last executing test programs: 3.754192398s ago: executing program 1 (id=18620): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f00000018c0)=""/4096, 0x3d}) 3.54562661s ago: executing program 1 (id=18623): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 3.123545836s ago: executing program 4 (id=18631): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="13010000000000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) 2.964515368s ago: executing program 2 (id=18632): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 2.844499081s ago: executing program 2 (id=18634): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 2.763884714s ago: executing program 2 (id=18636): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 2.567912233s ago: executing program 2 (id=18639): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x800003f, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file1\x00') 2.465490965s ago: executing program 3 (id=18640): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 2.454408563s ago: executing program 2 (id=18641): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xf4, &(0x7f0000000200)={[{0x99, 0x4e00, "54c1964f71f20eb0d66701eb43d5e4bd279233b0657e6f2e3f937e6c2659ba50333d565a2a6583595516f5100b8ca24b7d8ae3d5d2b580fe806521c2889f930ec2e4d20311ed221eb41ef23adde63cc6a1f41f5481c76460e5037f6efb75b7034a33d2e537b91fc1fd63f7f295d2a6a20da69f80f32274b816b61b57c502032877d2ac4726efa61ae188bfb7740d1fc7bdf232828a5a475a27"}, {0x25, 0x4e00, "358aa3ef8f72829f17dcddc8f87d1fd4870e678df8c9afc242e687f261801efe2759c5c001"}, {0x22, 0x4e00, "e479da88a25647c0add1a2a439113abb08e97a1788dda0f9d4b5f2d379dc7257c403"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 2.352566023s ago: executing program 3 (id=18643): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) 2.180346239s ago: executing program 3 (id=18645): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x119880, 0xc3) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x89) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x595803, 0x90) rmdir(&(0x7f0000001d00)='./file0\x00') 2.126881132s ago: executing program 3 (id=18646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001f00)="4ed714", 0x3}], 0x4, 0x0, 0x0, 0x2000c810}, 0x4000050) 2.126097905s ago: executing program 0 (id=18647): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 2.054786393s ago: executing program 3 (id=18648): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x0, 0x6, 0x1, 0xff, 0x10001]}, &(0x7f0000000200)=0x54) 1.759662531s ago: executing program 0 (id=18649): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x30) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x5, 0x2e, r0, 0x0) fanotify_mark(r1, 0x441, 0x48000001, r0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) 1.399157764s ago: executing program 0 (id=18650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 1.287612639s ago: executing program 4 (id=18651): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1.129199711s ago: executing program 0 (id=18652): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x40000011}) 1.10151313s ago: executing program 4 (id=18653): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80800) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 888.461228ms ago: executing program 4 (id=18654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008804"]) 873.641573ms ago: executing program 0 (id=18655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 845.622087ms ago: executing program 1 (id=18656): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 624.517263ms ago: executing program 1 (id=18657): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfeca, 0x0, 0x0, 0x28a}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x65a, 0xffffffffffffffff, 0x31, {0x5, 0x10001}, 0x9}, 0x1) 613.212087ms ago: executing program 4 (id=18658): recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000004c0)=""/193, 0xc1}], 0x2}, 0x9}], 0x1, 0x40000003, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 401.171676ms ago: executing program 1 (id=18659): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2}) 259.875766ms ago: executing program 3 (id=18660): r0 = syz_io_uring_setup(0x6060, &(0x7f00000004c0)={0x0, 0x0, 0x400, 0x0, 0x140}, &(0x7f0000000280), &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 87.804936ms ago: executing program 1 (id=18661): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 86.610336ms ago: executing program 2 (id=18662): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x8, 0x0, 0xfffc}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 16.107938ms ago: executing program 0 (id=18663): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) 0s ago: executing program 4 (id=18664): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xfb8d, 0x1000, 0x10000001, 0xffdffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(r0, 0x47f6, 0xffffffff, 0x4a, 0x0, 0x0) kernel console output (not intermixed with test programs): etlink: 4 bytes leftover after parsing attributes in process `syz.0.16800'. [ 1138.570576][ T6160] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1138.604927][ T6160] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1138.650303][T19501] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1138.671762][ T6160] usb 4-1: USB disconnect, device number 109 [ 1138.701539][T19501] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1138.809137][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16805'. [ 1138.837446][T21676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1139.386889][ T6160] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1139.545133][ T6160] usb 3-1: Using ep0 maxpacket: 8 [ 1139.583338][ T6160] usb 3-1: config index 0 descriptor too short (expected 46935, got 18) [ 1139.592076][ T6160] usb 3-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 1139.624896][ T6160] usb 3-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.654942][ T6160] usb 3-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 1139.676586][ T6160] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1139.695246][ T6160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.703947][ T6160] usb 3-1: Product: syz [ 1139.715174][ T6160] usb 3-1: Manufacturer: syz [ 1139.720036][ T6160] usb 3-1: SerialNumber: syz [ 1139.984761][ T6160] usb 3-1: USB disconnect, device number 105 [ 1140.637616][T21757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16829'. [ 1142.365032][T21806] hub 9-0:1.0: USB hub found [ 1142.397460][T21806] hub 9-0:1.0: 1 port detected [ 1143.054762][T19501] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1143.214698][T19501] usb 5-1: Using ep0 maxpacket: 8 [ 1143.225562][T19501] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1143.247487][T19501] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1143.292145][T19501] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.329812][T19501] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.343684][T19501] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1143.354648][T19501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.554943][ T6160] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1143.586056][T19501] usb 5-1: GET_CAPABILITIES returned 0 [ 1143.591677][T19501] usbtmc 5-1:16.0: can't read capabilities [ 1143.707233][ T6160] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1143.717256][ T6160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.730288][ T6160] usb 2-1: config 0 descriptor?? [ 1143.755913][ T6160] cp210x 2-1:0.0: cp210x converter detected [ 1143.826298][ T10] usb 5-1: USB disconnect, device number 112 [ 1144.160569][ T6160] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1144.180474][ T6160] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1144.405136][ T6160] usb 2-1: USB disconnect, device number 122 [ 1144.422890][ T6160] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1144.472703][ T6160] cp210x 2-1:0.0: device disconnected [ 1145.144086][ T30] audit: type=1326 audit(1749908787.901:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.178033][ T30] audit: type=1326 audit(1749908787.901:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.221709][ T30] audit: type=1326 audit(1749908787.941:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.272679][ T30] audit: type=1326 audit(1749908787.941:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.326413][ T30] audit: type=1326 audit(1749908787.941:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.380255][ T30] audit: type=1326 audit(1749908787.941:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.402852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1145.433297][ T30] audit: type=1326 audit(1749908787.941:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.455875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1145.463670][ T30] audit: type=1326 audit(1749908787.941:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.486350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1145.507047][ T30] audit: type=1326 audit(1749908787.941:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.537899][ T30] audit: type=1326 audit(1749908787.941:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21949 comm="syz.3.16888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f26b8e929 code=0x7ffc0000 [ 1145.573002][T21963] netlink: 268 bytes leftover after parsing attributes in process `syz.2.16893'. [ 1145.655126][T31276] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1145.816847][T31276] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.844805][T31276] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1145.858139][ T10] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1145.891741][T31276] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.903603][T31276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.951003][T31276] usb 2-1: Product: syz [ 1145.970633][T31276] usb 2-1: Manufacturer: syz [ 1145.976925][T31276] usb 2-1: SerialNumber: syz [ 1146.032344][ T10] usb 4-1: config 4 has an invalid interface number: 4 but max is 0 [ 1146.041396][ T10] usb 4-1: config 4 has no interface number 0 [ 1146.057200][ T10] usb 4-1: config 4 interface 4 has no altsetting 0 [ 1146.074142][ T10] usb 4-1: New USB device found, idVendor=1435, idProduct=0326, bcdDevice=ea.c7 [ 1146.092626][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.101282][ T10] usb 4-1: Product: syz [ 1146.112584][ T10] usb 4-1: Manufacturer: syz [ 1146.119193][ T10] usb 4-1: SerialNumber: syz [ 1146.216939][T21956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.244776][T21956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.257617][T31276] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1146.285073][T31276] usb 2-1: USB disconnect, device number 123 [ 1146.293698][ T10] usb 4-1: reset full-speed USB device number 110 using dummy_hcd [ 1146.764921][T31276] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1146.914865][T31276] usb 2-1: Using ep0 maxpacket: 8 [ 1146.928630][T31276] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 1146.947195][T31276] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.965340][ T10] usb 4-1: device descriptor read/64, error -71 [ 1146.971841][T31276] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.993297][T31276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1147.004218][T31276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1147.031996][T31276] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.061506][T31276] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1147.085950][T31276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.214662][ T10] usb 4-1: reset full-speed USB device number 110 using dummy_hcd [ 1147.312102][T31276] usb 2-1: usb_control_msg returned -71 [ 1147.321826][T31276] usbtmc 2-1:16.0: can't read capabilities [ 1147.362236][T31276] usb 2-1: USB disconnect, device number 124 [ 1147.833353][T31276] usb 4-1: USB disconnect, device number 110 [ 1149.097307][T22150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16931'. [ 1149.152849][T22150] vlan4: entered promiscuous mode [ 1149.164099][T22150] bridge0: entered promiscuous mode [ 1149.462136][T22167] cgroup: fork rejected by pids controller in /syz1 [ 1149.674809][T31276] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1149.874745][T31276] usb 5-1: Using ep0 maxpacket: 16 [ 1149.945452][T31276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1149.982012][T31276] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1150.011737][T31276] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1150.065429][T31276] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.091619][T31276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1150.110297][T31276] usb 5-1: SerialNumber: syz [ 1150.152705][T22157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1150.475548][T31276] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1150.512476][T31276] usb 5-1: USB disconnect, device number 113 [ 1150.687439][T24021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.835244][T24021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.968942][T24021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.187779][T24021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.643833][T24021] bridge_slave_1: left allmulticast mode [ 1151.653941][T24021] bridge_slave_1: left promiscuous mode [ 1151.658291][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16953'. [ 1151.674573][T24021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.724716][T12971] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1151.763306][T24021] bridge_slave_0: left allmulticast mode [ 1151.777101][T24021] bridge_slave_0: left promiscuous mode [ 1151.794927][T24021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.895365][T12971] usb 3-1: Using ep0 maxpacket: 16 [ 1151.914251][T12971] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1151.935389][T12971] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1151.971738][T12971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.002569][T12971] usb 3-1: config 0 descriptor?? [ 1152.305273][ T8860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.317475][ T8860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.327096][ T8860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.339364][ T8860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.378849][ T8860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1152.436530][T12971] hid (null): global environment stack underflow [ 1152.463580][T12971] hid (null): report_id 0 is invalid [ 1152.661101][T12971] usb 3-1: USB disconnect, device number 106 [ 1153.156418][T24021] team0: Port device geneve0 removed [ 1153.498659][T24021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.520304][T24021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.534218][T24021] bond0 (unregistering): Released all slaves [ 1153.557153][T24021] bond1 (unregistering): Released all slaves [ 1153.579411][T24021] bond2 (unregistering): Released all slaves [ 1153.602548][T22277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16959'. [ 1153.643507][T22277] netlink: 27 bytes leftover after parsing attributes in process `syz.4.16959'. [ 1153.927763][T22323] ALSA: mixer_oss: invalid OSS volume 'A141=w敐腣e]' [ 1153.969183][T22323] ALSA: mixer_oss: invalid OSS volume '室盉寺;T`緻$櫩綞黧cXMYd,' [ 1154.003712][T22323] ALSA: mixer_oss: invalid OSS volume 'b珟@h#' [ 1154.038186][T22323] ALSA: mixer_oss: invalid OSS volume '晳h4繓蠿瑒S4v=0漘>&湎' [ 1154.085863][T22323] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 1154.141684][T22323] ALSA: mixer_oss: invalid OSS volume '-z5矈c^鱆6$' [ 1154.196495][T22323] ALSA: mixer_oss: invalid OSS volume '0审T劗皔蒌瞵髩椽嚄俲朠&喅a飔' [ 1154.211584][T22323] ALSA: mixer_oss: invalid OSS volume '|幞髜俓' [ 1154.219787][T22323] ALSA: mixer_oss: invalid OSS volume '@鬪3b蓽憓樤G$#\("/鴒鶯' [ 1154.228883][T22323] ALSA: mixer_oss: invalid OSS volume '' [ 1154.240160][T22368] netlink: 