last executing test programs: 3.632127059s ago: executing program 3 (id=10035): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000580)='h', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/79, 0x4f}], 0x1, &(0x7f0000000840)=""/70, 0x46}, 0x20) 3.476244288s ago: executing program 3 (id=10037): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.080620194s ago: executing program 2 (id=10054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x38, r1, 0x5, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9e63f669611f896645838b666f64593e01748c8411c5b71c"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 1.913932779s ago: executing program 4 (id=10055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r1, 0x3, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000440)="96", 0x1}, 0x0, 0x0]) 1.801995461s ago: executing program 2 (id=10057): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.648630772s ago: executing program 0 (id=10058): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) close_range(r0, 0xffffffffffffffff, 0x0) 1.646719179s ago: executing program 2 (id=10059): openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) close(0x3) 1.534932143s ago: executing program 0 (id=10062): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aa"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a96f1cec0064420b88f9", 0xe, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 1.425757801s ago: executing program 0 (id=10064): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x402c582b, 0x0) 1.369003006s ago: executing program 3 (id=10065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x19, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) 1.338322676s ago: executing program 2 (id=10066): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0x5, 0x84, 0x0, @empty, @multicast1}}}}}}, 0x0) readv(r0, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1) 1.243551605s ago: executing program 0 (id=10068): timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.11729289s ago: executing program 1 (id=10069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x19ee0}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.068286226s ago: executing program 0 (id=10070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0xff, 0x5, 0x0, 0x0, @sint={0xffffff39, 0x2}}]}) 1.008648026s ago: executing program 3 (id=10071): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x7) 937.597714ms ago: executing program 1 (id=10072): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) r2 = eventfd(0x1) io_submit(r1, 0x2, &(0x7f0000002200)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x8, 0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f0000001140)="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", 0x401, 0x6, 0x0, 0x3, r2}]) 898.465649ms ago: executing program 0 (id=10073): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 865.783613ms ago: executing program 3 (id=10074): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xad, 0x2, 0x1, 0x0, 0xf7}) 765.900433ms ago: executing program 4 (id=10075): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 695.856305ms ago: executing program 1 (id=10076): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 673.249998ms ago: executing program 3 (id=10077): set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 603.836185ms ago: executing program 1 (id=10078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 597.066306ms ago: executing program 4 (id=10079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 424.682371ms ago: executing program 4 (id=10080): unshare(0x20000400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 353.07183ms ago: executing program 2 (id=10081): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_io_uring_setup(0x231, &(0x7f0000000c80)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 330.584756ms ago: executing program 1 (id=10082): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0xfffffffe, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, [0xffffffffffffffff, 0x8, 0x10000000, 0x1, 0x2, 0x400, 0x100000001, 0x94, 0x7, 0x4, 0xffff, 0x4, 0x4, 0x0, 0x7]}, &(0x7f0000000040)=0xfc) 227.685105ms ago: executing program 4 (id=10083): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2, 0x8}, 0x8) 118.03289ms ago: executing program 1 (id=10084): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) writev(r1, &(0x7f0000004740)=[{&(0x7f0000002740)="417f31e934f331d83d0477949dc456655d003208676424181d5174b3e4ef0f6adf05d362a0e001505bc0dca83917657e2df9b758edf02b0443041b9df3bbfc2961ec25d2497a7c79c8873a6231769a3533395301243bd552427a54995252b99e341c677d6e318239e0d1f9c7b3f0efc1e3a94e89980bb68ae73a899bd4483efa2500ff31b7d00acad2b142cbc2ec3b5460bf402499bfbe45f7f36358c6034d59640e9f16e82c4e6c1624bc9d41e2e57e4dfe87be5bfea70b201272bbfaecd217e3a72be54054b7eb3ffd7ceeb6f46c68d4792e64454021f14143d0df4905d8a56e329c29a8bd5a28b8e37a0a62ab8e4068e92300e801dd04e19b7f0241e7b71921f4fd86915d783e379746c7f0e0a6c69c41ac514abcf8e06240c030ecf797ecc1b83d1464e945b3b561793bcc130625ce137b399d39b9224f7678c673ef91d590ebf337c7ee1080ec4d205c8f6a1d30ccd973bb39325343d5caf36295841ba99c3d167176f4a93b6921bdda18ee3ff8a6fc3dadebbe742556f8b632725da6c4ff341051ebe1c6092895a636788ddaf6e60056ac25de43a7c77fbf1509a9cd374a0810d48632e1df08b571801934901de15974036442636d789b071e4133e2de9fde3575589003e63eec4daed3e45760394fc5d5c6e6fa2f83dcf1680b668a00ec35ed1d4b509a0f1c0f6dbc4976f39de4046b0728d0ed0b59ff1e5bbea796d198e097f3edbef226913c2a94dd5f0796699b88ac3ae4717f9fefefa39d2792c8c072883c435ccf5f2cccb25bf07b55422be5114a057c582f841c2d72e435472c31fbf6f48a8e6901320017ccf85ad7fbda56654dff549d930c2acc054605b35fb0fec2a8ae6a0b90484c5f9026ebe978aacf457dd59a0dc78cddd4a2ca28581efd7a5edd8dec0ed0e532a0ef49d7dbd4beb68dfe4216e6090e43339af174b73be30bd2a026a2580c2e02e1f08ba3de00709e0934105c85235a5c4ec3d2d3d2c43948d6e334e77c443f7263ba0e31f5c588ed68ce800f1bea20c78721f711de7c6038807ca5d1b0cde1c6a8b45547baeabf2d5a87dd0a9591037f6834bf96d058ac841a5334763d0330159d5f3ea426e4cf209ff2f194c9133804f72481af76eb3d9481c800f2cfb07c1bdda698098f6741efd6cd7c644e10a2fdacfc61c821c474c80fb9085fa41113ff27901e7376b01555fbdff567924b9db10259b4af74f8efd7dcf7aa7893d52a52f1bce5edcc4fa05c4f0d65a64a6ed0087c4b87bdd8ab30e7e3aa671b4ec2280619a1b5d04d273279b3fc17470f5e465ef913dfdbac6cc0b2ed54ec5397d3572ea0c2040fa4841457c60bd379e52dd622647775a64d7b3e860f7f28ba98ee45173767b111cb79c077f6c1a1a80cd23cf5a4d518b5f6f4fa993f53af46184380c7fd00aed108c47cb7e4a65be878774da1dbb15d237e05f3cf02e1babee99e4674ff826850b3b1b121877f9697e3b59f3734de932183c5c30595f883f47a07ff85b2ca09d810af3a026948aefb22538d6d84e80d220a7c9c2f0d221d16746a2010b9f572556606c8dfd0378af56bfd11315ae637b5450e90ad49e99de88e2488c746dfb8bc45dd94788416db1cf732c41af68fe377b58cc22898926a3405773a83646cc7dd0004904132e926bf4bd3df5579fed6fcfd7f23286d3d8a8149415e5e2af16eb7d686c225ffeda98ae6a3fd2333e6c8b76f5582d7ff7475de0a2d7a35b28a635e1ef74a8304e51a368124cc19b9028f0a30c9f31f5484aeb079f205dde4eeacf389b4aa8797826a96502686b361ef74660decd04f580b48b3f4a77a2f9267553b24eea3fc03123d3fe144fb9537d2553b14edfa8804bb6612db232702f2421088e70bb32bd315079edf9bcf87a7a9dce85571e8ba7f0e195fc8031a3521da2fc70dc9aaf6b7ea2db3a878ea8845798c42ad128be33304adc7f89c13ae91998a5e99152f309f3a7d67fbc6287fecc78f2fa7827216418408abcc744da2c18e9973def77c98f615f7b845a874e77fc535e9a174cca0fb3a49cad15ed207e698714dad13d51e0863a51dcce6f261b8dfa1e2b0c65e9f1caa663c6011f6efe018d3950710b1d1e4651bc04cda36f68039483b094fde2e2e6b0068f8a92be5ba6fd3dd316242a61c6bccbd0ebf50fef1c4c95960496698db84d50169a855267666ff19ea2143965b2b842ee1cbc9dea6070da2b76275b27c2cccd52d265b33fde9e320b4d564f14aa66472e41818ccd80af7067ce1a5f37e825c20e15f62cc87557be5acd229cd61dbf792d615a5f6e67ffdadcd0099acd771a81652eeece90aadc940f45e331262c99c917d98d4478d24ba0d235c1ac428222ff86ffa4cdb4af6a0a0dfe285dc5ef0802aff5ae2d28aceb1a3f07b2789bb142c6b2265b92eddf21b9bef69549cd7852fb5c8e2902ded1d4db65b3ec01e07a54b334254ae3841709be6c0453ee2b5f8c65d6e252ced7fc4908922c9394a644e9a2137875e9a634817483f9a901017552b4b3cd8ffa4e3916bd05c548bafe4a7ec15fe6d1e7bf05f7ba0e0236e6685840fbca566cc880c3f1d6e6e6cf9430bd0098e5c5b017b6909662c9901e6799896624dfafa4015358cf314eaa8f4b976f856dd64eaf5fdbb84fe80bb27683c75e918ad476713c4bcfbbc88d17d2181d8a98eec395044375d3cba229c70fc9dbf15b0895a4d8424bc5fe9de2deee638cec8db77b4a59ac78a9dada119d788edda30c00e943e81f38527def611c79d05eb784f482e198f04acba96be6d9b72de74e8c7d4e30cedfea86934c8ae7b4d87a1854d2851dc9021c6777ce7cb8b6e6058850c46f96bd49b00d0a04369325b7f67bea493d2bcc7ed7c18386f819e622f605b06dfcaac6fde609931b8bd0c3a8c4b6120fcaa0edfe53d55de18e43173931389c5b9fbf1ced65a91422c663ec28b10ebc06fcd9c56aca1e0d4257e1f3edda827915669925282b5b145707b782f15e598ff5bf725dffb84086a25772c4f112442b5659db5e9e6c185de5eca22c043c14bea81569c8d8a2abb15a6aa14147cac5dd76fb8032feb3e6ade7284112379ca8cebdeb0b680820ea0809eb392e031de333bc090cd7172d181a42983beca07703750a16ef70a09", 0x8aa}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 98.732237ms ago: executing program 2 (id=10085): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x10) 0s ago: executing program 4 (id=10086): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x8079) write$dsp(r0, &(0x7f0000000040)="c7", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) kernel console output (not intermixed with test programs): ess `syz.3.7913'. [ 624.386164][T15341] usb 5-1: GET_CAPABILITIES returned 0 [ 624.391802][T23200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7917'. [ 624.391825][T15341] usbtmc 5-1:16.0: can't read capabilities [ 624.401503][T23200] netem: unknown loss type 13 [ 624.432667][T23200] netem: change failed [ 624.599134][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.603274][T14958] usb 5-1: USB disconnect, device number 83 [ 624.611666][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.454308][T23263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7944'. [ 626.463748][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 626.574470][T14966] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 626.754977][T14966] usb 4-1: Using ep0 maxpacket: 16 [ 626.777686][T14966] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.793485][T14966] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.808418][T14966] usb 4-1: config 0 interface 0 has no altsetting 0 [ 626.816212][T14966] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 626.829225][T14966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.848057][T14966] usb 4-1: config 0 descriptor?? [ 627.229086][T23286] kvm: user requested TSC rate below hardware speed [ 627.522677][ T5904] usb 4-1: USB disconnect, device number 93 [ 627.865922][T23300] sch_fq: defrate 2048 ignored. [ 627.997210][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7965'. [ 628.761572][T23331] tap0: tun_chr_ioctl cmd 1074025677 [ 628.778683][T23331] tap0: linktype set to 6 [ 629.275600][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7980'. [ 629.405127][T23342] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7980'. [ 629.424702][T23342] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7980'. [ 630.340435][T23388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8002'. [ 630.674822][T15341] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 630.858992][T15341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 630.897182][T15341] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 630.919417][T15341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 630.936400][T15341] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 630.956057][T15341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.964145][T15341] usb 2-1: Product: syz [ 630.978663][T15341] usb 2-1: Manufacturer: syz [ 630.989548][T15341] usb 2-1: SerialNumber: syz [ 631.007318][T15341] usb 2-1: config 0 descriptor?? [ 631.023400][T23393] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 631.035454][T23393] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 631.049288][T15341] usb 2-1: ucan: probing device on interface #0 [ 631.364610][T14958] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 631.540030][T14958] usb 5-1: Using ep0 maxpacket: 8 [ 631.548018][T14958] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 631.569742][T14958] usb 5-1: config 0 has no interface number 0 [ 631.587489][T14958] usb 5-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 631.613788][T14958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.633820][T14958] usb 5-1: Product: syz [ 631.638590][T14958] usb 5-1: Manufacturer: syz [ 631.643254][T14958] usb 5-1: SerialNumber: syz [ 631.668012][T14958] usb 5-1: config 0 descriptor?? [ 631.686310][T15341] ucan 2-1:0.0: probe with driver ucan failed with error -22 [ 631.901279][T14958] usb 5-1: USB disconnect, device number 84 [ 631.941170][T15341] usb 2-1: USB disconnect, device number 71 [ 633.555913][T23505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8058'. [ 634.528572][T23540] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8071'. [ 635.032054][T23551] vivid-007: disconnect [ 635.045193][T23548] vivid-007: reconnect [ 636.930912][ T30] audit: type=1804 audit(1751573364.814:418): pid=23598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8097" name="/" dev="pidfs" ino=23600 res=1 errno=0 [ 637.456817][T23619] netlink: 'syz.1.8106': attribute type 9 has an invalid length. [ 637.465586][T23619] netlink: 200108 bytes leftover after parsing attributes in process `syz.1.8106'. [ 637.486616][T23619] openvswitch: netlink: Message has 5 unknown bytes. [ 638.364565][T15339] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 638.524764][T15339] usb 5-1: Using ep0 maxpacket: 16 [ 638.536259][T15339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.550186][T15339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.583541][T15339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.620527][T15339] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 638.641817][T15339] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.674075][T15339] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 638.707159][T15339] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 638.737586][T15339] usb 5-1: Manufacturer: syz [ 638.758626][T15339] usb 5-1: config 0 descriptor?? [ 639.144650][T15339] rc_core: IR keymap rc-hauppauge not found [ 639.154075][T15339] Registered IR keymap rc-empty [ 639.183111][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.215179][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.281089][T15339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 639.329301][T15339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input48 [ 639.369692][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.434957][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.474594][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.494653][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.539796][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.577201][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.617469][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.668670][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.705338][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.754673][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 639.782283][T15339] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 639.812100][T15339] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 639.856321][T15339] usb 5-1: USB disconnect, device number 85 [ 640.626573][T23699] loop6: detected capacity change from 0 to 524287487 [ 640.705789][T18405] buffer_io_error: 23 callbacks suppressed [ 