10001, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@local, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 225.059977ms ago: executing program 6 (id=4656): r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xfffffffd, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 0s ago: executing program 6 (id=4657): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x0, 0x0, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): d wMaxPacketSize 0 [ 394.233706][ T5942] usb 1-1: Manufacturer: syz [ 394.238408][ T5942] usb 1-1: SerialNumber: syz [ 394.252604][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 394.263250][ T5942] usb 1-1: config 0 descriptor?? [ 394.270026][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.281296][ T9] usb 4-1: Product: syz [ 394.285553][ T9] usb 4-1: Manufacturer: syz [ 394.291370][ T9] usb 4-1: SerialNumber: syz [ 394.296911][ T5953] gspca_vc032x: reg_r err -71 [ 394.307066][ T5953] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 394.308649][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 394.323802][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 394.333244][ T9] r8152 4-1:0.129: Expected endpoints are not found [ 394.333752][ T5953] usb 3-1: USB disconnect, device number 49 [ 394.401092][ T1543] usb 2-1: Using ep0 maxpacket: 8 [ 394.408213][ T1543] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.418159][ T1543] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.428178][ T1543] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.438274][ T1543] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.452357][ T1543] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 394.461856][ T1543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.545584][ T9] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 394.676490][ T5942] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 394.688445][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 394.697936][ T1543] usb 2-1: GET_CAPABILITIES returned 0 [ 394.703762][ T1543] usbtmc 2-1:16.0: can't read capabilities [ 394.714649][ T5942] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 394.730810][ T5942] usb 1-1: media controller created [ 394.769175][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.816045][T16671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.824069][T16671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.834747][T16671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.844878][T16671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.904077][ T1543] usb 2-1: USB disconnect, device number 43 [ 394.995690][T16675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3538'. [ 395.176868][T16681] kernel read not supported for file /eth0 (pid: 16681 comm: syz.3.3541) [ 395.193200][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 395.193243][ T30] audit: type=1800 audit(1760377908.854:648): pid=16681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3541" name="eth0" dev="mqueue" ino=38695 res=0 errno=0 [ 395.321085][ T5942] zl10353_read_register: readreg error (reg=127, ret==0) [ 395.321165][T16659] dtv5100: wlen = 0, aborting. [ 395.328304][ T5942] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 395.362058][ T5942] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 395.392431][ T5942] usb 1-1: USB disconnect, device number 46 [ 395.522281][ T5942] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 397.080259][ T43] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 397.241550][ T43] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 397.261184][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.281146][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.300138][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.329686][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.337905][ T43] usb 3-1: Product: syz [ 397.352418][ T43] usb 3-1: Manufacturer: syz [ 397.357078][ T43] usb 3-1: SerialNumber: syz [ 397.375817][ T43] usb 3-1: config 0 descriptor?? [ 397.391689][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 397.398219][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 397.413708][ T43] usb 3-1: selecting invalid altsetting 0 [ 397.541212][T16763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.652833][T16767] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3577'. [ 397.849615][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 398.034389][ T43] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 398.053858][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.083734][ T43] usb 4-1: Product: syz [ 398.087965][ T43] usb 4-1: Manufacturer: syz [ 398.109747][ T43] usb 4-1: SerialNumber: syz [ 398.117261][ T43] usb 4-1: config 0 descriptor?? [ 398.215641][T16781] netlink: 'syz.1.3583': attribute type 10 has an invalid length. [ 398.251757][T16781] netlink: 'syz.1.3583': attribute type 10 has an invalid length. [ 398.275958][T16781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 398.287027][ T13] bond0: (slave dummy0): interface is now down [ 398.320430][ T13] bond0: (slave dummy0): interface is now down [ 398.327914][ T13] bond0: now running without any active interface! [ 398.348607][ T5953] usb 4-1: USB disconnect, device number 47 [ 398.355068][T16739] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 398.642115][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3588'. [ 398.896006][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3593'. [ 398.982459][ T5953] usb 3-1: USB disconnect, device number 50 [ 399.019628][ T5942] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 399.192793][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.229814][ T5942] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 399.259948][ T5942] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 399.288983][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.328741][ T5942] usb 2-1: config 0 descriptor?? [ 399.356213][ T5942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 399.380168][ T5942] dvb-usb: bulk message failed: -22 (3/0) [ 399.401265][ T5942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 399.450192][ T5942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 399.457320][ T5942] usb 2-1: media controller created [ 399.471719][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.510964][ T5942] dvb-usb: bulk message failed: -22 (6/0) [ 399.516843][ T5942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 399.550242][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 399.581864][ T5942] dvb-usb: schedule remote query interval to 150 msecs. [ 399.617387][ T5942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 399.772949][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 399.783485][ T9] dvb-usb: error while querying for an remote control event. [ 399.949729][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 399.955535][ T9] dvb-usb: error while querying for an remote control event. [ 400.032085][T16832] syzkaller1: entered promiscuous mode [ 400.048914][T16832] syzkaller1: entered allmulticast mode [ 400.160299][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 400.182794][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.189243][ T9] dvb-usb: error while querying for an remote control event. [ 400.198599][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.281552][ T5923] usb 2-1: USB disconnect, device number 44 [ 400.362414][ T5923] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 400.991454][T16850] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3612'. [ 403.310356][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 403.372708][T16933] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3647'. [ 403.498260][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 403.506909][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.540508][ T9] usb 1-1: config 0 has no interface number 0 [ 403.546772][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 403.575054][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'. [ 403.586974][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.615017][T16944] syzkaller1: entered promiscuous mode [ 403.622110][T16944] syzkaller1: entered allmulticast mode [ 403.624815][ T9] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 403.650365][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.663115][ T9] usb 1-1: Product: syz [ 403.670757][ T9] usb 1-1: Manufacturer: syz [ 403.675385][ T9] usb 1-1: SerialNumber: syz [ 403.698681][ T9] usb 1-1: config 0 descriptor?? [ 403.961469][T16953] input: syz1 as /devices/virtual/input/input70 [ 403.978790][T16953] input: failed to attach handler leds to device input70, error: -6 [ 404.101789][T16958] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3657'. [ 404.191083][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 404.332973][ T5923] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 404.333442][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input69 [ 404.360012][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 404.371216][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 404.386271][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.398470][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.408788][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.421132][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.448245][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.458187][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.511816][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.523681][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.533542][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.546551][ T5923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.556440][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.557967][ T9] usb 1-1: USB disconnect, device number 47 [ 404.568311][ T5923] usb 4-1: config 0 descriptor?? [ 404.685785][ T24] usb 6-1: usb_control_msg returned -32 [ 404.692195][ T24] usbtmc 6-1:16.0: can't read capabilities [ 404.762973][ T30] audit: type=1326 audit(1760377918.424:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.787695][ T30] audit: type=1326 audit(1760377918.424:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.818054][ T30] audit: type=1326 audit(1760377918.424:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.840704][ T30] audit: type=1326 audit(1760377918.424:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.863273][ T30] audit: type=1326 audit(1760377918.424:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.886349][ T30] audit: type=1326 audit(1760377918.424:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.909742][ T30] audit: type=1326 audit(1760377918.424:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.931838][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.938507][ T30] audit: type=1326 audit(1760377918.424:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.960602][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.967119][ T30] audit: type=1326 audit(1760377918.424:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 404.990316][ T30] audit: type=1326 audit(1760377918.424:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x50000 [ 405.033079][ T5923] plantronics 0003:047F:FFFF.0036: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 405.219447][ T5923] usb 4-1: USB disconnect, device number 48 [ 405.599790][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 405.769947][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 405.781289][ T43] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 405.802909][ T43] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 405.823295][ T43] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.849598][ T43] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 405.866914][ T43] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 405.876903][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.885430][ T43] usb 1-1: Product: syz [ 405.889981][ T43] usb 1-1: Manufacturer: syz [ 405.894627][ T43] usb 1-1: SerialNumber: syz [ 405.908113][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 405.918772][ T43] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input71 [ 406.119921][ T43] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 406.128482][ T43] (id 0x00) [ 406.189815][ T43] rc_core: IR keymap rc-imon-pad not found [ 406.195767][ T43] Registered IR keymap rc-empty [ 406.201285][ T43] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 406.213430][ T43] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 406.321487][ T43] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 406.333902][ T43] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input72 [ 406.348532][ T43] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:48> initialized [ 406.513295][ T43] usb 1-1: USB disconnect, device number 48 [ 406.840086][ T5942] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 406.914291][T17004] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.3677'. [ 406.987716][ T5923] usb 6-1: USB disconnect, device number 11 [ 407.009576][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 407.035744][ T5942] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 407.062623][ T5942] usb 2-1: config 179 has no interface number 0 [ 407.083375][ T5942] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 407.125941][ T5942] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 407.242656][ T5942] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.275141][ T5942] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 407.365971][ T5942] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 407.400710][ T5942] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 407.422889][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.495486][T16996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 407.827964][ T5942] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input73 [ 407.983346][ T5942] usb 2-1: USB disconnect, device number 45 [ 407.983421][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 407.983477][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 408.509781][ T5910] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 408.676050][ T5910] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.700181][ T5910] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.729899][ T5910] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.739393][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.770209][T17037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 408.793522][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.889873][ T5942] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 409.013844][ T5923] usb 3-1: USB disconnect, device number 51 [ 409.053527][ T5942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.066156][ T5942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.075551][ T5942] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 409.087471][ T5942] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 409.101400][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.120467][T17052] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 409.128080][ T5910] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 409.137973][ T5942] hub 2-1:1.0: bad descriptor, ignoring hub [ 409.154289][ T5942] hub 2-1:1.0: probe with driver hub failed with error -5 [ 409.167096][ T5942] cdc_wdm 2-1:1.0: skipping garbage [ 409.173187][ T5942] cdc_wdm 2-1:1.0: skipping garbage [ 409.188861][ T5942] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 409.198673][ T5942] cdc_wdm 2-1:1.0: Unknown control protocol [ 409.289698][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 