280 bytes leftover after parsing attributes in process `syz.3.16972'. [ 1154.444721][ T6062] Bluetooth: hci2: command tx timeout [ 1154.658484][T22433] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16979'. [ 1154.671968][T22255] chnl_net:caif_netlink_parms(): no params data found [ 1154.990933][T22473] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 1155.015153][T22473] syzkaller0: owner set to 0 [ 1155.322892][T22255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.332333][T22255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.345147][T22255] bridge_slave_0: entered allmulticast mode [ 1155.353682][T22255] bridge_slave_0: entered promiscuous mode [ 1155.373758][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16987'. [ 1155.412229][T22255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.420080][T22255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.428140][T22255] bridge_slave_1: entered allmulticast mode [ 1155.437424][T22255] bridge_slave_1: entered promiscuous mode [ 1155.454798][ T977] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1155.615412][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 1155.627871][T22255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.647917][ T977] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1155.669365][T24021] : left promiscuous mode [ 1155.698866][ T977] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1155.744815][ T977] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1155.763303][ T977] usb 5-1: Product: syz [ 1155.768275][ T977] usb 5-1: Manufacturer: syz [ 1155.773089][ T977] usb 5-1: SerialNumber: syz [ 1155.775343][T22581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16991'. [ 1155.805282][ T977] usb 5-1: config 0 descriptor?? [ 1155.815444][T22255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.836709][ T977] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1155.907862][T24021] _衂`詟@: left promiscuous mode [ 1156.252476][T24021] tipc: Left network mode [ 1156.271183][T22255] team0: Port device team_slave_0 added [ 1156.339377][T22255] team0: Port device team_slave_1 added [ 1156.466338][ T977] gspca_zc3xx: reg_w_i err -71 [ 1156.535421][ T6062] Bluetooth: hci2: command tx timeout [ 1156.612402][T22255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.619973][T22255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.665716][T22255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.716899][T22255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.724098][T22255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.825553][T22255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.074626][ T977] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1157.081145][ T977] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1157.094682][ T6160] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1157.128834][ T977] usb 5-1: USB disconnect, device number 114 [ 1157.181377][T22255] hsr_slave_0: entered promiscuous mode [ 1157.208291][T22255] hsr_slave_1: entered promiscuous mode [ 1157.218199][T22255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1157.238829][T22255] Cannot create hsr debugfs directory [ 1157.268015][ T6160] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1157.300381][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.324809][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.364522][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.412149][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.450538][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.480995][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.506983][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.541849][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.563623][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.592080][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.601639][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.647256][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.674633][T12971] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1157.680832][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.701710][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.704711][T22762] input: syz1 as /devices/virtual/input/input152 [ 1157.732632][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.770949][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.791300][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.823651][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.847902][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.868205][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.875183][T12971] usb 5-1: Using ep0 maxpacket: 16 [ 1157.898057][T12971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1157.912386][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.913673][T12971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1157.935432][ T6160] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.959833][ T6160] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1157.970778][T12971] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1157.971611][T12971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.010340][T12971] usb 5-1: Product: syz [ 1158.026382][T12971] usb 5-1: Manufacturer: syz [ 1158.044540][ T6160] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1158.065547][ T6160] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1158.074899][T12971] usb 5-1: SerialNumber: syz [ 1158.076258][ T6160] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1158.108894][T12971] usb 5-1: config 0 descriptor?? [ 1158.131281][T12971] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1158.142792][T12971] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1158.145382][ T6160] usb 4-1: Product: syz [ 1158.154419][ T6160] usb 4-1: Manufacturer: syz [ 1158.181626][T24021] hsr_slave_0: left promiscuous mode [ 1158.192568][ T6160] usb 4-1: SerialNumber: syz [ 1158.201992][T24021] hsr_slave_1: left promiscuous mode [ 1158.213249][ T6160] usb 4-1: config 0 descriptor?? [ 1158.235393][T24021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.250716][ T6160] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1158.261756][T24021] hsr0: left allmulticast mode [ 1158.283612][T24021] hsr0: left promiscuous mode [ 1158.605062][ T6062] Bluetooth: hci2: command tx timeout [ 1158.646808][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 1158.654691][ T6160] usb 4-1: USB disconnect, device number 111 [ 1158.668914][ T6160] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1158.773464][T12971] em28xx 5-1:0.0: unknown em28xx chip ID (47) [ 1158.972769][T12971] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1158.989157][T22813] delete_channel: no stack [ 1159.005950][T12971] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1159.012995][T12971] em28xx 5-1:0.0: No AC97 audio processor [ 1159.052775][T12971] usb 5-1: USB disconnect, device number 115 [ 1159.090441][T12971] em28xx 5-1:0.0: Disconnecting em28xx [ 1159.125948][T12971] em28xx 5-1:0.0: Freeing device [ 1160.566212][T24021] team0 (unregistering): Port device team_slave_1 removed [ 1160.623211][T24021] team0 (unregistering): Port device team_slave_0 removed [ 1160.684997][ T6062] Bluetooth: hci2: command tx timeout [ 1161.364123][T22835] netlink: 100 bytes leftover after parsing attributes in process `syz.4.17019'. [ 1161.385155][T22856] netlink: 6 bytes leftover after parsing attributes in process `syz.0.17028'. [ 1161.419698][T22857] netlink: 6 bytes leftover after parsing attributes in process `syz.0.17028'. [ 1161.555926][T22879] vivid-004: disconnect [ 1161.563647][T22876] vivid-004: reconnect [ 1163.221647][T22983] loop4: detected capacity change from 0 to 524255231 [ 1163.663117][T22255] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1163.706841][T22255] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1163.799300][T22255] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1163.885294][T22255] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1164.084856][ T6160] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1164.140242][T22255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.217347][T22255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.256142][ T6160] usb 4-1: Using ep0 maxpacket: 16 [ 1164.263264][T20180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.270557][T20180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.295994][ T6160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.308987][ T6160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.328067][ T6160] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1164.340389][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.347692][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.355245][ T6160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.393388][ T6160] usb 4-1: config 0 descriptor?? [ 1164.428285][T24021] IPVS: stop unused estimator thread 0... [ 1164.851926][ T6160] playstation 0003:054C:05C4.008D: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 1164.881000][T22255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.021453][ T6160] playstation 0003:054C:05C4.008D: Invalid reportID received, expected 18 got 0 [ 1165.064549][ T6160] playstation 0003:054C:05C4.008D: Failed to retrieve DualShock4 pairing info: -22 [ 1165.117070][ T6160] playstation 0003:054C:05C4.008D: Failed to get MAC address from DualShock4 [ 1165.142828][ T6160] playstation 0003:054C:05C4.008D: Failed to create dualshock4. [ 1165.192092][ T6160] playstation 0003:054C:05C4.008D: probe with driver playstation failed with error -22 [ 1165.263427][T22255] veth0_vlan: entered promiscuous mode [ 1165.268469][ T6160] usb 4-1: USB disconnect, device number 112 [ 1165.349732][T22255] veth1_vlan: entered promiscuous mode [ 1165.539932][T22255] veth0_macvtap: entered promiscuous mode [ 1165.584947][T22255] veth1_macvtap: entered promiscuous mode [ 1165.829973][T22255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.934831][T12971] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1166.005546][T23103] netlink: 'syz.3.17065': attribute type 7 has an invalid length. [ 1166.026484][T22255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.099677][T22255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.121435][T12971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1166.144752][T12971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1166.161384][T22255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.172355][T12971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1166.184946][T12971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.194792][T22255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.234171][T22255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.421792][T12971] usb 5-1: GET_CAPABILITIES returned 0 [ 1166.464190][T12971] usbtmc 5-1:16.0: can't read capabilities [ 1166.657019][ T977] usb 5-1: USB disconnect, device number 116 [ 1166.659876][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17068'. [ 1166.672200][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.672227][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.773427][T23124] bridge0: port 4(team0) entered disabled state [ 1166.809691][T23124] ip6gretap0: left allmulticast mode [ 1166.819105][T23124] ip6gretap0: left promiscuous mode [ 1166.835047][T23124] bridge0: port 3(ip6gretap0) entered disabled state [ 1166.844725][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1166.891094][T23124] bridge_slave_1: left allmulticast mode [ 1166.917118][T23124] bridge_slave_1: left promiscuous mode [ 1166.923185][T23124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.948202][T23124] bridge_slave_0: left promiscuous mode [ 1166.958088][T23124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.064279][T20180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.123597][T20180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.439387][T23172] gtp0: entered promiscuous mode [ 1167.456860][T23172] gtp0: entered allmulticast mode [ 1167.584856][ T977] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1167.769624][ T977] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1167.797627][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.825291][ T977] usb 5-1: config 0 descriptor?? [ 1167.858114][ T977] pwc: Samsung MPC-C10 USB webcam detected. [ 1167.966085][T23188] input: syz1 as /devices/virtual/input/input153 [ 1168.053238][ T977] pwc: send_video_command error -71 [ 1168.072343][ T977] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1168.105052][ T977] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1168.143159][ T977] usb 5-1: USB disconnect, device number 117 [ 1168.586089][ T977] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1168.767961][ T977] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1168.790033][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.825391][ T977] usb 5-1: config 0 descriptor?? [ 1168.864692][ T977] pwc: Samsung MPC-C10 USB webcam detected. [ 1169.074975][T19501] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1169.255405][ T977] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1169.257776][T19501] usb 4-1: Using ep0 maxpacket: 8 [ 1169.272800][ T977] pwc: recv_control_msg error -71 req 02 val 2700 [ 1169.290533][T19501] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1169.311030][T19501] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1169.313467][ T977] pwc: recv_control_msg error -71 req 04 val 1700 [ 1169.354021][ T977] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1169.358131][T19501] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1169.371322][ T977] pwc: recv_control_msg error -71 req 04 val 1000 [ 1169.382744][ T977] pwc: recv_control_msg error -71 req 04 val 1300 [ 1169.386062][T19501] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.413911][ T977] pwc: recv_control_msg error -71 req 04 val 1400 [ 1169.434598][T19501] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1169.445219][ T977] pwc: recv_control_msg error -71 req 02 val 2000 [ 1169.454104][T19501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.464759][ T977] pwc: recv_control_msg error -71 req 02 val 2100 [ 1169.494806][ T977] pwc: recv_control_msg error -71 req 02 val 2200 [ 1169.507270][ T977] pwc: recv_control_msg error -71 req 06 val 0600 [ 1169.544980][ T977] pwc: recv_control_msg error -71 req 04 val 1500 [ 1169.553897][ T977] pwc: recv_control_msg error -71 req 02 val 2500 [ 1169.575251][ T6160] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1169.582277][ T977] pwc: recv_control_msg error -71 req 02 val 2400 [ 1169.624450][ T977] pwc: recv_control_msg error -71 req 02 val 2600 [ 1169.635125][ T977] pwc: recv_control_msg error -71 req 02 val 2900 [ 1169.656288][ T977] pwc: recv_control_msg error -71 req 02 val 2800 [ 1169.707390][ T977] pwc: recv_control_msg error -71 req 04 val 1100 [ 1169.712170][T19501] usb 4-1: GET_CAPABILITIES returned 0 [ 1169.715269][ T977] pwc: recv_control_msg error -71 req 04 val 1200 [ 1169.737193][T19501] usbtmc 4-1:16.0: can't read capabilities [ 1169.756755][ T977] pwc: Registered as video103. [ 1169.770514][ T6160] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1169.793703][ T6160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.803088][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input154 [ 1169.866382][ T6160] usb 3-1: Product: syz [ 1169.881322][ T6160] usb 3-1: Manufacturer: syz [ 1169.912539][ T6160] usb 3-1: SerialNumber: syz [ 1169.914991][ T977] usb 5-1: USB disconnect, device number 118 [ 1169.959936][ T6160] usb 3-1: config 0 descriptor?? [ 1170.025099][ T48] usb 4-1: USB disconnect, device number 113 [ 1170.277806][ T6160] usb 3-1: USB disconnect, device number 107 [ 1170.376529][ T9610] udevd[9610]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.384219][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17093'. [ 