last executing test programs: 9.082539158s ago: executing program 2 (id=8251): pipe(&(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000001c0)=0x5, 0x4) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78ad39bb0cfdbca51d195cdb800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00bcda3a2377a6b78ca7db7e778f78a35606defed610939bd55e9f0876ed02704d5ab90946abc49fd79ea746dcd5a435d97b3642309c09a3e6b247c0de29c481237d02c571fede2690f6917f6ffc3f2c3d0159707492f689f77613160576f51fa6fd651f7acd622c90a7e0631d66773b6476bdf7a83ec3b11d6a20f64a106c3b3ed056c315151f8a26209e8157a78e6a77995fef6597f355d7f743c48ce4e263904e0b8f44d6807676d4d18b962cf8f5f341", @ANYRESHEX=r0], 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffefffe}, {0x4}, {0x6, 0x1}]}) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x33, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1}, 0x1c) shutdown(r2, 0x0) socket(0x0, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x69, "fac5f047651415c5ef08fa5b894dbb1c7a54a1450fd27547213a78242dbe60834a2536e8ed89fe7b62091c80def9d119e8abb87805e3e75a1aed345820ff1c2bfaa539241cbd1f612727851c1788b6fb8ef05e401bb34a6f900a117ce05c9ff7e7be7f0614c671f6b6"}, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.90665711s ago: executing program 3 (id=8261): write(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000f07000)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f000000a300)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0xfffffffd, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x800, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500009c0000000079106e000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @broadcast}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x6}]}}}}}) fstatfs(r5, &(0x7f0000000440)=""/226) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_secret(0x0) socket(0x22, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 7.559704073s ago: executing program 2 (id=8264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "94e087a424856f5b5026be9facabe069e79859d9c1ac372002f5ebf68e132af5dad8e6c614fa996edae027938c7140530d7ffc0ef62811cb90e5aee9dbad9e"}}, {0x21, &(0x7f0000000340)=@string={0x21, 0x3, "a8af03e62f144437ea3fa09330609122d058844222297400ac0d1b3dfb9373"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.807539051s ago: executing program 3 (id=8267): syz_open_dev$evdev(0x0, 0x5, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000003a40)={{0x12, 0x1, 0x110, 0x7c, 0x44, 0x14, 0x40, 0xbda, 0xb720, 0x9a28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0xe0, 0x9, 0x1, 0xff, 0xff, 0xff, 0x5, [], [{{0x9, 0x5, 0xa, 0xa, 0x20, 0x1, 0x5, 0x6}}]}}]}}]}}, 0x0) 6.790275037s ago: executing program 4 (id=8268): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x69, 0x3f, 0xc, 0x10, 0x1044, 0x7001, 0x8020, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0xc6874c83f2e5f2aa, 0x3, [{{0x9, 0x4, 0x2c, 0x0, 0x2, 0xc1, 0xd, 0xb2, 0x7, [], [{{0x9, 0x5, 0x2, 0x1, 0x20, 0x3, 0x10, 0xd}}, {{0x9, 0x5, 0x7, 0x0, 0x68, 0x6, 0xb, 0x7f}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000020c0)={0x44, &(0x7f0000001e00)={0x40, 0x7, 0x12, "8869204552882c7f9369a54e96e7b51899c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.696775754s ago: executing program 2 (id=8269): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x88002) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x46, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) read$hidraw(r1, 0x0, 0x1f) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 6.696072995s ago: executing program 0 (id=8270): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$HIDIOCGRDESC(r1, 0x4008c002, 0x0) 5.475536703s ago: executing program 3 (id=8271): r0 = syz_open_dev$evdev(&(0x7f0000003140), 0x400, 0x20080) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000003180)=[0x4, 0xc]) 5.43582404s ago: executing program 3 (id=8272): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306010003603e04002a90a027000000ce8292dd25"], 0x0}, 0x0) 4.885724541s ago: executing program 0 (id=8273): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x6c, 0x43, 0xa6, 0x8, 0x5d1, 0x9003, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0xcc, 0x98}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/199) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 4.683563609s ago: executing program 2 (id=8274): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x700a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.614676871s ago: executing program 1 (id=8275): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="202403"], 0x0}, 0x0) 4.540006998s ago: executing program 4 (id=8276): syz_usb_connect(0x0, 0x26, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xa9, 0xde, 0xa6, 0x10, 0x2040, 0xd854, 0x8238, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xe3, 0x92, 0x0, [@generic={0x2, 0x1}]}}]}}]}}, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4008c002, 0x0) 3.618543817s ago: executing program 3 (id=8277): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcf, 0x30, 0x40, 0x20, 0x86a, 0x102, 0xc8e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x95, 0x0, 0x0, 0x1b, 0x53, 0xda}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000006500)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006400)={0x20, 0x82, 0x1, 't'}, 0x0, 0x0, 0x0}) 3.475599976s ago: executing program 0 (id=8278): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 3.144887155s ago: executing program 4 (id=8279): syz_open_dev$evdev(&(0x7f0000001b00), 0x40, 0x10200) 3.105818357s ago: executing program 4 (id=8280): syz_usb_connect(0x0, 0x26, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xac, 0xd4, 0xe3, 0x10, 0x18e8, 0x6232, 0xa0e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x9, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0xc3, 0x0, 0x0, 0x40, 0xa7, 0xe1, 0x0, [@generic={0x2, 0x9}]}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) 2.931547267s ago: executing program 2 (id=8281): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x0, "603e0400"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @global=@item_4={0x3, 0x1, 0x5, "afe3f309"}, @main=@item_4={0x3, 0x0, 0x8, "de4e06d8"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) 2.419487904s ago: executing program 3 (id=8282): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="ae84017522fc9c03") 2.015385613s ago: executing program 0 (id=8283): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.683603497s ago: executing program 1 (id=8284): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xd2, 0x4b, 0xcc, 0x10, 0xccd, 0x5a, 0x4fc1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x3, 0x0, 0x9b, 0xa0, 0x57}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000003e40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.668490149s ago: executing program 4 (id=8285): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000000)='8', 0x1) 1.253439191s ago: executing program 2 (id=8286): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x0, 0xad, 0x54, 0x65, 0x40, 0x13d3, 0x3333, 0x84ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0xda, 0x7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 703.573874ms ago: executing program 0 (id=8287): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 664.020239ms ago: executing program 0 (id=8288): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="400f09"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000400)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 185.835636ms ago: executing program 1 (id=8289): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x40086602, &(0x7f00000025c0)=""/4091) 59.627147ms ago: executing program 1 (id=8290): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000200)={0x0, 0x2, 0x8000, 0x1000101, "00fcffffff7f000021700c1e0000000000000000000004000000000000007954"}) 59.249216ms ago: executing program 4 (id=8291): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 41.505609ms ago: executing program 1 (id=8292): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000100)=""/115, 0x73) 0s ago: executing program 1 (id=8293): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0xc1, &(0x7f0000000180)=ANY=[@ANYBLOB="050fc1000403100b14100400b712d041d36c2d8515ec26ba5affb8d69d10006a66a17ba6f3dfb30a417a26ff2e4c76046cf4fcbdcab3217b7d513caa2a7bdf813a16397386d3350fd9086c871a1cc51bcec412aeb21d16be222d8b2fc82fdd7c7306e1750ed16af6db7ad5a82e61874f93f90908472dc3a55f7839b7a8a792ca8ad7288d07c59222e0f1084128bc0f7e461141d0cff03ceee9a0a78c6b75375f665646b6539fea8b40743ace635189d1c8892209e0d07db2a52a192efa5fe8187c"]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): lNumber=0 [ 1774.466563][ T9095] [ 1774.466575][ T9095] dump_stack_lvl+0x241/0x360 [ 1774.466610][ T9095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.483727][ T5281] usb 1-1: config 0 descriptor?? [ 1774.487380][ T9095] ? __pfx__printk+0x10/0x10 [ 1774.487418][ T9095] ? ref_tracker_alloc+0x332/0x490 [ 1774.487447][ T9095] should_fail_ex+0x3b0/0x4e0 [ 1774.487472][ T9095] ? skb_clone+0x20c/0x390 [ 1774.487491][ T9095] should_failslab+0xac/0x100 [ 1774.487512][ T9095] ? skb_clone+0x20c/0x390 [ 1774.487530][ T9095] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1774.487556][ T9095] skb_clone+0x20c/0x390 [ 1774.487579][ T9095] __netlink_deliver_tap+0x3cc/0x7c0 [ 1774.487610][ T9095] ? netlink_deliver_tap+0x2e/0x1b0 [ 1774.487633][ T9095] netlink_deliver_tap+0x19d/0x1b0 [ 1774.487658][ T9095] netlink_unicast+0x7c4/0x990 [ 1774.487689][ T9095] ? __pfx_netlink_unicast+0x10/0x10 [ 1774.555653][ T9095] ? __virt_addr_valid+0x183/0x530 [ 1774.560860][ T9095] ? __check_object_size+0x48e/0x900 [ 1774.566152][ T9095] netlink_sendmsg+0x8e4/0xcb0 [ 1774.571109][ T9095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1774.576408][ T9095] ? aa_sock_msg_perm+0x91/0x160 [ 1774.581346][ T9095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1774.586637][ T9095] __sock_sendmsg+0x221/0x270 [ 1774.591318][ T9095] ____sys_sendmsg+0x52a/0x7e0 [ 1774.596090][ T9095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1774.601393][ T9095] __sys_sendmsg+0x292/0x380 [ 1774.605978][ T9095] ? __pfx___sys_sendmsg+0x10/0x10 [ 1774.611096][ T9095] ? __pfx_vfs_write+0x10/0x10 [ 1774.615904][ T9095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1774.622237][ T9095] ? do_syscall_64+0x100/0x230 [ 1774.627012][ T9095] ? do_syscall_64+0xb6/0x230 [ 1774.631693][ T9095] do_syscall_64+0xf3/0x230 [ 1774.636209][ T9095] ? clear_bhb_loop+0x35/0x90 [ 1774.640974][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.646867][ T9095] RIP: 0033:0x7f2b35f7dff9 [ 1774.651280][ T9095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.670880][ T9095] RSP: 002b:00007f2b36d84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1774.679295][ T9095] RAX: ffffffffffffffda RBX: 00007f2b36135f80 RCX: 00007f2b35f7dff9 [ 1774.687266][ T9095] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1774.695236][ T9095] RBP: 00007f2b36d84090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.703214][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.711186][ T9095] R13: 0000000000000000 R14: 00007f2b36135f80 R15: 00007f2b3625fa28 [ 1774.719168][ T9095] [ 1774.765085][ T9095] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8001'. [ 1774.774613][ T9095] openvswitch: netlink: Actions may not be safe on all matching packets [ 1774.879988][ T5281] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1774.943657][ T5281] usb 1-1: USB disconnect, device number 2 [ 1774.954277][ T5281] usblp1: removed [ 1775.000429][ T7071] Bluetooth: hci3: unexpected cc 0x042e length: 9 > 7 [ 1775.316732][T27335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.385679][ T5281] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1775.432682][T27335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.538395][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 1775.550430][ T5281] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1775.570222][ T5281] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1775.588114][T27335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.603324][ T5281] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1775.628125][T31978] usb 3-1: USB disconnect, device number 103 [ 1775.642932][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1775.671508][ T5281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1775.691014][ T9115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8011'. [ 1775.709299][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1775.742053][T27335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.745676][ T5281] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1775.777616][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.808916][ T5281] usb 1-1: config 0 descriptor?? [ 1775.880446][ T4625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1775.893731][ T4625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1775.904258][ T4625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1775.917442][ T4625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1775.934659][ T4625] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1775.945897][ T4625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1775.948796][ T9121] binfmt_misc: register: failed to install interpreter file ./file0 [ 1776.034191][ T5281] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1776.073293][T27335] bridge_slave_1: left allmulticast mode [ 1776.085318][T27335] bridge_slave_1: left promiscuous mode [ 1776.093332][T27335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.103121][T27335] bridge_slave_0: left allmulticast mode [ 1776.109746][T27335] bridge_slave_0: left promiscuous mode [ 1776.120097][T27335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.011798][T27335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.024836][T27335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1777.038456][T27335] bond0 (unregistering): Released all slaves [ 1777.390887][ T9122] chnl_net:caif_netlink_parms(): no params data found [ 1777.734704][ T80] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1777.742474][T27440] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1777.753037][ T5281] usb 1-1: USB disconnect, device number 3 [ 1777.784779][ T5281] usblp0: removed [ 1777.818197][T27335] hsr_slave_0: left promiscuous mode [ 1777.858773][T27335] hsr_slave_1: left promiscuous mode [ 1777.872468][T27335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.901345][T27335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.913945][T27440] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.927861][T27335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.945573][T27335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.946250][ T80] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1777.975549][T27440] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1777.984663][T27440] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1778.010513][ T4625] Bluetooth: hci4: command tx timeout [ 1778.022555][ T80] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.041021][T27440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.056724][ T80] usb 4-1: config 0 descriptor?? [ 1778.103268][T27335] veth1_macvtap: left promiscuous mode [ 1778.137138][T27335] veth0_macvtap: left promiscuous mode [ 1778.198384][T27335] veth1_vlan: left promiscuous mode [ 1778.203752][T27335] veth0_vlan: left promiscuous mode [ 1778.227349][ T7071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1778.244766][ T7071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1778.254421][ T7071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1778.267189][ T7071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1778.278966][ T7071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1778.287374][ T7071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1778.342022][T27440] usb 3-1: string descriptor 0 read error: -22 [ 1778.600032][T27440] usb 3-1: USB disconnect, device number 104 [ 1778.608969][ T80] ath6kl: Unsupported hardware version: 0x0 [ 1778.624822][ T80] ath6kl: Failed to init ath6kl core: -22 [ 1778.631404][ T80] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1779.385310][T27335] team0 (unregistering): Port device team_slave_1 removed [ 1779.447328][T27335] team0 (unregistering): Port device team_slave_0 removed [ 1780.076079][ T4625] Bluetooth: hci4: command tx timeout [ 1780.129429][ T9166] netlink: 'syz.0.8023': attribute type 10 has an invalid length. [ 1780.144870][ T9166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1780.156673][ T9166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.170669][ T9166] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1780.316354][ T4625] Bluetooth: hci0: command tx timeout [ 1780.340295][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.349900][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.357687][ T9122] bridge_slave_0: entered allmulticast mode [ 1780.364912][ T9122] bridge_slave_0: entered promiscuous mode [ 1780.373387][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.381019][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.388590][ T9122] bridge_slave_1: entered allmulticast mode [ 1780.405297][ T9122] bridge_slave_1: entered promiscuous mode [ 1780.431887][ T5281] usb 4-1: USB disconnect, device number 67 [ 1780.480639][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.494308][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.671010][ T9122] team0: Port device team_slave_0 added [ 1780.707046][ T9122] team0: Port device team_slave_1 added [ 1780.797498][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.805211][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.855191][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.896869][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.912269][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.944535][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.968000][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1780.968019][ T29] audit: type=1326 audit(1727518989.226:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.3.8032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7914f7dff9 code=0x0 [ 1781.111908][ T9122] hsr_slave_0: entered promiscuous mode [ 1781.135232][ T9122] hsr_slave_1: entered promiscuous mode [ 1781.339708][T27335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.435015][ T9171] chnl_net:caif_netlink_parms(): no params data found [ 1781.529537][T27335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.742859][T27335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.001952][T27335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.148712][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.162054][ T4625] Bluetooth: hci4: command tx timeout [ 1782.202155][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.216170][ T9171] bridge_slave_0: entered allmulticast mode [ 1782.234471][ T9171] bridge_slave_0: entered promiscuous mode [ 1782.243540][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.267141][ T80] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1782.267891][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.296918][ T9171] bridge_slave_1: entered allmulticast mode [ 1782.301788][ T7071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1782.303975][ T9171] bridge_slave_1: entered promiscuous mode [ 1782.322878][ T7071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1782.333169][ T7071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1782.341361][ T7071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1782.348992][ T7071] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1782.356722][ T7071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1782.395716][ T4625] Bluetooth: hci0: command tx timeout [ 1782.434956][ T80] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1782.466476][ T80] usb 1-1: config 0 has no interface number 0 [ 1782.472735][ T80] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1782.497772][ T80] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1782.523695][ T80] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.532164][ T80] usb 1-1: Product: syz [ 1782.536497][ T80] usb 1-1: Manufacturer: syz [ 1782.541177][ T80] usb 1-1: SerialNumber: syz [ 1782.548165][ T80] usb 1-1: config 0 descriptor?? [ 1782.561425][ T9239] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1782.579284][ T80] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 1782.593990][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1782.633850][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1782.665236][ T80] ums-sddr09 1-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 1782.736657][ T5281] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1782.799753][ T9171] team0: Port device team_slave_0 added [ 1782.818869][T27335] bridge_slave_1: left allmulticast mode [ 1782.828276][T27335] bridge_slave_1: left promiscuous mode [ 1782.834016][T27335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.847898][T27335] bridge_slave_0: left allmulticast mode [ 1782.853557][T27335] bridge_slave_0: left promiscuous mode [ 1782.861461][T27335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.921744][ T5281] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1782.943930][ T5281] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1782.955218][ T5281] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1782.981643][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1782.993392][ T5281] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1783.006700][ T5281] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1783.029848][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1783.038136][ T5281] usb 4-1: Product: syz [ 1783.042358][ T5281] usb 4-1: Manufacturer: syz [ 1783.067344][ T5281] cdc_wdm 4-1:1.0: skipping garbage [ 1783.072615][ T5281] cdc_wdm 4-1:1.0: skipping garbage [ 1783.093610][ T5281] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1783.112914][ T5281] cdc_wdm 4-1:1.0: Unknown control protocol [ 1783.272247][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.282094][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.315939][ T5281] usb 4-1: USB disconnect, device number 68 [ 1783.343171][ T80] usb 1-1: USB disconnect, device number 4 [ 1783.497498][T27335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.510055][T27335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1783.531566][T27335] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1783.542241][T27335] bond0 (unregistering): Released all slaves [ 1783.558731][ T9171] team0: Port device team_slave_1 added [ 1783.696466][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.703484][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.729362][ C0] vkms_vblank_simulate: vblank timer overrun [ 1783.736759][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.783917][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.791265][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.817991][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.029825][ T9171] hsr_slave_0: entered promiscuous mode [ 1784.037654][ T9171] hsr_slave_1: entered promiscuous mode [ 1784.043980][ T9171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1784.052945][ T9171] Cannot create hsr debugfs directory [ 1784.066795][ T9255] netlink: 'syz.0.8041': attribute type 12 has an invalid length. [ 1784.120513][ T9122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1784.175608][ T1174] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 1784.193006][ T9122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1784.205329][ T9122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1784.227114][T27335] hsr_slave_0: left promiscuous mode [ 1784.236427][ T4625] Bluetooth: hci4: command tx timeout [ 1784.249424][T27335] hsr_slave_1: left promiscuous mode [ 1784.259783][T27335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.272138][T27335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.293629][T27335] veth1_macvtap: left promiscuous mode [ 1784.299272][T27335] veth0_macvtap: left promiscuous mode [ 1784.304880][T27335] veth1_vlan: left promiscuous mode [ 1784.310237][T27335] veth0_vlan: left promiscuous mode [ 1784.315611][ T1174] usb 4-1: device descriptor read/64, error -71 [ 1784.406077][ T4625] Bluetooth: hci1: command tx timeout [ 1784.478039][ T4625] Bluetooth: hci0: command tx timeout [ 1784.572913][ T1174] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 1784.735643][ T1174] usb 4-1: device descriptor read/64, error -71 [ 1784.850220][ T1174] usb usb4-port1: attempt power cycle [ 1784.973968][T27335] team0 (unregistering): Port device team_slave_1 removed [ 1785.057496][T27335] team0 (unregistering): Port device team_slave_0 removed [ 1785.205762][ T1174] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 1785.240041][ T1174] usb 4-1: device descriptor read/8, error -71 [ 1785.485736][ T1174] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 1785.522518][ T1174] usb 4-1: device descriptor read/8, error -71 [ 1785.636944][ T1174] usb usb4-port1: unable to enumerate USB device [ 1785.728327][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 1785.749834][ T9122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1785.980004][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.007021][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.014287][ T9243] bridge_slave_0: entered allmulticast mode [ 1786.047964][ T9243] bridge_slave_0: entered promiscuous mode [ 1786.132777][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.153330][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.175786][ T9243] bridge_slave_1: entered allmulticast mode [ 1786.197347][ T9243] bridge_slave_1: entered promiscuous mode [ 1786.308973][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.349961][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.485791][ T4625] Bluetooth: hci1: command tx timeout [ 1786.551018][ T9243] team0: Port device team_slave_0 added [ 1786.565531][ T4625] Bluetooth: hci0: command tx timeout [ 1786.579291][ T9243] team0: Port device team_slave_1 added [ 1786.694230][ T7071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1786.713167][ T7071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1786.723957][ T7071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1786.734423][ T7071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1786.742912][ T7071] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1786.750665][ T7071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1786.863741][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1786.873711][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1786.909377][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.970407][T27335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.999354][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.008411][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.043273][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.102762][T27335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.193014][T27335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.241480][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1787.299531][T27335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.336066][ T9243] hsr_slave_0: entered promiscuous mode [ 1787.342328][ T9243] hsr_slave_1: entered promiscuous mode [ 1787.349611][ T9243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1787.357486][ T9243] Cannot create hsr debugfs directory [ 1787.532483][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1787.573561][ T9171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1787.604259][ T9171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1787.628857][ T9171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1787.684886][ T9294] chnl_net:caif_netlink_parms(): no params data found [ 1787.719537][ T9171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1787.755822][ T8] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1787.783021][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.790252][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1787.808207][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.815571][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.932795][T27335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.953966][ T8] usb 4-1: config 0 has no interfaces? [ 1787.961890][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1787.985414][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.021660][ T8] usb 4-1: config 0 descriptor?? [ 1788.113422][T27335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.228946][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.243598][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.257078][ T9294] bridge_slave_0: entered allmulticast mode [ 1788.264232][ T9294] bridge_slave_0: entered promiscuous mode [ 1788.298869][T27335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.339103][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1788.339813][ T5281] usb 4-1: USB disconnect, device number 73 [ 1788.351769][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.363184][ T9294] bridge_slave_1: entered allmulticast mode [ 