640.705807][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.720318][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.729016][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.737369][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.745786][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.777793][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.804967][T23704] loop6: detected capacity change from 524287487 to 0 [ 640.811904][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.837952][T18405] ldm_validate_partition_table(): Disk read failed. [ 640.845130][T18405] Dev loop6: unable to read RDB block 0 [ 640.850905][T18405] loop6: unable to read partition table [ 640.862179][T18405] loop6: partition table beyond EOD, truncated [ 643.083469][T23753] ALSA: mixer_oss: invalid OSS volume '' [ 643.209884][T23579] Set syz1 is full, maxelem 65536 reached [ 644.207027][ T51] Bluetooth: hci4: Malformed LE Event: 0x0d [ 644.298853][T23802] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8188'. [ 644.318050][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8191'. [ 644.851477][T23827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8200'. [ 645.084198][T23837] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 645.730861][T23851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8212'. [ 645.984585][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8217'. [ 646.769728][ T30] audit: type=1326 audit(1751573374.664:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 646.871484][ T30] audit: type=1326 audit(1751573374.704:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 646.930484][ T30] audit: type=1326 audit(1751573374.704:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 646.982128][ T30] audit: type=1326 audit(1751573374.704:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 647.047388][ T30] audit: type=1326 audit(1751573374.704:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 647.100335][ T30] audit: type=1326 audit(1751573374.704:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 647.153281][ T30] audit: type=1326 audit(1751573374.704:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 647.216448][ T30] audit: type=1326 audit(1751573374.714:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 647.283147][ T30] audit: type=1326 audit(1751573374.714:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 647.334446][ T30] audit: type=1326 audit(1751573374.714:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23874 comm="syz.2.8223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 648.876656][T23935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8250'. [ 648.888350][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8250'. [ 649.124843][T14966] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 649.263584][T23953] netlink: 'syz.4.8258': attribute type 2 has an invalid length. [ 649.294482][T14966] usb 2-1: Using ep0 maxpacket: 32 [ 649.306300][T14966] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 649.336642][T14966] usb 2-1: config 0 has no interface number 0 [ 649.342864][T14966] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 649.376890][T14966] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 649.387242][T14966] usb 2-1: config 0 interface 126 has no altsetting 0 [ 649.440762][T14966] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 649.457772][T14966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.488555][T14966] usb 2-1: Product: syz [ 649.492825][T14966] usb 2-1: Manufacturer: syz [ 649.512938][T14966] usb 2-1: SerialNumber: syz [ 649.528557][T14966] usb 2-1: config 0 descriptor?? [ 649.548575][T23937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 649.566605][T23937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 649.872116][T23971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8266'. [ 650.045853][T14966] ir_usb 2-1:0.126: IR Dongle converter detected [ 650.265173][T14966] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 650.473807][T14966] usb 2-1: USB disconnect, device number 72 [ 650.493994][T14966] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 650.535898][T14966] ir_usb 2-1:0.126: device disconnected [ 650.890252][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8278'. [ 651.495201][T14956] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 651.684497][T14956] usb 4-1: Using ep0 maxpacket: 8 [ 651.694116][T14956] usb 4-1: config 0 has no interfaces? [ 651.707643][T14956] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 651.734840][T14956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.748885][T14956] usb 4-1: Product: syz [ 651.753127][T14956] usb 4-1: Manufacturer: syz [ 651.774253][T14956] usb 4-1: SerialNumber: syz [ 651.792915][T14956] usb 4-1: config 0 descriptor?? [ 652.034978][T14956] usb 4-1: USB disconnect, device number 94 [ 652.287701][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8300'. [ 653.367633][T24081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8315'. [ 653.555309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 654.034951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 654.166862][T24089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8319'. [ 654.206582][T24089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8319'. [ 654.249688][T24089] erspan0: entered promiscuous mode [ 654.266074][T24089] gretap0: entered promiscuous mode [ 654.277150][T24089] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 654.315733][T24089] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 655.784883][T24144] netlink: 'syz.1.8345': attribute type 2 has an invalid length. [ 656.064534][T14958] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 656.227004][T14958] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 656.242883][T14958] usb 5-1: config 0 has no interface number 0 [ 656.265197][T14958] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 656.274328][T14958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.293784][T14958] usb 5-1: Product: syz [ 656.314797][T14958] usb 5-1: Manufacturer: syz [ 656.319490][T14958] usb 5-1: SerialNumber: syz [ 656.337494][T14958] usb 5-1: config 0 descriptor?? [ 656.357760][T14958] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 657.132936][T24185] netlink: 268 bytes leftover after parsing attributes in process `syz.3.8363'. [ 657.160956][T14958] gspca_spca1528: reg_w err -71 [ 657.185354][T14958] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 657.201766][T14958] usb 5-1: USB disconnect, device number 86 [ 658.384652][T14966] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 658.566629][T14966] usb 3-1: Using ep0 maxpacket: 32 [ 658.574059][T14966] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 658.600021][T14966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.631497][T14966] usb 3-1: config 0 descriptor?? [ 658.663631][T14966] gspca_main: sunplus-2.14.0 probing 041e:400b [ 659.472354][T14966] gspca_sunplus: reg_w_riv err -71 [ 659.477856][T14966] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 659.529571][T14966] usb 3-1: USB disconnect, device number 77 [ 661.513680][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8426'. [ 661.531525][T24325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.712600][T24330] macvlan0: entered promiscuous mode [ 661.744513][T24330] bridge0: entered promiscuous mode [ 662.141141][T24349] netlink: 'syz.2.8439': attribute type 1 has an invalid length. [ 663.444498][T14966] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 663.614491][T14966] usb 4-1: Using ep0 maxpacket: 16 [ 663.627328][T14966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.647009][T14966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.707277][T14966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.717147][T14966] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 663.727508][T14966] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.787534][T14966] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 663.806757][T14966] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 663.824433][T14966] usb 4-1: Manufacturer: syz [ 663.843113][T14966] usb 4-1: config 0 descriptor?? [ 664.244565][T14966] rc_core: IR keymap rc-hauppauge not found [ 664.252681][T14966] Registered IR keymap rc-empty [ 664.262922][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.364573][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.426407][T14966] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 664.446477][T14966] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 664.513744][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.574909][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.614585][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.635128][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.664588][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.686654][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.704770][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.727101][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.765577][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.804605][T14966] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 664.836672][T14966] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 664.855340][T14966] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 664.885532][T14966] usb 4-1: USB disconnect, device number 95 [ 664.984463][T15341] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 665.168152][T15341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.194844][T15341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.224500][T15341] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 665.235939][T15341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.248027][T15341] usb 5-1: config 0 descriptor?? [ 665.666818][T15341] hid-steam 0003:28DE:1142.00CB: collection stack underflow [ 665.690856][T15341] hid-steam 0003:28DE:1142.00CB: item 0 2 0 12 parsing failed [ 665.699978][T15341] hid-steam 0003:28DE:1142.00CB: steam_probe:parse of hid interface failed [ 665.718961][T15341] hid-steam 0003:28DE:1142.00CB: probe with driver hid-steam failed with error -22 [ 665.869126][T15341] usb 5-1: USB disconnect, device number 87 [ 668.094625][T15341] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 668.255598][T15341] usb 5-1: Using ep0 maxpacket: 8 [ 668.272942][T15341] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.310325][T15341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 668.334555][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 668.334576][ T30] audit: type=1326 audit(1751573396.224:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24494 comm="syz.3.8504" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x0 [ 668.382842][T15341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 668.401364][T15341] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.419637][T15341] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 668.430268][T15341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.675887][T15341] usb 5-1: GET_CAPABILITIES returned 0 [ 668.691950][T15341] usbtmc 5-1:16.0: can't read capabilities [ 668.748260][T24503] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 668.908428][T15341] usb 5-1: USB disconnect, device number 88 [ 669.561605][T24377] Set syz1 is full, maxelem 65536 reached [ 669.994576][T14956] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 670.148092][T14956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 670.166984][T14956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 670.197500][T14956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 670.233030][T14956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 670.267612][T14956] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 670.282694][T14956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.298649][T14956] usb 2-1: Product: syz [ 670.304028][T14956] usb 2-1: Manufacturer: syz [ 670.310902][T14956] usb 2-1: SerialNumber: syz [ 670.321743][T14956] usb 2-1: config 0 descriptor?? [ 670.354898][T24554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8531'. [ 670.409326][T24556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8531'. [ 670.537757][T14956] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 670.741577][T24529] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 670.776698][T14956] usb 2-1: USB disconnect, device number 73 [ 671.527827][T24599] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 671.615464][T24604] netlink: 'syz.2.8554': attribute type 9 has an invalid length. [ 671.984704][T24620] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 672.194766][T14956] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 672.357258][T14956] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 672.377276][T14956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.395730][T14956] usb 5-1: config 0 descriptor?? [ 672.440361][T24640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8571'. [ 672.452079][T24640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8571'. [ 672.615521][T14956] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 672.863584][T14956] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 672.883410][T14956] [drm] Initialized udl on minor 2 [ 673.018496][T14956] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 673.081581][T14956] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 673.111945][ T5904] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 673.133374][ T5904] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 673.148581][T14956] usb 5-1: USB disconnect, device number 89 [ 673.477199][ T5904] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 673.654570][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 673.666499][ T5904] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 673.695070][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.723784][ T5904] usb 3-1: config 0 descriptor?? [ 673.973090][ T5904] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 674.349864][T24704] netlink: 'syz.4.8601': attribute type 1 has an invalid length. [ 674.557541][T24710] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 674.563946][T24710] pim6reg0: linktype set to 773 [ 674.598979][ T5904] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 674.614622][ T5904] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 674.660108][ T5904] asix 3-1:0.0: probe with driver asix failed with error -71 [ 674.686112][ T5904] usb 3-1: USB disconnect, device number 78 [ 675.276276][ T5904] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 675.464219][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 675.472201][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.513411][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 675.538165][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 675.574466][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 675.598433][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.626288][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 675.644583][ T5904] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 675.662946][ T5904] usb 5-1: Manufacturer: syz [ 675.711473][ T5904] usb 5-1: config 0 descriptor?? [ 675.794637][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 676.090939][T24756] netlink: 'syz.2.8623': attribute type 4 has an invalid length. [ 676.094537][ T5904] rc_core: IR keymap rc-hauppauge not found [ 676.115487][ T5904] Registered IR keymap rc-empty [ 676.120614][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.154493][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.188294][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 