1170.465612][T23297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.717757][T23357] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17104'. [ 1172.704708][ T977] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1172.888864][ T977] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1172.925581][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.954757][ T977] usb 3-1: Product: syz [ 1172.968898][ T977] usb 3-1: Manufacturer: syz [ 1172.995822][ T977] usb 3-1: SerialNumber: syz [ 1173.026141][ T977] usb 3-1: config 0 descriptor?? [ 1173.270252][T23452] C: renamed from team_slave_0 (while UP) [ 1173.297350][T23452] netlink: 'syz.1.17131': attribute type 4 has an invalid length. [ 1173.309334][T23452] netlink: 116 bytes leftover after parsing attributes in process `syz.1.17131'. [ 1173.320293][T23452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1173.451919][ T977] usb 3-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 1173.667663][ T977] usb 3-1: failed to fetch extended address, random address set [ 1173.776719][ T977] usb 3-1: USB disconnect, device number 108 [ 1174.729218][T23537] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17152'. [ 1175.795172][ T48] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1175.954752][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 1175.974585][ T48] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1175.984800][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1176.006247][ T48] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1176.024584][ T48] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1176.054273][ T48] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1176.075070][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.304302][ T48] usb 3-1: GET_CAPABILITIES returned 0 [ 1176.324349][ T48] usbtmc 3-1:16.0: can't read capabilities [ 1176.508663][T23569] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1176.546615][ T48] usb 3-1: USB disconnect, device number 109 [ 1177.090636][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.097621][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.664657][T19501] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1177.837134][T19501] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1177.860553][T19501] usb 2-1: config 0 has no interface number 0 [ 1177.883108][T23688] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1177.888065][T19501] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1177.900549][T23688] pim6reg0: linktype set to 773 [ 1177.915512][T19501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.941466][T19501] usb 2-1: Product: syz [ 1177.954956][T19501] usb 2-1: Manufacturer: syz [ 1177.965102][T19501] usb 2-1: SerialNumber: syz [ 1177.989391][T19501] usb 2-1: config 0 descriptor?? [ 1178.211894][T19501] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1178.247539][T19501] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1178.276410][T19501] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1178.287993][T19501] usb 2-1: media controller created [ 1178.344047][T19501] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.404982][ T977] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1178.435512][T19501] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1178.570264][T19501] usb 2-1: USB disconnect, device number 125 [ 1178.594847][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 1178.612218][ T977] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 1178.631480][ T977] usb 5-1: config 0 has no interface number 0 [ 1178.639544][ T977] usb 5-1: config 0 interface 115 has no altsetting 0 [ 1178.680912][ T977] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b2, bcdDevice=67.17 [ 1178.728298][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.787783][ T977] usb 5-1: Product: syz [ 1178.792046][ T977] usb 5-1: Manufacturer: syz [ 1178.824913][ T977] usb 5-1: SerialNumber: syz [ 1178.875812][ T977] usb 5-1: config 0 descriptor?? [ 1178.899787][ T977] em28xx 5-1:0.115: New device syz syz @ 480 Mbps (0ccd:00b2, interface 115, class 115) [ 1178.945091][ T977] em28xx 5-1:0.115: Video interface 115 found: bulk [ 1179.399714][T12971] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1179.537746][ T977] em28xx 5-1:0.115: unknown em28xx chip ID (0) [ 1179.573230][T12971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.614049][T12971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1179.623930][ T977] em28xx 5-1:0.115: reading from i2c device at 0xa0 failed (error=-5) [ 1179.647785][ T977] em28xx 5-1:0.115: board has no eeprom [ 1179.662732][T12971] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1179.682540][T12971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.705530][T12971] usb 3-1: Product: syz [ 1179.710339][T12971] usb 3-1: Manufacturer: syz [ 1179.728176][T12971] usb 3-1: SerialNumber: syz [ 1179.765146][ T977] em28xx 5-1:0.115: Identified as Terratec Cinergy HTC Stick (card=82) [ 1179.773977][ T977] em28xx 5-1:0.115: Currently, V4L2 is not supported on this model [ 1179.791205][T31276] em28xx 5-1:0.115: Binding DVB extension [ 1179.798021][T31276] em28xx 5-1:0.115: no endpoint for DVB mode and transfer type 0 [ 1179.807822][T31276] em28xx 5-1:0.115: failed to pre-allocate USB transfer buffers for DVB. [ 1179.825738][ T977] usb 5-1: USB disconnect, device number 119 [ 1179.832385][T31276] em28xx 5-1:0.115: Registering input extension [ 1179.843020][ T977] em28xx 5-1:0.115: Disconnecting em28xx [ 1179.849620][ T977] em28xx 5-1:0.115: Closing input extension [ 1179.909332][ T977] em28xx 5-1:0.115: Freeing device [ 1179.963491][T12971] usb 3-1: 0:2 : does not exist [ 1179.991779][T12971] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1180.046113][T12971] usb 3-1: USB disconnect, device number 110 [ 1180.110592][ T8789] udevd[8789]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.135775][T19501] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1180.306591][T19501] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 1180.323343][T19501] usb 4-1: config 0 has no interface number 0 [ 1180.343752][T19501] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1180.364678][T19501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.378423][T19501] usb 4-1: Product: syz [ 1180.382699][T19501] usb 4-1: Manufacturer: syz [ 1180.387967][T19501] usb 4-1: SerialNumber: syz [ 1180.398857][T19501] usb 4-1: config 0 descriptor?? [ 1180.620660][T19501] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1180.648235][T19501] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1180.666430][T19501] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1180.688051][T19501] usb 4-1: media controller created [ 1180.704391][T19501] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.732574][T23864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17224'. [ 1180.783899][T19501] DVB: Unable to find symbol dib7000p_attach() [ 1180.823808][T19501] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1180.850628][T19501] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1180.873475][T19501] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1180.893114][T19501] usb 4-1: media controller created [ 1180.917787][T19501] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.944332][T19501] dib0700: the master dib7090 has to be initialized first [ 1180.955056][T19501] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1180.966764][T23875] input: syz1 as /devices/virtual/input/input156 [ 1181.147616][T19501] rc_core: IR keymap rc-dib0700-rc5 not found [ 1181.164087][T19501] Registered IR keymap rc-empty [ 1181.181369][T19501] dvb-usb: could not initialize remote control. [ 1181.198344][T19501] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1181.200471][T23889] loop8: detected capacity change from 0 to 1 [ 1181.229135][ T8848] Dev loop8: unable to read RDB block 1 [ 1181.241603][ T8848] loop8: unable to read partition table [ 1181.245975][T19501] usb 4-1: USB disconnect, device number 114 [ 1181.248566][ T8848] loop8: partition table beyond EOD, truncated [ 1181.310763][T23889] Dev loop8: unable to read RDB block 1 [ 1181.322798][T19501] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 1181.337393][T23889] loop8: unable to read partition table [ 1181.352095][T23889] loop8: partition table beyond EOD, truncated [ 1181.360739][T23889] loop_reread_partitions: partition scan of loop8 (x黕>燕 ) failed (rc=-5) [ 1181.631215][T23923] ptrace attach of "./syz-executor exec"[6076] was attempted by "\x09   %-靵5閹|VTy兽\x22欿璑/)轷/貶疢&偂CsnVk转{Jv1绷%萠)$n:,㘎x5c縘漬+]2yrr頛藭-6穅%D砛x5c~誾鑧'Mc\x22oр伣嬆佾`克=s燦8|?迶盔臖r涺9毼沙b踺F厈i$]雭J\x5c6\x0d*R硗X#xZm耮S撁>焋蘶臙恍I鴣 [ 1181.636370][ C0] hrtimer: interrupt took 15638 ns [ 1182.045285][ T6160] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1182.222088][ T6160] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.239462][ T6160] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1182.285123][ T6160] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1182.309014][ T6160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.343401][ T6160] usb 4-1: config 0 descriptor?? [ 1182.783603][ T6160] kye 0003:0458:0138.008E: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 1182.965045][ T10] usb 4-1: USB disconnect, device number 115 [ 1184.431187][T24068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17276'. [ 1184.459932][T24073] vivid-000: disconnect [ 1184.468803][T24071] vivid-000: reconnect [ 1184.513789][T24069] No such timeout policy "syz1" [ 1184.524862][ T48] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1184.705471][ T48] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1184.715318][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.745033][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.763429][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1184.781704][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.794731][T12971] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1184.801601][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.814053][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1184.822810][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.832458][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.846788][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1184.860194][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.903726][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.935926][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1184.943815][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1184.964656][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1184.976588][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1184.992867][T12971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.004271][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.014606][T12971] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.031336][T12971] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1185.043754][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.058615][T12971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.067583][T12971] usb 2-1: Product: syz [ 1185.071949][T12971] usb 2-1: Manufacturer: syz [ 1185.074856][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1185.077858][T12971] usb 2-1: SerialNumber: syz [ 1185.106051][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.109070][T12971] usb 2-1: config 0 descriptor?? [ 1185.133622][T12971] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1185.134797][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.162235][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1185.165697][T12971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1185.188984][T12971] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1185.195034][ T48] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1185.199282][T12971] usb 2-1: media controller created [ 1185.239890][ T48] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1185.260292][T12971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1185.274824][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1185.292030][ T48] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1185.313510][ T48] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1185.350053][ T48] usb 5-1: Product: syz [ 1185.355007][ T48] usb 5-1: Manufacturer: syz [ 1185.359666][ T48] usb 5-1: SerialNumber: syz [ 1185.389590][ T48] usb 5-1: config 0 descriptor?? [ 1185.419733][ T48] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1185.425097][T12971] DVB: Unable to find symbol tda10046_attach() [ 1185.468878][T12971] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1185.496243][T12971] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1185.695780][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 1185.698223][ T977] usb 5-1: USB disconnect, device number 120 [ 1185.721878][ T977] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1186.098553][T12971] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1186.123634][T12971] usb 2-1: USB disconnect, device number 126 [ 1186.244754][ T48] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1186.404885][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 1186.407764][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.454606][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.474612][ T48] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1186.488355][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.519059][ T48] usb 4-1: config 0 descriptor?? [ 1186.993613][ T48] corsair 0003:1B1C:1B02.008F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 1187.064646][T24181] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 1187.249509][ T48] corsair 0003:1B1C:1B02.008F: Failed to get K90 initial state (error -71). [ 1187.334368][ T48] usb 4-1: USB disconnect, device number 116 [ 1187.781387][T24235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17317'. [ 1187.791099][ T6160] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1187.946682][ T6160] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1187.968661][ T6160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.007486][ T6160] usb 5-1: config 0 descriptor?? [ 1188.039231][ T6160] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1188.193542][T24259] netlink: ct family unspecified [ 1188.206195][T24259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1188.384740][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1188.443707][ T6160] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1188.544715][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1188.553473][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.575044][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1188.586654][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1188.597560][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1188.611084][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1188.631710][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1188.642055][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1188.666580][ T10] usb 2-1: Manufacturer: syz [ 1188.682099][ T10] usb 2-1: config 0 descriptor?? [ 1188.861767][ T6160] gspca_cpia1: usb_control_msg 02, error -71 [ 1188.868958][ T6160] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1188.887250][ T6160] usb 5-1: USB disconnect, device number 121 [ 1189.047132][ T10] rc_core: IR keymap rc-hauppauge not found [ 1189.068815][ T10] Registered IR keymap rc-empty [ 1189.079470][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.124734][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.166687][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1189.216263][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input158 [ 