409.303812][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.315261][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.331057][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.359025][ T5910] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 409.379377][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.426659][ T5910] usb 6-1: config 0 descriptor?? [ 409.773870][T17052] usb 2-1: reset full-speed USB device number 46 using dummy_hcd [ 409.876416][ T5910] input: HID 0955:7214 Haptics as /devices/virtual/input/input74 [ 409.918112][ T5910] shield 0003:0955:7214.0037: Registered Thunderstrike controller [ 409.926550][ T5910] shield 0003:0955:7214.0037: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 409.946497][T17068] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.953986][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 409.968147][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 409.974984][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 409.981344][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 409.988065][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 409.994502][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 410.001130][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 410.007580][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 410.014203][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 410.111980][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.120879][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 410.130095][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.142899][ T10] usb 3-1: config 0 descriptor?? [ 410.270554][ T43] usb 2-1: USB disconnect, device number 46 [ 410.278202][T17062] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.286029][T17062] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 410.311172][T17062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.317374][T17062] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 410.330454][T17062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.338666][T17062] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 410.347853][T17062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.354296][T17062] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 410.369610][T17062] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.376049][T17062] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 410.389117][T17062] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 410.424086][ T5923] usb 6-1: USB disconnect, device number 12 [ 410.424295][ T5897] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 410.462650][ T5897] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 410.476683][ T5897] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 410.488595][ T5897] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 411.188541][ T10] video4linux radio48: keene_cmd_set failed (-71) [ 411.216114][ T10] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 411.248124][ T10] usb 3-1: USB disconnect, device number 52 [ 412.209920][ T5923] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 412.229650][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 412.387981][ T5923] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.392487][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 412.398773][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 412.404069][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 412.410594][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 412.432414][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 412.439102][ T5923] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 412.449745][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.460730][ T5923] usb 4-1: config 0 descriptor?? [ 412.904053][ T5923] magicmouse 0003:05AC:0269.0038: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 413.105097][ C1] hrtimer: interrupt took 12088 ns [ 413.125798][ T5923] usb 4-1: USB disconnect, device number 49 [ 413.975476][T17175] dummy0: Caught tx_queue_len zero misconfig [ 414.309884][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 414.469819][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 414.476032][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 414.476090][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 414.482216][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 415.279686][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 415.450115][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 415.462298][ T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 415.474824][T17226] batadv_slave_1: entered promiscuous mode [ 415.483271][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.497242][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.508630][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.520247][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.533633][T17225] batadv_slave_1: left promiscuous mode [ 415.534211][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.549384][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.791505][ T43] usb 6-1: usb_control_msg returned -32 [ 415.797278][ T43] usbtmc 6-1:16.0: can't read capabilities [ 415.838327][T17237] syzkaller1: entered promiscuous mode [ 415.854199][T17237] syzkaller1: entered allmulticast mode [ 416.147347][T17246] usbtmc 6-1:16.0: stb usb_control_msg returned -32 [ 416.163350][ T5923] usb 6-1: USB disconnect, device number 13 [ 416.369652][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 416.409839][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 416.519711][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 416.526739][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 416.535050][ T24] usb 3-1: config 0 has no interface number 0 [ 416.541548][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 416.550246][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 416.558057][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 416.567609][ T24] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 416.576369][ T24] usb 3-1: Product: syz [ 416.580682][ T24] usb 3-1: Manufacturer: syz [ 416.581094][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 416.585309][ T24] usb 3-1: SerialNumber: syz [ 416.597562][ T24] usb 3-1: config 0 descriptor?? [ 416.601415][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 416.613038][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.624559][ T10] usb 4-1: config 0 descriptor?? [ 416.642311][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 417.440052][ T43] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 417.622366][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 417.631483][ T43] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 417.648005][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.658022][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 417.663569][ T10] gspca_sonixj: reg_w1 err -71 [ 417.669347][ T24] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 417.686258][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 417.695870][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.706706][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 417.714747][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.723778][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 417.726348][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 417.744003][ T43] usb 6-1: Product: syz [ 417.748217][ T43] usb 6-1: Manufacturer: syz [ 417.765905][ T24] usb 3-1: USB disconnect, device number 53 [ 417.791686][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 417.797143][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 417.800517][ T10] usb 4-1: USB disconnect, device number 50 [ 417.858217][ T43] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 417.865131][ T43] cdc_wdm 6-1:1.0: Unknown control protocol [ 418.061071][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.067771][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.074206][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.080853][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.087617][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.094360][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.100809][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.107474][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.117906][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.124668][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.131169][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.137823][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.144429][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.151078][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.157475][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.164107][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.170828][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.177466][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.183806][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 418.190442][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 418.204417][ T24] usb 6-1: USB disconnect, device number 14 [ 418.204481][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 419.319746][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 419.437146][T17323] input: syz1 as /devices/virtual/input/input75 [ 419.452652][T17323] input: failed to attach handler leds to device input75, error: -6 [ 419.487951][ T9] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 419.509014][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.532399][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 419.553755][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.569742][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.588644][ T9] usb 6-1: Product: syz [ 419.598471][ T9] usb 6-1: Manufacturer: syz [ 419.608922][ T9] usb 6-1: SerialNumber: syz [ 419.625233][ T9] usb 6-1: config 0 descriptor?? [ 419.644999][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 419.659792][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 419.685031][ T9] usb 6-1: selecting invalid altsetting 0 [ 420.309915][T17307] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 420.473568][T17307] usb 6-1: device firmware changed [ 420.500710][ T10] usb 6-1: USB disconnect, device number 15 [ 420.724960][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 420.911872][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 420.956034][ T10] usb 6-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 420.975643][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.999889][ T10] usb 6-1: Product: syz [ 421.004122][ T10] usb 6-1: Manufacturer: syz [ 421.059617][ T10] usb 6-1: SerialNumber: syz [ 421.345094][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 421.360048][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 421.400834][ T10] usb 6-1: USB disconnect, device number 16 [ 421.479990][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 421.642336][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.665005][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 421.689904][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 421.709633][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.733271][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.750245][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.778150][ T43] usb 3-1: config 0 descriptor?? [ 421.830022][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 422.003492][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 422.028828][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 422.048749][ T9] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 422.077654][ T9] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 422.090373][ T9] usb 2-1: config 8 interface 0 has no altsetting 0 [ 422.103134][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 422.112782][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.125539][ T9] usb 2-1: Product: syz [ 422.134046][ T9] usb 2-1: Manufacturer: syz [ 422.138845][ T9] usb 2-1: SerialNumber: syz [ 422.153823][T17371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 422.213148][ T43] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 422.387519][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.398346][ T9] usb 2-1: selecting invalid altsetting 0 [ 422.443994][ T9] usb 2-1: USB disconnect, device number 47 [ 422.505605][ T24] usb 3-1: USB disconnect, device number 54 [ 422.524464][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.984405][T17398] vivid-001: disconnect [ 422.996881][T17397] vivid-001: reconnect [ 423.170011][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 423.351928][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 423.390923][ T24] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 423.410007][ T24] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 423.437724][ T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.469955][ T24] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 423.511319][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 423.537641][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.560048][ T24] usb 4-1: Product: syz [ 423.564307][ T24] usb 4-1: Manufacturer: syz [ 423.586612][ T24] usb 4-1: SerialNumber: syz [ 423.616006][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 423.631943][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input77 [ 423.859686][ T24] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 423.868011][ T24] (id 0x00) [ 424.039947][ T24] rc_core: IR keymap rc-imon-pad not found [ 424.054378][ T24] Registered IR keymap rc-empty [ 424.066077][ T24] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 424.097521][ T24] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 424.130999][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 424.232396][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input78 [ 424.254218][ T24] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:51> initialized [ 424.318043][ T5897] usb 4-1: USB disconnect, device number 51 [ 424.833264][ T5897] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 425.006247][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.018105][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.030667][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.049612][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.057962][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 425.057979][ T30] audit: type=1326 audit(1760377938.714:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.099566][ T5897] usb 3-1: Product: syz [ 425.108286][ T5897] usb 3-1: Manufacturer: syz [ 425.114969][ T30] audit: type=1326 audit(1760377938.714:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.118944][ T5897] usb 3-1: SerialNumber: syz [ 425.161096][ T30] audit: type=1326 audit(1760377938.714:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.184144][ T30] audit: type=1326 audit(1760377938.714:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.248953][ T30] audit: type=1326 audit(1760377938.714:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.311175][T17476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3878'. [ 425.343908][ T30] audit: type=1326 audit(1760377938.714:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.351695][T17476] netlink: 'syz.0.3878': attribute type 7 has an invalid length. [ 425.382221][T17480] bond0: Caught tx_queue_len zero misconfig [ 425.395946][ T30] audit: type=1326 audit(1760377938.714:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.419283][T17476] netlink: 'syz.0.3878': attribute type 8 has an invalid length. [ 425.428503][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 425.450902][ T30] audit: type=1326 audit(1760377938.714:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.479728][ T30] audit: type=1326 audit(1760377938.714:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.521621][ T5897] usb 3-1: 0:2 : does not exist [ 425.527947][ T30] audit: type=1326 audit(1760377938.714:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.3875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23098eec9 code=0x7ffc0000 [ 425.588550][ T5897] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 425.625831][ T5897] usb 3-1: USB disconnect, device number 55 [ 425.703004][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.179688][ T5897] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 426.208430][T17505] input: syz1 as /devices/virtual/input/input79 [ 426.340848][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 426.348239][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.371994][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.394825][ T5897] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 426.417848][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.440104][ T5923] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 426.451175][ T5897] usb 1-1: config 0 descriptor?? [ 426.552280][T17517] netlink: 'syz.1.3896': attribute type 29 has an invalid length. [ 426.582051][T17517] netlink: 'syz.1.3896': attribute type 29 has an invalid length. [ 426.598554][T17517] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3896'. [ 426.620116][ T5923] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 426.639434][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.649913][T17517] unsupported nla_type 58 [ 426.671714][ T5923] usb 3-1: config 0 descriptor?? [ 426.894674][ T5923] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 426.920150][ T5897] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 427.070100][T17530] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3902'. [ 427.104764][ T5923] [drm:udl_init] *ERROR* Selecting channel failed [ 427.173852][ T5923] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 427.182618][ T10] usb 1-1: USB disconnect, device number 49 [ 427.216392][ T5923] [drm] Initialized udl on minor 2 [ 427.243704][T17532] xt_bpf: check failed: parse error [ 427.250175][ T5923] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.260429][ T5923] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 427.270811][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.314998][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.341669][ T5923] usb 3-1: USB disconnect, device number 56 [ 427.358020][ T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 428.400376][ T5923] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 428.603494][ T5923] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 428.619525][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.642153][ T5923] usb 1-1: config 0 descriptor?? [ 428.876599][ T5923] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 429.036267][ T5897] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 429.069817][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 429.104388][ T5923] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 429.122578][ T5923] [drm] Initialized udl on minor 2 [ 429.199788][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 429.206860][ T5897] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 429.215909][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.219661][ T43] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 429.226338][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.245676][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 429.254216][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.267364][ T5897] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.276522][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.287532][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.295704][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.307272][ T5897] usb 2-1: Product: syz [ 429.312202][ T5897] usb 2-1: Manufacturer: syz [ 429.316857][ T5897] usb 2-1: SerialNumber: syz [ 429.321616][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.336103][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.346614][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.362644][ T10] usb 3-1: config 0 descriptor?? [ 429.369779][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 429.379165][T17588] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 429.392289][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.404166][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 429.415026][ T43] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 429.425985][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.434318][ T43] usb 4-1: Product: syz [ 429.438598][ T43] usb 4-1: Manufacturer: syz [ 429.443629][ T43] usb 4-1: SerialNumber: syz [ 429.451855][ T43] usb 4-1: config 0 descriptor?? [ 429.462024][ T43] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 429.474202][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 429.485703][ T43] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 429.494942][ T5923] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffe0 [ 429.503789][ T5923] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 429.512248][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 429.520085][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 429.525894][ T43] usb 4-1: media controller created [ 429.528088][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 429.543382][ T9] usb 6-1: config 0 has no interface number 0 [ 429.544736][ T5923] usb 1-1: USB disconnect, device number 50 [ 429.556392][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 429.563902][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.580397][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 429.593844][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 429.607187][ T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 429.638477][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 429.656926][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 429.668084][ T9] usb 6-1: Product: syz [ 429.684648][ T9] usb 6-1: SerialNumber: syz [ 429.701248][ T9] usb 6-1: config 0 descriptor?? [ 429.703002][ T43] DVB: Unable to find symbol tda10046_attach() [ 429.713530][ T9] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 429.718068][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input80 [ 429.723707][ T43] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 429.745877][ T43] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 429.791731][ T5897] usb 2-1: 0:2 : does not exist [ 429.848045][ T10] plantronics 0003:047F:FFFF.003B: reserved main item tag 0xd [ 429.871714][ T10] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 429.921974][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.931573][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.938769][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.949707][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.958161][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.965650][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.973426][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.980800][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.989301][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 429.996539][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 430.007223][ T10] usb 6-1: USB disconnect, device number 17 [ 430.007303][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 430.031487][ T10] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 430.162240][ T5923] usb 3-1: USB disconnect, device number 57 [ 430.440209][ T5897] usb 2-1: USB disconnect, device number 48 [ 430.575093][ T43] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 430.593190][ T43] usb 4-1: USB disconnect, device number 52 [ 431.118781][T17635] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 431.172181][T17635] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 431.190898][T17635] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3950'. [ 431.491865][T17652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3957'. [ 431.959624][ T5897] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 432.129935][ T5897] usb 4-1: config 0 has no interfaces? [ 432.142304][ T5897] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 432.159539][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.160278][ T43] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 432.167579][ T5897] usb 4-1: Product: syz [ 432.167601][ T5897] usb 4-1: Manufacturer: syz [ 432.167618][ T5897] usb 4-1: SerialNumber: syz [ 432.190871][ T5897] usb 4-1: config 0 descriptor?? [ 432.339622][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 432.349991][ T43] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 432.362019][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.388835][ T43] usb 1-1: config 0 descriptor?? [ 432.430163][ T5923] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 432.469111][ T5897] usb 4-1: USB disconnect, device number 53 [ 432.599436][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 432.611644][ T5923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 432.630340][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 432.640061][ T5923] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 432.657788][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 432.667894][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 432.675416][ T43] usb 1-1: media controller created [ 432.681772][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 432.705128][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 432.727439][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.739229][ T5923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 432.750624][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 432.758665][ T5923] usb 3-1: Product: syz [ 432.775775][ T5923] usb 3-1: Manufacturer: syz [ 432.798762][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 432.807222][ T43] az6027: usb out operation failed. (-71) [ 432.817266][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 432.822834][ T43] az6027: usb out operation failed. (-71) [ 432.828728][ T43] stb0899_attach: Driver disabled by Kconfig [ 432.837581][ T5923] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 432.844523][ T43] az6027: no front-end attached [ 432.844523][ T43] [ 432.851924][ T5923] cdc_wdm 3-1:1.0: Unknown control protocol [ 432.858395][ T43] az6027: usb out operation failed. (-71) [ 432.867443][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 432.877423][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input82 [ 432.905417][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 432.922711][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 432.944408][ T43] usb 1-1: USB disconnect, device number 51 [ 432.967061][ T5968] udevd[5968]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 433.038455][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 433.585191][ T10] usb 3-1: USB disconnect, device number 58 [ 434.130103][ T43] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 434.291998][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.312293][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.325006][ T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.341459][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.379019][ T43] usb 6-1: Product: syz [ 434.384715][ T43] usb 6-1: Manufacturer: syz [ 434.389360][ T43] usb 6-1: SerialNumber: syz [ 434.626831][ T43] usb 6-1: 0:2 : does not exist [ 434.656104][ T43] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 434.710954][ T43] usb 6-1: USB disconnect, device number 18 [ 434.802931][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.609112][T17759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.049707][T17777] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 48 [ 436.441248][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 436.629701][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 436.640663][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 436.673704][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 436.705460][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.757856][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 436.778852][ T10] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 436.797792][ T10] usb 2-1: Product: syz [ 436.812069][ T10] usb 2-1: Manufacturer: syz [ 436.823431][ T10] usb 2-1: SerialNumber: syz [ 436.844948][T17785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 436.864632][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input83 [ 437.102161][ T10] usb 2-1: USB disconnect, device number 49 [ 437.218052][ T10] appletouch 2-1:1.0: input: appletouch disconnected [ 437.241889][T17818] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 437.289145][T17819] gretap0: entered promiscuous mode [ 438.904867][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4039'. [ 439.312029][T17868] loop6: detected capacity change from 0 to 2640 [ 439.319070][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.327561][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.335618][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.345164][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.353366][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.364292][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.373629][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.391425][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.400829][T17868] ldm_validate_partition_table(): Disk read failed. [ 439.407783][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.416911][T17868] Buffer I/O error on dev loop6, logical block 0, async page read [ 439.425452][T17868] Dev loop6: unable to read RDB block 0 [ 439.431973][T17868] loop6: unable to read partition table [ 439.438901][T17868] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 439.669672][T17826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 439.669725][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 439.993839][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.000396][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.504588][T17826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.511126][T17826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.517278][T17826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.523806][T17826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.789741][ T5942] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 440.909604][ T10] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 441.072123][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 441.081463][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.092858][ T10] usb 4-1: config 0 descriptor?? [ 441.249613][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 441.299604][ T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 441.299679][ T5942] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 441.399679][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 441.406727][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.417945][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.428199][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.441296][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.452057][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.463860][ T9] usb 6-1: config 0 descriptor?? [ 441.469642][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 441.470041][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 441.480264][ T5942] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 441.489455][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.492401][ T43] usb 1-1: config 0 has an invalid interface number: 