676.221109][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 676.242517][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.264765][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.294596][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.314892][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.357302][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.394642][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.437607][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.467977][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.499388][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.560111][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 676.596999][ T5904] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 676.614835][ T5904] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 676.661762][ T5904] usb 5-1: USB disconnect, device number 90 [ 679.114471][ T5904] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 679.274572][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 679.284955][ T5904] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 679.303933][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.322328][ T5904] usb 5-1: Product: syz [ 679.342647][ T5904] usb 5-1: Manufacturer: syz [ 679.355562][ T5904] usb 5-1: SerialNumber: syz [ 679.386172][ T5904] usb 5-1: config 0 descriptor?? [ 679.397334][ T5904] gspca_main: se401-2.14.0 probing 047d:5003 [ 679.814587][ T5904] gspca_se401: Frame size: 31091x12922 bayer [ 679.820673][ T5904] gspca_se401: Frame size: 0x0 1/16th janggu [ 679.871939][ T5904] gspca_se401: Frame size: 20x0 bayer [ 680.020394][ T5904] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 680.171547][ T5904] usb 5-1: USB disconnect, device number 91 [ 681.231312][T24902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8689'. [ 681.398624][T24902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8689'. [ 681.552828][T24914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8693'. [ 681.689421][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 681.854438][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 681.863938][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 681.873220][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.883028][ T10] usb 2-1: Product: syz [ 681.887581][ T10] usb 2-1: Manufacturer: syz [ 681.893538][ T10] usb 2-1: SerialNumber: syz [ 681.907837][ T10] usb 2-1: config 0 descriptor?? [ 681.928050][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 682.334063][ T10] gspca_se401: Frame size: 31091x12922 bayer [ 682.340284][ T10] gspca_se401: Frame size: 0x0 1/16th janggu [ 682.361115][ T10] gspca_se401: Frame size: 20x0 bayer [ 682.552909][ T10] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input52 [ 682.588927][ T10] usb 2-1: USB disconnect, device number 74 [ 683.793920][T24812] Set syz1 is full, maxelem 65536 reached [ 684.164442][T15341] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 684.324782][T15341] usb 4-1: Using ep0 maxpacket: 8 [ 684.335955][T15341] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 684.345773][T15341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.387835][T15341] pvrusb2: Hardware description: Terratec Grabster AV400 [ 684.404427][T15341] pvrusb2: ********** [ 684.408582][T15341] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 684.437937][T15341] pvrusb2: Important functionality might not be entirely working. [ 684.446193][T15341] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 684.475344][T15341] pvrusb2: ********** [ 684.634401][ T2343] pvrusb2: Invalid write control endpoint [ 684.774014][ T2343] pvrusb2: Invalid write control endpoint [ 684.812573][T24989] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 684.821247][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 684.852228][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 684.883542][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 684.900076][ T2343] pvrusb2: Device being rendered inoperable [ 684.929208][T24958] pvrusb2: Attempted to execute control transfer when device not ok [ 684.945768][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 684.965338][T14958] usb 4-1: USB disconnect, device number 96 [ 685.009779][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 685.177535][ T2343] pvrusb2: Attached sub-driver cx25840 [ 685.184716][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 685.195640][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 685.686086][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 685.866497][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 685.884528][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.919387][ T10] usb 2-1: config 0 descriptor?? [ 686.042842][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.049417][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.140794][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 686.214607][T14966] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 686.366729][T14966] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 686.395028][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 686.402521][T14966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.424157][ T10] [drm] Initialized udl on minor 2 [ 686.442099][T14966] usb 4-1: config 0 descriptor?? [ 686.466000][T14966] cp210x 4-1:0.0: cp210x converter detected [ 686.547141][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 686.568605][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 686.579010][T15341] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 686.654922][T15341] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 686.674730][ T10] usb 2-1: USB disconnect, device number 75 [ 686.711908][T15341] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 687.083802][T14966] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 687.095752][T14966] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 687.105795][T14966] usb 4-1: cp210x converter now attached to ttyUSB0 [ 687.116943][T14966] usb 4-1: USB disconnect, device number 97 [ 687.135563][T14966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 687.143796][T14966] cp210x 4-1:0.0: device disconnected [ 687.823352][T25051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8746'. [ 688.149203][T25065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8749'. [ 688.854920][T14958] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 689.014979][T25089] tun0: tun_chr_ioctl cmd 1074025675 [ 689.020451][T25089] tun0: persist disabled [ 689.024446][T14958] usb 4-1: Using ep0 maxpacket: 32 [ 689.042602][T14958] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 689.069659][T14958] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 689.097718][T14958] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 689.116511][T14958] usb 4-1: Product: syz [ 689.120841][T14958] usb 4-1: Manufacturer: syz [ 689.135944][T14958] usb 4-1: SerialNumber: syz [ 689.159303][T14958] usb 4-1: config 0 descriptor?? [ 689.173912][T25077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.500901][T14966] usb 4-1: USB disconnect, device number 98 [ 691.103036][T25164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8796'. [ 691.118135][T25166] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8797'. [ 691.127039][T25164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8796'. [ 691.127431][T25166] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8797'. [ 693.115499][T25237] usb usb7: usbfs: process 25237 (syz.4.8831) did not claim interface 0 before use [ 693.794672][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8843'. [ 694.099818][T25276] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 695.216326][T25309] delete_channel: no stack [ 695.964588][T14966] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 696.154296][T14966] usb 4-1: Using ep0 maxpacket: 8 [ 696.167171][T14966] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 696.184716][T14966] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.217040][T14966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 696.254765][T14966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 696.286290][ T9] kworker/0:0 (9) used greatest stack depth: 19480 bytes left [ 696.297780][T14966] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 696.307256][T14966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.337688][T14966] usb 4-1: Product: syz [ 696.341986][T14966] usb 4-1: Manufacturer: syz [ 696.354695][T14966] usb 4-1: SerialNumber: syz [ 696.377035][T14966] usb 4-1: config 0 descriptor?? [ 696.403161][T25321] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 696.621081][T14966] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 696.664781][T14966] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input53 [ 696.899382][ C0] powermate: config urb returned -71 [ 696.905019][ C0] powermate: config urb returned -71 [ 696.910714][ C0] powermate: config urb returned -71 [ 696.916727][ C0] powermate: config urb returned -71 [ 696.922821][T14966] usb 4-1: USB disconnect, device number 99 [ 696.928844][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 697.262090][T25342] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8878'. [ 697.274995][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8878'. [ 697.951047][T25353] ptrace attach of "./syz-executor exec"[25354] was attempted by "./syz-executor exec"[25353] [ 698.882780][T25378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8893'. [ 698.894179][T25379] loop6: detected capacity change from 0 to 524287999 [ 698.924854][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 698.956743][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.004860][T25380] Invalid logical block size (3) [ 699.021353][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.047142][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.069170][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.104599][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.133028][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.154804][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.177480][T18405] ldm_validate_partition_table(): Disk read failed. [ 699.196555][T25385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8895'. [ 699.201364][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.236354][T18405] Buffer I/O error on dev loop6, logical block 0, async page read [ 699.245040][T18405] Dev loop6: unable to read RDB block 0 [ 699.251129][T18405] loop6: unable to read partition table [ 699.277887][T25379] ldm_validate_partition_table(): Disk read failed. [ 699.288708][T25379] Dev loop6: unable to read RDB block 0 [ 699.309979][T25379] loop6: unable to read partition table [ 699.317096][T25379] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 699.358935][ T5198] ldm_validate_partition_table(): Disk read failed. [ 699.381210][ T5198] Dev loop6: unable to read RDB block 0 [ 699.398551][ T5198] loop6: unable to read partition table [ 699.422526][ T30] audit: type=1326 audit(1751573427.314:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.489434][ T30] audit: type=1326 audit(1751573427.314:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.574647][ T30] audit: type=1326 audit(1751573427.364:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.654803][ T30] audit: type=1326 audit(1751573427.364:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.734593][ T30] audit: type=1326 audit(1751573427.364:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.799690][ T30] audit: type=1326 audit(1751573427.414:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.849781][ T30] audit: type=1326 audit(1751573427.414:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.876216][ T30] audit: type=1326 audit(1751573427.414:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.910834][ T30] audit: type=1326 audit(1751573427.424:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 699.939050][ T30] audit: type=1326 audit(1751573427.424:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25391 comm="syz.1.8898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 700.604950][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 700.774407][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 700.786506][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 700.800565][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.817984][ T10] usb 4-1: config 0 descriptor?? [ 701.073026][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 701.083204][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 701.100514][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 701.111443][ T10] usb 4-1: media controller created [ 701.146428][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.269617][ T10] az6027: usb out operation failed. (-71) [ 701.287124][ T10] az6027: usb out operation failed. (-71) [ 701.313011][ T10] stb0899_attach: Driver disabled by Kconfig [ 701.323329][ T10] az6027: no front-end attached [ 701.323329][ T10] [ 701.355878][ T10] az6027: usb out operation failed. (-71) [ 701.361685][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 701.385151][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 701.423765][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 701.441306][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 701.479455][ T10] usb 4-1: USB disconnect, device number 100 [ 701.640906][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 701.860158][T25469] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8934'. [ 701.905017][T25469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8934'. [ 702.434795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 702.946413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 702.957851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 703.005742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 703.015340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 703.429329][T25503] loop4: detected capacity change from 0 to 7 [ 703.449460][T25503] Dev loop4: unable to read RDB block 7 [ 703.462578][T25503] loop4: unable to read partition table [ 703.486284][T25503] loop4: partition table beyond EOD, truncated [ 703.525958][T25503] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 704.934428][ T10] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 705.022443][T25567] loop6: detected capacity change from 0 to 524287999 [ 705.035481][T25567] buffer_io_error: 39 callbacks suppressed [ 705.035500][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.053416][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.062422][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.076780][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.088903][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.099918][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.107700][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.120552][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.128639][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.131763][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 705.141741][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.157749][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.159208][T25567] ldm_validate_partition_table(): Disk read failed. [ 705.184711][ T10] usb 5-1: Product: syz [ 705.196323][ T10] usb 5-1: Manufacturer: syz [ 705.197136][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.201070][ T10] usb 5-1: SerialNumber: syz [ 705.212712][T25567] Buffer I/O error on dev loop6, logical