1189.239472][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.285313][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.314771][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.366743][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.395157][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.415912][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.435331][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.490627][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.537823][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.579570][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.624927][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1189.678011][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1189.710824][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1189.750587][ T10] usb 2-1: USB disconnect, device number 127 [ 1189.840826][T24336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17344'. [ 1189.996781][T24356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17349'. [ 1190.401854][T24376] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x32314142, 4, 0, 0, 0) [ 1190.520676][T24378] tc_dump_action: action bad kind [ 1192.123036][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17383'. [ 1192.354831][ T6160] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1192.526856][ T6160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.554720][ T6160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.568567][ T6160] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1192.588002][ T6160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.619888][ T6160] usb 2-1: config 0 descriptor?? [ 1193.059226][ T6160] arvo 0003:1E7D:30D4.0090: unknown main item tag 0x0 [ 1193.076172][ T6160] arvo 0003:1E7D:30D4.0090: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 1193.174750][T12971] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1193.375412][T12971] usb 3-1: Using ep0 maxpacket: 16 [ 1193.390489][T12971] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1193.400133][T12971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.408634][T12971] usb 3-1: Product: syz [ 1193.413264][T12971] usb 3-1: Manufacturer: syz [ 1193.418372][T12971] usb 3-1: SerialNumber: syz [ 1193.428012][T12971] usb 3-1: config 0 descriptor?? [ 1193.437454][T12971] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1193.462064][ T6160] usb 2-1: USB disconnect, device number 2 [ 1193.468284][ T6152] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1193.666193][ T6152] usb 5-1: Using ep0 maxpacket: 8 [ 1193.669808][T12971] usb 3-1: USB disconnect, device number 111 [ 1193.690690][ T6152] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1193.712017][ T6152] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1193.730221][ T6152] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1193.740508][ T6152] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1193.750908][ T6152] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1193.761907][ T6152] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.775556][ T6152] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1193.791487][ T6152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.818709][ T6152] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 1193.982898][T24596] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 1193.989515][T24596] syzkaller1: ignored: set checksum disabled [ 1194.144211][T24608] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.17405'. [ 1194.312391][T24615] netem: unknown loss type 0 [ 1194.319236][T24615] netem: change failed [ 1194.356636][T24613] ipvlan3: entered allmulticast mode [ 1194.362561][T24613] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1194.664958][ T6152] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1194.824974][ T6152] usb 2-1: Using ep0 maxpacket: 8 [ 1194.847618][ T6152] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1194.860153][T24637] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1194.870273][T24637] syzkaller1: linktype set to 780 [ 1194.876067][ T6152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1194.896319][ T6152] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1194.914969][ T6152] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.933916][ T6152] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1194.960485][ T6152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.188603][ T6152] usb 2-1: GET_CAPABILITIES returned 0 [ 1195.210943][ T6152] usbtmc 2-1:16.0: can't read capabilities [ 1195.402372][ T6152] usb 2-1: USB disconnect, device number 3 [ 1195.811653][T24689] macvlan0: entered promiscuous mode [ 1195.817666][T24689] netlink: 'syz.0.17427': attribute type 1 has an invalid length. [ 1195.836481][T24689] netlink: 'syz.0.17427': attribute type 2 has an invalid length. [ 1196.252961][T24711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.311668][ T10] usb 5-1: USB disconnect, device number 122 [ 1196.477967][T24728] bond0: entered promiscuous mode [ 1196.485137][T24728] bond4: entered promiscuous mode [ 1196.509828][T24728] bond0: left promiscuous mode [ 1196.524330][T24728] bond4: left promiscuous mode [ 1196.570777][T24732] kvm: kvm [24729]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 1197.635944][T24774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1199.415688][T24833] input: syz0 as /devices/virtual/input/input159 [ 1200.988826][T24875] netlink: 'syz.2.17491': attribute type 4 has an invalid length. [ 1202.170078][T24909] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17506'. [ 1202.808972][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17513'. [ 1203.817477][T24982] loop6: detected capacity change from 0 to 524287999 [ 1204.517329][T25010] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1204.517329][T25010] program syz.4.17532 not setting count and/or reply_len properly [ 1204.984607][ T48] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1205.180221][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 1205.197042][ T48] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1205.219974][ T48] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1205.246986][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.278169][ T48] usb 4-1: Product: syz [ 1205.282563][ T48] usb 4-1: Manufacturer: syz [ 1205.289974][ T48] usb 4-1: SerialNumber: syz [ 1205.317469][ T48] usb 4-1: config 0 descriptor?? [ 1205.332869][ T48] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1205.350694][ T48] usb 4-1: Detected FT232R [ 1205.534753][ T10] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1205.544790][ T48] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1205.645143][ T6152] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1205.694894][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1205.703390][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1205.718251][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.731767][ T10] usb 5-1: config 0 descriptor?? [ 1205.761829][ T48] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1205.802952][ T6152] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1205.825448][ T6152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.843967][ T6152] usb 2-1: config 0 descriptor?? [ 1205.867105][ T6152] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1205.948118][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1205.965246][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1205.983501][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1205.996615][ T6160] usb 4-1: USB disconnect, device number 117 [ 1205.999362][ T10] usb 5-1: media controller created [ 1206.035986][ T6160] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1206.050490][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1206.071283][ T6160] ftdi_sio 4-1:0.0: device disconnected [ 1206.150586][ T10] az6027: usb out operation failed. (-71) [ 1206.165904][ T10] az6027: usb out operation failed. (-71) [ 1206.179576][ T10] stb0899_attach: Driver disabled by Kconfig [ 1206.188569][ T10] az6027: no front-end attached [ 1206.188569][ T10] [ 1206.202369][ T10] az6027: usb out operation failed. (-71) [ 1206.213776][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1206.232863][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input160 [ 1206.257576][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1206.278048][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1206.293137][ T6152] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1206.298704][ T10] usb 5-1: USB disconnect, device number 123 [ 1206.412124][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1206.494379][ T6152] gspca_cpia1: usb_control_msg 01, error -32 [ 1206.511856][ T6152] gspca_cpia1: usb_control_msg 01, error -71 [ 1206.519729][ T6152] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1206.533584][ T6152] usb 2-1: USB disconnect, device number 4 [ 1207.674832][T25167] futex_wake_op: syz.4.17564 tries to shift op by -1; fix this program [ 1208.475694][T25194] kernel profiling enabled (shift: 17) [ 1209.014402][T25212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17580'. [ 1209.732923][T25242] netlink: 4300 bytes leftover after parsing attributes in process `syz.4.17591'. [ 1209.915563][ T6152] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1210.109245][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.129007][ T6152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.142085][ T6152] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1210.153991][ T6152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.167458][ T6152] usb 3-1: config 0 descriptor?? [ 1210.621236][ T6152] hid-led 0003:0FC5:B080.0091: unknown main item tag 0x1 [ 1211.030379][ T6152] hid-led 0003:0FC5:B080.0091: probe with driver hid-led failed with error -71 [ 1211.053539][ T6152] usb 3-1: USB disconnect, device number 112 [ 1211.206444][T25314] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1211.769732][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1211.962146][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1211.985173][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.012624][ T10] usb 4-1: config 0 descriptor?? [ 1212.052628][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1212.447757][T25378] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1212.463141][T25379] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17636'. [ 1212.800071][T25395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17643'. [ 1212.873160][ T10] usb 4-1: USB disconnect, device number 118 [ 1213.128033][T25416] netlink: 277 bytes leftover after parsing attributes in process `syz.0.17650'. [ 1213.443365][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17656'. [ 1213.887249][T25457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1215.065021][ T6186] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1215.236566][ T6186] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1215.249158][ T6186] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1215.300047][ T6186] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1215.344602][ T6186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1215.384824][ T6186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1215.434818][ T6186] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1215.459029][ T6186] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1215.499572][ T6186] usb 4-1: Product: syz [ 1215.503837][ T6186] usb 4-1: Manufacturer: syz [ 1215.558186][ T6186] cdc_wdm 4-1:1.0: skipping garbage [ 1215.571199][ T6186] cdc_wdm 4-1:1.0: skipping garbage [ 1215.606921][ T6186] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1215.636698][ T6186] cdc_wdm 4-1:1.0: Unknown control protocol [ 1216.070579][T25516] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 1217.431937][T25566] usb usb8: usbfs: process 25566 (syz.1.17706) did not claim interface 0 before use [ 1217.809581][ T6152] usb 4-1: USB disconnect, device number 119 [ 1218.660169][T25625] netlink: 232 bytes leftover after parsing attributes in process `syz.0.17726'. [ 1218.705694][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17726'. [ 1218.995631][T25638] bridge_slave_0: invalid flags given to default FDB implementation [ 1219.417923][T25654] pimreg: entered allmulticast mode [ 1219.452139][T25653] pimreg: left allmulticast mode [ 1219.849881][ T30] audit: type=1800 audit(1749908862.611:6563): pid=25678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17747" name="dmabuf" dev="dmabuf" ino=10 res=0 errno=0 [ 1221.675460][ T6186] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1221.847845][ T6186] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1221.864645][ T6186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.891627][ T6186] usb 2-1: Product: syz [ 1221.910345][ T6186] usb 2-1: Manufacturer: syz [ 1221.923805][ T6186] usb 2-1: SerialNumber: syz [ 1222.009076][ T6186] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1222.042808][ T6152] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1222.496206][T25739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.525299][T25739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.788122][ T977] usb 2-1: USB disconnect, device number 5 [ 1223.327946][ T6152] usb 2-1: Service connection timeout for: 256 [ 1223.334203][ T6152] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1223.382612][ T6152] ath9k_htc: Failed to initialize the device [ 1223.418028][ T977] usb 2-1: ath9k_htc: USB layer deinitialized [ 1223.914620][T12971] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1224.085091][T12971] usb 2-1: Using ep0 maxpacket: 32 [ 1224.105939][T12971] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1224.135961][T12971] usb 2-1: config 4 has no interface number 0 [ 1224.142196][T12971] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.184901][T12971] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.216875][T12971] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1224.240371][T12971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.278358][T12971] hub 2-1:4.128: USB hub found [ 1224.479477][T12971] hub 2-1:4.128: 2 ports detected [ 1224.486682][T12971] hub 2-1:4.128: Using single TT (err -22) [ 1224.814726][ T6160] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1224.890636][T12971] usb 2-1: USB disconnect, device number 6 [ 1224.920547][T25906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17813'. [ 1224.994774][ T6160] usb 4-1: Using ep0 maxpacket: 8 [ 1225.002184][ T6160] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1225.019961][ T6160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.067429][ T6160] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1225.088079][ T6160] pvrusb2: ********** [ 1225.098854][ T6160] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1225.103622][T25912] ptrace attach of "./syz-executor exec"[25917] was attempted by "./syz-executor exec"[25912] [ 1225.114485][ T6160] pvrusb2: Important functionality might not be entirely working. [ 1225.131058][ T6160] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1225.143625][ T6160] pvrusb2: ********** [ 1225.271649][ T2346] pvrusb2: Invalid write control endpoint [ 1225.366013][ T2346] pvrusb2: Invalid write control endpoint [ 1225.371842][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1225.393337][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1225.403582][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1225.423288][ T2346] pvrusb2: Device being rendered inoperable [ 1225.430896][ T2346] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1225.443357][ T2346] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1225.460005][ T2346] pvrusb2: Attached sub-driver cx25840 [ 1225.466617][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1225.483958][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1225.517641][ T6160] usb 4-1: USB disconnect, device number 120 [ 1226.124725][ T6160] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1226.221757][T25967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17826'. [ 1226.274781][ T6160] usb 5-1: Using ep0 maxpacket: 8 [ 1226.281773][ T6160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.298876][ T6160] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1226.309166][ T6160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.333815][ T6160] usb 5-1: config 0 descriptor?? [ 1226.763008][ T6160] holtek 0003:1241:5015.0092: unknown main item tag 0x0 [ 1226.786728][ T6160] holtek 0003:1241:5015.0092: unknown main item tag 0x0 [ 1226.793792][ T6160] holtek 0003:1241:5015.0092: item fetching failed at offset 2/5 [ 1226.825765][ T6160] holtek 0003:1241:5015.0092: parse failed [ 1226.831733][ T6160] holtek 0003:1241:5015.0092: probe with driver holtek failed with error -22 [ 1226.975206][T12971] usb 5-1: USB disconnect, device number 124 [ 1227.253734][T26008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17839'. [ 1227.289412][T26008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.297735][T26008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.310275][T26008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.319489][T26008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.415116][T26078] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1228.445364][T26078] syzkaller0: linktype set to 768 [ 1229.829993][T26125] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17874'. [ 1230.108131][T26127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17875'. [ 1230.275566][T26131] netlink: 'syz.2.17877': attribute type 10 has an invalid length. [ 1230.283654][T26131] macvlan0: entered allmulticast mode [ 1230.333166][T26131] veth1_vlan: entered allmulticast mode [ 1230.398073][T26131] team0: Port device macvlan0 added [ 1230.604764][ T10] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1230.786453][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1230.824665][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.865052][ T10] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1230.884732][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.906624][ T10] usb 5-1: config 0 descriptor?? [ 1231.165663][T26164] loop8: detected capacity change from 0 to 1 [ 1231.185029][ T8789] Dev loop8: unable to read RDB block 1 [ 1231.190703][ T8789] loop8: unable to read partition table [ 1231.219353][ T8789] loop8: partition table beyond EOD, truncated [ 1231.247436][T26164] Dev loop8: unable to read RDB block 1 [ 1231.267666][T26164] loop8: unable to read partition table [ 1231.289910][T26164] loop8: partition table beyond EOD, truncated [ 1231.305730][T26164] loop_reread_partitions: partition scan of loop8 (x黕>燕 ) failed (rc=-5) [ 1231.340753][ T10] hid-thrustmaster 0003:044F:B65D.0093: unknown main item tag 0x0 [ 1231.392567][ T10] hid-thrustmaster 0003:044F:B65D.0093: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 1231.427582][ T10] hid-thrustmaster 0003:044F:B65D.0093: Wrong number of endpoints? [ 1231.575453][ C0] hid-thrustmaster 0003:044F:B65D.0093: Unknown packet type 0x0, unable to proceed further with wheel init [ 1231.784052][ T6152] usb 5-1: USB disconnect, device number 125 [ 1231.840541][T26214] misc userio: Can't change port type on an already running userio instance [ 1233.120181][T24123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.328369][T24123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.522137][T24123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.607301][T24123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.522082][ T8860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1234.534185][ T8860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1234.544226][ T8860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1234.554061][ T8860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1234.562310][ T8860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1234.690336][T26295] syz.3.17916 (26295): drop_caches: 2 [ 1234.699201][T26295] syz.3.17916 (26295): drop_caches: 2 [ 1234.702076][T26297] syz.3.17916 (26297): drop_caches: 2 [ 1235.238967][T24123] bond1 (unregistering): Released all slaves [ 1235.263102][T24123] bond2 (unregistering): Released all slaves [ 1235.278753][T24123] bond0 (unregistering): (slave bond4): Releasing backup interface [ 1235.288697][T24123] bond0 (unregistering): Released all slaves [ 1235.301970][T24123] bond3 (unregistering): Released all slaves [ 1235.458565][T24123] bond4 (unregistering): Released all slaves [ 1235.584966][T24123] _衂`詟@: left promiscuous mode [ 1235.665229][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1235.829235][T24123] tipc: Disabling bearer [ 1235.853404][T24123] tipc: Disabling bearer [ 1235.858870][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1235.885196][ T10] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1235.894111][T24123] tipc: Left network mode [ 1235.921123][ T10] usb 4-1: config 0 has no interface number 0 [ 1235.936770][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1235.954581][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.966085][ T10] usb 4-1: Product: syz [ 1235.970317][ T10] usb 4-1: Manufacturer: syz [ 1236.002467][ T10] usb 4-1: SerialNumber: syz [ 1236.029402][ T10] usb 4-1: config 0 descriptor?? [ 1236.066996][ T10] asix 4-1:0.251: probe with driver asix failed with error -22 [ 1236.306359][ T6186] usb 4-1: USB disconnect, device number 121 [ 1236.463688][T26300] chnl_net:caif_netlink_parms(): no params data found [ 1236.605321][ T6062] Bluetooth: hci4: command tx timeout [ 1236.923856][T26485] netlink: 428 bytes leftover after parsing attributes in process `syz.1.17926'. [ 1236.970307][T26485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17926'. [ 1237.093183][T26504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17928'. [ 1237.127506][T26504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17928'. [ 1237.226387][T26300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.262599][T26300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.290720][T26300] bridge_slave_0: entered allmulticast mode [ 1237.325447][T26300] bridge_slave_0: entered promiscuous mode [ 1237.336146][T26300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.354659][T26300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.362099][T26300] bridge_slave_1: entered allmulticast mode [ 1237.410784][T26300] bridge_slave_1: entered promiscuous mode [ 1237.457177][T24123] hsr_slave_0: left promiscuous mode [ 1237.477569][T24123] hsr_slave_1: left promiscuous mode [ 1237.500627][T24123] veth0_macvtap: left allmulticast mode [ 1237.508360][T26543] Invalid logical block size (3) [ 1238.531902][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.539064][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.624683][ T6160] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1238.689290][ T6062] Bluetooth: hci4: command tx timeout [ 1238.788429][ T6160] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1238.800643][ T6160] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.812842][ T6160] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1238.822357][ T6160] usb 4-1: config 1 has no interface number 0 [ 1238.828985][ T6160] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1238.842797][ T6160] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1238.860723][ T6160] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.870593][ T6160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.878790][ T6160] usb 4-1: Product: syz [ 1238.880167][T24123] dummy0 (unregistering): left allmulticast mode [ 1238.883317][ T6160] usb 4-1: Manufacturer: syz [ 1238.895449][ T6160] usb 4-1: SerialNumber: syz [ 1239.122408][T26300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.158764][T26300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.327752][T26300] team0: Port device team_slave_0 added [ 1239.362382][ T6160] usb 4-1: USB disconnect, device number 122 [ 1239.373049][T26300] team0: Port device team_slave_1 added [ 1239.506188][T26300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.534667][T26300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.606997][T26300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.640638][T26300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.664729][T26300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.728716][T26300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.944249][T26300] hsr_slave_0: entered promiscuous mode [ 1239.985850][T26300] hsr_slave_1: entered promiscuous mode [ 1240.005619][T26300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1240.030537][T26300] Cannot create hsr debugfs directory [ 1240.764945][ T6062] Bluetooth: hci4: command tx timeout [ 1241.795490][T26300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1241.853292][T26300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1241.929935][T26300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1241.984952][T26300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1242.063185][T26877] vlan5: entered allmulticast mode [ 1242.106950][T26877] veth1: entered allmulticast mode [ 1242.418394][T26300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.511572][T26300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.609653][T21276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.616966][T21276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.813697][T23648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.822009][T23648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.846995][ T6062] Bluetooth: hci4: command tx timeout [ 1243.027377][T26300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1243.179168][T26300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.390011][T26300] veth0_vlan: entered promiscuous mode [ 1243.457436][T26300] veth1_vlan: entered promiscuous mode [ 1243.590081][T26300] veth0_macvtap: entered promiscuous mode [ 1243.623946][T26300] veth1_macvtap: entered promiscuous mode [ 1243.662379][T26300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.728895][T26300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.772006][T26937] tipc: Started in network mode [ 1243.801618][T26937] tipc: Node identity ff, cluster identity 4711 [ 1243.811768][T26937] tipc: Enabling of bearer rejected, failed to enable media [ 1243.870450][T26300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.908070][T26300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.944784][T26300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.981408][T26300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.367550][T23648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.384869][T23648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.518200][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.543837][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.524700][T27004] input: syz0 as /devices/virtual/input/input161 [ 1246.625430][ T6160] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1246.830266][ T6160] usb 2-1: Using ep0 maxpacket: 8 [ 1246.859372][ T6160] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1246.876908][ T6160] usb 2-1: config 179 has no interface number 0 [ 1246.893631][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1246.924726][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1246.957281][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1247.004683][ T6160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1247.046735][ T6160] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1247.098672][ T6160] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1247.124535][ T6160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.160031][T27042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1247.324066][T27070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1247.474358][ T6160] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input162 [ 1247.688697][ T977] usb 2-1: USB disconnect, device number 7 [ 1247.688701][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1247.688751][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1247.756749][ T977] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1248.547735][ T30] audit: type=1326 audit(1749908891.311:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27117 comm="syz.1.18033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f907538e929 code=0x0 [ 1248.827018][ T10] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1249.120867][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1249.129951][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1249.140330][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1249.149626][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1249.161385][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1249.176785][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1249.187070][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1249.203147][ T10] usb 3-1: Product: syz [ 1249.207921][ T10] usb 3-1: Manufacturer: syz [ 1249.254307][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1249.275798][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1249.333329][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1249.340712][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 1249.474028][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1249.480829][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1249.487434][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1249.494082][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1249.501267][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1249.507925][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1249.514766][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1249.521423][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1249.528307][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1249.534962][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1249.541409][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1249.541943][ T6186] usb 3-1: USB disconnect, device number 113 [ 1249.548029][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1249.548050][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1250.607993][ T48] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1250.663173][T27186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18058'. [ 1250.695720][T26907] Set syz1 is full, maxelem 65536 reached [ 1250.767100][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 1250.788369][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.807592][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.833454][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1250.849943][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1250.870656][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.890868][ T48] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1250.903296][ T48] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1250.912233][ T48] usb 5-1: Manufacturer: syz [ 1250.960767][ T48] usb 5-1: config 0 descriptor?? [ 1251.324775][ T48] rc_core: IR keymap rc-hauppauge not found [ 1251.333109][ T48] Registered IR keymap rc-empty [ 1251.354266][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.389726][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.428080][ T48] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1251.461695][ T48] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input163 [ 1251.481022][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.505090][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.533934][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.554783][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.584954][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.614900][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.636201][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.676699][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.697008][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.715006][ T48] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1251.762539][ T48] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1251.788887][ T48] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1251.808787][ T48] usb 5-1: USB disconnect, device number 126 [ 1252.435972][T27278] binder: 27276:27278 ioctl c0306201 0 returned -14 [ 1252.639730][T27292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.894819][ T48] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1253.054622][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 1253.072179][ T48] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 1253.094916][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.121177][ T48] usb 2-1: config 0 has no interface number 0 [ 1253.137759][ T48] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1253.153387][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.162143][ T48] usb 2-1: Product: syz [ 1253.167712][ T48] usb 2-1: Manufacturer: syz [ 1253.172523][ T48] usb 2-1: SerialNumber: syz [ 1253.188608][ T48] usb 2-1: config 0 descriptor?? [ 1253.364790][ T6186] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1253.402887][ T48] usb 2-1: Found UVC 0.00 device syz (0408:4034) [ 1253.409684][ T48] usb 2-1: No valid video chain found. [ 1253.534836][ T6186] usb 3-1: Using ep0 maxpacket: 32 [ 1253.548461][ T6186] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 1253.557355][ T6186] usb 3-1: config 0 has no interface number 0 [ 1253.563553][ T6186] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1253.575219][ T6186] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1253.586194][ T6186] usb 3-1: config 0 interface 126 has no altsetting 0 [ 1253.597180][ T6186] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1253.612505][ T6186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.626357][ T48] usb 2-1: USB disconnect, device number 8 [ 1253.645295][ T6186] usb 3-1: Product: syz [ 1253.649550][ T6186] usb 3-1: Manufacturer: syz [ 1253.674558][ T6186] usb 3-1: SerialNumber: syz [ 1253.683380][ T6186] usb 3-1: config 0 descriptor?? [ 1253.693519][T27319] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1253.702019][T27319] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1253.744871][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1253.904592][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1253.912470][ T10] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 1253.921620][ T10] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 1253.930601][ T10] usb 5-1: config 166 has no interface number 0 [ 1253.940029][ T10] usb 5-1: config 166 has no interface number 1 [ 1253.947360][ T10] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1253.962539][ T10] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1253.986378][ T10] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1254.008501][ T10] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1254.024398][ T10] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1254.042187][ T10] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1254.065787][ T10] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1254.081852][ T10] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1254.093860][ T10] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1254.117678][ T10] usb 5-1: config 166 interface 177 has no altsetting 0 [ 1254.129644][ T10] usb 5-1: config 166 interface 34 has no altsetting 0 [ 1254.141915][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1254.156783][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.168006][ T10] usb 5-1: Product: syz [ 1254.172231][ T10] usb 5-1: Manufacturer: syz [ 1254.186780][ T6186] ir_usb 3-1:0.126: IR Dongle converter detected [ 1254.195631][ T10] usb 5-1: SerialNumber: syz [ 1254.294747][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18108'. [ 1254.328123][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18108'. [ 1254.405158][ T6186] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 1254.442358][ T10] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 1254.540620][T27371] netem: change failed [ 1254.639297][ T48] usb 3-1: USB disconnect, device number 114 [ 1254.679470][ T48] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1254.688505][ T10] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 1254.695496][ T48] ir_usb 3-1:0.126: device disconnected [ 1254.913381][ T10] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 1255.000546][T27401] openvswitch: netlink: IP tunnel dst address not specified [ 1255.069841][ T10] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 1255.083456][ T10] usb 5-1: No valid video chain found. [ 1255.106860][ T10] usb 5-1: USB disconnect, device number 127 [ 1255.364560][ T48] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1255.418913][T27430] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.18125'. [ 1255.534875][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 1255.545974][ T48] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1255.564748][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.596591][ T48] usb 4-1: config 0 descriptor?? [ 1255.615078][ T48] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1255.656429][T27439] C: entered promiscuous mode [ 1255.661256][T27439] team_slave_1: entered promiscuous mode [ 1256.044121][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18133'. [ 1256.455057][ T48] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1256.515024][ T48] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1256.536080][ T48] usb 4-1: USB disconnect, device number 123 [ 1256.900111][T27497] netlink: 'syz.4.18148': attribute type 9 has an invalid length. [ 1256.909553][T27497] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.18148'. [ 1257.639075][ T30] audit: type=1326 audit(1749908900.401:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27526 comm="syz.1.18162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f907538e929 code=0x0 [ 1257.861529][T27531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18164'. [ 1258.597755][T27550] netlink: 88 bytes leftover after parsing attributes in process `syz.3.18171'. [ 1258.635066][T27550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18171'. [ 1259.000467][T27558] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1259.317235][ T30] audit: type=1800 audit(1749908902.081:6566): pid=27575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18181" name="dmabuf" dev="dmabuf" ino=13 res=0 errno=0 [ 1259.413061][T27578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18182'. [ 1259.874958][ T977] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1260.035251][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 1260.052130][ T977] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1260.065845][ T977] usb 5-1: config 0 has no interface number 0 [ 1260.078183][ T977] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1260.085641][T27618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18194'. [ 1260.090139][ T977] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1260.111130][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.120021][ T977] usb 5-1: Product: syz [ 1260.124327][ T977] usb 5-1: Manufacturer: syz [ 1260.151286][ T977] usb 5-1: SerialNumber: syz [ 1260.159858][ T977] usb 5-1: config 0 descriptor?? [ 1260.234582][ T48] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1260.383651][ T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1260.403359][ T48] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1260.417617][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.440165][ T48] usb 3-1: config 0 descriptor?? [ 1260.456272][ T48] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1260.666575][ T977] usb 5-1: invalid MIDI in EP 0 [ 1260.748112][ T977] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1260.788520][ T977] usb 5-1: USB disconnect, device number 2 [ 1260.885796][ T8768] udevd[8768]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1261.059140][ T48] gspca_cpia1: usb_control_msg 01, error -71 [ 1261.070524][ T48] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1261.094980][ T48] usb 3-1: USB disconnect, device number 115 [ 1263.155200][ T977] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1263.331438][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 1263.353591][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1263.365876][ T977] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1263.385465][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.405436][ T977] usb 3-1: config 0 descriptor?? [ 1263.707484][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1263.866633][ T977] corsair-cpro 0003:1B1C:0C10.0094: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1263.910474][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1263.920924][ T10] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 1263.931056][ T10] usb 4-1: config 6 has no interface number 0 [ 1263.939790][ T10] usb 4-1: config 6 interface 200 has no altsetting 0 [ 1263.954403][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1263.968190][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.993535][ T10] usb 4-1: Product: syz [ 1263.998267][ T10] usb 4-1: Manufacturer: syz [ 1264.009604][ T10] usb 4-1: SerialNumber: syz [ 1264.250547][ T977] corsair-cpro 0003:1B1C:0C10.0094: probe with driver corsair-cpro failed with error -71 [ 1264.313826][ T977] usb 3-1: USB disconnect, device number 116 [ 1264.441581][ T10] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1264.643995][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1264.662172][ T10] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1264.672548][ T10] usb 4-1: media controller created [ 1264.719631][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1264.724820][ T6152] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1264.743967][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18243'. [ 1264.841750][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 1264.864107][ T10] dvb-usb: bulk message failed: -71 (6/0) [ 1264.884919][ T10] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1264.896492][ T6152] usb 2-1: config 0 has an invalid interface number: 202 but max is 0 [ 1264.922463][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input164 [ 1264.922928][ T6152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.960107][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1264.980900][ T6152] usb 2-1: config 0 has no interface number 0 [ 1264.990970][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1265.009422][ T6152] usb 2-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1265.031664][ T10] usb 4-1: USB disconnect, device number 124 [ 1265.069233][ T6152] usb 2-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1265.130637][ T6152] usb 2-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 1265.150098][ T6152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.182640][ T6152] usb 2-1: Product: syz [ 1265.194505][ T6152] usb 2-1: Manufacturer: syz [ 1265.204772][ T6152] usb 2-1: SerialNumber: syz [ 1265.226837][ T6152] usb 2-1: config 0 descriptor?? [ 1265.240278][ T6152] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 1265.279681][ T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1265.284368][T27866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1265.296498][ T6152] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1265.302657][ T6152] dvb-usb: bulk message failed: -22 (2/0) [ 1265.357315][ T6152] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1265.430431][ T6152] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 1265.557024][ T10] usb 2-1: USB disconnect, device number 9 [ 1265.584962][ T977] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1265.750536][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.782716][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.803214][ T977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1265.820469][ T977] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 1265.841404][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.860843][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18257'. [ 1265.861073][ T977] usb 3-1: config 0 descriptor?? [ 1266.338081][ T977] thrustmaster 0003:044F:B65A.0095: nested delimiters [ 1266.354627][ T977] thrustmaster 0003:044F:B65A.0095: item 0 2 2 10 parsing failed [ 1266.382151][ T977] thrustmaster 0003:044F:B65A.0095: parse failed [ 1266.404623][ T977] thrustmaster 0003:044F:B65A.0095: probe with driver thrustmaster failed with error -22 [ 1266.484808][ T6160] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1266.576606][ T977] usb 3-1: USB disconnect, device number 117 [ 1266.687522][ T6160] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.709414][ T6160] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1266.736189][ T6160] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1266.750222][ T6160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1266.773245][ T6160] usb 2-1: SerialNumber: syz [ 1267.026608][ T6160] usb 2-1: 0:2 : does not exist [ 1267.111030][ T6160] usb 2-1: USB disconnect, device number 10 [ 1267.202923][ T8789] udevd[8789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1268.140447][T28022] bridge0: entered promiscuous mode [ 1268.244902][T28022] macvlan2: entered promiscuous mode [ 1268.616744][T12971] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1268.816486][T12971] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1268.834652][T12971] usb 4-1: config 0 has no interface number 0 [ 1268.858497][T12971] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1268.897139][T12971] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1268.919617][T12971] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1268.927512][T12971] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1268.938060][T12971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.953016][T12971] usb 4-1: config 0 descriptor?? [ 1268.983698][T12971] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 1269.181111][T12971] usb 4-1: USB disconnect, device number 125 [ 1269.247370][ T6152] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1269.424931][ T6152] usb 5-1: Using ep0 maxpacket: 32 [ 1269.437470][ T6152] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1269.446439][ T6152] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1269.455316][ T6152] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1269.465319][ T6152] usb 5-1: config 1 has no interface number 0 [ 1269.471532][ T6152] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1269.482679][ T6152] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1269.496023][ T6152] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1269.505304][ T6152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.523668][ T6152] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1269.727924][ T6152] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1270.152680][T12971] usb 5-1: USB disconnect, device number 3 [ 1270.173225][T12971] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1270.231642][T28164] netlink: 'syz.1.18309': attribute type 12 has an invalid length. [ 1270.241041][T28164] netlink: 'syz.1.18309': attribute type 29 has an invalid length. [ 1270.249293][ T6152] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1270.259762][T28164] netlink: 148 bytes leftover after parsing attributes in process `syz.1.18309'. [ 1270.271800][T28164] netlink: 59 bytes leftover after parsing attributes in process `syz.1.18309'. [ 1270.394189][T28169] input: syz1 as /devices/virtual/input/input165 [ 1270.424697][ T6152] usb 3-1: Using ep0 maxpacket: 8 [ 1270.451749][ T6152] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.468231][ T6152] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1270.491089][ T6152] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.504648][ T6152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.518747][ T6152] usb 3-1: Product: syz [ 1270.533233][ T6152] usb 3-1: Manufacturer: syz [ 1270.543353][ T6152] usb 3-1: SerialNumber: syz [ 1270.727050][ T30] audit: type=1326 