1788.376610][ T9294] bridge_slave_1: entered promiscuous mode [ 1788.404452][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.443096][T27335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.469661][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.511527][ T9294] team0: Port device team_slave_0 added [ 1788.534353][ T9294] team0: Port device team_slave_1 added [ 1788.556127][ T4625] Bluetooth: hci1: command tx timeout [ 1788.645987][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.652985][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1788.691833][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.718397][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.751324][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.762370][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1788.796009][ T4625] Bluetooth: hci2: command tx timeout [ 1788.804883][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.955122][ T9294] hsr_slave_0: entered promiscuous mode [ 1788.995110][ T9294] hsr_slave_1: entered promiscuous mode [ 1789.004615][ T9294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1789.017430][ T9294] Cannot create hsr debugfs directory [ 1789.097404][T27335] bridge_slave_1: left allmulticast mode [ 1789.103112][T27335] bridge_slave_1: left promiscuous mode [ 1789.135799][T27335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.148793][T27335] bridge_slave_0: left allmulticast mode [ 1789.154568][T27335] bridge_slave_0: left promiscuous mode [ 1789.160655][T27335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.173434][T27335] bridge_slave_1: left allmulticast mode [ 1789.179590][T27335] bridge_slave_1: left promiscuous mode [ 1789.185300][T27335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.194208][T27335] bridge_slave_0: left allmulticast mode [ 1789.200564][T27335] bridge_slave_0: left promiscuous mode [ 1789.206389][T27335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.361160][ T5281] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1789.535912][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.561897][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.572736][ T5281] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1789.581906][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.623321][ T5281] usb 4-1: config 0 descriptor?? [ 1790.026541][T27335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.039661][T27335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.054083][T27335] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1790.068711][T27335] bond0 (unregistering): Released all slaves [ 1790.082000][ T5281] hid-generic 0003:05AC:4262.0038: unbalanced delimiter at end of report description [ 1790.095362][ T5281] hid-generic 0003:05AC:4262.0038: probe with driver hid-generic failed with error -22 [ 1790.294997][ T5281] usb 4-1: USB disconnect, device number 74 [ 1790.311498][T27335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.323263][T27335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.334498][T27335] bond0 (unregistering): Released all slaves [ 1790.453766][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.581844][ T9171] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.628893][ T8937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.636064][ T8937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.646843][ T4625] Bluetooth: hci1: command tx timeout [ 1790.747425][ T8937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.754523][ T8937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.769507][ T9122] veth0_vlan: entered promiscuous mode [ 1790.885691][ T4625] Bluetooth: hci2: command tx timeout [ 1790.918544][ T9122] veth1_vlan: entered promiscuous mode [ 1791.169439][ T9243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1791.184014][ T9243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1791.220966][ T9243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1791.243717][ T9243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1791.456861][ T9122] veth0_macvtap: entered promiscuous mode [ 1791.531733][T27335] hsr_slave_0: left promiscuous mode [ 1791.540972][T27335] hsr_slave_1: left promiscuous mode [ 1791.552777][T27335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.564823][T27335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.583109][T27335] hsr_slave_0: left promiscuous mode [ 1791.589552][T27335] hsr_slave_1: left promiscuous mode [ 1791.603743][T27335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1791.611386][T27335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1791.626736][T27335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.634213][T27335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.707073][T27335] veth1_macvtap: left promiscuous mode [ 1791.712757][T27335] veth0_macvtap: left promiscuous mode [ 1791.719930][T27335] veth1_vlan: left promiscuous mode [ 1791.725368][T27335] veth0_vlan: left promiscuous mode [ 1791.733753][T27335] veth1_macvtap: left promiscuous mode [ 1791.740610][T27335] veth0_macvtap: left promiscuous mode [ 1791.750811][T27335] veth1_vlan: left promiscuous mode [ 1791.759454][T27335] veth0_vlan: left promiscuous mode [ 1791.926771][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.933120][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.104108][ T9399] FAULT_INJECTION: forcing a failure. [ 1792.104108][ T9399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1792.143745][ T9399] CPU: 1 UID: 0 PID: 9399 Comm: syz.3.8056 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1792.154134][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1792.164224][ T9399] Call Trace: [ 1792.167522][ T9399] [ 1792.170464][ T9399] dump_stack_lvl+0x241/0x360 [ 1792.175166][ T9399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1792.180404][ T9399] ? __pfx__printk+0x10/0x10 [ 1792.185031][ T9399] ? snprintf+0xda/0x120 [ 1792.189311][ T9399] should_fail_ex+0x3b0/0x4e0 [ 1792.194018][ T9399] _copy_to_user+0x2f/0xb0 [ 1792.198464][ T9399] simple_read_from_buffer+0xca/0x150 [ 1792.203872][ T9399] proc_fail_nth_read+0x1e9/0x250 [ 1792.208937][ T9399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1792.214507][ T9399] ? rw_verify_area+0x55e/0x6f0 [ 1792.219384][ T9399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1792.224957][ T9399] vfs_read+0x201/0xbc0 [ 1792.229139][ T9399] ? __pfx_lock_release+0x10/0x10 [ 1792.234189][ T9399] ? __pfx_vfs_read+0x10/0x10 [ 1792.238898][ T9399] ? __fget_files+0x3f3/0x470 [ 1792.243605][ T9399] ? fdget_pos+0x24e/0x320 [ 1792.248049][ T9399] ksys_read+0x183/0x2b0 [ 1792.252333][ T9399] ? __pfx_ksys_read+0x10/0x10 [ 1792.257129][ T9399] ? do_syscall_64+0x100/0x230 [ 1792.261949][ T9399] ? do_syscall_64+0xb6/0x230 [ 1792.266666][ T9399] do_syscall_64+0xf3/0x230 [ 1792.271191][ T9399] ? clear_bhb_loop+0x35/0x90 [ 1792.275888][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.281816][ T9399] RIP: 0033:0x7f7914f7ca3c [ 1792.286260][ T9399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1792.305898][ T9399] RSP: 002b:00007f7915dc8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1792.314343][ T9399] RAX: ffffffffffffffda RBX: 00007f7915135f80 RCX: 00007f7914f7ca3c [ 1792.322342][ T9399] RDX: 000000000000000f RSI: 00007f7915dc80a0 RDI: 0000000000000003 [ 1792.330345][ T9399] RBP: 00007f7915dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.338345][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.346426][ T9399] R13: 0000000000000000 R14: 00007f7915135f80 R15: 00007f791525fa28 [ 1792.354430][ T9399] [ 1792.639758][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1792.965817][ T4625] Bluetooth: hci2: command tx timeout [ 1793.170114][T27335] team0 (unregistering): Port device team_slave_1 removed [ 1793.226003][T27335] team0 (unregistering): Port device team_slave_0 removed [ 1794.297584][T27335] team0 (unregistering): Port device team_slave_1 removed [ 1794.361502][T27335] team0 (unregistering): Port device team_slave_0 removed [ 1795.013563][ T9122] veth1_macvtap: entered promiscuous mode [ 1795.046002][ T4625] Bluetooth: hci2: command tx timeout [ 1795.131544][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1795.142262][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.153848][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.227417][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1795.243622][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.255157][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.268018][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1795.278544][ T9122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.288063][ T9122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.298265][ T9122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.307205][ T9122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.561828][ T9171] veth0_vlan: entered promiscuous mode [ 1795.601777][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.611984][ T8937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.620589][ T8937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.631194][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.661133][ T9171] veth1_vlan: entered promiscuous mode [ 1795.681426][ T9294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1795.699582][ T9294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1795.740046][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.750712][ T9294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1795.792747][ T9294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1795.915025][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1795.924703][ T9430] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1795.931342][ T9430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1795.943162][ T9430] vhci_hcd vhci_hcd.0: Device attached [ 1795.960234][ T9432] usbip_core: unknown command [ 1795.961323][ T9171] veth0_macvtap: entered promiscuous mode [ 1795.966253][ T9432] vhci_hcd: unknown pdu 0 [ 1795.973372][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.976694][ T9432] usbip_core: unknown command [ 1795.982133][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.006807][ T3091] vhci_hcd: stop threads [ 1796.010716][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.011238][ T3091] vhci_hcd: release socket [ 1796.018216][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.023361][ T3091] vhci_hcd: disconnect device [ 1796.049346][ T9171] veth1_macvtap: entered promiscuous mode [ 1796.122629][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1796.135006][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.148606][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1796.159469][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.171458][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1796.193982][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1796.205979][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.216967][ T9171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1796.228910][ T9171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.240762][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1796.274974][ T9171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.289292][ T9171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.298273][ T9171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.307575][ T9171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.387284][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1796.441204][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.467167][T27335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.481615][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.494559][T27335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.526886][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.534023][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.563116][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.580472][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.587632][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.598897][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.622917][ T9243] veth0_vlan: entered promiscuous mode [ 1796.665359][ T9243] veth1_vlan: entered promiscuous mode [ 1796.744660][ T9243] veth0_macvtap: entered promiscuous mode [ 1796.771936][ T9243] veth1_macvtap: entered promiscuous mode [ 1796.797787][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1796.825137][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1796.855532][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.866783][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1796.878950][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.889853][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1796.901111][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1796.936959][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.011161][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.061896][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.085287][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.134801][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.169771][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.196236][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.223739][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1797.255113][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8065'. [ 1797.274556][ T9466] fuse: Unknown parameter 'grou00000000000000000000' [ 1797.337623][ T9243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.346884][ T9243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.356026][ T9243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.364744][ T9243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.379039][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1797.476111][ T9465] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1797.526754][ T9465] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1797.581086][ T9294] veth0_vlan: entered promiscuous mode [ 1797.611151][ T9294] veth1_vlan: entered promiscuous mode [ 1797.718902][ T9294] veth0_macvtap: entered promiscuous mode [ 1797.730818][ T8937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.739465][ T8] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1797.778597][ T8937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.840042][ T9294] veth1_macvtap: entered promiscuous mode [ 1797.863336][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.889816][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.891540][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.928469][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.936397][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1797.955521][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1797.969294][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.975499][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1797.990801][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.992097][ T8] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1798.014717][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.023085][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.027097][ T8] usb 5-1: Product: syz [ 1798.041673][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.049070][ T8] usb 5-1: Manufacturer: syz [ 1798.057950][ T8] usb 5-1: SerialNumber: syz [ 1798.067963][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.073223][ T8] usb 5-1: config 0 descriptor?? [ 1798.082778][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.107031][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.198055][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.227014][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.256024][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.272538][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.283354][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.294826][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.295601][ T5286] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1798.305940][ T9294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.333965][ T9294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.371896][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.466868][ T9294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.483897][ T9294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.493576][ T9294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.502856][ T9294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.549585][ T5286] usb 4-1: config 0 has an invalid interface number: 171 but max is 0 [ 1798.582274][ T5286] usb 4-1: config 0 has no interface number 0 [ 1798.597833][ T5286] usb 4-1: config 0 interface 171 has no altsetting 0 [ 1798.599237][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.642687][ T5286] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 1798.665975][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.675613][ T80] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1798.688115][ T5286] usb 4-1: Product: syz [ 1798.700958][ T5286] usb 4-1: Manufacturer: syz [ 1798.712489][ T5286] usb 4-1: SerialNumber: syz [ 1798.726919][ T5286] usb 4-1: config 0 descriptor?? [ 1798.767476][ T5286] usb-storage 4-1:0.171: USB Mass Storage device detected [ 1798.812786][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.833730][ T80] usb 3-1: Using ep0 maxpacket: 8 [ 1798.852378][ T80] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1798.904323][ T80] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1798.970746][ T80] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1799.007898][ T80] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1799.051746][ T80] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1799.061165][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.082310][ T80] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.096972][ T9479] netlink: 'syz.3.8076': attribute type 9 has an invalid length. [ 1799.232478][T31978] usb 4-1: USB disconnect, device number 75 [ 1799.246240][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.284451][ T7071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1799.304457][ T7071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1799.316250][ T7071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1799.317027][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.343619][ T7071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1799.354325][ T7071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1799.363315][ T7071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1799.403862][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.441003][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.455007][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.515353][ T80] usb 3-1: usb_control_msg returned -32 [ 1799.532598][ T80] usbtmc 3-1:16.0: can't read capabilities [ 1799.533559][T27335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.551777][ T80] usb 3-1: USB disconnect, device number 105 [ 1799.591203][T27335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1799.763424][ T62] bridge_slave_1: left allmulticast mode [ 1799.769307][ T62] bridge_slave_1: left promiscuous mode [ 1799.775389][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.830512][ T62] bridge_slave_0: left allmulticast mode [ 1799.836597][ T62] bridge_slave_0: left promiscuous mode [ 1799.842323][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.422778][ T6016] usb 5-1: USB