block 0, async page read [ 705.224790][T14966] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 705.233687][T25567] Dev loop6: unable to read RDB block 0 [ 705.245942][T25567] loop6: unable to read partition table [ 705.251829][T25567] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 705.262926][T18405] ldm_validate_partition_table(): Disk read failed. [ 705.271324][T18405] Dev loop6: unable to read RDB block 0 [ 705.280909][T18405] loop6: unable to read partition table [ 705.291547][T25570] ldm_validate_partition_table(): Disk read failed. [ 705.325615][T25570] Dev loop6: unable to read RDB block 0 [ 705.339724][T25570] loop6: unable to read partition table [ 705.353912][T25570] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 705.384441][T14966] usb 3-1: Using ep0 maxpacket: 32 [ 705.392150][T14966] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 705.410729][T14966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.440469][T14966] usb 3-1: config 0 descriptor?? [ 705.487181][ T10] usb 5-1: 0:2 : does not exist [ 705.520064][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 705.563836][ T10] usb 5-1: USB disconnect, device number 92 [ 705.657402][T18405] udevd[18405]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.686228][T14966] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 705.714746][T14966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.742566][T14966] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 705.757003][T14966] usb 3-1: media controller created [ 705.789510][T14966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.896580][T14966] az6027: usb out operation failed. (-71) [ 705.914846][T14966] az6027: usb out operation failed. (-71) [ 705.920637][T14966] stb0899_attach: Driver disabled by Kconfig [ 705.945596][T14966] az6027: no front-end attached [ 705.945596][T14966] [ 705.953370][T14966] az6027: usb out operation failed. (-71) [ 705.964735][T14966] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 705.988224][T14966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55 [ 706.010151][T14966] dvb-usb: schedule remote query interval to 400 msecs. [ 706.022655][T14966] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 706.065774][T14966] usb 3-1: USB disconnect, device number 79 [ 706.088945][T25579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8982'. [ 706.249574][T14966] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 706.559625][T25592] loop8: detected capacity change from 0 to 7 [ 706.575951][T25592] Dev loop8: unable to read RDB block 7 [ 706.594570][T25592] loop8: unable to read partition table [ 706.600512][T25592] loop8: partition table beyond EOD, truncated [ 706.634750][T25592] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 706.638454][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 706.638475][ T30] audit: type=1326 audit(1751573434.534:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25595 comm="syz.0.8989" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 707.184521][T14966] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 707.354946][T14966] usb 3-1: Using ep0 maxpacket: 8 [ 707.364060][T14966] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 707.383490][T14966] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 707.398986][T14966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 707.411219][T14966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 707.468575][T14966] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 707.489393][T14966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.512304][T14966] usb 3-1: Product: syz [ 707.521059][T14966] usb 3-1: Manufacturer: syz [ 707.525792][T14966] usb 3-1: SerialNumber: syz [ 707.535204][T14966] usb 3-1: config 0 descriptor?? [ 707.543759][T25608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 707.791052][T14966] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 707.824888][T14966] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input56 [ 708.073572][ C0] powermate: config urb returned -71 [ 708.075099][T14958] usb 3-1: USB disconnect, device number 80 [ 708.078955][ C0] powermate: usb_submit_urb(config) failed [ 708.085036][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 708.924458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 709.607073][T25669] cifs: Unknown parameter 'f' [ 709.832215][T25681] bridge1: entered promiscuous mode [ 709.846921][T25681] bridge1: entered allmulticast mode [ 709.872480][T25683] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 711.246721][T25740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9056'. [ 711.505754][T25750] netlink: 'syz.2.9058': attribute type 9 has an invalid length. [ 711.514055][T25750] netlink: 200108 bytes leftover after parsing attributes in process `syz.2.9058'. [ 711.574508][T25750] openvswitch: netlink: Message has 5 unknown bytes. [ 711.899290][ T30] audit: type=1326 audit(1751573439.794:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25766 comm="syz.4.9068" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x0 [ 712.666123][T25793] program syz.1.9079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 712.777524][T25796] input: syz1 as /devices/virtual/input/input57 [ 713.242701][T25816] netlink: 356 bytes leftover after parsing attributes in process `syz.3.9089'. [ 713.445726][T15339] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 713.574449][T14966] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 713.622836][T15339] usb 3-1: Using ep0 maxpacket: 16 [ 713.637062][T15339] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 713.645911][T15339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.705029][T15339] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 713.714784][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 713.721046][T15339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.729326][T14966] usb 2-1: Using ep0 maxpacket: 32 [ 713.744078][T15339] usb 3-1: Product: syz [ 713.750196][T14966] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 713.758828][T15339] usb 3-1: Manufacturer: syz [ 713.763566][T14966] usb 2-1: config 0 has no interface number 0 [ 713.769916][T15339] usb 3-1: SerialNumber: syz [ 713.777074][T14966] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 713.789514][T15339] usb 3-1: config 0 descriptor?? [ 713.795497][T14966] usb 2-1: config 0 interface 85 has no altsetting 0 [ 713.807206][T15339] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 713.815722][T14966] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 713.825182][T14966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.833576][T14966] usb 2-1: Product: syz [ 713.838740][T14966] usb 2-1: Manufacturer: syz [ 713.848271][T14966] usb 2-1: SerialNumber: syz [ 713.875198][T14966] usb 2-1: config 0 descriptor?? [ 714.525320][T14966] appletouch 2-1:0.85: Geyser mode initialized. [ 714.562930][T14966] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input58 [ 714.615301][T15339] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 714.629896][T15339] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 714.663654][T15339] usb 3-1: USB disconnect, device number 81 [ 714.775110][ T5904] usb 2-1: USB disconnect, device number 76 [ 714.775133][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 714.856226][ T5904] appletouch 2-1:0.85: input: appletouch disconnected [ 715.098659][T25854] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.9108'. [ 715.954862][T14958] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 716.131751][T14958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.156717][T14958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 716.224637][T14958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 716.273391][T14958] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 716.320132][T14958] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 716.337632][T14958] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 716.364409][T14958] usb 5-1: Manufacturer: syz [ 716.382001][T14958] usb 5-1: config 0 descriptor?? [ 716.654740][T15339] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 716.797975][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9136'. [ 716.846162][T15339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.867337][T15339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.890322][T15339] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 716.909941][T15339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 716.933988][T15339] usb 4-1: SerialNumber: syz [ 716.984635][T14958] rc_core: IR keymap rc-hauppauge not found [ 716.990843][T14958] Registered IR keymap rc-empty [ 717.003857][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.166735][T15339] usb 4-1: 0:2 : does not exist [ 717.268547][T15339] usb 4-1: USB disconnect, device number 101 [ 717.294528][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.388329][T18421] udevd[18421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.393893][T14958] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 717.487307][T14958] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59 [ 717.509463][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.568619][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.607930][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.754510][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.842115][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.887823][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.914848][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.934544][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.954738][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 717.984591][T14958] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 718.014708][T14958] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 718.023847][T14958] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 718.088574][T14958] usb 5-1: USB disconnect, device number 93 [ 720.639725][T25976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9162'. [ 720.699199][T25976] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 721.596594][ T30] audit: type=1804 audit(1751573449.484:611): pid=26019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9183" name="/newroot/1611/file0" dev="tmpfs" ino=8148 res=1 errno=0 [ 721.670592][ T30] audit: type=1804 audit(1751573449.494:612): pid=26019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9183" name="/newroot/1611/file0" dev="tmpfs" ino=8148 res=1 errno=0 [ 722.829343][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9194'. [ 723.054944][T14958] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 723.216718][T14958] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 723.228533][T14958] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 723.251401][T14958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 723.272108][T14958] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 723.298935][T14958] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 723.317102][T14958] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 723.326842][T14958] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 723.335931][T14958] usb 4-1: Product: syz [ 723.340355][T14958] usb 4-1: Manufacturer: syz [ 723.361167][T14958] cdc_wdm 4-1:1.0: skipping garbage [ 723.377812][T14958] cdc_wdm 4-1:1.0: skipping garbage [ 723.397943][T14958] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 723.405081][T14958] cdc_wdm 4-1:1.0: Unknown control protocol [ 724.687195][ T30] audit: type=1326 audit(1751573452.584:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26101 comm="syz.2.9216" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e539 code=0x0 [ 724.928081][T26111] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 724.934163][T26111] syzkaller0: linktype set to 774 [ 725.033518][T26115] sctp: [Deprecated]: syz.0.9223 (pid 26115) Use of int in maxseg socket option. [ 725.033518][T26115] Use struct sctp_assoc_value instead [ 725.398971][ T30] audit: type=1326 audit(1751573453.294:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.0.9230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 725.446985][ T30] audit: type=1326 audit(1751573453.294:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.0.9230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 725.473340][ T30] audit: type=1326 audit(1751573453.294:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.0.9230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 725.557627][ T30] audit: type=1326 audit(1751573453.294:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.0.9230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 725.579752][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.624449][ T30] audit: type=1326 audit(1751573453.294:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26128 comm="syz.0.9230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 725.646509][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.719336][ T30] audit: type=1326 audit(1751573453.464:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.0.9233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 725.792265][ T30] audit: type=1326 audit(1751573453.464:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.0.9233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 725.808072][T14958] usb 4-1: USB disconnect, device number 102 [ 725.814355][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.549555][T26170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9247'. [ 726.574520][T26170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9247'. [ 726.934752][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 727.098453][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 727.139465][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 727.164203][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 727.185610][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 727.225247][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.259262][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 727.297305][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.351937][T26193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9257'. [ 727.390152][T26193] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9257'. [ 727.401077][T26195] loop9: detected capacity change from 0 to 3 [ 727.427195][T18405] Dev loop9: unable to read RDB block 3 [ 727.432928][T18405] loop9: unable to read partition table [ 727.444871][T26193] netlink: 'syz.4.9257': attribute type 6 has an invalid length. [ 727.453191][T26193] netlink: 'syz.4.9257': attribute type 5 has an invalid length. [ 727.456458][T18405] loop9: partition table beyond EOD, [ 727.473135][T26193] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9257'. [ 727.474603][T18405] truncated [ 727.514694][T26195] Dev loop9: unable to read RDB block 3 [ 727.530865][T26195] loop9: unable to read partition table [ 727.547287][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 727.551204][T26195] loop9: partition table beyond EOD, [ 727.552854][ T24] usbtmc 2-1:16.0: can't read capabilities [ 727.594539][T26195] truncated [ 727.602142][T26195] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 727.763186][ T5904] usb 2-1: USB disconnect, device number 77 [ 727.924799][T15339] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 728.097030][T15339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.124890][T15339] usb 4-1: config 0 has no interfaces? [ 728.134412][T15339] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 728.163965][T15339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.195677][T15339] usb 