audit(1749908913.481:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28180 comm="syz.1.18313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f907538e929 code=0x0 [ 1270.795773][ T6152] cdc_ncm 3-1:1.0: bind() failure [ 1270.818027][ T6152] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1270.829108][ T6152] cdc_ncm 3-1:1.1: bind() failure [ 1270.850827][ T6152] usb 3-1: USB disconnect, device number 118 [ 1271.074917][ T10] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1271.237326][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1271.245640][ T10] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 1271.262930][ T10] usb 4-1: config 0 has no interface number 0 [ 1271.269439][ T10] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1271.286126][ T10] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1271.314831][ T10] usb 4-1: config 0 interface 126 has no altsetting 0 [ 1271.337663][ T10] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1271.354787][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.362901][ T10] usb 4-1: Product: syz [ 1271.386045][ T10] usb 4-1: Manufacturer: syz [ 1271.390729][ T10] usb 4-1: SerialNumber: syz [ 1271.410098][ T10] usb 4-1: config 0 descriptor?? [ 1271.427592][T28191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1271.442608][T28191] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1271.769065][ T30] audit: type=1800 audit(1749908914.531:6568): pid=28234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18328" name="nullb0" dev="devtmpfs" ino=6940 res=0 errno=0 [ 1271.818458][T28238] program syz.1.18326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1271.873418][ T10] ir_usb 4-1:0.126: IR Dongle converter detected [ 1271.880284][T28240] program syz.1.18326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.077363][ T10] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 1272.303573][ T10] usb 4-1: USB disconnect, device number 126 [ 1272.339816][ T10] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1272.366861][ T10] ir_usb 4-1:0.126: device disconnected [ 1272.883833][T28314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18343'. [ 1273.501640][T28331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18351'. [ 1274.214788][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1274.376898][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1274.409719][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1274.422378][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1274.445133][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.453213][ T10] usb 2-1: Product: syz [ 1274.481027][ T10] usb 2-1: Manufacturer: syz [ 1274.486366][ T10] usb 2-1: SerialNumber: syz [ 1274.506022][ T10] usb 2-1: config 0 descriptor?? [ 1274.928434][ T10] gs_usb 2-1:0.0: Configuring for 98 interfaces [ 1274.941619][ T10] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1274.959237][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 1275.140474][ T10] usb 2-1: USB disconnect, device number 11 [ 1275.215246][T28400] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18373'. [ 1275.236809][T28400] netlink: 'syz.0.18373': attribute type 6 has an invalid length. [ 1275.254582][T28400] netlink: 'syz.0.18373': attribute type 5 has an invalid length. [ 1275.262536][T28400] netlink: 'syz.0.18373': attribute type 4 has an invalid length. [ 1275.722515][T28412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18378'. [ 1275.773625][T28414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18379'. [ 1276.020473][T28420] netlink: 79 bytes leftover after parsing attributes in process `syz.1.18382'. [ 1276.420351][T28452] netlink: 'syz.4.18391': attribute type 1 has an invalid length. [ 1276.457102][ T8860] Bluetooth: hci2: command 0x0406 tx timeout [ 1276.473328][T28461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18392'. [ 1276.484536][ T977] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1276.516874][T28461] netlink: 'syz.3.18392': attribute type 21 has an invalid length. [ 1276.657211][ T977] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1276.675158][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.694147][ T977] usb 3-1: config 0 descriptor?? [ 1276.728206][ T977] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1276.936696][ T977] gspca_spca508: reg_read err -32 [ 1276.954375][ T977] gspca_spca508: reg_read err -32 [ 1277.166318][ T977] gspca_spca508: reg_read err -71 [ 1277.192932][ T977] gspca_spca508: reg_read err -71 [ 1277.210722][ T977] gspca_spca508: reg write: error -71 [ 1277.225272][ T977] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 1277.249060][ T977] usb 3-1: USB disconnect, device number 119 [ 1279.407158][ T5821] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1279.414680][T28613] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1279.701114][ T6152] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1279.860563][ T6152] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1279.912630][ T6152] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1279.949242][ T6152] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1279.966646][ T6152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.987878][T28617] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1280.013238][ T6152] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1280.270293][T28617] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1280.276908][T28617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1280.291083][T28617] vhci_hcd vhci_hcd.0: Device attached [ 1280.310435][T28673] vhci_hcd: connection closed [ 1280.313032][ T13] vhci_hcd: stop threads [ 1280.320705][ T6160] usb 3-1: USB disconnect, device number 120 [ 1280.328976][ T6186] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1280.335346][ T13] vhci_hcd: release socket [ 1280.341135][ T13] vhci_hcd: disconnect device [ 1280.514699][ T6186] usb 4-1: Using ep0 maxpacket: 8 [ 1280.526915][ T6186] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1280.544503][ T6186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.552585][ T6186] usb 4-1: Product: syz [ 1280.575824][ T6186] usb 4-1: Manufacturer: syz [ 1280.580537][ T6186] usb 4-1: SerialNumber: syz [ 1280.602757][ T6186] usb 4-1: config 0 descriptor?? [ 1280.616666][ T6186] gspca_main: se401-2.14.0 probing 047d:5003 [ 1281.190171][ T6186] usb 4-1: reset high-speed USB device number 127 using dummy_hcd [ 1281.790195][ T6186] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1281.798759][ T6186] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 1281.823075][ T6186] usb 4-1: USB disconnect, device number 127 [ 1281.959675][ T30] audit: type=1326 audit(1749908924.721:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28747 comm="syz.1.18471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f907538e929 code=0x0 [ 1282.373182][T28770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18480'. [ 1282.394372][T28770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18480'. [ 1282.785706][T28785] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18487'. [ 1282.810912][T28785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18487'. [ 1282.910754][ T30] audit: type=1800 audit(1749908925.671:6570): pid=28792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18489" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1283.944951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1283.955071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1283.963394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1283.972273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1284.338824][T28864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18518'. [ 1284.732001][T28882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18525'. [ 1284.919959][T28891] netlink: 'syz.0.18530': attribute type 49 has an invalid length. [ 1285.334375][T28914] netlink: 'syz.3.18541': attribute type 58 has an invalid length. [ 1285.347054][T28914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18541'. [ 1285.640025][T28931] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1285.728261][T28933] sch_fq: defrate 0 ignored. [ 1286.301835][T28969] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 1287.146013][T29001] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1287.584602][T29017] Invalid logical block size (3) [ 1289.268084][T29108] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1289.384311][T29116] trusted_key: syz.4.18612 sent an empty control message without MSG_MORE. [ 1289.625574][T29128] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.18618'. [ 1290.119120][T29157] input: syz0 as /devices/virtual/input/input166 [ 1290.175065][ T6160] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1290.356848][ T6160] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1290.372330][ T6160] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1290.388293][ T6160] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1290.404607][ T6160] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1290.416560][ T6160] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1290.440274][ T6160] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1290.450383][ T6160] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1290.459490][ T6160] usb 2-1: Product: syz [ 1290.465053][ T6160] usb 2-1: Manufacturer: syz [ 1290.491426][ T6160] cdc_wdm 2-1:1.0: skipping garbage [ 1290.497865][ T6160] cdc_wdm 2-1:1.0: skipping garbage [ 1290.509431][ T6160] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1290.516111][ T6160] cdc_wdm 2-1:1.0: Unknown control protocol [ 1290.674555][ T48] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1290.696937][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1290.703651][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1290.710310][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1290.716725][ T977] usb 2-1: USB disconnect, device number 12 [ 1290.716978][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1290.729059][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1290.859444][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1290.884144][ T48] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1290.895143][ T48] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1290.915748][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1290.936215][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.949398][ T48] usb 5-1: Product: syz [ 1290.953659][ T48] usb 5-1: Manufacturer: syz [ 1290.958528][ T48] usb 5-1: SerialNumber: syz [ 1291.141464][T29223] vivid-001: disconnect [ 1291.153069][T29223] vivid-001: reconnect [ 1291.190923][ T48] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1291.214582][ T977] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1291.266509][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1291.387361][ T977] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1291.399818][ T48] usb 5-1: USB disconnect, device number 4 [ 1291.408339][ T48] usblp0: removed [ 1291.454548][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1291.474962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1291.486672][ T30] audit: type=1326 audit(1749908934.251:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1291.513980][ T977] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1291.536636][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1291.555767][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1291.565524][ T10] usb 3-1: config 0 has no interface number 0 [ 1291.575799][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1291.594583][ T30] audit: type=1326 audit(1749908934.271:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f35abf2ab19 code=0x7ffc0000 [ 1291.623110][ T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1291.634308][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.653890][ T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1291.665247][ T10] usb 3-1: Product: syz [ 1291.670243][ T10] usb 3-1: Manufacturer: syz [ 1291.675880][ T10] usb 3-1: SerialNumber: syz [ 1291.681831][ T30] audit: type=1326 audit(1749908934.271:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1291.709719][ T10] usb 3-1: config 0 descriptor?? [ 1291.716154][ T977] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1291.727025][ T977] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1291.738252][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1291.748130][ T977] usb 2-1: Product: syz [ 1291.752356][ T977] usb 2-1: Manufacturer: syz [ 1291.774546][ T30] audit: type=1326 audit(1749908934.271:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f35abf2ab19 code=0x7ffc0000 [ 1291.789688][ T977] cdc_wdm 2-1:1.0: skipping garbage [ 1291.819104][ T977] cdc_wdm 2-1:1.0: skipping garbage [ 1291.834700][ T30] audit: type=1326 audit(1749908934.271:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1291.868394][ T977] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1291.893561][ T30] audit: type=1326 audit(1749908934.271:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1291.895492][ T977] cdc_wdm 2-1:1.0: Unknown control protocol [ 1291.975235][ T30] audit: type=1326 audit(1749908934.271:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1292.005820][ T30] audit: type=1326 audit(1749908934.271:6578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1292.028477][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.034851][ T30] audit: type=1326 audit(1749908934.271:6579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1292.057584][ T30] audit: type=1326 audit(1749908934.271:6580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29235 comm="syz.0.18647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abf8e929 code=0x7ffc0000 [ 1292.080110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.083174][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1292.102029][ T977] usb 2-1: USB disconnect, device number 13 [ 1292.175523][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1292.426111][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1292.627907][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1292.629558][ T48] usb 3-1: USB disconnect, device number 121 [ 1292.678696][ T48] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1292.741557][ T48] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1292.795684][ T48] quatech2 3-1:0.51: device disconnected [ 1293.479241][T29344] [ 1293.481669][T29344] ===================================================== [ 1293.488644][T29344] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1293.496158][T29344] 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 Not tainted [ 1293.503302][T29344] ----------------------------------------------------- [ 1293.510249][T29344] syz.2.18662/29344 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1293.518078][T29344] ffff88805669a558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1293.526835][T29344] [ 1293.526835][T29344] and this task is already holding: [ 1293.534215][T29344] ffff888028ee0028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1293.544005][T29344] which would create a new lock dependency: [ 1293.549909][T29344] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1293.558044][T29344] [ 1293.558044][T29344] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1293.567556][T29344] (&dev->event_lock#2){..-.}-{3:3} [ 1293.567604][T29344] [ 1293.567604][T29344] ... which became SOFTIRQ-irq-safe at: [ 1293.580535][T29344] lock_acquire+0x120/0x360 [ 1293.585157][T29344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1293.590461][T29344] input_inject_event+0xab/0x320 [ 1293.595561][T29344] led_trigger_event+0x138/0x210 [ 1293.600607][T29344] kbd_bh+0x1c6/0x2e0 [ 1293.604699][T29344] tasklet_action_common+0x36c/0x580 [ 1293.610084][T29344] handle_softirqs+0x286/0x870 [ 1293.614955][T29344] run_ksoftirqd+0x9b/0x100 [ 1293.619560][T29344] smpboot_thread_fn+0x53f/0xa60 [ 1293.624611][T29344] kthread+0x70e/0x8a0 [ 1293.628784][T29344] ret_from_fork+0x3fc/0x770 [ 1293.633484][T29344] ret_from_fork_asm+0x1a/0x30 [ 1293.638349][T29344] [ 1293.638349][T29344] to a SOFTIRQ-irq-unsafe lock: [ 1293.645509][T29344] (tasklist_lock){.