38 but max is 0 [ 441.516698][ T43] usb 1-1: config 0 has no interface number 0 [ 441.523308][ T43] usb 1-1: config 0 interface 38 has no altsetting 0 [ 441.532630][ T5942] usb 2-1: config 0 descriptor?? [ 441.536251][ T43] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 441.544583][ T5942] gspca_main: sq930x-2.14.0 probing 041e:403c [ 441.547429][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.565252][ T43] usb 1-1: Product: syz [ 441.569619][ T43] usb 1-1: Manufacturer: syz [ 441.574298][ T43] usb 1-1: SerialNumber: syz [ 441.586955][ T43] usb 1-1: config 0 descriptor?? [ 441.597010][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 441.749903][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 441.906647][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 441.923667][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003C/input/input84 [ 442.122222][ T10] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 442.170473][ T10] usb 4-1: USB disconnect, device number 54 [ 442.282071][ T9] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 442.318384][ T9] usb 6-1: USB disconnect, device number 19 [ 442.376356][T17921] netlink: 452 bytes leftover after parsing attributes in process `syz.2.4065'. [ 442.430084][ T43] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input85 [ 442.559744][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 442.565967][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 442.572388][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.591124][ T5942] gspca_sq930x: ucbus_write failed -71 [ 442.596786][ T5942] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 442.615144][ T5942] usb 2-1: USB disconnect, device number 51 [ 442.660303][ T43] usb 1-1: USB disconnect, device number 52 [ 443.306797][T17948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4074'. [ 444.129742][ T5953] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 444.281740][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.300663][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.319980][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.334403][ T5953] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.343825][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.357746][ T5953] usb 2-1: config 0 descriptor?? [ 444.390084][ T43] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 444.569198][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 444.587412][ T43] usb 4-1: no configurations [ 444.611594][ T43] usb 4-1: can't read configurations, error -22 [ 444.861244][ T5953] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xe [ 444.868821][ T5953] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 444.894751][ T5953] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 445.058430][ T5953] usb 2-1: USB disconnect, device number 52 [ 445.191704][T18009] lo: Caught tx_queue_len zero misconfig [ 445.350762][ T5942] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 445.516860][ T5942] usb 6-1: config 0 has no interfaces? [ 445.527702][ T5942] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 445.541965][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 445.553052][ T5942] usb 6-1: Product: syz [ 445.557369][ T5942] usb 6-1: Manufacturer: syz [ 445.570627][ T5953] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 445.582580][ T5942] usb 6-1: config 0 descriptor?? [ 445.771500][ T5953] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 445.780945][ T5953] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 445.826719][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 445.870044][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 445.906355][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 445.976148][ T5953] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 445.986537][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.019605][ T5953] usb 1-1: Product: syz [ 446.031014][ T5953] usb 1-1: Manufacturer: syz [ 446.060546][T18013] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 446.101344][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 446.106622][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 446.136994][ T5953] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 446.149114][ T5953] cdc_wdm 1-1:1.0: Unknown control protocol [ 446.314945][ C1] wdm_int_callback: 11 callbacks suppressed [ 446.314972][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.327717][ C1] wdm_int_callback: 11 callbacks suppressed [ 446.327742][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.340524][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.347169][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.353495][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.360127][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.370040][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.376694][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.383000][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.389640][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.396042][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.402683][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.409358][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.416095][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.422517][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.429158][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.435795][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.442440][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.448790][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 446.455431][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 446.919243][ T10] usb 6-1: USB disconnect, device number 20 [ 446.998902][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 447.008968][ T5942] usb 1-1: USB disconnect, device number 53 [ 447.276888][T18057] batadv_slave_0: entered promiscuous mode [ 447.326418][T18056] batadv_slave_0: left promiscuous mode [ 449.049666][ T5942] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 449.253390][ T5942] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 449.262741][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.275741][ T5942] usb 2-1: config 0 descriptor?? [ 449.350221][ T5953] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 449.502500][ T5953] usb 4-1: config 0 has no interfaces? [ 449.513720][ T5953] usb 4-1: config 0 has no interfaces? [ 449.523107][ T5953] usb 4-1: config 0 has no interfaces? [ 449.532585][ T5953] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 449.542407][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 449.551438][ T5953] usb 4-1: Product: syz [ 449.555938][ T5953] usb 4-1: Manufacturer: syz [ 449.561486][ T5953] usb 4-1: SerialNumber: syz [ 449.571652][ T5953] usb 4-1: config 0 descriptor?? [ 449.723415][ T5942] chicony 0003:04F2:1236.003E: unknown main item tag 0x0 [ 449.740221][ T5942] chicony 0003:04F2:1236.003E: unknown main item tag 0x0 [ 449.766144][ T5942] chicony 0003:04F2:1236.003E: unknown main item tag 0x0 [ 449.786392][ T5942] chicony 0003:04F2:1236.003E: unknown main item tag 0x0 [ 449.793624][ T5942] chicony 0003:04F2:1236.003E: unknown main item tag 0x0 [ 449.825994][ T5942] chicony 0003:04F2:1236.003E: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 449.918723][ T5953] usb 2-1: USB disconnect, device number 53 [ 450.027174][T18108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.052913][T18108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.059615][T18110] fido_id[18110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 450.082518][ T5942] usb 4-1: USB disconnect, device number 57 [ 451.026269][T18133] netlink: 'syz.5.4145': attribute type 13 has an invalid length. [ 451.042610][T18133] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 451.163643][T18133] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.199654][T18133] gretap1: entered promiscuous mode [ 451.204927][T18133] gretap1: entered allmulticast mode [ 451.650780][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 451.827093][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 451.850551][ T43] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 451.869724][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.902507][ T43] usb 6-1: config 0 descriptor?? [ 451.913384][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 452.468113][T18032] Set syz1 is full, maxelem 65536 reached [ 452.534471][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.852909][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.972199][ T43] gspca_nw80x: reg_w err -71 [ 452.976938][ T43] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 453.014742][ T43] usb 6-1: USB disconnect, device number 21 [ 453.075460][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.543248][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.556389][ T5153] Bluetooth: unknown link type 128 [ 453.581704][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.601777][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.613681][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.636934][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 453.648884][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.795256][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4167'. [ 453.870560][T18176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.908743][T18176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 453.937319][T18176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 453.952968][T18176] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 453.970692][T18176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.987044][T18176] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 454.015340][T18176] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 454.269640][ T43] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 454.371289][ T1148] vlan0: left promiscuous mode [ 454.377869][ T1148] bridge0: port 4(vlan0) entered disabled state [ 454.388351][ T1148] batadv1: left allmulticast mode [ 454.394775][ T1148] batadv1: left promiscuous mode [ 454.402410][ T1148] bridge0: port 3(batadv1) entered disabled state [ 454.416560][ T1148] bridge_slave_1: left allmulticast mode [ 454.435441][ T1148] bridge_slave_1: left promiscuous mode [ 454.445753][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.467379][ T43] usb 3-1: config 0 has no interfaces? [ 454.490478][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.499907][ T1148] bridge_slave_0: left promiscuous mode [ 454.505697][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.513736][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.540670][ T43] usb 3-1: Product: syz [ 454.544911][ T43] usb 3-1: Manufacturer: syz [ 454.552756][ T43] usb 3-1: SerialNumber: syz [ 454.572066][ T43] usb 3-1: config 0 descriptor?? [ 454.797092][ T10] usb 3-1: USB disconnect, device number 59 [ 455.198574][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.211498][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.222196][ T1148] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 455.235745][ T1148] bond0 (unregistering): Released all slaves [ 455.255930][T18213] team_slave_0: Caught tx_queue_len zero misconfig [ 455.321106][T18220] syzkaller1: entered promiscuous mode [ 455.352077][T18220] syzkaller1: entered allmulticast mode [ 455.919539][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 455.925642][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 455.985480][T18180] chnl_net:caif_netlink_parms(): no params data found [ 455.999655][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 456.001032][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 456.007180][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 456.500902][ T5942] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 456.613879][ T1148] hsr_slave_0: left promiscuous mode [ 456.639597][ T1148] hsr_slave_1: left promiscuous mode [ 456.645792][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.658639][T18261] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 456.679883][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.692639][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 456.712129][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.723956][ T5942] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 456.734455][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.737670][ T5942] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.778300][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.783419][ T1148] veth1_macvtap: left promiscuous mode [ 456.798307][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.827452][ T1148] veth0_macvtap: left promiscuous mode [ 456.837712][ T1148] veth1_vlan: left promiscuous mode [ 456.841299][ T5942] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.859695][ T1148] veth0_vlan: left promiscuous mode [ 456.909806][ T5942] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.939741][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.449868][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 457.522149][ T5942] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 457.613232][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.625237][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.637621][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 457.647785][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.662116][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.671813][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.687797][ T9] usb 1-1: config 0 descriptor?? [ 457.696930][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.708933][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.721108][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 457.739541][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.755279][ T5942] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.764574][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.774350][T18288] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 457.784171][ T10] usb 3-1: USB disconnect, device number 60 [ 457.810828][ T5942] usb 6-1: config 0 descriptor?? [ 458.073548][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 458.220620][ T9] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 458.270485][ T5942] plantronics 0003:047F:FFFF.0040: ignoring exceeding usage max [ 458.305822][ T5942] plantronics 0003:047F:FFFF.0040: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 458.477732][ T43] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 458.618651][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.631610][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.639231][T18180] bridge_slave_0: entered allmulticast mode [ 458.648261][T18180] bridge_slave_0: entered promiscuous mode [ 458.660257][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 458.670576][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.683730][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 458.699769][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.704945][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.711245][T18180] bridge_slave_1: entered allmulticast mode [ 458.738966][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 458.762556][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 458.779585][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.795158][T18180] bridge_slave_1: entered promiscuous mode [ 458.829123][ T43] usb 4-1: config 0 descriptor?? [ 458.952550][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.998837][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.063943][ T43] usb 4-1: string descriptor 0 read error: -71 [ 459.138441][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 