4-1: config 0 descriptor?? [ 728.418854][ T24] usb 4-1: USB disconnect, device number 103 [ 728.430674][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 728.430692][ T30] audit: type=1326 audit(1751573456.324:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.471051][ T30] audit: type=1326 audit(1751573456.364:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.510790][ T30] audit: type=1326 audit(1751573456.404:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.533756][ T30] audit: type=1326 audit(1751573456.404:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.560741][ T30] audit: type=1326 audit(1751573456.404:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26226 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.615948][ T30] audit: type=1326 audit(1751573456.504:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.642911][ T30] audit: type=1326 audit(1751573456.514:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.668428][ T30] audit: type=1326 audit(1751573456.514:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.694085][ T30] audit: type=1326 audit(1751573456.514:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 728.721353][ T30] audit: type=1326 audit(1751573456.514:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26224 comm="syz.1.9273" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 729.199080][T26232] cgroup: fork rejected by pids controller in /syz4 [ 729.372589][T26335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9285'. [ 729.525170][T15339] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 729.696584][T15339] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 729.725808][T15339] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 729.756372][T15339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.774810][T15339] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 729.790067][T15339] usb 2-1: config 0 has no interface number 0 [ 729.830621][T15339] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 729.841293][T15339] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 729.858412][T15339] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 729.868790][T15339] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.885889][T15339] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 729.897488][T15339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.910543][T15339] usb 2-1: config 0 descriptor?? [ 729.922778][T26348] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9291'. [ 729.929886][T15339] gspca_main: spca561-2.14.0 probing abcd:cdee [ 729.932672][T26348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9291'. [ 730.036416][T26350] netlink: 'syz.2.9293': attribute type 11 has an invalid length. [ 730.136256][T15339] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 730.169478][T15339] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 730.180685][T15339] usb 2-1: MIDIStreaming interface descriptor not found [ 730.310241][T15339] usb 2-1: USB disconnect, device number 78 [ 730.344008][T26359] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9296'. [ 730.394828][T26359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9296'. [ 730.537693][T26366] sctp: [Deprecated]: syz.3.9299 (pid 26366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.537693][T26366] Use struct sctp_sack_info instead [ 730.770128][T26373] input: syz0 as /devices/virtual/input/input60 [ 731.229149][T26395] netlink: 308 bytes leftover after parsing attributes in process `syz.1.9312'. [ 731.491936][T26399] cgroup: fork rejected by pids controller in /syz3 [ 734.106341][T27615] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 734.176131][T27617] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9345'. [ 734.197088][T27617] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9345'. [ 734.424725][ T5904] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 734.607489][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.636994][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.662103][T27638] Context (ID=0x1) not attached to queue pair (handle=0x1:0x40) [ 734.664695][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 734.698035][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.717287][ T5904] usb 2-1: Product: syz [ 734.721531][ T5904] usb 2-1: Manufacturer: syz [ 734.736506][ T5904] usb 2-1: SerialNumber: syz [ 734.972091][ T5904] usb 2-1: 0:2 : does not exist [ 734.989963][ T5904] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 735.074920][ T5904] usb 2-1: USB disconnect, device number 79 [ 735.108452][T18405] udevd[18405]: setting mode of /dev/bus/usb/002/079 to 020664 failed: No such file or directory [ 735.134817][T15339] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 735.152992][T18405] udevd[18405]: setting owner of /dev/bus/usb/002/079 to uid=0, gid=0 failed: No such file or directory [ 735.216437][T18405] udevd[18405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.306815][T15339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.325686][T15339] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 735.364284][T15339] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 735.378609][T15339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.466100][T15339] usb 5-1: config 0 descriptor?? [ 735.975433][T15339] corsair-psu 0003:1B1C:1C07.00CC: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.4-1/input0 [ 736.104710][ T5904] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 736.157083][T15339] corsair-psu 0003:1B1C:1C07.00CC: unable to initialize device (-71) [ 736.186710][T15339] corsair-psu 0003:1B1C:1C07.00CC: probe with driver corsair-psu failed with error -71 [ 736.216314][T15339] usb 5-1: USB disconnect, device number 94 [ 736.286822][ T5904] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 736.305080][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.355259][ T5904] usb 2-1: config 0 has no interface number 0 [ 736.371893][ T5904] usb 2-1: config 0 interface 66 has no altsetting 0 [ 736.394094][ T5904] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 736.411500][T27666] fido_id[27666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 736.417965][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.445696][T27668] cgroup: fork rejected by pids controller in /syz2 [ 736.470164][ T5904] usb 2-1: config 0 descriptor?? [ 736.487626][ T5904] usb 2-1: selecting invalid altsetting 0 [ 736.805542][ T5904] usb 2-1: USB disconnect, device number 80 [ 736.870337][T18405] udevd[18405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 736.925617][T28518] netlink: 95 bytes leftover after parsing attributes in process `syz.0.9372'. [ 737.114976][T28706] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 737.794763][ T5904] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 738.027007][ T5904] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 738.039541][T29295] netem: change failed [ 738.043973][ T5904] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 738.072531][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 738.101614][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 738.147717][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 738.183262][ T5904] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 738.193480][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 738.209036][ T5904] usb 4-1: Product: syz [ 738.213402][ T5904] usb 4-1: Manufacturer: syz [ 738.235944][ T5904] cdc_wdm 4-1:1.0: skipping garbage [ 738.241329][ T5904] cdc_wdm 4-1:1.0: skipping garbage [ 738.267307][ T5904] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 738.273294][ T5904] cdc_wdm 4-1:1.0: Unknown control protocol [ 738.479552][ T24] usb 4-1: USB disconnect, device number 104 [ 739.442171][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9403'. [ 739.810923][T29346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.163581][T29358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9415'. [ 740.210729][T29358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.326282][T29362] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 740.667609][T29377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9422'. [ 740.704521][T29377] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9422'. [ 740.747635][T29377] batadv1: entered promiscuous mode [ 740.752961][T29377] batadv1: entered allmulticast mode [ 740.993049][T29389] tipc: Enabling of bearer rejected, already enabled [ 741.294870][ T5904] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 741.456565][ T5904] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 741.480761][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.510264][ T5904] usb 3-1: config 0 has no interface number 0 [ 741.530453][ T5904] usb 3-1: config 0 interface 66 has no altsetting 0 [ 741.545528][ T5904] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 741.567448][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.592255][ T5904] usb 3-1: config 0 descriptor?? [ 741.613705][ T5904] usb 3-1: selecting invalid altsetting 0 [ 741.843989][ T5904] usb 3-1: USB disconnect, device number 82 [ 742.477086][T29416] cgroup: fork rejected by pids controller in /syz0 [ 742.593037][T29554] tmpfs: Unknown parameter 'fd' [ 742.809739][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9448'. [ 742.922410][T30144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9449'. [ 743.604889][T14966] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 743.776028][T14966] usb 3-1: Using ep0 maxpacket: 16 [ 743.815869][T14966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.836487][T14966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.867150][T14966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.887331][T14966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.913608][T14966] usb 3-1: Product: syz [ 743.928225][T14966] usb 3-1: Manufacturer: syz [ 743.954057][T14966] usb 3-1: SerialNumber: syz [ 744.114118][T30737] sctp: [Deprecated]: syz.0.9461 (pid 30737) Use of int in max_burst socket option deprecated. [ 744.114118][T30737] Use struct sctp_assoc_value instead [ 744.253603][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 744.253621][ T30] audit: type=1326 audit(1751573472.144:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30740 comm="syz.3.9463" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 744.344913][T15339] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 744.394667][T14966] usb 3-1: 0:2 : does not exist [ 744.515234][T15339] usb 5-1: Using ep0 maxpacket: 32 [ 744.529219][T15339] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 744.545210][T15339] usb 5-1: config 0 has no interface number 0 [ 744.555162][T15339] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 744.565064][T15339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.573234][T15339] usb 5-1: Product: syz [ 744.579534][T15339] usb 5-1: Manufacturer: syz [ 744.584262][T15339] usb 5-1: SerialNumber: syz [ 744.617513][T15339] usb 5-1: config 0 descriptor?? [ 744.636049][T15339] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 744.659853][T30748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9465'. [ 744.814182][T14966] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 744.848699][T15339] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 744.885037][T14966] usb 3-1: USB disconnect, device number 83 [ 744.895495][T15339] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 744.995108][T18405] udevd[18405]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.274166][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 745.275298][T14956] usb 5-1: USB disconnect, device number 95 [ 745.308369][T14956] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 745.336893][T14956] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 745.357268][T14956] quatech2 5-1:0.51: device disconnected [ 745.464709][ T5904] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 745.629585][ T5904] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 745.640068][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.653427][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.678276][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.688388][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.702092][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.721956][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.730666][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.743827][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.760177][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.768419][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.778072][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.789835][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.807398][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.824907][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 745.834486][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.873746][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.888638][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.898226][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.934695][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 745.962858][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 745.982758][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 745.998394][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 746.012446][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.021663][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 746.026454][ T5904] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 746.058566][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 746.089814][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 746.094707][ T5904] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 746.120849][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.136909][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.155430][ T5904] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 746.170012][ T5904] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 746.178779][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 746.178828][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.244395][ T5904] usb 4-1: Product: syz [ 746.248659][ T5904] usb 4-1: Manufacturer: syz [ 746.253304][ T5904] usb 4-1: SerialNumber: syz [ 746.328885][ T5904] usb 4-1: config 0 descriptor?? [ 746.385194][ T5904] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 746.412854][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 746.424475][ T10] usbtmc 3-1:16.0: can't read capabilities [ 746.582971][ T10] usb 4-1: USB disconnect, device number 105 [ 746.607757][ T10] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 746.638330][T14966] usb 3-1: USB disconnect, device number 84 [ 747.065653][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9486'. [ 747.478759][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.487075][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.672034][ T30] audit: type=1804 audit(1751573475.564:641): pid=31869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9499" name="/" dev="pidfs" ino=31869 res=1 errno=0 [ 748.189125][T31887] loop9: detected capacity change from 0 to 8 [ 748.210532][T31887] Dev loop9: unable to read RDB block 8 [ 748.229044][T31887] loop9: unable to read partition table [ 748.243914][T31887] loop9: partition table beyond EOD, truncated [ 748.263982][T31887] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 750.684946][T15339] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 