+.+}-{3:3} [ 1293.645546][T29344] [ 1293.645546][T29344] ... which became SOFTIRQ-irq-unsafe at: [ 1293.658208][T29344] ... [ 1293.658221][T29344] lock_acquire+0x120/0x360 [ 1293.665470][T29344] _raw_read_lock+0x36/0x50 [ 1293.670094][T29344] __do_wait+0xde/0x740 [ 1293.674363][T29344] do_wait+0x1f8/0x520 [ 1293.678555][T29344] kernel_wait+0xab/0x170 [ 1293.682994][T29344] call_usermodehelper_exec_work+0xbe/0x230 [ 1293.689003][T29344] process_scheduled_works+0xae1/0x17b0 [ 1293.694666][T29344] worker_thread+0x8a0/0xda0 [ 1293.699355][T29344] kthread+0x70e/0x8a0 [ 1293.703527][T29344] ret_from_fork+0x3fc/0x770 [ 1293.708229][T29344] ret_from_fork_asm+0x1a/0x30 [ 1293.713107][T29344] [ 1293.713107][T29344] other info that might help us debug this: [ 1293.713107][T29344] [ 1293.723358][T29344] Chain exists of: [ 1293.723358][T29344] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1293.723358][T29344] [ 1293.736975][T29344] Possible interrupt unsafe locking scenario: [ 1293.736975][T29344] [ 1293.745332][T29344] CPU0 CPU1 [ 1293.750724][T29344] ---- ---- [ 1293.756119][T29344] lock(tasklist_lock); [ 1293.760400][T29344] local_irq_disable(); [ 1293.767174][T29344] lock(&dev->event_lock#2); [ 1293.774404][T29344] lock(&client->buffer_lock); [ 1293.781812][T29344] [ 1293.785278][T29344] lock(&dev->event_lock#2); [ 1293.790161][T29344] [ 1293.790161][T29344] *** DEADLOCK *** [ 1293.790161][T29344] [ 1293.798320][T29344] 7 locks held by syz.2.18662/29344: [ 1293.803616][T29344] #0: ffff888029c2e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1293.812801][T29344] #1: ffff888029b1e230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1293.823156][T29344] #2: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1293.832887][T29344] #3: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1293.842513][T29344] #4: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1293.851692][T29344] #5: ffff888028ee0028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1293.861953][T29344] #6: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1293.871095][T29344] [ 1293.871095][T29344] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1293.881524][T29344] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1293.887214][T29344] IN-SOFTIRQ-W at: [ 1293.891297][T29344] lock_acquire+0x120/0x360 [ 1293.897659][T29344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1293.904712][T29344] input_inject_event+0xab/0x320 [ 1293.911506][T29344] led_trigger_event+0x138/0x210 [ 1293.918301][T29344] kbd_bh+0x1c6/0x2e0 [ 1293.924155][T29344] tasklet_action_common+0x36c/0x580 [ 1293.931304][T29344] handle_softirqs+0x286/0x870 [ 1293.937936][T29344] run_ksoftirqd+0x9b/0x100 [ 1293.944297][T29344] smpboot_thread_fn+0x53f/0xa60 [ 1293.951096][T29344] kthread+0x70e/0x8a0 [ 1293.957015][T29344] ret_from_fork+0x3fc/0x770 [ 1293.963458][T29344] ret_from_fork_asm+0x1a/0x30 [ 1293.970069][T29344] INITIAL USE at: [ 1293.974103][T29344] lock_acquire+0x120/0x360 [ 1293.980378][T29344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1293.987345][T29344] input_inject_event+0xab/0x320 [ 1293.994053][T29344] kbd_led_trigger_activate+0xbc/0x100 [ 1294.001287][T29344] led_trigger_set+0x52a/0x950 [ 1294.007820][T29344] led_trigger_set_default+0x260/0x2a0 [ 1294.015045][T29344] led_classdev_register_ext+0x73d/0x930 [ 1294.022446][T29344] input_leds_connect+0x517/0x790 [ 1294.029234][T29344] input_register_device+0xceb/0x10b0 [ 1294.036363][T29344] atkbd_connect+0x70e/0x9c0 [ 1294.042723][T29344] serio_driver_probe+0x82/0xa0 [ 1294.049334][T29344] really_probe+0x26a/0x9a0 [ 1294.055598][T29344] __driver_probe_device+0x18c/0x2f0 [ 1294.062649][T29344] driver_probe_device+0x4f/0x430 [ 1294.069436][T29344] __driver_attach+0x452/0x700 [ 1294.076050][T29344] bus_for_each_dev+0x230/0x2b0 [ 1294.082671][T29344] serio_handle_event+0x1a2/0x860 [ 1294.089469][T29344] process_scheduled_works+0xae1/0x17b0 [ 1294.096779][T29344] worker_thread+0x8a0/0xda0 [ 1294.103128][T29344] kthread+0x70e/0x8a0 [ 1294.108956][T29344] ret_from_fork+0x3fc/0x770 [ 1294.115310][T29344] ret_from_fork_asm+0x1a/0x30 [ 1294.121843][T29344] } [ 1294.124454][T29344] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1294.133703][T29344] -> (&client->buffer_lock){....}-{3:3} { [ 1294.139485][T29344] INITIAL USE at: [ 1294.143403][T29344] lock_acquire+0x120/0x360 [ 1294.149514][T29344] _raw_spin_lock+0x2e/0x40 [ 1294.155697][T29344] evdev_handle_get_val+0x70/0x9f0 [ 1294.162394][T29344] evdev_ioctl_handler+0x1202/0x1f10 [ 1294.169347][T29344] __se_sys_ioctl+0xf9/0x170 [ 1294.175526][T29344] do_syscall_64+0xfa/0x3b0 [ 1294.181722][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.189196][T29344] } [ 1294.191703][T29344] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1294.199895][T29344] ... acquired at: [ 1294.203712][T29344] lock_acquire+0x120/0x360 [ 1294.208698][T29344] _raw_spin_lock+0x2e/0x40 [ 1294.213400][T29344] evdev_handle_get_val+0x70/0x9f0 [ 1294.218725][T29344] evdev_ioctl_handler+0x1202/0x1f10 [ 1294.224234][T29344] __se_sys_ioctl+0xf9/0x170 [ 1294.229035][T29344] do_syscall_64+0xfa/0x3b0 [ 1294.233739][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.239849][T29344] [ 1294.242192][T29344] [ 1294.242192][T29344] the dependencies between the lock to be acquired [ 1294.242204][T29344] and SOFTIRQ-irq-unsafe lock: [ 1294.255756][T29344] -> (tasklist_lock){.+.+}-{3:3} { [ 1294.261090][T29344] HARDIRQ-ON-R at: [ 1294.265287][T29344] lock_acquire+0x120/0x360 [ 1294.271838][T29344] _raw_read_lock+0x36/0x50 [ 1294.278378][T29344] __do_wait+0xde/0x740 [ 1294.284552][T29344] do_wait+0x1f8/0x520 [ 1294.290641][T29344] kernel_wait+0xab/0x170 [ 1294.297018][T29344] call_usermodehelper_exec_work+0xbe/0x230 [ 1294.304977][T29344] process_scheduled_works+0xae1/0x17b0 [ 1294.312550][T29344] worker_thread+0x8a0/0xda0 [ 1294.319157][T29344] kthread+0x70e/0x8a0 [ 1294.325244][T29344] ret_from_fork+0x3fc/0x770 [ 1294.331864][T29344] ret_from_fork_asm+0x1a/0x30 [ 1294.338675][T29344] SOFTIRQ-ON-R at: [ 1294.342860][T29344] lock_acquire+0x120/0x360 [ 1294.349394][T29344] _raw_read_lock+0x36/0x50 [ 1294.355954][T29344] __do_wait+0xde/0x740 [ 1294.362132][T29344] do_wait+0x1f8/0x520 [ 1294.368226][T29344] kernel_wait+0xab/0x170 [ 1294.374579][T29344] call_usermodehelper_exec_work+0xbe/0x230 [ 1294.382498][T29344] process_scheduled_works+0xae1/0x17b0 [ 1294.390071][T29344] worker_thread+0x8a0/0xda0 [ 1294.396718][T29344] kthread+0x70e/0x8a0 [ 1294.402810][T29344] ret_from_fork+0x3fc/0x770 [ 1294.409430][T29344] ret_from_fork_asm+0x1a/0x30 [ 1294.416215][T29344] INITIAL USE at: [ 1294.420304][T29344] lock_acquire+0x120/0x360 [ 1294.426744][T29344] _raw_write_lock_irq+0xa2/0xf0 [ 1294.433619][T29344] copy_process+0x224f/0x3c00 [ 1294.440230][T29344] kernel_clone+0x21e/0x870 [ 1294.446669][T29344] user_mode_thread+0xdd/0x140 [ 1294.453365][T29344] rest_init+0x23/0x300 [ 1294.459454][T29344] start_kernel+0x47d/0x500 [ 1294.465891][T29344] x86_64_start_reservations+0x24/0x30 [ 1294.473287][T29344] x86_64_start_kernel+0x143/0x1c0 [ 1294.480332][T29344] common_startup_64+0x13e/0x147 [ 1294.487223][T29344] INITIAL READ USE at: [ 1294.491752][T29344] lock_acquire+0x120/0x360 [ 1294.498633][T29344] _raw_read_lock+0x36/0x50 [ 1294.505511][T29344] __do_wait+0xde/0x740 [ 1294.512040][T29344] do_wait+0x1f8/0x520 [ 1294.518488][T29344] kernel_wait+0xab/0x170 [ 1294.525187][T29344] call_usermodehelper_exec_work+0xbe/0x230 [ 1294.533457][T29344] process_scheduled_works+0xae1/0x17b0 [ 1294.541394][T29344] worker_thread+0x8a0/0xda0 [ 1294.548352][T29344] kthread+0x70e/0x8a0 [ 1294.554793][T29344] ret_from_fork+0x3fc/0x770 [ 1294.561761][T29344] ret_from_fork_asm+0x1a/0x30 [ 1294.568961][T29344] } [ 1294.571666][T29344] ... key at: [] tasklist_lock+0x18/0x40 [ 1294.579599][T29344] ... acquired at: [ 1294.583593][T29344] lock_acquire+0x120/0x360 [ 1294.588295][T29344] _raw_read_lock+0x36/0x50 [ 1294.593004][T29344] send_sigio+0x101/0x370 [ 1294.597531][T29344] kill_fasync+0x24d/0x4d0 [ 1294.602151][T29344] lease_break_callback+0x26/0x30 [ 1294.607376][T29344] __break_lease+0x6a2/0x1620 [ 1294.612265][T29344] do_dentry_open+0xd62/0x1970 [ 1294.617228][T29344] vfs_open+0x3b/0x340 [ 1294.621492][T29344] path_openat+0x2ee5/0x3830 [ 1294.626283][T29344] do_filp_open+0x1fa/0x410 [ 1294.630992][T29344] do_sys_openat2+0x121/0x1c0 [ 1294.635866][T29344] __x64_sys_open+0x11e/0x150 [ 1294.640737][T29344] do_syscall_64+0xfa/0x3b0 [ 1294.645432][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.651533][T29344] [ 1294.653874][T29344] -> (&f_owner->lock){....}-{3:3} { [ 1294.659211][T29344] INITIAL USE at: [ 1294.663215][T29344] lock_acquire+0x120/0x360 [ 1294.669492][T29344] _raw_write_lock_irq+0xa2/0xf0 [ 1294.676199][T29344] __f_setown+0x67/0x370 [ 1294.682204][T29344] do_fcntl+0x15ff/0x1910 [ 1294.688295][T29344] __se_sys_fcntl+0xc8/0x150 [ 1294.694652][T29344] do_syscall_64+0xfa/0x3b0 [ 1294.700915][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.708578][T29344] INITIAL READ USE at: [ 1294.713019][T29344] lock_acquire+0x120/0x360 [ 1294.719724][T29344] _raw_read_lock_irqsave+0xaf/0x100 [ 1294.727236][T29344] send_sigurg+0x55/0x420 [ 1294.733776][T29344] sk_send_sigurg+0x6c/0x2e0 [ 1294.740595][T29344] queue_oob+0x490/0x5a0 [ 1294.747047][T29344] unix_stream_sendmsg+0xaf9/0xc90 [ 1294.754359][T29344] __sock_sendmsg+0x21c/0x270 [ 1294.761255][T29344] ____sys_sendmsg+0x52d/0x830 [ 1294.768220][T29344] ___sys_sendmsg+0x21f/0x2a0 [ 1294.775101][T29344] __sys_sendmmsg+0x227/0x430 [ 1294.782065][T29344] __x64_sys_sendmmsg+0xa0/0xc0 [ 1294.789161][T29344] do_syscall_64+0xfa/0x3b0 [ 1294.795855][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.803949][T29344] } [ 1294.806551][T29344] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1294.815516][T29344] ... acquired at: [ 1294.819419][T29344] lock_acquire+0x120/0x360 [ 1294.824128][T29344] _raw_read_lock_irqsave+0xaf/0x100 [ 1294.829615][T29344] send_sigio+0x38/0x370 [ 1294.834060][T29344] kill_fasync+0x24d/0x4d0 [ 1294.838674][T29344] lease_break_callback+0x26/0x30 [ 1294.843901][T29344] __break_lease+0x6a2/0x1620 [ 1294.848783][T29344] vfs_truncate+0x428/0x520 [ 1294.853486][T29344] do_sys_truncate+0xdb/0x190 [ 1294.858361][T29344] __x64_sys_truncate+0x5b/0x70 [ 1294.863422][T29344] do_syscall_64+0xfa/0x3b0 [ 1294.868118][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.874211][T29344] [ 1294.876558][T29344] -> (&new->fa_lock){....}-{3:3} { [ 1294.881728][T29344] INITIAL USE at: [ 1294.885649][T29344] lock_acquire+0x120/0x360 [ 1294.891744][T29344] _raw_write_lock_irq+0xa2/0xf0 [ 1294.898283][T29344] fasync_remove_entry+0xf1/0x1c0 [ 1294.904896][T29344] __fput+0x89f/0xa70 [ 1294.910480][T29344] task_work_run+0x1d1/0x260 [ 1294.916676][T29344] exit_to_user_mode_loop+0xec/0x110 [ 1294.923562][T29344] do_syscall_64+0x2bd/0x3b0 [ 1294.929736][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.937216][T29344] INITIAL READ USE at: [ 1294.941568][T29344] lock_acquire+0x120/0x360 [ 1294.948098][T29344] _raw_read_lock_irqsave+0xaf/0x100 [ 1294.955414][T29344] kill_fasync+0x199/0x4d0 [ 1294.961861][T29344] sock_wake_async+0x137/0x160 [ 1294.968646][T29344] sk_wake_async+0x184/0x280 [ 1294.975262][T29344] unix_shutdown+0x2f5/0x3f0 [ 1294.981876][T29344] __x64_sys_shutdown+0x13c/0x1a0 [ 1294.988926][T29344] do_syscall_64+0xfa/0x3b0 [ 1294.995451][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.003368][T29344] } [ 1295.005879][T29344] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1295.014578][T29344] ... acquired at: [ 1295.018397][T29344] lock_acquire+0x120/0x360 [ 1295.023120][T29344] _raw_read_lock_irqsave+0xaf/0x100 [ 1295.028630][T29344] kill_fasync+0x199/0x4d0 [ 1295.033251][T29344] evdev_pass_values+0x627/0xbd0 [ 1295.038386][T29344] evdev_events+0x1e6/0x340 [ 1295.043079][T29344] input_pass_values+0x285/0x890 [ 1295.048211][T29344] input_event_dispose+0x330/0x6b0 [ 1295.053520][T29344] input_inject_event+0x1fe/0x320 [ 1295.058742][T29344] evdev_write+0x2fc/0x480 [ 1295.063349][T29344] vfs_write+0x27b/0xa90 [ 1295.067795][T29344] ksys_write+0x145/0x250 [ 1295.072310][T29344] do_syscall_64+0xfa/0x3b0 [ 1295.077018][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.083100][T29344] [ 1295.085435][T29344] [ 1295.085435][T29344] stack backtrace: [ 1295.091360][T29344] CPU: 1 UID: 0 PID: 29344 Comm: syz.2.18662 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 1295.091389][T29344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1295.091402][T29344] Call Trace: [ 1295.091414][T29344] [ 1295.091424][T29344] dump_stack_lvl+0x189/0x250 [ 1295.091462][T29344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.091492][T29344] ? __pfx__printk+0x10/0x10 [ 1295.091517][T29344] validate_chain+0x1f05/0x2140 [ 1295.091545][T29344] __lock_acquire+0xab9/0xd20 [ 1295.091575][T29344] ? kill_fasync+0x199/0x4d0 [ 1295.091601][T29344] lock_acquire+0x120/0x360 [ 1295.091626][T29344] ? kill_fasync+0x199/0x4d0 [ 1295.091656][T29344] _raw_read_lock_irqsave+0xaf/0x100 [ 1295.091699][T29344] ? kill_fasync+0x199/0x4d0 [ 1295.091725][T29344] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1295.091750][T29344] ? do_raw_spin_lock+0x121/0x290 [ 1295.091775][T29344] kill_fasync+0x199/0x4d0 [ 1295.091799][T29344] ? kill_fasync+0x53/0x4d0 [ 1295.091825][T29344] evdev_pass_values+0x627/0xbd0 [ 1295.091851][T29344] ? evdev_pass_values+0x661/0xbd0 [ 1295.091874][T29344] evdev_events+0x1e6/0x340 [ 1295.091894][T29344] ? evdev_events+0x79/0x340 [ 1295.091914][T29344] ? input_pass_values+0x8d/0x890 [ 1295.091933][T29344] input_pass_values+0x285/0x890 [ 1295.091962][T29344] ? input_handle_event+0x70c/0xf30 [ 1295.091991][T29344] input_event_dispose+0x330/0x6b0 [ 1295.092021][T29344] input_inject_event+0x1fe/0x320 [ 1295.092049][T29344] ? input_inject_event+0xbc/0x320 [ 1295.092078][T29344] evdev_write+0x2fc/0x480 [ 1295.092101][T29344] ? __pfx_evdev_write+0x10/0x10 [ 1295.092123][T29344] ? bpf_lsm_file_permission+0x9/0x20 [ 1295.092149][T29344] ? security_file_permission+0x75/0x290 [ 1295.092170][T29344] ? rw_verify_area+0x258/0x650 [ 1295.092199][T29344] ? __pfx_evdev_write+0x10/0x10 [ 1295.092220][T29344] vfs_write+0x27b/0xa90 [ 1295.092252][T29344] ? __pfx_vfs_write+0x10/0x10 [ 1295.092281][T29344] ? __fget_files+0x2a/0x420 [ 1295.092303][T29344] ? __fget_files+0x2a/0x420 [ 1295.092322][T29344] ? __fget_files+0x3a0/0x420 [ 1295.092342][T29344] ? __fget_files+0x2a/0x420 [ 1295.092365][T29344] ksys_write+0x145/0x250 [ 1295.092382][T29344] ? __pfx_ksys_write+0x10/0x10 [ 1295.092409][T29344] ? rcu_is_watching+0x15/0xb0 [ 1295.092441][T29344] ? do_syscall_64+0xbe/0x3b0 [ 1295.092460][T29344] do_syscall_64+0xfa/0x3b0 [ 1295.092476][T29344] ? lockdep_hardirqs_on+0x9c/0x150 [ 1295.092502][T29344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.092521][T29344] ? clear_bhb_loop+0x60/0xb0 [ 1295.092542][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.092560][T29344] RIP: 0033:0x7efec6f8e929 [ 1295.092578][T29344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.092595][T29344] RSP: 002b:00007efec7e7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1295.092614][T29344] RAX: ffffffffffffffda RBX: 00007efec71b5fa0 RCX: 00007efec6f8e929 [ 1295.092628][T29344] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 1295.092641][T29344] RBP: 00007efec7010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1295.092652][T29344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.092663][T29344] R13: 0000000000000000 R14: 00007efec71b5fa0 R15: 00007efec72dfa28 [ 1295.092682][T29344] [ 1295.416610][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.967509][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.973866][ T1303] ieee802154 phy1 wpan1: encryption failed: -22