disconnect, device number 92 [ 1801.017629][ T9524] fuse: Unknown parameter '0x0000000000000003' [ 1801.072169][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.089462][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.101097][ T62] bond0 (unregistering): Released all slaves [ 1801.121073][ T9506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1801.189977][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8083'. [ 1801.234007][ T5296] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1801.246797][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1801.433348][ T5296] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 1801.439194][ T7071] Bluetooth: hci0: command tx timeout [ 1801.452257][ T5296] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.472971][ T5296] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1801.503548][ T5296] usb 3-1: config 0 has no interface number 0 [ 1801.521438][ T5296] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1801.545648][ T5296] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1801.548530][ T9507] team0 (unregistering): Port device team_slave_0 removed [ 1801.568881][ T9536] fuse: Bad value for 'user_id' [ 1801.573910][ T5296] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1801.581813][ T9507] team0 (unregistering): Port device team_slave_1 removed [ 1801.589717][ T9536] fuse: Bad value for 'user_id' [ 1801.597439][ T5296] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1801.624856][ T5296] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1801.647684][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.682598][ T5296] usb 3-1: config 0 descriptor?? [ 1801.696784][ T5296] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1801.710283][ T9539] FAULT_INJECTION: forcing a failure. [ 1801.710283][ T9539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.723743][ T9539] CPU: 0 UID: 0 PID: 9539 Comm: syz.4.8096 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1801.734113][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1801.744190][ T9539] Call Trace: [ 1801.747472][ T9539] [ 1801.750396][ T9539] dump_stack_lvl+0x241/0x360 [ 1801.755078][ T9539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1801.760282][ T9539] ? __pfx__printk+0x10/0x10 [ 1801.764887][ T9539] should_fail_ex+0x3b0/0x4e0 [ 1801.769566][ T9539] _copy_from_user+0x2f/0xe0 [ 1801.774155][ T9539] memdup_user+0x64/0xc0 [ 1801.778396][ T9539] strndup_user+0x68/0xc0 [ 1801.782723][ T9539] __se_sys_fsopen+0x3f/0x2c0 [ 1801.787398][ T9539] do_syscall_64+0xf3/0x230 [ 1801.791899][ T9539] ? clear_bhb_loop+0x35/0x90 [ 1801.796571][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.802461][ T9539] RIP: 0033:0x7f028717dff9 [ 1801.806870][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1801.826472][ T9539] RSP: 002b:00007f0287f4c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1801.834885][ T9539] RAX: ffffffffffffffda RBX: 00007f0287335f80 RCX: 00007f028717dff9 [ 1801.842861][ T9539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 1801.850838][ T9539] RBP: 00007f0287f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.858807][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.866771][ T9539] R13: 0000000000000001 R14: 00007f0287335f80 R15: 00007f028745fa28 [ 1801.874749][ T9539] [ 1801.899497][ T5296] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 1801.909006][ T5296] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1801.916544][ T5296] usb 3-1: MIDIStreaming interface descriptor not found [ 1802.018350][ T9493] chnl_net:caif_netlink_parms(): no params data found [ 1802.036983][ T9543] fuse: Bad value for 'fd' [ 1802.076618][ T5296] usb 3-1: USB disconnect, device number 106 [ 1802.415960][T31978] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1802.441679][ T62] hsr_slave_0: left promiscuous mode [ 1802.456275][ T62] hsr_slave_1: left promiscuous mode [ 1802.466253][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1802.473707][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1802.505379][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1802.515607][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1802.568976][ T62] veth1_macvtap: left promiscuous mode [ 1802.574796][ T62] veth0_macvtap: left promiscuous mode [ 1802.581965][ T62] veth1_vlan: left promiscuous mode [ 1802.587437][T31978] usb 4-1: Using ep0 maxpacket: 32 [ 1802.592861][ T62] veth0_vlan: left promiscuous mode [ 1802.599506][T31978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1802.617032][T31978] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1802.636447][T31978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.666303][T31978] usb 4-1: Product: syz [ 1802.670523][T31978] usb 4-1: Manufacturer: syz [ 1802.675130][T31978] usb 4-1: SerialNumber: syz [ 1802.707778][T31978] usb 4-1: config 0 descriptor?? [ 1802.740431][T31978] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1802.903265][ T9581] fuse: Bad value for 'user_id' [ 1802.908666][ T9581] fuse: Bad value for 'user_id' [ 1802.915184][ T51] usb 4-1: Failed to submit usb control message: -71 [ 1802.923879][ T5284] usb 4-1: USB disconnect, device number 76 [ 1802.948123][ T51] usb 4-1: unable to send the bmi data to the device: -71 [ 1802.962212][ T51] usb 4-1: unable to get target info from device [ 1802.974250][ T51] usb 4-1: could not get target info (-71) [ 1802.995183][ T51] usb 4-1: could not probe fw (-71) [ 1803.374349][ T29] audit: type=1326 audit(1727519011.626:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9597 comm="syz.0.8112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f602677dff9 code=0x0 [ 1803.375582][ T9600] FAULT_INJECTION: forcing a failure. [ 1803.375582][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.426883][ T9600] CPU: 0 UID: 0 PID: 9600 Comm: syz.2.8113 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1803.437441][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1803.447519][ T9600] Call Trace: [ 1803.450813][ T9600] [ 1803.453737][ T9600] dump_stack_lvl+0x241/0x360 [ 1803.458516][ T9600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1803.463736][ T9600] ? __pfx__printk+0x10/0x10 [ 1803.468343][ T9600] ? __lock_acquire+0x1384/0x2050 [ 1803.473397][ T9600] should_fail_ex+0x3b0/0x4e0 [ 1803.478095][ T9600] should_failslab+0xac/0x100 [ 1803.482797][ T9600] ? __alloc_skb+0x1c3/0x440 [ 1803.487414][ T9600] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1803.493255][ T9600] __alloc_skb+0x1c3/0x440 [ 1803.497700][ T9600] ? __pfx_lock_acquire+0x10/0x10 [ 1803.502756][ T9600] ? __pfx___alloc_skb+0x10/0x10 [ 1803.507735][ T9600] tipc_msg_create+0x47/0x540 [ 1803.512450][ T9600] tipc_group_proto_xmit+0xdf/0x8c0 [ 1803.517675][ T9600] tipc_group_join+0x124/0x6d0 [ 1803.522531][ T9600] ? __pfx_tipc_group_join+0x10/0x10 [ 1803.527895][ T9600] ? tipc_sk_publish+0x25d/0x480 [ 1803.532839][ T9600] ? __rcu_read_unlock+0xa1/0x110 [ 1803.537866][ T9600] tipc_sk_join+0x4de/0x8a0 [ 1803.542360][ T9600] ? __local_bh_enable_ip+0x168/0x200 [ 1803.547727][ T9600] ? lockdep_hardirqs_on+0x99/0x150 [ 1803.552930][ T9600] ? __pfx_tipc_sk_join+0x10/0x10 [ 1803.557955][ T9600] tipc_setsockopt+0x831/0xc00 [ 1803.562723][ T9600] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1803.568013][ T9600] ? __pfx_lock_acquire+0x10/0x10 [ 1803.573040][ T9600] ? __fget_files+0x29/0x470 [ 1803.577627][ T9600] ? aa_sock_opt_perm+0x79/0x120 [ 1803.582566][ T9600] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1803.587855][ T9600] do_sock_setsockopt+0x3af/0x720 [ 1803.592882][ T9600] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1803.598428][ T9600] ? __fget_files+0x29/0x470 [ 1803.603019][ T9600] ? __fget_files+0x3f3/0x470 [ 1803.607689][ T9600] ? __fget_files+0x29/0x470 [ 1803.612279][ T9600] __sys_setsockopt+0x1a2/0x250 [ 1803.617126][ T9600] __x64_sys_setsockopt+0xb5/0xd0 [ 1803.622153][ T9600] do_syscall_64+0xf3/0x230 [ 1803.626664][ T9600] ? clear_bhb_loop+0x35/0x90 [ 1803.631333][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.637224][ T9600] RIP: 0033:0x7f9da917dff9 [ 1803.641632][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1803.661231][ T9600] RSP: 002b:00007f9da9eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1803.669642][ T9600] RAX: ffffffffffffffda RBX: 00007f9da9335f80 RCX: 00007f9da917dff9 [ 1803.677615][ T9600] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 1803.685591][ T9600] RBP: 00007f9da9eef090 R08: 0000000000000010 R09: 0000000000000000 [ 1803.693557][ T9600] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000002 [ 1803.701523][ T9600] R13: 0000000000000000 R14: 00007f9da9335f80 R15: 00007f9da945fa28 [ 1803.709500][ T9600] [ 1803.712595][ T5284] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1803.727522][ T7071] Bluetooth: hci0: command tx timeout [ 1803.942499][ T9614] binfmt_misc: register: failed to install interpreter file ./file0 [ 1803.950998][ T9614] FAULT_INJECTION: forcing a failure. [ 1803.950998][ T9614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1803.962400][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.964728][ T9614] CPU: 0 UID: 0 PID: 9614 Comm: syz.3.8118 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1803.985319][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1803.995371][ T9614] Call Trace: [ 1803.998662][ T9614] [ 1804.001587][ T9614] dump_stack_lvl+0x241/0x360 [ 1804.006271][ T9614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1804.011468][ T9614] ? __pfx__printk+0x10/0x10 [ 1804.016062][ T9614] ? snprintf+0xda/0x120 [ 1804.020303][ T9614] should_fail_ex+0x3b0/0x4e0 [ 1804.024985][ T9614] _copy_to_user+0x2f/0xb0 [ 1804.029400][ T9614] simple_read_from_buffer+0xca/0x150 [ 1804.034774][ T9614] proc_fail_nth_read+0x1e9/0x250 [ 