459.164356][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 459.217387][ T43] usb 4-1: USB disconnect, device number 58 [ 459.227529][T18180] team0: Port device team_slave_0 added [ 459.255755][T18180] team0: Port device team_slave_1 added [ 459.363441][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.381636][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.408558][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.425929][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.433612][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.460301][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.542545][ T9] usb 6-1: USB disconnect, device number 22 [ 459.602324][T18180] hsr_slave_0: entered promiscuous mode [ 459.616221][T18180] hsr_slave_1: entered promiscuous mode [ 460.091973][T18326] input input87: cannot allocate more than FF_MAX_EFFECTS effects [ 460.150959][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 460.580239][ T43] usb 1-1: reset high-speed USB device number 54 using dummy_hcd [ 460.657222][T18180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.673500][T18180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.686462][T18180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.702400][T18180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 460.761268][ T43] usb 1-1: device firmware changed [ 460.771232][ T5889] usb 1-1: USB disconnect, device number 54 [ 460.884798][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.926054][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.942146][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.949435][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.959144][ T5889] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 460.990339][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.997696][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.131463][ T5889] usb 1-1: config 0 has no interfaces? [ 461.142056][ T5889] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 461.163735][T18180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.179602][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.187759][ T5889] usb 1-1: Product: syz [ 461.202006][ T5889] usb 1-1: Manufacturer: syz [ 461.206735][ T5889] usb 1-1: SerialNumber: syz [ 461.231107][ T5889] usb 1-1: config 0 descriptor?? [ 461.276732][T18364] loop6: detected capacity change from 0 to 524287999 [ 461.302918][T18180] veth0_vlan: entered promiscuous mode [ 461.331987][T18180] veth1_vlan: entered promiscuous mode [ 461.581246][T18180] veth0_macvtap: entered promiscuous mode [ 461.597394][T18180] veth1_macvtap: entered promiscuous mode [ 461.597405][ T5889] usb 1-1: USB disconnect, device number 55 [ 461.762052][T18180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.815323][T18180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.872603][ T3491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.893924][ T3491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.908538][ T3491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.933388][ T3491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.233031][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 462.453448][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.476362][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.673540][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.701391][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.059318][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4238'. [ 464.145140][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4238'. [ 464.186062][T18445] syzkaller1: entered promiscuous mode [ 464.239721][T18445] syzkaller1: entered allmulticast mode [ 464.313380][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 465.712937][T18512] ip6gre2: entered allmulticast mode [ 466.401168][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 466.859871][ T5953] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 467.021019][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 467.035047][ T5953] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 467.049104][ T5953] usb 4-1: config 0 has no interface number 0 [ 467.061443][ T5953] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.079833][ T5953] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.101529][ T5953] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 467.114658][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 467.141294][ T5953] usb 4-1: Product: syz [ 467.149816][ T5953] usb 4-1: SerialNumber: syz [ 467.169733][ T5953] usb 4-1: config 0 descriptor?? [ 467.188308][ T5953] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 467.199099][ T5953] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input88 [ 467.411819][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 467.651385][ C1] cm109_urb_ctl_callback: 19 callbacks suppressed [ 467.651411][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.666385][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.673830][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.681334][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.688503][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.695720][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.703000][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.710232][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.717419][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.724672][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.725397][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4283'. [ 467.732694][ T5953] usb 4-1: USB disconnect, device number 59 [ 467.732760][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 467.763857][ T5953] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 467.780693][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4283'. [ 467.881113][T18577] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4282'. [ 468.557394][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4294'. [ 470.269598][ T5942] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 470.329953][T18668] netlink: 'syz.1.4319': attribute type 1 has an invalid length. [ 470.358232][T18668] netlink: 'syz.1.4319': attribute type 6 has an invalid length. [ 470.380308][T18668] netlink: 'syz.1.4319': attribute type 3 has an invalid length. [ 470.434610][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.464892][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.489380][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.522835][ T5942] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.549972][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.580389][ T5942] usb 4-1: config 0 descriptor?? [ 470.647263][T18673] input: syz0 as /devices/virtual/input/input89 [ 471.033672][ T5942] plantronics 0003:047F:FFFF.0041: reserved main item tag 0xd [ 471.070633][ T5942] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 471.159573][T16809] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 471.315930][ T9] usb 4-1: USB disconnect, device number 60 [ 471.322992][T16809] usb 1-1: Using ep0 maxpacket: 32 [ 471.343426][T16809] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 471.359852][ T5942] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 471.376681][T16809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.394908][T16809] usb 1-1: Product: syz [ 471.401624][T16809] usb 1-1: Manufacturer: syz [ 471.408608][T16809] usb 1-1: SerialNumber: syz [ 471.423093][T16809] usb 1-1: config 0 descriptor?? [ 471.441571][T16809] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 471.541621][ T5942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.562321][ T5942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.612378][ T5942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.629800][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.855494][ T5942] usb 2-1: usb_control_msg returned -32 [ 471.861633][ T5942] usbtmc 2-1:16.0: can't read capabilities [ 472.419146][ T9] usb 2-1: USB disconnect, device number 54 [ 472.438190][T18715] input: syz1 as /devices/virtual/input/input91 [ 472.678845][T16809] gspca_ov534_9: reg_w failed -71 [ 472.990323][T16809] gspca_ov534_9: Unknown sensor 0000 [ 472.990428][T16809] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 473.044496][T16809] usb 1-1: USB disconnect, device number 56 [ 473.597959][T18744] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4352'. [ 473.609942][T18744] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 473.619976][T18744] 0ªî{X¹¦: entered allmulticast mode [ 473.625706][T18744] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 474.304010][T18774] syzkaller1: entered promiscuous mode [ 474.345512][T18774] syzkaller1: entered allmulticast mode [ 474.385128][T18778] loop9: detected capacity change from 0 to 7 [ 474.412269][T18778] Dev loop9: unable to read RDB block 7 [ 474.447276][T18778] loop9: unable to read partition table [ 474.462088][T18778] loop9: partition table beyond EOD, truncated [ 474.493277][T18778] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 474.545538][T18784] loop8: detected capacity change from 0 to 16384 [ 474.782451][T18787] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4370'. [ 474.804860][T18786] loop8: detected capacity change from 16384 to 16383 [ 475.757053][T16809] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 475.939587][T16809] usb 6-1: Using ep0 maxpacket: 32 [ 475.950405][T16809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 475.972484][T16809] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 475.981838][T16809] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 475.990122][T16809] usb 6-1: Product: syz [ 475.994321][T16809] usb 6-1: Manufacturer: syz [ 475.998965][T16809] usb 6-1: SerialNumber: syz [ 476.007346][T16809] usb 6-1: config 0 descriptor?? [ 476.018726][T18807] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 476.027768][T16809] hub 6-1:0.0: bad descriptor, ignoring hub [ 476.035629][T16809] hub 6-1:0.0: probe with driver hub failed with error -5 [ 476.129699][ T5953] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 476.137822][ T5889] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 476.322297][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.334816][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.335248][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.357516][ T43] usb 6-1: USB disconnect, device number 23 [ 476.363896][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.379805][ T5953] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.389022][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.404729][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.414797][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.430383][ T5889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.442215][ T5953] usb 1-1: config 0 descriptor?? [ 476.448974][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.484879][ T5889] usb 2-1: config 0 descriptor?? [ 476.881286][ T5953] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 476.924867][ T5889] plantronics 0003:047F:FFFF.0043: reserved main item tag 0xd [ 476.959358][ T5889] plantronics 0003:047F:FFFF.0043: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 477.197726][ C0] plantronics 0003:047F:FFFF.0042: hid_field_extract() called with n (132) > 32! (swapper/0) [ 477.210948][ T9] usb 2-1: USB disconnect, device number 55 [ 477.400711][ T5942] usb 1-1: USB disconnect, device number 57 [ 477.599656][ T5889] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 477.749611][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 477.758915][ T5889] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 477.772395][ T5889] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.785757][ T5889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 477.796189][ T5889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.807354][ T5889] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.830409][ T5889] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 477.850404][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.072514][ T5889] usb 6-1: GET_CAPABILITIES returned 0 [ 478.078244][ T5889] usbtmc 6-1:16.0: can't read capabilities [ 478.391797][ T5889] usb 6-1: USB disconnect, device number 24 [ 478.392115][T18854] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 478.449694][ T5942] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 478.599700][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 478.609647][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.623211][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.633497][ T5942] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 478.642716][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.653249][ T5942] usb 2-1: config 0 descriptor?? [ 478.661614][ T5942] hub 2-1:0.0: USB hub found [ 478.868522][ T5942] hub 2-1:0.0: 1 port detected [ 479.224661][T18890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4415'. [ 479.235266][T18888] delete_channel: no stack [ 479.488823][ T5942] hub 2-1:0.0: activate --> -90 [ 479.690265][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 479.700740][ T9] usb 2-1: USB disconnect, device number 56 [ 479.707660][ T5942] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 480.460318][T18903] warn_alloc: 1 callbacks suppressed [ 480.460340][T18903] syz.3.4420: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 480.491665][T18903] CPU: 1 UID: 0 PID: 18903 Comm: syz.3.4420 Not tainted syzkaller #0 PREEMPT(full) [ 480.491691][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 480.491715][T18903] Call Trace: [ 480.491724][T18903] [ 480.491733][T18903] dump_stack_lvl+0x189/0x250 [ 480.491763][T18903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.491782][T18903] ? __pfx__printk+0x10/0x10 [ 480.491802][T18903] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 480.491821][T18903] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 480.491841][T18903] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 480.491862][T18903] warn_alloc+0x214/0x310 [ 480.491910][T18903] ? __pfx_warn_alloc+0x10/0x10 [ 480.491941][T18903] ? __get_vm_area_node+0x28f/0x300 [ 480.491962][T18903] ? vb2_vmalloc_alloc+0xef/0x340 [ 480.491988][T18903] __vmalloc_node_range_noprof+0x690/0x12d0 [ 480.492036][T18903] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.492059][T18903] ? __kasan_kmalloc+0x93/0xb0 [ 480.492087][T18903] vmalloc_user_noprof+0xad/0xf0 [ 480.492107][T18903] ? vb2_vmalloc_alloc+0xef/0x340 [ 480.492128][T18903] vb2_vmalloc_alloc+0xef/0x340 [ 480.492148][T18903] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 480.492169][T18903] __vb2_queue_alloc+0x9c2/0x15a0 [ 480.492216][T18903] vb2_core_reqbufs+0xc31/0x1420 [ 480.492273][T18903] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 480.492307][T18903] ? vb2_verify_memory_type+0x1fc/0x570 [ 480.492346][T18903] ? vb2_reqbufs+0x3a9/0x630 [ 480.492389][T18903] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 480.492423][T18903] __video_do_ioctl+0xa59/0xc10 [ 480.492458][T18903] ? __pfx___video_do_ioctl+0x10/0x10 [ 480.492500][T18903] video_usercopy+0x82d/0x1450 [ 480.492533][T18903] ? __pfx___video_do_ioctl+0x10/0x10 [ 480.492559][T18903] ? __pfx_video_usercopy+0x10/0x10 [ 480.492601][T18903] ? __fget_files+0x3a0/0x420 [ 480.492634][T18903] v4l2_ioctl+0x18d/0x1e0 [ 480.492658][T18903] ? __pfx_v4l2_ioctl+0x10/0x10 [ 480.492681][T18903] __se_sys_ioctl+0xfc/0x170 [ 480.492717][T18903] do_syscall_64+0xfa/0xfa0 [ 480.492739][T18903] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.492760][T18903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.492783][T18903] ? clear_bhb_loop+0x60/0xb0 [ 480.492810][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.492838][T18903] RIP: 