750.844891][T31977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9542'. [ 750.880543][T15339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.901185][T15339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 750.944968][T15339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 750.978255][T15339] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 751.020686][T15339] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 751.044949][T15339] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 751.065561][T15339] usb 5-1: Manufacturer: syz [ 751.165883][T15339] usb 5-1: config 0 descriptor?? [ 751.476994][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9544'. [ 751.511580][ T692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9544'. [ 751.525099][T15339] rc_core: IR keymap rc-hauppauge not found [ 751.535485][T15339] Registered IR keymap rc-empty [ 751.540535][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.548832][ T692] netlink: 'syz.3.9544': attribute type 13 has an invalid length. [ 751.571700][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.606097][T15339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 751.651957][T15339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input63 [ 751.726352][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.786754][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.824957][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.874620][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.905857][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.925739][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.964516][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 751.990857][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.056849][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.074872][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.096646][T15339] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 752.109308][T15339] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 752.138058][T15339] usb 5-1: USB disconnect, device number 96 [ 752.684068][ T754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9562'. [ 753.194420][T15339] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 753.347111][T15339] usb 5-1: Using ep0 maxpacket: 16 [ 753.357742][T15339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.373002][T15339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.388251][T15339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 753.398513][T15339] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 753.413009][T15339] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 753.432756][T15339] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 753.442545][T15339] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 753.454498][T15339] usb 5-1: Manufacturer: syz [ 753.462791][T15339] usb 5-1: config 0 descriptor?? [ 753.581072][ T780] bridge0: port 3(vlan0) entered blocking state [ 753.598179][ T780] bridge0: port 3(vlan0) entered disabled state [ 753.605218][ T780] vlan0: entered allmulticast mode [ 753.610606][ T780] bridge0: entered allmulticast mode [ 753.621643][ T780] vlan0: left allmulticast mode [ 753.634567][ T780] bridge0: left allmulticast mode [ 753.754876][T15339] rc_core: IR keymap rc-hauppauge not found [ 753.760934][T15339] Registered IR keymap rc-empty [ 753.768802][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.801883][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.829479][T15339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 753.849997][T15339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 753.878670][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.925015][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.965005][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.994819][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.016569][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.034559][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.098787][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.140378][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.175833][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.197099][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.225197][T15339] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 754.269265][T15339] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 754.290774][T15339] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 754.325674][T15339] usb 5-1: USB disconnect, device number 97 [ 754.735727][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 754.904713][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 754.914020][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 754.939550][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 754.958004][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.978554][ T10] usb 4-1: config 0 descriptor?? [ 755.425598][ T10] elecom 0003:056E:00FE.00CD: item fetching failed at offset 2/5 [ 755.448519][ T10] elecom 0003:056E:00FE.00CD: probe with driver elecom failed with error -22 [ 755.631772][ T10] usb 4-1: USB disconnect, device number 106 [ 758.536348][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9597'. [ 758.814730][ T5904] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 759.014910][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 759.022145][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 759.040197][ T5904] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 759.072027][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.091040][ T5904] usb 4-1: Product: syz [ 759.095871][ T5904] usb 4-1: Manufacturer: syz [ 759.100674][ T5904] usb 4-1: SerialNumber: syz [ 759.145479][ T5904] usb 4-1: config 0 descriptor?? [ 759.624647][ T5904] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 760.028036][ T5904] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 760.075080][ T5904] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 760.134856][ T5904] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 760.192436][ T5904] usb 4-1: USB disconnect, device number 107 [ 761.105098][T15339] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 761.285392][T15339] usb 4-1: Using ep0 maxpacket: 16 [ 761.296372][T15339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.315559][T15339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 761.327487][T15339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 761.370088][T15339] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 761.390438][T15339] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.414767][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 761.429089][ T2279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9628'. [ 761.439723][T15339] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 761.443225][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9628'. [ 761.452702][T15339] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 761.467567][T15339] usb 4-1: Manufacturer: syz [ 761.484640][T15339] usb 4-1: config 0 descriptor?? [ 761.576525][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 761.594793][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.614959][ T10] usb 2-1: config 0 descriptor?? [ 761.639266][ T10] cp210x 2-1:0.0: cp210x converter detected [ 761.818087][T15339] rc_core: IR keymap rc-hauppauge not found [ 761.836149][T15339] Registered IR keymap rc-empty [ 761.850857][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.876477][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 761.911573][T15339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 761.927363][T15339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65 [ 761.960860][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.014990][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.051857][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 762.060515][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.093638][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 762.104230][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.146842][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.185096][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.208888][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.244831][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.284734][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.304167][ T10] usb 2-1: USB disconnect, device number 81 [ 762.318828][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 762.337965][T15339] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 762.362283][ T10] cp210x 2-1:0.0: device disconnected [ 762.383335][T15339] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 762.397606][T15339] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 762.431471][T15339] usb 4-1: USB disconnect, device number 108 [ 763.304606][T15339] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 763.485303][T15339] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 763.520387][T15339] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 763.552451][T15339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 763.579520][T15339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 763.622206][T15339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 763.706143][T15339] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 763.728833][T15339] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 763.753117][T15339] usb 4-1: Product: syz [ 763.773618][T15339] usb 4-1: Manufacturer: syz [ 763.808729][T15339] cdc_wdm 4-1:1.0: skipping garbage [ 763.814200][T15339] cdc_wdm 4-1:1.0: skipping garbage [ 763.840638][T15339] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 763.849345][T15339] cdc_wdm 4-1:1.0: Unknown control protocol [ 764.039159][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.046172][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.052859][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.059520][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.066089][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.072743][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.079580][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.086234][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.094581][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.101244][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.114760][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.121442][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.130553][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.137229][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.143751][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.150390][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.157163][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.163838][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.170157][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 764.176820][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 764.188343][T14966] usb 4-1: USB disconnect, device number 109 [ 764.194872][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 764.265946][T15339] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 764.427034][T15339] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 764.435686][T15339] usb 2-1: config 0 has no interface number 0 [ 764.441863][T15339] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 764.461306][T15339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.473425][T15339] usb 2-1: config 0 descriptor?? [ 764.506585][T15339] usb 2-1: selecting invalid altsetting 1 [ 764.512537][T15339] dvb_ttusb_budget: ttusb_init_controller: error [ 764.534394][T15339] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 764.683215][T15339] DVB: Unable to find symbol cx22700_attach() [ 764.787171][T15339] DVB: Unable to find symbol tda10046_attach() [ 764.801737][T15339] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 764.824209][T15339] usb 2-1: USB disconnect, device number 82 [ 764.960981][ T2356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9657'. [ 765.468914][ T30] audit: type=1326 audit(1751573493.364:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.527713][ T30] audit: type=1326 audit(1751573493.364:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.614749][ T30] audit: type=1326 audit(1751573493.394:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.674911][ T30] audit: type=1326 audit(1751573493.394:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.734771][ T30] audit: type=1326 audit(1751573493.394:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.784610][ T30] audit: type=1326 audit(1751573493.404:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.832498][ T30] audit: type=1326 audit(1751573493.404:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.904375][ T30] audit: type=1326 audit(1751573493.404:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 765.962612][ T30] audit: type=1326 audit(1751573493.404:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2371 comm="syz.3.9665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 766.139392][ T2397] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 767.517946][ T2463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9698'. [ 767.544718][ T2463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9698'. [ 767.564021][ T2463] netlink: 'syz.4.9698': attribute type 14 has an invalid length. [ 767.989500][ T2479] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 768.047922][ T2483] netlink: 'syz.4.9707': attribute type 4 has an invalid length. [ 769.928448][ T30] audit: type=1326 audit(1751573497.824:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2566 comm="syz.4.9737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 770.129050][ T2576] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 770.450503][ T2596] binder: 2595:2596 ioctl c018620c 80000900 returned -1 [ 770.477250][ T2597] ip6gretap0: entered promiscuous mode [ 772.354434][T14958] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 772.514788][T14958] usb 3-1: Using ep0 maxpacket: 8 [ 772.523398][T14958] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.540590][T14958] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 772.571367][T14958] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 772.596692][T14958] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 772.611114][T14958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.627876][T14958] usb 3-1: Product: syz [ 772.638086][T14958] usb 3-1: Manufacturer: syz [ 772.642946][T14958] usb 3-1: SerialNumber: syz [ 772.646371][ T2674] program syz.4.9775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.878619][T14958] cdc_ncm 3-1:1.0: bind() failure [ 772.925299][T14958] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 772.954480][T14958] cdc_ncm 3-1:1.1: bind() failure [ 772.980962][T14958] usb 3-1: USB disconnect, device number 85 [ 773.744956][T14958] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 773.868587][ T2708] block device autoloading is deprecated and will be removed. [ 773.895296][T14958] usb 5-1: Using ep0 maxpacket: 32 [ 773.897314][ T2708] syz.3.9788: attempt to access beyond end of device [ 773.897314][ T2708] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 773.913555][T14958] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 773.913585][T14958] usb 5-1: config 0 has no interface number 0 [ 773.913631][T14958] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.913658][T14958] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.973619][T14958] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 