1804.039819][ T9614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1804.045368][ T9614] ? rw_verify_area+0x55e/0x6f0 [ 1804.050219][ T9614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1804.055763][ T9614] vfs_read+0x201/0xbc0 [ 1804.059922][ T9614] ? __pfx_lock_release+0x10/0x10 [ 1804.064950][ T9614] ? __pfx_vfs_read+0x10/0x10 [ 1804.069629][ T9614] ? __fget_files+0x3f3/0x470 [ 1804.074302][ T9614] ? fdget_pos+0x24e/0x320 [ 1804.078714][ T9614] ksys_read+0x183/0x2b0 [ 1804.082955][ T9614] ? __pfx_ksys_read+0x10/0x10 [ 1804.087721][ T9614] ? do_syscall_64+0x100/0x230 [ 1804.092497][ T9614] ? do_syscall_64+0xb6/0x230 [ 1804.097174][ T9614] do_syscall_64+0xf3/0x230 [ 1804.101677][ T9614] ? clear_bhb_loop+0x35/0x90 [ 1804.106346][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.112235][ T9614] RIP: 0033:0x7f7914f7ca3c [ 1804.116645][ T9614] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1804.136244][ T9614] RSP: 002b:00007f7915dc8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1804.144652][ T9614] RAX: ffffffffffffffda RBX: 00007f7915135f80 RCX: 00007f7914f7ca3c [ 1804.152615][ T9614] RDX: 000000000000000f RSI: 00007f7915dc80a0 RDI: 0000000000000004 [ 1804.160595][ T9614] RBP: 00007f7915dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.168607][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.176584][ T9614] R13: 0000000000000000 R14: 00007f7915135f80 R15: 00007f791525fa28 [ 1804.184576][ T9614] [ 1804.221402][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.255515][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1804.276501][ T5284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1804.302606][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.351475][ T5284] usb 5-1: config 0 descriptor?? [ 1804.523500][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1804.610303][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1804.794151][ T5284] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1804.817494][ T5284] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 1804.847216][ T5284] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1805.245786][ T5284] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1805.405617][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 1805.422833][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1805.452755][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1805.462835][ T5284] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 1805.475934][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.492037][ T5284] usb 3-1: config 0 descriptor?? [ 1805.671173][T27440] usb 5-1: USB disconnect, device number 93 [ 1805.744137][ T9619] syzkaller0: entered promiscuous mode [ 1805.750639][ T9619] syzkaller0: entered allmulticast mode [ 1805.765869][ T7071] Bluetooth: hci0: command tx timeout [ 1805.766342][ T5284] usb 3-1: string descriptor 0 read error: -71 [ 1805.786857][ T9493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.793981][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.805029][ T9493] bridge_slave_0: entered allmulticast mode [ 1805.812640][ T5284] usbhid 3-1:0.0: can't add hid device: -71 [ 1805.813023][ T9493] bridge_slave_0: entered promiscuous mode [ 1805.828807][ T9493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.836217][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.843792][ T9493] bridge_slave_1: entered allmulticast mode [ 1805.850208][ T5284] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1805.851659][ T9493] bridge_slave_1: entered promiscuous mode [ 1805.890176][ T5284] usb 3-1: USB disconnect, device number 107 [ 1806.271634][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1807.844509][ T7071] Bluetooth: hci0: command tx timeout [ 1808.969679][ T9493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.021717][ T9673] netlink: 'syz.4.8135': attribute type 29 has an invalid length. [ 1809.042422][ T9493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.190652][ T9493] team0: Port device team_slave_0 added [ 1809.229974][ T9493] team0: Port device team_slave_1 added [ 1809.282970][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.295578][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.333468][ T9493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.348653][ T5296] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1809.349774][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.385535][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.413254][ T9493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.468621][ T9493] hsr_slave_0: entered promiscuous mode [ 1809.475321][ T9493] hsr_slave_1: entered promiscuous mode [ 1809.486344][ T9493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1809.494028][ T9493] Cannot create hsr debugfs directory [ 1809.507370][ T5296] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1809.528232][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.567290][ T5296] usb 3-1: config 0 descriptor?? [ 1809.616496][T31978] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1809.779786][T31978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.811343][T31978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.843756][T31978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1809.882429][T31978] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1809.893976][T31978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.925164][T31978] usb 4-1: config 0 descriptor?? [ 1810.346880][T31978] usbhid 4-1:0.0: can't add hid device: -71 [ 1810.363619][T31978] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1810.394862][T31978] usb 4-1: USB disconnect, device number 77 [ 1810.468519][ T9493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1810.487364][ T9493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1810.502624][ T9493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1810.514416][ T9493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1810.635211][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.692258][ T9493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.718428][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.725591][T13674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.753555][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.760770][T13674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.893067][ T9493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.021180][ T9493] veth0_vlan: entered promiscuous mode [ 1811.083513][ T9493] veth1_vlan: entered promiscuous mode [ 1811.213325][ T9493] veth0_macvtap: entered promiscuous mode [ 1811.263550][ T9493] veth1_macvtap: entered promiscuous mode [ 1811.346432][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.370175][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.385006][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.407313][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.430431][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.483826][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.502408][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.514861][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.548963][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.600445][ T9757] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 1811.610067][ T9757] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 1811.610437][ T29] audit: type=1326 audit(1727519019.866:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1811.710394][ T29] audit: type=1326 audit(1727519019.906:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1811.736908][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.776021][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.803029][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.809948][ T5296] pegasus 3-1:0.0: probe with driver pegasus failed with error -110 [ 1811.823578][ T29] audit: type=1326 audit(1727519019.906:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1811.860460][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.892970][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.909418][ T29] audit: type=1326 audit(1727519019.906:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1811.935578][ T6016] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1811.949498][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.992064][ T29] audit: type=1326 audit(1727519019.906:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1812.014352][ C0] vkms_vblank_simulate: vblank timer overrun [ 1812.027612][ T9493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1812.063017][ T9493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1812.118753][ T9493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1812.140040][T19669] usb 3-1: USB disconnect, device number 108 [ 1812.144887][ T9493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.178381][ T6016] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1812.193192][ T29] audit: type=1326 audit(1727519019.906:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1812.194302][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.215531][ C0] vkms_vblank_simulate: vblank timer overrun [ 1812.245487][ T9493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.265543][ T9493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.274406][ T29] audit: type=1326 audit(1727519019.906:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1812.276809][ T6016] usb 5-1: config 0 descriptor?? [ 1812.296739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1812.311133][ T9493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.340646][ T29] audit: type=1326 audit(1727519019.906:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1812.363094][ C0] vkms_vblank_simulate: vblank timer overrun [ 