0033:0x7fe23098eec9 [ 480.492866][T18903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.492886][T18903] RSP: 002b:00007fe2318b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.492910][T18903] RAX: ffffffffffffffda RBX: 00007fe230be5fa0 RCX: 00007fe23098eec9 [ 480.492927][T18903] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 480.492942][T18903] RBP: 00007fe230a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 480.492956][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.492970][T18903] R13: 00007fe230be6038 R14: 00007fe230be5fa0 R15: 00007fe230d0fa28 [ 480.493006][T18903] [ 480.493021][T18903] Mem-Info: [ 480.793877][T18903] active_anon:10530 inactive_anon:0 isolated_anon:0 [ 480.793877][T18903] active_file:20491 inactive_file:3993 isolated_file:0 [ 480.793877][T18903] unevictable:768 dirty:442 writeback:0 [ 480.793877][T18903] slab_reclaimable:11346 slab_unreclaimable:114788 [ 480.793877][T18903] mapped:30320 shmem:3408 pagetables:1877 [ 480.793877][T18903] sec_pagetables:0 bounce:0 [ 480.793877][T18903] kernel_misc_reclaimable:0 [ 480.793877][T18903] free:1277952 free_pcp:14823 free_cma:0 [ 480.839495][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.846016][T18903] Node 0 active_anon:42176kB inactive_anon:0kB active_file:81964kB inactive_file:15840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121328kB dirty:1768kB writeback:0kB shmem:12096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13188kB pagetables:7364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 480.877944][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.885926][T18903] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 480.915838][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.929543][T18903] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.959516][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.971025][T18903] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 480.977917][T18903] Node 0 DMA32 free:1201344kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42124kB inactive_anon:0kB active_file:81964kB inactive_file:15840kB unevictable:1536kB writepending:1768kB zspages:0kB present:3129332kB managed:2561624kB mlocked:0kB bounce:0kB free_pcp:43012kB local_pcp:21944kB free_cma:0kB [ 481.014407][T18903] lowmem_reserve[]: 0 0 1 1 1 [ 481.019255][T18903] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.049323][T18903] lowmem_reserve[]: 0 0 0 0 0 [ 481.054197][T18903] Node 1 Normal free:3895036kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16576kB local_pcp:9888kB free_cma:0kB [ 481.091320][T18903] lowmem_reserve[]: 0 0 0 0 0 [ 481.096307][T18903] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 481.109217][T18903] Node 0 DMA32: 1700*4kB (UM) 786*8kB (ME) 660*16kB (ME) 471*32kB (UM) 188*64kB (UME) 65*128kB (ME) 24*256kB (UME) 15*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 273*4096kB (M) = 1201344kB [ 481.134444][T18903] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.146290][T18903] Node 1 Normal: 203*4kB (UME) 58*8kB (UME) 44*16kB (UME) 166*32kB (UME) 48*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3895036kB [ 481.165019][T18903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.175093][T18903] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 481.186508][T18903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.196884][T18903] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.207353][T18903] 27888 total pagecache pages [ 481.212496][T18903] 0 pages in swap cache [ 481.216772][T18903] Free swap = 124996kB [ 481.221572][T18903] Total swap = 124996kB [ 481.225842][T18903] 2097051 pages RAM [ 481.230201][T18903] 0 pages HighMem/MovableOnly [ 481.238849][T18903] 424555 pages reserved [ 481.248819][T18903] 0 pages cma reserved [ 481.448079][T18932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.778744][T18944] binder: 18943:18944 ioctl c0306201 200000000040 returned -22 [ 482.638553][T18975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.818020][T18980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4453'. [ 483.250510][T18998] team_slave_1: Caught tx_queue_len zero misconfig [ 483.289563][ T5953] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 483.446782][ T5953] usb 4-1: config 0 has no interfaces? [ 483.464373][ T5953] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 483.495709][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.529929][ T5953] usb 4-1: Product: syz [ 483.534156][ T5953] usb 4-1: Manufacturer: syz [ 483.546553][ T5953] usb 4-1: SerialNumber: syz [ 483.570184][ T5953] usb 4-1: config 0 descriptor?? [ 483.866056][T18984] netlink: 'syz.3.4455': attribute type 16 has an invalid length. [ 483.889655][T18984] netlink: 'syz.3.4455': attribute type 17 has an invalid length. [ 483.966368][T18984] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 484.061739][ T5942] usb 4-1: USB disconnect, device number 61 [ 485.721915][T19068] input: syz0 as /devices/virtual/input/input93 [ 485.776239][T19070] loop6: detected capacity change from 0 to 7 [ 485.820974][T19070] Dev loop6: unable to read RDB block 7 [ 485.826639][T19070] loop6: AHDI p3 [ 485.833799][T19070] loop6: partition table partially beyond EOD, truncated [ 486.429561][ T5889] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 486.449742][ T5953] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 486.610088][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 486.617603][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 486.633579][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.646288][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.646631][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.672186][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 486.688704][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.698926][ T5889] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 486.717634][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.726839][ T5953] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 486.738642][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.749712][ T5889] usb 4-1: config 0 descriptor?? [ 486.782373][ T5953] usb 6-1: config 0 descriptor?? [ 487.221560][ T5953] savu 0003:1E7D:2D5A.0044: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 487.259868][ T5889] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 487.267180][ T5889] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 487.296035][ T5889] microsoft 0003:045E:07DA.0045: unknown main item tag 0x0 [ 487.345375][ T5889] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0045/input/input94 [ 487.480627][ T5889] microsoft 0003:045E:07DA.0045: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 487.517957][ T5953] usb 6-1: USB disconnect, device number 25 [ 487.570612][ T5889] usb 4-1: USB disconnect, device number 62 [ 487.693216][T19126] fido_id[19126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 488.509675][ T5889] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 488.694336][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.719664][ T5889] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 488.760715][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.780189][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.806568][T19137] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 488.827976][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.969836][T16809] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 489.043030][ T5889] usb 1-1: USB disconnect, device number 58 [ 489.143232][T16809] usb 6-1: Using ep0 maxpacket: 32 [ 489.163062][T16809] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 489.177932][T16809] usb 6-1: config 0 has no interface number 0 [ 489.186607][T16809] usb 6-1: config 0 interface 184 has no altsetting 0 [ 489.202795][T16809] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 489.216405][T16809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.229608][T16809] usb 6-1: Product: syz [ 489.239566][T16809] usb 6-1: Manufacturer: syz [ 489.244690][T16809] usb 6-1: SerialNumber: syz [ 489.252731][T16809] usb 6-1: config 0 descriptor?? [ 489.273883][T16809] smsc75xx v1.0.0 [ 489.277606][T16809] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 489.300464][T16809] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 489.463077][T16809] usb 6-1: USB disconnect, device number 26 [ 490.450737][T19214] sctp: [Deprecated]: syz.0.4546 (pid 19214) Use of int in max_burst socket option deprecated. [ 490.450737][T19214] Use struct sctp_assoc_value instead [ 490.843190][ T5942] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 491.013806][ T5942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 491.039609][ T5942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 491.074962][ T5942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.084679][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.108505][ T5942] usb 3-1: Product: syz [ 491.116865][ T5942] usb 3-1: Manufacturer: syz [ 491.121915][ T5942] usb 3-1: SerialNumber: syz [ 491.134837][T19218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 491.329922][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 491.501785][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 491.530672][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 491.556050][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.576318][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.613232][T19230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 491.645266][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.860088][ T5889] usb 6-1: USB disconnect, device number 27 [ 492.179848][ T5942] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 492.186532][ T5942] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 492.194070][ T5942] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 492.270944][ T3470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.364261][ T3470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.384085][ T5942] cdc_ncm 3-1:1.0: setting tx_max = 48 [ 492.415018][ T5942] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 492.439056][ T5942] usb 3-1: USB disconnect, device number 61 [ 492.458646][ T5942] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 492.508887][ T3470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.733579][ T3470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.859868][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 493.095554][ T24] usb 4-1: config 0 has no interfaces? [ 493.106788][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 493.106807][ T30] audit: type=1326 audit(1760378006.764:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19264 comm="syz.5.4571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d5318eec9 code=0x0 [ 493.106836][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 493.205950][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.214510][ T3470] bridge_slave_1: left allmulticast mode [ 493.222409][ T3470] bridge_slave_1: left promiscuous mode [ 493.237486][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.239356][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.245375][ T24] usb 4-1: Product: syz [ 493.257110][ T24] usb 4-1: Manufacturer: syz [ 493.259138][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.281279][ T3470] bridge_slave_0: left allmulticast mode [ 493.288343][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.295545][ T3470] bridge_slave_0: left promiscuous mode [ 493.304150][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.310047][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.318547][ T24] usb 4-1: SerialNumber: syz [ 493.324463][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 493.372817][ T24] usb 4-1: config 0 descriptor?? [ 494.296989][T19255] veth1_vlan: left promiscuous mode [ 494.319846][ T43] usb 4-1: USB disconnect, device number 63 [ 494.349348][ T3470] tipc: Left network mode [ 494.809739][ T5942] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 494.877292][ T3470] hsr_slave_0: left promiscuous mode [ 494.948467][ T3470] hsr_slave_1: left promiscuous mode [ 494.980483][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.985390][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.987934][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.024993][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.060356][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 495.088433][ T5942] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 495.097368][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.114516][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.122937][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.163845][ T5942] usb 2-1: config 0 descriptor?? [ 495.202800][ T3470] veth1_macvtap: left promiscuous mode [ 495.223885][ T3470] veth0_macvtap: left promiscuous mode [ 495.242527][ T3470] veth1_vlan: left promiscuous mode [ 495.255797][ T3470] veth0_vlan: left promiscuous mode [ 495.316416][T19308] netlink: 'syz.5.4582': attribute type 10 has an invalid length. [ 495.352721][T19308] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4582'. [ 495.431902][ T5153] Bluetooth: hci1: command tx timeout [ 495.606223][ T5942] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 496.122767][ T24] usb 2-1: USB disconnect, device number 57 [ 496.162477][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 496.213801][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 496.296250][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bb1e000: rx timeout, send abort [ 496.307159][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bb1e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 496.319478][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 496.717763][ T5897] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 496.757350][T19307] bridge_slave_0: left allmulticast mode [ 496.763777][T19307] bridge_slave_0: left promiscuous mode [ 496.770901][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.792951][T19307] bridge_slave_1: left allmulticast mode [ 496.798664][T19307] bridge_slave_1: left promiscuous mode [ 496.805696][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.823496][T19307] bond0: (slave bond_slave_0): Releasing backup interface [ 496.836606][T19307] bond0: (slave bond_slave_1): Releasing backup interface [ 496.859737][T19307] team0: Port device team_slave_0 removed [ 496.875172][T19307] team0: Port device team_slave_1 removed [ 496.884544][ T5897] usb 4-1: config 0 has no interfaces? [ 496.891163][T19307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.902667][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 496.931124][T19308] team0: entered promiscuous mode [ 496.936709][T19308] bridge0: port 1(team0) entered blocking state [ 496.938284][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.943516][T19308] bridge0: port 1(team0) entered disabled state [ 496.955634][ T5897] usb 4-1: Product: syz [ 496.959267][T19308] team0: entered allmulticast mode [ 496.968339][ T5897] usb 4-1: Manufacturer: syz [ 496.973497][ T5897] usb 4-1: SerialNumber: syz [ 496.986593][ T5897] usb 4-1: config 0 descriptor?? [ 497.208681][ T9] usb 4-1: USB disconnect, device number 64 [ 497.338836][T19275] chnl_net:caif_netlink_parms(): no params data found [ 497.483813][ T3470] IPVS: stop unused estimator thread 0... [ 497.509998][ T5153] Bluetooth: hci1: command tx timeout [ 497.584802][ T30] audit: type=1326 audit(1760378011.234:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19339 comm="syz.2.4591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f963458eec9 code=0x0 [ 498.041232][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4593'. [ 