773.991894][T14958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.030746][T14958] usb 5-1: config 0 descriptor?? [ 774.652901][T14958] uclogic 0003:28BD:0094.00CE: pen parameters not found [ 774.667818][T14958] uclogic 0003:28BD:0094.00CE: interface is invalid, ignoring [ 774.863842][T14958] usb 5-1: USB disconnect, device number 98 [ 775.038084][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 775.038126][ T30] audit: type=1326 audit(1751573502.934:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.079158][ T30] audit: type=1326 audit(1751573502.934:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.131667][ T30] audit: type=1326 audit(1751573502.964:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.159299][ T30] audit: type=1326 audit(1751573502.964:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.212547][ T30] audit: type=1326 audit(1751573502.964:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.264725][ T30] audit: type=1326 audit(1751573502.974:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.307794][ T30] audit: type=1326 audit(1751573502.974:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.361308][ T30] audit: type=1326 audit(1751573502.974:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.437876][ T30] audit: type=1326 audit(1751573503.004:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.523566][ T30] audit: type=1326 audit(1751573503.004:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2755 comm="syz.2.9807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 775.732894][ T2782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9818'. [ 776.324729][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 776.504556][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 776.515875][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 776.541422][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.569968][ T10] usb 4-1: config 0 descriptor?? [ 776.588236][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 777.344404][T14966] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 777.404633][ T10] gspca_vc032x: reg_w err -71 [ 777.409412][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.429826][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.444944][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.454457][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.459834][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.474595][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.479994][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.492321][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.498557][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.504119][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.509595][T14966] usb 5-1: Using ep0 maxpacket: 8 [ 777.515684][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.521347][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.527941][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.534040][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.539785][T14966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.551554][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.557354][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.566883][T14966] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 777.580305][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.586666][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 777.592040][ T10] gspca_vc032x: Unknown sensor... [ 777.597449][T14966] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 777.624628][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 777.651309][T14966] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.662312][ T10] usb 4-1: USB disconnect, device number 110 [ 777.669376][T14966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.688227][T14966] usb 5-1: Product: syz [ 777.692481][T14966] usb 5-1: Manufacturer: syz [ 777.700627][T14966] usb 5-1: SerialNumber: syz [ 777.938666][T14966] cdc_ncm 5-1:1.0: bind() failure [ 777.953427][T14966] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 777.962373][T14966] cdc_ncm 5-1:1.1: bind() failure [ 777.972992][T14966] usb 5-1: USB disconnect, device number 99 [ 778.914742][ T5904] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 779.076412][ T5904] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 779.088982][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.099716][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.116225][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.124085][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.133975][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.147363][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.155770][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.167294][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.179240][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.191596][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.201571][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.215309][T14966] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 779.220374][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.231178][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.241346][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.252813][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.261122][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.264737][ T10] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 779.271387][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.305179][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.316466][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.328286][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.340731][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.348917][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 779.358755][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 779.383970][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 779.401110][ T5904] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 779.410792][ T5904] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 779.420164][ T5904] usb 3-1: Product: syz [ 779.424376][T14966] usb 2-1: Using ep0 maxpacket: 32 [ 779.430061][ T5904] usb 3-1: Manufacturer: syz [ 779.435049][ T5904] usb 3-1: SerialNumber: syz [ 779.438475][T14966] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 779.446426][ T5904] usb 3-1: config 0 descriptor?? [ 779.459415][ T5904] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 779.469051][T14966] usb 2-1: config 0 has no interface number 0 [ 779.476391][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 779.497062][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 779.521486][T14966] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 779.530734][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.548391][T14966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.571014][ T10] usb 5-1: Product: syz [ 779.576151][ T10] usb 5-1: Manufacturer: syz [ 779.580933][ T10] usb 5-1: SerialNumber: syz [ 779.586034][T14966] usb 2-1: Product: syz [ 779.590341][T14966] usb 2-1: Manufacturer: syz [ 779.600329][T14966] usb 2-1: SerialNumber: syz [ 779.606843][ T10] usb 5-1: config 0 descriptor?? [ 779.622506][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 779.630049][T14966] usb 2-1: config 0 descriptor?? [ 779.646046][T14966] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 779.770801][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 779.779034][ T978] usb 3-1: USB disconnect, device number 86 [ 779.799838][ T978] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 779.861719][T14966] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 779.878418][T14966] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 780.072980][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 48 [ 780.154241][ T2937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9875'. [ 780.277008][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 780.286643][ T978] usb 2-1: USB disconnect, device number 83 [ 780.307488][ T978] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 780.333777][ T978] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 780.356354][ T978] quatech2 2-1:0.51: device disconnected [ 780.433171][ T10] gspca_sq930x: ucbus_write failed -71 [ 780.446305][ T10] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 780.471978][ T10] usb 5-1: USB disconnect, device number 100 [ 782.080481][ T2975] usb usb8: usbfs: process 2975 (syz.4.9891) did not claim interface 0 before use [ 783.035144][ T978] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 783.209479][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 783.226313][ T978] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 783.258776][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.301608][ T978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 783.320651][ T978] pvrusb2: ********** [ 783.342919][ T978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 783.367697][ T3016] loop4: detected capacity change from 0 to 524255232 [ 783.377002][ T978] pvrusb2: Important functionality might not be entirely working. [ 783.394786][ T978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 783.422360][ T978] pvrusb2: ********** [ 783.535913][ T2343] pvrusb2: Invalid write control endpoint [ 783.716509][ T2343] pvrusb2: Invalid write control endpoint [ 783.747439][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 783.764366][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 783.783456][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 783.815563][ T2343] pvrusb2: Device being rendered inoperable [ 783.830722][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 783.848884][T14966] usb 3-1: USB disconnect, device number 87 [ 783.885196][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 783.893816][ T2343] pvrusb2: Attached sub-driver cx25840 [ 783.939975][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 783.984323][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 784.434721][ T5904] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 784.594970][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 784.602480][ T5904] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 784.623007][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 784.642947][ T5904] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 784.654134][ T5904] usb 5-1: Product: syz [ 784.662533][ T5904] usb 5-1: Manufacturer: syz [ 784.667944][ T5904] usb 5-1: SerialNumber: syz [ 784.683429][ T5904] usb 5-1: config 0 descriptor?? [ 784.702705][ T5904] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 785.381782][ T5904] gspca_zc3xx: reg_w_i err -71 [ 785.974642][ T5904] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 785.983560][ T5904] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 786.009207][ T5904] usb 5-1: USB disconnect, device number 101 [ 786.660076][ T3104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9950'. [ 787.064909][T14966] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 787.244866][T14966] usb 4-1: Using ep0 maxpacket: 8 [ 787.265833][T14966] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 787.288446][T14966] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 787.306167][T14966] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 787.330667][T14966] usb 4-1: Product: syz [ 787.344543][T14966] usb 4-1: Manufacturer: syz [ 787.349224][T14966] usb 4-1: SerialNumber: syz [ 787.365713][T14966] usb 4-1: config 0 descriptor?? [ 787.374923][T14966] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 787.636073][ T5904] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 787.806541][ T5904] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.826192][ T5904] usb 2-1: config 0 has no interface number 0 [ 787.836665][ T5904] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.874852][ T5904] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.906447][ T5904] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.926225][ T5904] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 787.954431][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.973395][ T5904] usb 2-1: config 0 descriptor?? [ 787.993790][T14966] gspca_zc3xx: reg_w_i err -71 [ 788.027518][ T3146] Failed to get privilege flags for destination (handle=0x2:0x40) [ 788.594588][T14966] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 788.601008][T14966] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 788.618614][ T5904] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.00CF/input/input66 [ 788.636811][T14966] usb 4-1: USB disconnect, device number 111 [ 788.777883][ T5904] uclogic 0003:28BD:0042.00CF: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 788.859081][ T5904] usb 2-1: USB disconnect, device number 84 [ 789.019525][ T3164] fido_id[3164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 789.234683][T14958] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 789.397216][T14958] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.427795][T14958] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.483315][T14958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 789.506050][T14958] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 789.520815][T14958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.565474][T14958] usb 4-1: config 0 descriptor?? [ 790.027238][T14958] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.00D0/input/input67 [ 790.142044][T14958] sony 0003:054C:03D5.00D0: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 790.358353][T14958] usb 4-1: USB disconnect, device number 112 [ 791.487571][ T3252] netlink: 'syz.1.10012': attribute type 21 has an invalid length. [ 791.499477][ T3252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10012'. [ 791.511282][ T3252] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 791.957338][ T3275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.092617][ T3279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.342969][ T3290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10027'. [ 792.358980][ T3289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10028'. [ 792.386241][ T3290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10027'. [ 793.014785][T14966] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 793.092691][ T3312] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10039'. [ 793.175062][T14966] usb 4-1: Using ep0 maxpacket: 16 [ 793.190070][T14966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.228165][T14966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.262836][T14966] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 793.284442][T14966] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 793.299001][T14966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.319461][T14966] usb 4-1: config 0 descriptor?? [ 793.771997][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 793.802816][T14966] microsoft 0003:045E:07DA.00D1: ignoring exceeding usage max [ 793.819969][ T3330] vivid-000: disconnect [ 793.846062][ T3329] vivid-000: reconnect [ 793.852643][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 793.884465][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 793.895204][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 793.918376][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 793.946413][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 793.953723][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 793.992791][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 794.004675][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 794.020779][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 794.039014][T14966] microsoft 0003:045E:07DA.00D1: unknown main item tag 0x0 [ 794.088919][T14966] microsoft 0003:045E:07DA.00D1: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 794.125457][T14966] microsoft 0003:045E:07DA.00D1: no inputs found [ 794.142108][T14966] microsoft 0003:045E:07DA.00D1: could not initialize ff, continuing anyway [ 794.186120][T14966] usb 4-1: USB disconnect, device number 113 [ 794.297731][ T3343] kvm: user requested TSC rate below hardware speed [ 794.329267][ T3338] fido_id[3338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 794.897864][ T3368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10065'. [ 795.689761][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10079'. [ 795.717934][ T3409] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10078'. [ 795.874746][ T3413] netlink: 'syz.4.10080': attribute type 1 has an invalid length. [ 796.170290][ T3423] ALSA: mixer_oss: invalid OSS volume 'A141=wVe]' [ 796.188183][ T3423] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 796.200180][ T3422] macsec0: entered promiscuous mode [ 796.201607][ T3423] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 796.206329][ T3422] team0: entered promiscuous mode [ 796.206383][ T3422] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 796.206401][ T3422] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3422, name: syz.2.10085 [ 796.206420][ T3422] preempt_count: 201, expected: 0 [ 796.233354][ T3423] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 796.236323][ T3422] RCU nest depth: 0, expected: 0 [ 796.236355][ T3422] 3 locks held by syz.2.10085/3422: [ 796.236371][ T3422] #0: ffffffff8fa147b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 796.236454][ T3422] #1: ffffffff8f50fc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 796.236515][ T3422] #2: ffff888059936368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 796.254607][ T3423] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 796.254731][ T3422] Preemption disabled at: [ 796.263574][ T3423] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 796.269439][ T3422] [] dev_uc_add+0x56/0x120 [ 796.269488][ T3422] CPU: 0 UID: 0 PID: 3422 Comm: syz.2.10085 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 796.269513][ T3422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 796.269527][ T3422] Call Trace: [ 796.269536][ T3422] [ 796.269546][ T3422] dump_stack_lvl+0x189/0x250 [ 796.269583][ T3422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.269618][ T3422] ? __pfx__printk+0x10/0x10 [ 796.269650][ T3422] ? print_lock_name+0xde/0x100 [ 796.269676][ T3422] ? dev_uc_add+0x56/0x120 [ 796.269711][ T3422] __might_resched+0x495/0x610 [ 796.269754][ T3422] ? dev_uc_add+0x56/0x120 [ 796.269781][ T3422] ? __pfx___might_resched+0x10/0x10 [ 796.269819][ T3422] ? is_printk_cpu_sync_owner+0x32/0x40 [ 796.269866][ T3422] __mutex_lock+0x106/0xe80 [ 796.269918][ T3422] ? team_change_rx_flags+0x38/0x220 [ 796.269958][ T3422] ? __pfx___mutex_lock+0x10/0x10 [ 796.269991][ T3422] ? netdev_info+0x10a/0x160 [ 796.270021][ T3422] ? __sock_sendmsg+0x219/0x270 [ 796.270061][ T3422] ? __pfx_netdev_info+0x10/0x10 [ 796.270103][ T3422] team_change_rx_flags+0x38/0x220 [ 796.270143][ T3422] ? __pfx_team_change_rx_flags+0x10/0x10 [ 796.270178][ T3422] __dev_set_promiscuity+0x534/0x740 [ 796.270208][ T3422] ? __pfx_netdev_info+0x10/0x10 [ 796.270260][ T3422] netif_set_promiscuity+0x50/0xe0 [ 796.270292][ T3422] dev_set_promiscuity+0x126/0x260 [ 796.270326][ T3422] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 796.270363][ T3422] __dev_set_promiscuity+0x534/0x740 [ 796.270394][ T3422] ? __hw_addr_add_ex+0x3c5/0x770 [ 796.270426][ T3422] __dev_set_rx_mode+0x17c/0x260 [ 796.270457][ T3422] dev_uc_add+0xc8/0x120 [ 796.270487][ T3422] macsec_dev_open+0xd9/0x530 [ 796.270523][ T3422] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 796.270554][ T3422] ? __pfx_macsec_dev_open+0x10/0x10 [ 796.270583][ T3422] ? ib_device_get_by_netdev+0x84/0x4d0 [ 796.270611][ T3422] ? hsr_netdev_notify+0x29e/0xcf0 [ 796.270637][ T3422] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 796.270671][ T3422] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 796.270707][ T3422] ? ip6_route_dev_notify+0x9a/0x5b0 [ 796.270736][ T3422] ? notifier_call_chain+0x3bf/0x3e0 [ 796.270783][ T3422] __dev_open+0x470/0x880 [ 796.270813][ T3422] ? __pfx___dev_open+0x10/0x10 [ 796.270837][ T3422] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 796.270882][ T3422] __dev_change_flags+0x1ea/0x6d0 [ 796.270911][ T3422] ? validate_linkmsg+0x765/0x950 [ 796.270947][ T3422] ? __pfx___dev_change_flags+0x10/0x10 [ 796.270987][ T3422] rtnl_newlink_create+0x555/0xb00 [ 796.271032][ T3422] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 796.271058][ T3422] ? rtnl_newlink+0x8db/0x1c70 [ 796.271086][ T3422] ? __pfx___mutex_lock+0x10/0x10 [ 796.271135][ T3422] ? ns_capable+0x8a/0xf0 [ 796.271177][ T3422] rtnl_newlink+0x16d6/0x1c70 [ 796.271220][ T3422] ? __pfx_rtnl_newlink+0x10/0x10 [ 796.271263][ T3422] ? __lock_acquire+0xab9/0xd20 [ 796.271312][ T3422] ? __lock_acquire+0xab9/0xd20 [ 796.271370][ T3422] ? is_bpf_text_address+0x26/0x2b0 [ 796.271413][ T3422] ? is_bpf_text_address+0x292/0x2b0 [ 796.271453][ T3422] ? is_bpf_text_address+0x26/0x2b0 [ 796.271490][ T3422] ? kernel_text_address+0xa5/0xe0 [ 796.271537][ T3422] ? __lock_acquire+0xab9/0xd20 [ 796.271600][ T3422] ? __pfx_rtnl_newlink+0x10/0x10 [ 796.271623][ T3422] rtnetlink_rcv_msg+0x7cc/0xb70 [ 796.271652][ T3422] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 796.271676][ T3422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 796.271719][ T3422] netlink_rcv_skb+0x205/0x470 [ 796.271749][ T3422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 796.271774][ T3422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 796.271817][ T3422] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.271843][ T3422] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.271876][ T3422] netlink_unicast+0x758/0x8d0 [ 796.271913][ T3422] netlink_sendmsg+0x805/0xb30 [ 796.271952][ T3422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.271983][ T3422] ? __import_iovec+0x5d4/0x7f0 [ 796.272003][ T3422] ? aa_sock_msg_perm+0x94/0x160 [ 796.272037][ T3422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 796.272067][ T3422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.272095][ T3422] __sock_sendmsg+0x219/0x270 [ 796.272134][ T3422] ____sys_sendmsg+0x505/0x830 [ 796.272171][ T3422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.272208][ T3422] ? __pfx_futex_wake_mark+0x10/0x10 [ 796.272255][ T3422] ___sys_sendmsg+0x21f/0x2a0 [ 796.272287][ T3422] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.272361][ T3422] ? __fget_files+0x2a/0x420 [ 796.272387][ T3422] ? __fget_files+0x3a0/0x420 [ 796.272428][ T3422] __sys_sendmsg+0x164/0x220 [ 796.272460][ T3422] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.272498][ T3422] ? rcu_is_watching+0x15/0xb0 [ 796.272543][ T3422] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 796.272583][ T3422] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.272621][ T3422] __do_fast_syscall_32+0xb6/0x2b0 [ 796.272658][ T3422] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.272696][ T3422] do_fast_syscall_32+0x34/0x80 [ 796.272733][ T3422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 796.272762][ T3422] RIP: 0023:0xf708e539 [ 796.272787][ T3422] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 796.272808][ T3422] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 796.272834][ T3422] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 796.272849][ T3422] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.272865][ T3422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 796.272881][ T3422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 796.272894][ T3422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 796.272931][ T3422] [ 796.272978][ T3422] [ 796.867223][ T3422] ============================= [ 796.872085][ T3422] [ BUG: Invalid wait context ] [ 796.876941][ T3422] 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 Tainted: G W [ 796.885619][ T3422] ----------------------------- [ 796.890471][ T3422] syz.2.10085/3422 is trying to lock: [ 796.895850][ T3422] ffff888079ac8e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 796.905983][ T3422] other info that might help us debug this: [ 796.911878][ T3422] context-{5:5} [ 796.915347][ T3422] 3 locks held by syz.2.10085/3422: [ 796.920550][ T3422] #0: ffffffff8fa147b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 796.930073][ T3422] #1: ffffffff8f50fc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 796.939151][ T3422] #2: ffff888059936368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 796.949807][ T3422] stack backtrace: [ 796.953544][ T3422] CPU: 0 UID: 0 PID: 3422 Comm: syz.2.10085 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 796.953570][ T3422] Tainted: [W]=WARN [ 796.953576][ T3422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 796.953587][ T3422] Call Trace: [ 796.953596][ T3422] [ 796.953605][ T3422] dump_stack_lvl+0x189/0x250 [ 796.953635][ T3422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.953661][ T3422] ? __pfx__printk+0x10/0x10 [ 796.953680][ T3422] ? print_lock_name+0xde/0x100 [ 796.953698][ T3422] __lock_acquire+0xbcb/0xd20 [ 796.953724][ T3422] ? team_change_rx_flags+0x38/0x220 [ 796.953749][ T3422] lock_acquire+0x120/0x360 [ 796.953770][ T3422] ? team_change_rx_flags+0x38/0x220 [ 796.953800][ T3422] __mutex_lock+0x182/0xe80 [ 796.953825][ T3422] ? team_change_rx_flags+0x38/0x220 [ 796.953853][ T3422] ? team_change_rx_flags+0x38/0x220 [ 796.953878][ T3422] ? __pfx___mutex_lock+0x10/0x10 [ 796.953902][ T3422] ? netdev_info+0x10a/0x160 [ 796.953921][ T3422] ? __sock_sendmsg+0x219/0x270 [ 796.953946][ T3422] ? __pfx_netdev_info+0x10/0x10 [ 796.953970][ T3422] team_change_rx_flags+0x38/0x220 [ 796.953995][ T3422] ? __pfx_team_change_rx_flags+0x10/0x10 [ 796.954019][ T3422] __dev_set_promiscuity+0x534/0x740 [ 796.954039][ T3422] ? __pfx_netdev_info+0x10/0x10 [ 796.954060][ T3422] netif_set_promiscuity+0x50/0xe0 [ 796.954079][ T3422] dev_set_promiscuity+0x126/0x260 [ 796.954099][ T3422] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 796.954125][ T3422] __dev_set_promiscuity+0x534/0x740 [ 796.954144][ T3422] ? __hw_addr_add_ex+0x3c5/0x770 [ 796.954165][ T3422] __dev_set_rx_mode+0x17c/0x260 [ 796.954184][ T3422] dev_uc_add+0xc8/0x120 [ 796.954204][ T3422] macsec_dev_open+0xd9/0x530 [ 796.954228][ T3422] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 796.954250][ T3422] ? __pfx_macsec_dev_open+0x10/0x10 [ 796.954275][ T3422] ? ib_device_get_by_netdev+0x84/0x4d0 [ 796.954301][ T3422] ? hsr_netdev_notify+0x29e/0xcf0 [ 796.954321][ T3422] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 796.954343][ T3422] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 796.954364][ T3422] ? ip6_route_dev_notify+0x9a/0x5b0 [ 796.954382][ T3422] ? notifier_call_chain+0x3bf/0x3e0 [ 796.954419][ T3422] __dev_open+0x470/0x880 [ 796.954436][ T3422] ? __pfx___dev_open+0x10/0x10 [ 796.954451][ T3422] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 796.954479][ T3422] __dev_change_flags+0x1ea/0x6d0 [ 796.954498][ T3422] ? validate_linkmsg+0x765/0x950 [ 796.954521][ T3422] ? __pfx___dev_change_flags+0x10/0x10 [ 796.954544][ T3422] rtnl_newlink_create+0x555/0xb00 [ 796.954568][ T3422] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 796.954585][ T3422] ? rtnl_newlink+0x8db/0x1c70 [ 796.954601][ T3422] ? __pfx___mutex_lock+0x10/0x10 [ 796.954629][ T3422] ? ns_capable+0x8a/0xf0 [ 796.954655][ T3422] rtnl_newlink+0x16d6/0x1c70 [ 796.954677][ T3422] ? __pfx_rtnl_newlink+0x10/0x10 [ 796.954695][ T3422] ? __lock_acquire+0xab9/0xd20 [ 796.954722][ T3422] ? __lock_acquire+0xab9/0xd20 [ 796.954751][ T3422] ? is_bpf_text_address+0x26/0x2b0 [ 796.954779][ T3422] ? is_bpf_text_address+0x292/0x2b0 [ 796.954802][ T3422] ? is_bpf_text_address+0x26/0x2b0 [ 796.954827][ T3422] ? kernel_text_address+0xa5/0xe0 [ 796.954853][ T3422] ? __lock_acquire+0xab9/0xd20 [ 796.954884][ T3422] ? __pfx_rtnl_newlink+0x10/0x10 [ 796.954899][ T3422] rtnetlink_rcv_msg+0x7cc/0xb70 [ 796.954916][ T3422] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 796.954931][ T3422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 796.954953][ T3422] netlink_rcv_skb+0x205/0x470 [ 796.954971][ T3422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 796.954988][ T3422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 796.955009][ T3422] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.955026][ T3422] ? netlink_deliver_tap+0x2e/0x1b0 [ 796.955046][ T3422] netlink_unicast+0x758/0x8d0 [ 796.955065][ T3422] netlink_sendmsg+0x805/0xb30 [ 796.955086][ T3422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.955105][ T3422] ? __import_iovec+0x5d4/0x7f0 [ 796.955120][ T3422] ? aa_sock_msg_perm+0x94/0x160 [ 796.955141][ T3422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 796.955164][ T3422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.955182][ T3422] __sock_sendmsg+0x219/0x270 [ 796.955207][ T3422] ____sys_sendmsg+0x505/0x830 [ 796.955229][ T3422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.955250][ T3422] ? __pfx_futex_wake_mark+0x10/0x10 [ 796.955275][ T3422] ___sys_sendmsg+0x21f/0x2a0 [ 796.955295][ T3422] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.955328][ T3422] ? __fget_files+0x2a/0x420 [ 796.955345][ T3422] ? __fget_files+0x3a0/0x420 [ 796.955367][ T3422] __sys_sendmsg+0x164/0x220 [ 796.955386][ T3422] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.955414][ T3422] ? rcu_is_watching+0x15/0xb0 [ 796.955441][ T3422] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 796.955467][ T3422] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.955491][ T3422] __do_fast_syscall_32+0xb6/0x2b0 [ 796.955517][ T3422] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.955541][ T3422] do_fast_syscall_32+0x34/0x80 [ 796.955567][ T3422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 796.955588][ T3422] RIP: 0023:0xf708e539 [ 796.955604][ T3422] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 796.955619][ T3422] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 796.955636][ T3422] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 796.955648][ T3422] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.955659][ T3422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 796.955669][ T3422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 796.955679][ T3422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 796.955695][ T3422] [ 797.513093][ T3422] team_slave_0: entered promiscuous mode [ 797.518711][ T3423] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 797.519042][ T3422] team_slave_1: entered promiscuous mode [ 797.527277][ T3423] ALSA: mixer_oss: invalid OSS volume '|~\' [ 797.540935][ T3423] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 797.549545][ T3423] ALSA: mixer_oss: invalid OSS volume '' [ 797.603050][ T3422] macsec1: entered allmulticast mode [ 797.634514][ T3422] macsec0: entered allmulticast mode [ 797.639875][ T3422] team0: entered allmulticast mode [ 797.648031][ T3422] team_slave_0: entered allmulticast mode [ 797.653930][ T3422] team_slave_1: entered allmulticast mode [ 803.794505][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!