498.094867][T19275] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.113730][T19275] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.135397][T19275] bridge_slave_0: entered allmulticast mode [ 498.145240][T19275] bridge_slave_0: entered promiscuous mode [ 498.194351][T19275] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.226603][T19275] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.263747][T19275] bridge_slave_1: entered allmulticast mode [ 498.301584][T19275] bridge_slave_1: entered promiscuous mode [ 499.423094][T19275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.454579][T19275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.459763][ T5923] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 499.589663][ T5153] Bluetooth: hci1: command tx timeout [ 499.592510][T19275] team0: Port device team_slave_0 added [ 499.614690][T19275] team0: Port device team_slave_1 added [ 499.629623][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 499.643305][ T5923] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 499.662270][ T5923] usb 6-1: config 0 has no interface number 0 [ 499.668498][ T5923] usb 6-1: config 0 interface 184 has no altsetting 0 [ 499.682892][ T5923] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 499.697322][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.708442][ T5923] usb 6-1: Product: syz [ 499.719880][ T5923] usb 6-1: Manufacturer: syz [ 499.724916][ T5923] usb 6-1: SerialNumber: syz [ 499.757551][ T5923] usb 6-1: config 0 descriptor?? [ 499.781097][ T5923] smsc75xx v1.0.0 [ 499.805305][T19275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.825965][T19275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.851971][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.870516][T19275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.884640][T19275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.892290][T19275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.918244][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.939078][T19275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.053812][T19275] hsr_slave_0: entered promiscuous mode [ 500.068937][T19275] hsr_slave_1: entered promiscuous mode [ 500.069663][ T5889] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 500.086883][T19275] debugfs: 'hsr0' already exists in 'hsr' [ 500.101540][T19275] Cannot create hsr debugfs directory [ 500.162299][ T30] audit: type=1326 audit(1760378013.824:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.3.4608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe23098eec9 code=0x0 [ 500.184261][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.242640][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.273784][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.287159][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.304447][ T5889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.315787][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.332297][ T5889] usb 2-1: config 0 descriptor?? [ 500.587820][T19275] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 500.623562][T19275] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.652266][T19275] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.675598][T19275] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 500.773121][ T5889] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 500.931919][T19275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.016425][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 501.035857][T19275] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.055363][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 501.082326][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 501.082563][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.100551][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.107785][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 501.145266][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 501.198175][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.205410][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.208130][ T5923] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 501.279982][ T5923] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 501.341186][ T5923] usb 6-1: USB disconnect, device number 28 [ 501.445680][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.452767][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.524275][T19275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.655635][T19275] veth0_vlan: entered promiscuous mode [ 501.670888][ T5153] Bluetooth: hci1: command tx timeout [ 501.697565][T19275] veth1_vlan: entered promiscuous mode [ 501.755801][T19275] veth0_macvtap: entered promiscuous mode [ 501.786690][T19275] veth1_macvtap: entered promiscuous mode [ 501.794058][T19452] input: syz0 as /devices/virtual/input/input95 [ 501.879345][T19275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.942756][T19275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.984172][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.014029][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.061616][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.089587][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.112862][T16809] usb 2-1: USB disconnect, device number 58 [ 502.254317][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.308208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.405836][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.430039][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.249769][ T5923] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 503.445760][ T5923] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 503.467302][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.499169][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.509775][T16809] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 503.530101][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 503.562121][ T5923] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 503.579947][ T5923] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 503.594049][ T5923] usb 4-1: Manufacturer: syz [ 503.611792][ T5923] usb 4-1: config 0 descriptor?? [ 503.659908][T16809] usb 7-1: Using ep0 maxpacket: 8 [ 503.721831][T16809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 503.732989][T16809] usb 7-1: no configurations [ 503.745510][T16809] usb 7-1: can't read configurations, error -22 [ 504.041442][ T5923] appleir 0003:05AC:8243.0048: unknown main item tag 0x0 [ 504.063243][ T5923] appleir 0003:05AC:8243.0048: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 504.264888][T19529] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4646'. [ 504.275500][T19529] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4646'. [ 504.320778][ T5897] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 504.496553][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 504.515818][ T5897] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 504.540086][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.569870][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.588376][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 504.599345][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.613041][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 504.622927][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.869840][ T5897] usb 3-1: usb_control_msg returned -32 [ 504.888746][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 505.800511][T19560] [ 505.802899][T19560] ===================================================== [ 505.809843][T19560] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 505.817326][T19560] syzkaller #0 Not tainted [ 505.821764][T19560] ----------------------------------------------------- [ 505.828706][T19560] syz.6.4657/19560 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 505.836450][T19560] ffff888078a1c4b0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 505.845222][T19560] [ 505.845222][T19560] and this task is already holding: [ 505.852604][T19560] ffff88805a101028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 505.862373][T19560] which would create a new lock dependency: [ 505.868264][T19560] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 505.876390][T19560] [ 505.876390][T19560] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 505.885845][T19560] (&client->buffer_lock){..-.}-{3:3} [ 505.885875][T19560] [ 505.885875][T19560] ... which became SOFTIRQ-irq-safe at: [ 505.898947][T19560] lock_acquire+0x120/0x360 [ 505.903642][T19560] _raw_spin_lock+0x2e/0x40 [ 505.908252][T19560] evdev_pass_values+0xb9/0xbd0 [ 505.913196][T19560] evdev_events+0x1e6/0x340 [ 505.917791][T19560] input_pass_values+0x288/0x890 [ 505.922844][T19560] input_event_dispose+0x3e5/0x6b0 [ 505.928054][T19560] input_event+0x89/0xe0 [ 505.932400][T19560] hidinput_hid_event+0x1362/0x1ca0 [ 505.937698][T19560] hid_process_event+0x4be/0x620 [ 505.942736][T19560] hid_report_raw_event+0xe91/0x16d0 [ 505.948154][T19560] hid_input_report+0x43e/0x520 [ 505.953098][T19560] hid_irq_in+0x47e/0x6d0 [ 505.957528][T19560] __usb_hcd_giveback_urb+0x376/0x540 [ 505.962991][T19560] dummy_timer+0x85f/0x44c0 [ 505.967591][T19560] __hrtimer_run_queues+0x52c/0xc60 [ 505.972896][T19560] hrtimer_run_softirq+0x187/0x2b0 [ 505.978121][T19560] handle_softirqs+0x286/0x870 [ 505.982990][T19560] do_softirq+0xec/0x180 [ 505.987339][T19560] __local_bh_enable_ip+0x17d/0x1c0 [ 505.992676][T19560] batadv_iv_ogm_schedule+0x276/0xf00 [ 505.998239][T19560] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 506.005374][T19560] process_scheduled_works+0xae1/0x17b0 [ 506.011037][T19560] worker_thread+0x8a0/0xda0 [ 506.015734][T19560] kthread+0x711/0x8a0 [ 506.019892][T19560] ret_from_fork+0x4bc/0x870 [ 506.024582][T19560] ret_from_fork_asm+0x1a/0x30 [ 506.029452][T19560] [ 506.029452][T19560] to a SOFTIRQ-irq-unsafe lock: [ 506.036480][T19560] (tasklist_lock){.+.+}-{3:3} [ 506.036510][T19560] [ 506.036510][T19560] ... which became SOFTIRQ-irq-unsafe at: [ 506.049206][T19560] ... [ 506.049220][T19560] lock_acquire+0x120/0x360 [ 506.056414][T19560] _raw_read_lock+0x36/0x50 [ 506.061017][T19560] __do_wait+0xde/0x740 [ 506.065270][T19560] do_wait+0x1f8/0x510 [ 506.069476][T19560] kernel_wait+0xab/0x170 [ 506.073911][T19560] call_usermodehelper_exec_work+0xbe/0x230 [ 506.079916][T19560] process_scheduled_works+0xae1/0x17b0 [ 506.085557][T19560] worker_thread+0x8a0/0xda0 [ 506.090253][T19560] kthread+0x711/0x8a0 [ 506.094453][T19560] ret_from_fork+0x4bc/0x870 [ 506.099142][T19560] ret_from_fork_asm+0x1a/0x30 [ 506.104008][T19560] [ 506.104008][T19560] other info that might help us debug this: [ 506.104008][T19560] [ 506.114246][T19560] Chain exists of: [ 506.114246][T19560] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 506.114246][T19560] [ 506.127468][T19560] Possible interrupt unsafe locking scenario: [ 506.127468][T19560] [ 506.135789][T19560] CPU0 CPU1 [ 506.141155][T19560] ---- ---- [ 506.146514][T19560] lock(tasklist_lock); [ 506.150789][T19560] local_irq_disable(); [ 506.157634][T19560] lock(&client->buffer_lock); [ 506.165030][T19560] lock(&new->fa_lock); [ 506.171804][T19560] [ 506.175293][T19560] lock(&client->buffer_lock); [ 506.180332][T19560] [ 506.180332][T19560] *** DEADLOCK *** [ 506.180332][T19560] [ 506.188471][T19560] 7 locks held by syz.6.4657/19560: [ 506.193666][T19560] #0: ffff888146f8c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 506.202823][T19560] #1: ffff888020708230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 506.212948][T19560] #2: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 506.222626][T19560] #3: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 506.232212][T19560] #4: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 506.241358][T19560] #5: ffff88805a101028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 506.251549][T19560] #6: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 506.260630][T19560] [ 506.260630][T19560] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 506.271034][T19560] -> (&client->buffer_lock){..-.}-{3:3} { [ 506.276779][T19560] IN-SOFTIRQ-W at: [ 506.280761][T19560] lock_acquire+0x120/0x360 [ 506.286929][T19560] _raw_spin_lock+0x2e/0x40 [ 506.293096][T19560] evdev_pass_values+0xb9/0xbd0 [ 506.299608][T19560] evdev_events+0x1e6/0x340 [ 506.305771][T19560] input_pass_values+0x288/0x890 [ 506.312441][T19560] input_event_dispose+0x3e5/0x6b0 [ 506.319207][T19560] input_event+0x89/0xe0 [ 506.325106][T19560] hidinput_hid_event+0x1362/0x1ca0 [ 506.331970][T19560] hid_process_event+0x4be/0x620 [ 506.338575][T19560] hid_report_raw_event+0xe91/0x16d0 [ 506.345529][T19560] hid_input_report+0x43e/0x520 [ 506.352046][T19560] hid_irq_in+0x47e/0x6d0 [ 506.358032][T19560] __usb_hcd_giveback_urb+0x376/0x540 [ 506.365058][T19560] dummy_timer+0x85f/0x44c0 [ 506.371209][T19560] __hrtimer_run_queues+0x52c/0xc60 [ 506.378074][T19560] hrtimer_run_softirq+0x187/0x2b0 [ 506.384878][T19560] handle_softirqs+0x286/0x870 [ 506.391306][T19560] do_softirq+0xec/0x180 [ 506.397216][T19560] __local_bh_enable_ip+0x17d/0x1c0 [ 506.404076][T19560] batadv_iv_ogm_schedule+0x276/0xf00 [ 506.411115][T19560] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 506.419794][T19560] process_scheduled_works+0xae1/0x17b0 [ 506.427000][T19560] worker_thread+0x8a0/0xda0 [ 506.433251][T19560] kthread+0x711/0x8a0 [ 506.438973][T19560] ret_from_fork+0x4bc/0x870 [ 506.445226][T19560] ret_from_fork_asm+0x1a/0x30 [ 506.451648][T19560] INITIAL USE at: [ 506.455544][T19560] lock_acquire+0x120/0x360 [ 506.461613][T19560] _raw_spin_lock+0x2e/0x40 [ 506.467771][T19560] evdev_pass_values+0xb9/0xbd0 [ 506.474219][T19560] evdev_events+0x1e6/0x340 [ 506.480299][T19560] input_pass_values+0x288/0x890 [ 506.486801][T19560] input_event_dispose+0x330/0x6b0 [ 506.493577][T19560] input_inject_event+0x1dd/0x340 [ 506.500192][T19560] evdev_write+0x2fc/0x480 [ 506.506196][T19560] vfs_write+0x27e/0xb30 [ 506.512092][T19560] ksys_write+0x145/0x250 [ 506.517993][T19560] do_syscall_64+0xfa/0xfa0 [ 506.524062][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.531527][T19560] } [ 506.534044][T19560] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 506.542221][T19560] [ 506.542221][T19560] the dependencies between the lock to be acquired [ 506.542231][T19560] and SOFTIRQ-irq-unsafe lock: [ 506.555826][T19560] -> (tasklist_lock){.+.+}-{3:3} { [ 506.561132][T19560] HARDIRQ-ON-R at: [ 506.565288][T19560] lock_acquire+0x120/0x360 [ 506.571796][T19560] _raw_read_lock+0x36/0x50 [ 506.578309][T19560] __do_wait+0xde/0x740 [ 506.584467][T19560] do_wait+0x1f8/0x510 [ 506.590545][T19560] kernel_wait+0xab/0x170 [ 506.596897][T19560] call_usermodehelper_exec_work+0xbe/0x230 [ 506.604802][T19560] process_scheduled_works+0xae1/0x17b0 [ 506.612362][T19560] worker_thread+0x8a0/0xda0 [ 506.619064][T19560] kthread+0x711/0x8a0 [ 506.625136][T19560] ret_from_fork+0x4bc/0x870 [ 506.631732][T19560] ret_from_fork_asm+0x1a/0x30 [ 506.638501][T19560] SOFTIRQ-ON-R at: [ 506.642660][T19560] lock_acquire+0x120/0x360 [ 506.649174][T19560] _raw_read_lock+0x36/0x50 [ 506.655701][T19560] __do_wait+0xde/0x740 [ 506.661896][T19560] do_wait+0x1f8/0x510 [ 506.667995][T19560] kernel_wait+0xab/0x170 [ 506.674327][T19560] call_usermodehelper_exec_work+0xbe/0x230 [ 506.682226][T19560] process_scheduled_works+0xae1/0x17b0 [ 506.689813][T19560] worker_thread+0x8a0/0xda0 [ 506.696421][T19560] kthread+0x711/0x8a0 [ 506.702488][T19560] ret_from_fork+0x4bc/0x870 [ 506.709090][T19560] ret_from_fork_asm+0x1a/0x30 [ 506.715862][T19560] INITIAL USE at: [ 506.719955][T19560] lock_acquire+0x120/0x360 [ 506.726383][T19560] _raw_write_lock_irq+0xa2/0xf0 [ 506.733235][T19560] copy_process+0x224f/0x3c00 [ 506.739912][T19560] kernel_clone+0x21e/0x840 [ 506.746365][T19560] user_mode_thread+0xdd/0x140 [ 506.753083][T19560] rest_init+0x23/0x300 [ 506.759178][T19560] start_kernel+0x3ae/0x410 [ 506.765609][T19560] x86_64_start_reservations+0x24/0x30 [ 506.772998][T19560] x86_64_start_kernel+0x143/0x1c0 [ 506.780122][T19560] common_startup_64+0x13e/0x147 [ 506.786982][T19560] INITIAL READ USE at: [ 506.791496][T19560] lock_acquire+0x120/0x360 [ 506.798359][T19560] _raw_read_lock+0x36/0x50 [ 506.805231][T19560] __do_wait+0xde/0x740 [ 506.811756][T19560] do_wait+0x1f8/0x510 [ 506.818191][T19560] kernel_wait+0xab/0x170 [ 506.824883][T19560] call_usermodehelper_exec_work+0xbe/0x230 [ 506.833149][T19560] process_scheduled_works+0xae1/0x17b0 [ 506.841055][T19560] worker_thread+0x8a0/0xda0 [ 506.848018][T19560] kthread+0x711/0x8a0 [ 506.854438][T19560] ret_from_fork+0x4bc/0x870 [ 506.861416][T19560] ret_from_fork_asm+0x1a/0x30 [ 506.868545][T19560] } [ 506.871223][T19560] ... key at: [] tasklist_lock+0x18/0x40 [ 506.879159][T19560] ... acquired at: [ 506.883146][T19560] lock_acquire+0x120/0x360 [ 506.887853][T19560] _raw_read_lock+0x36/0x50 [ 506.892561][T19560] send_sigurg+0x12b/0x420 [ 506.897171][T19560] sk_send_sigurg+0x6c/0x2e0 [ 506.901948][T19560] queue_oob+0x420/0x4f0 [ 506.906376][T19560] unix_stream_sendmsg+0xc3f/0xdf0 [ 506.911666][T19560] __sock_sendmsg+0x21c/0x270 [ 506.916526][T19560] ____sys_sendmsg+0x52d/0x830 [ 506.921477][T19560] ___sys_sendmsg+0x21f/0x2a0 [ 506.926328][T19560] __sys_sendmmsg+0x227/0x430 [ 506.931193][T19560] __x64_sys_sendmmsg+0xa0/0xc0 [ 506.936242][T19560] do_syscall_64+0xfa/0xfa0 [ 506.940947][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.947030][T19560] [ 506.949367][T19560] -> (&f_owner->lock){....}-{3:3} { [ 506.954680][T19560] INITIAL USE at: [ 506.958672][T19560] lock_acquire+0x120/0x360 [ 506.964929][T19560] _raw_write_lock_irq+0xa2/0xf0 [ 506.971614][T19560] __f_setown+0x67/0x370 [ 506.977608][T19560] f_setown+0x23a/0x300 [ 506.983510][T19560] do_fcntl+0x11d/0x1910 [ 506.989503][T19560] __se_sys_fcntl+0xc8/0x150 [ 506.995861][T19560] do_syscall_64+0xfa/0xfa0 [ 507.002118][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.009773][T19560] INITIAL READ USE at: [ 507.014224][T19560] lock_acquire+0x120/0x360 [ 507.020914][T19560] _raw_read_lock_irq+0xaa/0xf0 [ 507.027953][T19560] f_getown+0x54/0x2a0 [ 507.034224][T19560] sock_ioctl+0x536/0x790 [ 507.040726][T19560] __se_sys_ioctl+0xfc/0x170 [ 507.047483][T19560] do_syscall_64+0xfa/0xfa0 [ 507.054254][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.062319][T19560] } [ 507.064900][T19560] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 507.073868][T19560] ... acquired at: [ 507.077757][T19560] lock_acquire+0x120/0x360 [ 507.082444][T19560] _raw_read_lock_irqsave+0xaf/0x100 [ 507.087916][T19560] send_sigio+0x38/0x370 [ 507.092346][T19560] kill_fasync+0x24d/0x4d0 [ 507.096957][T19560] lease_break_callback+0x26/0x30 [ 507.102164][T19560] __break_lease+0x6a5/0x1620 [ 507.107019][T19560] do_dentry_open+0x8b7/0x13f0 [ 507.111967][T19560] vfs_open+0x3b/0x340 [ 507.116219][T19560] path_openat+0x2ee5/0x3830 [ 507.120980][T19560] do_filp_open+0x1fa/0x410 [ 507.125657][T19560] do_sys_openat2+0x121/0x1c0 [ 507.130520][T19560] __x64_sys_openat+0x138/0x170 [ 507.135552][T19560] do_syscall_64+0xfa/0xfa0 [ 507.140229][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.146300][T19560] [ 507.148633][T19560] -> (&new->fa_lock){....}-{3:3} { [ 507.153785][T19560] INITIAL USE at: [ 507.157691][T19560] lock_acquire+0x120/0x360 [ 507.163768][T19560] _raw_write_lock_irq+0xa2/0xf0 [ 507.170268][T19560] fasync_remove_entry+0xf1/0x1c0 [ 507.176868][T19560] __fput+0x8a2/0xa70 [ 507.182424][T19560] task_work_run+0x1d4/0x260 [ 507.188580][T19560] exit_to_user_mode_loop+0xe9/0x130 [ 507.195434][T19560] do_syscall_64+0x2bd/0xfa0 [ 507.201615][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.209095][T19560] INITIAL READ USE at: [ 507.213429][T19560] lock_acquire+0x120/0x360 [ 507.219940][T19560] _raw_read_lock_irqsave+0xaf/0x100 [ 507.227239][T19560] kill_fasync+0x199/0x4d0 [ 507.233672][T19560] __splice_from_pipe+0x860/0x920 [ 507.240787][T19560] __se_sys_vmsplice+0x316/0x10d0 [ 507.247831][T19560] do_syscall_64+0xfa/0xfa0 [ 507.254450][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.262413][T19560] } [ 507.264915][T19560] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 507.273607][T19560] ... acquired at: [ 507.277409][T19560] lock_acquire+0x120/0x360 [ 507.282098][T19560] _raw_read_lock_irqsave+0xaf/0x100 [ 507.287573][T19560] kill_fasync+0x199/0x4d0 [ 507.292181][T19560] evdev_pass_values+0x627/0xbd0 [ 507.297302][T19560] evdev_events+0x1e6/0x340 [ 507.301989][T19560] input_pass_values+0x288/0x890 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 507.307127][T19560] input_event_dispose+0x330/0x6b0 [ 507.312427][T19560] input_inject_event+0x1dd/0x340 [ 507.317637][T19560] evdev_write+0x2fc/0x480 [ 507.322238][T19560] vfs_write+0x27e/0xb30 [ 507.326673][T19560] ksys_write+0x145/0x250 [ 507.331181][T19560] do_syscall_64+0xfa/0xfa0 [ 507.335863][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.341929][T19560] [ 507.344251][T19560] [ 507.344251][T19560] stack backtrace: [ 507.350143][T19560] CPU: 1 UID: 0 PID: 19560 Comm: syz.6.4657 Not tainted syzkaller #0 PREEMPT(full) [ 507.350163][T19560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.350175][T19560] Call Trace: [ 507.350181][T19560] [ 507.350188][T19560] dump_stack_lvl+0x189/0x250 [ 507.350209][T19560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.350226][T19560] ? __pfx__printk+0x10/0x10 [ 507.350246][T19560] validate_chain+0x1f05/0x2140 [ 507.350280][T19560] __lock_acquire+0xab9/0xd20 [ 507.350304][T19560] ? kill_fasync+0x199/0x4d0 [ 507.350328][T19560] lock_acquire+0x120/0x360 [ 507.350348][T19560] ? kill_fasync+0x199/0x4d0 [ 507.350377][T19560] _raw_read_lock_irqsave+0xaf/0x100 [ 507.350403][T19560] ? kill_fasync+0x199/0x4d0 [ 507.350427][T19560] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 507.350451][T19560] ? do_raw_spin_lock+0x121/0x290 [ 507.350471][T19560] kill_fasync+0x199/0x4d0 [ 507.350496][T19560] ? kill_fasync+0x53/0x4d0 [ 507.350521][T19560] evdev_pass_values+0x627/0xbd0 [ 507.350542][T19560] ? evdev_pass_values+0x641/0xbd0 [ 507.350562][T19560] evdev_events+0x1e6/0x340 [ 507.350579][T19560] ? evdev_events+0x79/0x340 [ 507.350614][T19560] ? input_pass_values+0x8d/0x890 [ 507.350631][T19560] input_pass_values+0x288/0x890 [ 507.350666][T19560] ? input_handle_event+0x70c/0xf30 [ 507.350693][T19560] input_event_dispose+0x330/0x6b0 [ 507.350738][T19560] input_inject_event+0x1dd/0x340 [ 507.350765][T19560] ? input_inject_event+0xb6/0x340 [ 507.350793][T19560] evdev_write+0x2fc/0x480 [ 507.350815][T19560] ? __pfx_evdev_write+0x10/0x10 [ 507.350836][T19560] ? bpf_lsm_file_permission+0x9/0x20 [ 507.350863][T19560] ? security_file_permission+0x75/0x290 [ 507.350891][T19560] ? rw_verify_area+0x255/0x4d0 [ 507.350909][T19560] ? __lock_acquire+0xab9/0xd20 [ 507.350931][T19560] ? __pfx_evdev_write+0x10/0x10 [ 507.350952][T19560] vfs_write+0x27e/0xb30 [ 507.350973][T19560] ? __pfx_vfs_write+0x10/0x10 [ 507.350992][T19560] ? __fget_files+0x2a/0x420 [ 507.351016][T19560] ? __fget_files+0x2a/0x420 [ 507.351037][T19560] ? __fget_files+0x3a0/0x420 [ 507.351059][T19560] ? __fget_files+0x2a/0x420 [ 507.351084][T19560] ksys_write+0x145/0x250 [ 507.351104][T19560] ? __pfx_ksys_write+0x10/0x10 [ 507.351124][T19560] ? do_syscall_64+0xbe/0xfa0 [ 507.351143][T19560] do_syscall_64+0xfa/0xfa0 [ 507.351159][T19560] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.351176][T19560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.351195][T19560] ? clear_bhb_loop+0x60/0xb0 [ 507.351214][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.351232][T19560] RIP: 0033:0x7ffa6518eec9 [ 507.351250][T19560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.351267][T19560] RSP: 002b:00007ffa660bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.351287][T19560] RAX: ffffffffffffffda RBX: 00007ffa653e5fa0 RCX: 00007ffa6518eec9 [ 507.351301][T19560] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 507.351314][T19560] RBP: 00007ffa65211f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.351326][T19560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.351337][T19560] R13: 00007ffa653e6038 R14: 00007ffa653e5fa0 R15: 00007ffa6550fa28 [ 507.351357][T19560] [ 507.771534][ T5897] usb 3-1: USB disconnect, device number 62 [ 507.930270][ T5953] usb 4-1: USB disconnect, device number 65 [ 508.815122][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.896025][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.957568][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.041372][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.156747][ T50] bridge_slave_1: left allmulticast mode [ 509.167584][ T50] bridge_slave_1: left promiscuous mode [ 509.174305][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.183200][ T50] bridge_slave_0: left allmulticast mode [ 509.188873][ T50] bridge_slave_0: left promiscuous mode [ 509.195119][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.337611][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.355896][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.369854][ T50] bond0 (unregistering): Released all slaves [ 509.583378][ T50] hsr_slave_0: left promiscuous mode [ 509.597284][ T50] hsr_slave_1: left promiscuous mode [ 509.606448][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.617215][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.628254][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.650613][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.662231][ T50] veth1_macvtap: left promiscuous mode [ 509.667808][ T50] veth0_macvtap: left promiscuous mode [ 509.690052][ T50] veth1_vlan: left promiscuous mode [ 509.695403][ T50] veth0_vlan: left promiscuous mode [ 510.017988][ T50] team0 (unregistering): Port device team_slave_1 removed [ 510.048026][ T50] team0 (unregistering): Port device team_slave_0 removed [ 510.417458][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.475442][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.526798][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.586877][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.733032][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.832268][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.887488][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.948002][ T50] team0: Port device netdevsim0 removed [ 510.955368][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.076747][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.136022][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.205324][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.270347][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.381571][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.393134][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.446260][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.457645][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.525231][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.535967][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.586666][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.598426][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.673456][ T50] bridge_slave_1: left allmulticast mode [ 511.679368][ T50] bridge_slave_1: left promiscuous mode [ 511.687386][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.696842][ T50] bridge_slave_0: left allmulticast mode [ 511.703387][ T50] bridge_slave_0: left promiscuous mode [ 511.709118][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.722414][ T50] team0: left allmulticast mode [ 511.727476][ T50] bridge0: port 1(team0) entered disabled state [ 511.736858][ T50] bridge_slave_1: left allmulticast mode [ 511.743081][ T50] bridge_slave_1: left promiscuous mode [ 511.748824][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.760934][ T50] bridge_slave_0: left allmulticast mode [ 511.766619][ T50] bridge_slave_0: left promiscuous mode [ 511.773106][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.986112][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.997103][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.007634][ T50] bond0 (unregistering): Released all slaves [ 512.173502][ T50] team0: Port device bridge1 removed [ 512.329115][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.339701][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.349124][ T50] bond0 (unregistering): Released all slaves [ 512.553687][ T50] bond0 (unregistering): Released all slaves [ 512.648433][ T50] batman_adv: batadv0: Interface deactivated: macvlan3 [ 512.657263][ T50] batman_adv: batadv0: Removing interface: macvlan3 [ 512.861661][ T50] bond0 (unregistering): left promiscuous mode [ 512.868121][ T50] bond_slave_0: left promiscuous mode [ 512.876891][ T50] bond_slave_1: left promiscuous mode [ 512.883561][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.892378][ T50] bond_slave_0: left allmulticast mode [ 512.899000][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.908128][ T50] bond_slave_1: left allmulticast mode [ 512.914406][ T50] bond0 (unregistering): Released all slaves [ 513.831607][ T50] hsr_slave_0: left promiscuous mode [ 513.837457][ T50] hsr_slave_1: left promiscuous mode [ 513.843681][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.851417][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.859181][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.870515][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.887371][ T50] hsr_slave_0: left promiscuous mode [ 513.895039][ T50] hsr_slave_1: left promiscuous mode [ 513.900944][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.908350][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.921585][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.929028][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.943906][ T50] hsr_slave_0: left promiscuous mode [ 513.950151][ T50] hsr_slave_1: left promiscuous mode [ 513.956635][ T50] dummy0: left promiscuous mode [ 513.964181][ T50] hsr_slave_0: left promiscuous mode [ 513.971382][ T50] hsr_slave_1: left promiscuous mode [ 513.977272][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.985323][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.994554][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.004028][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.023476][ T50] veth1_macvtap: left promiscuous mode [ 514.028993][ T50] veth0_macvtap: left promiscuous mode [ 514.034770][ T50] veth1_vlan: left promiscuous mode [ 514.040112][ T50] veth0_vlan: left promiscuous mode [ 514.046050][ T50] veth1_macvtap: left promiscuous mode [ 514.052584][ T50] veth0_macvtap: left promiscuous mode [ 514.058140][ T50] veth1_vlan: left promiscuous mode [ 514.063468][ T50] veth0_vlan: left promiscuous mode [ 514.069379][ T50] veth1_macvtap: left promiscuous mode [ 514.074956][ T50] veth0_macvtap: left promiscuous mode [ 514.080867][ T50] veth1_vlan: left promiscuous mode [ 514.086137][ T50] veth0_vlan: left promiscuous mode [ 514.092203][ T50] veth1_macvtap: left promiscuous mode [ 514.097697][ T50] veth0_macvtap: left promiscuous mode [ 514.371895][ T50] team0 (unregistering): Port device team_slave_1 removed [ 514.398864][ T50] team0 (unregistering): Port device team_slave_0 removed [ 514.778536][ T50] team0 (unregistering): Port device team_slave_1 removed [ 514.816139][ T50] team0 (unregistering): Port device team_slave_0 removed [ 515.706520][ T50] team0 (unregistering): Port device team_slave_1 removed [ 515.731653][ T50] team0 (unregistering): Port device team_slave_0 removed