1812.389902][ T6016] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1812.509510][ T29] audit: type=1326 audit(1727519019.906:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1812.531860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1812.574149][ T29] audit: type=1326 audit(1727519020.056:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.4.8156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028717dff9 code=0x7ffc0000 [ 1812.574991][T27335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.596571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1812.640122][T27335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.652034][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.660147][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.671668][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1812.683103][ T9782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1812.700458][ T9782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1812.711999][ T9782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1812.723722][ T9782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1812.731184][T19669] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1812.882186][ T9764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.900936][T19669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.912443][ T9764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.920495][T19669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.941889][ T6016] gspca_stv06xx: I2C: Read error writing address: -71 [ 1812.956750][T19669] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1812.959649][ T6016] usb 5-1: USB disconnect, device number 94 [ 1812.999574][T19669] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1813.019111][T19669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.047376][T19669] usb 3-1: config 0 descriptor?? [ 1813.275859][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1813.462267][ T8] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.496996][T19669] usbhid 3-1:0.0: can't add hid device: -71 [ 1813.503039][T19669] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1813.517067][ T8] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1813.543119][ T8] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1813.563603][T19669] usb 3-1: USB disconnect, device number 109 [ 1813.572368][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.012196][ T8] usb 2-1: string descriptor 0 read error: -22 [ 1814.225529][T13734] usb 2-1: USB disconnect, device number 3 [ 1814.295738][ T6016] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1814.463130][ T6016] usb 4-1: Using ep0 maxpacket: 8 [ 1814.475195][ T6016] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1814.512085][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1814.524792][ T6016] usb 4-1: Product: syz [ 1814.537029][ T6016] usb 4-1: Manufacturer: syz [ 1814.541683][ T6016] usb 4-1: SerialNumber: syz [ 1814.566802][ T6016] usb 4-1: config 0 descriptor?? [ 1814.588692][ T6016] usbtest 4-1:0.0: FX2 device [ 1814.606272][ T6016] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1814.769306][ T9876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.787339][ T9876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.804880][ T9847] fuse: Bad value for 'group_id' [ 1814.810550][ T9847] fuse: Bad value for 'group_id' [ 1814.824976][ T6016] usb 4-1: USB disconnect, device number 78 [ 1814.978784][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1815.135579][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1815.142322][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.154909][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.164764][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 1815.173961][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.183503][ T8] usb 1-1: config 0 descriptor?? [ 1815.255664][ T6016] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1815.418944][ T6016] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1815.428284][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.443383][ T6016] usb 3-1: config 0 descriptor?? [ 1815.454243][ T6016] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1815.475656][ T5296] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1815.495713][T19669] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1815.594273][ T8] apple 0003:05AC:0246.003A: unknown main item tag 0xd [ 1815.613290][ T8] apple 0003:05AC:0246.003A: unexpected long global item [ 1815.621065][ T8] apple 0003:05AC:0246.003A: parse failed [ 1815.630343][ T8] apple 0003:05AC:0246.003A: probe with driver apple failed with error -22 [ 1815.640955][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.653734][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.665632][ T5296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1815.678801][ T5296] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1815.691478][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.700515][T19669] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.712867][ T5296] usb 5-1: config 0 descriptor?? [ 1815.719266][T19669] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 1815.736096][T19669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.744175][T19669] usb 2-1: Product: syz [ 1815.748460][T19669] usb 2-1: Manufacturer: syz [ 1815.753087][T19669] usb 2-1: SerialNumber: syz [ 1815.762110][T19669] usb 2-1: config 0 descriptor?? [ 1815.774798][T19669] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1815.782787][T19669] dvb-usb: bulk message failed: -22 (3/0) [ 1815.818136][T19669] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1815.831320][T19669] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1815.841251][T19669] dvb_usb_umt_010 2-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1815.872803][ T9873] can: request_module (can-proto-4) failed. [ 1815.884046][ T6016] gspca_stv06xx: I2C: Read error writing address: -71 [ 1815.906918][ T6016] usb 3-1: USB disconnect, device number 110 [ 1815.916146][T19669] usb 1-1: USB disconnect, device number 5 [ 1815.990921][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1816.093326][ T8] usb 2-1: USB disconnect, device number 4 [ 1816.147706][ T5296] usbhid 5-1:0.0: can't add hid device: -71 [ 1816.153739][ T5296] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1816.175340][ T5296] usb 5-1: USB disconnect, device number 95 [ 1816.480407][ T9908] tipc: Started in network mode [ 1816.485319][ T9908] tipc: Node identity b84, cluster identity 4711 [ 1816.491849][ T9908] tipc: Node number set to 2948 [ 1816.675686][ T6016] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1816.769283][ T9916] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 1816.783681][ T9916] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 1816.853620][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1816.878683][ T6016] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.891437][ T6016] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1816.905003][ T6016] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1816.915075][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.034906][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1817.182110][ T6016] usb 3-1: string descriptor 0 read error: -22 [ 1817.369420][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 1817.369438][ T29] audit: type=1326 audit(1727519025.626:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.398024][ C0] vkms_vblank_simulate: vblank timer overrun [ 1817.443032][T13734] usb 3-1: USB disconnect, device number 111 [ 1817.561738][ T29] audit: type=1326 audit(1727519025.626:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.617648][ T29] audit: type=1326 audit(1727519025.626:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.660355][ T29] audit: type=1326 audit(1727519025.626:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.687668][ T6016] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1817.691179][ T29] audit: type=1326 audit(1727519025.626:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.764027][ T29] audit: type=1326 audit(1727519025.626:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.793017][ T29] audit: type=1326 audit(1727519025.626:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.815274][ C0] vkms_vblank_simulate: vblank timer overrun [ 1817.824954][ T29] audit: type=1326 audit(1727519025.626:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.847409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1817.885316][ T29] audit: type=1326 audit(1727519025.626:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.913408][ T29] audit: type=1326 audit(1727519025.846:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7914f7dff9 code=0x7ffc0000 [ 1817.918634][ T6016] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1817.936466][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1817.979034][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.991038][ T6016] usb 4-1: config 0 descriptor?? [ 1818.013318][ T6016] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1818.087384][ T8] usb 1-1: device descriptor read/64, error -71 [ 1818.127541][ T1174] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1818.312449][ T1174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.335555][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1818.342881][ T1174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.358829][ T1174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1818.375355][ T1174] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1818.395917][ T1174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.421885][ T1174] usb 5-1: config 0 descriptor?? [ 1818.461921][ T6016] gspca_stv06xx: I2C: Read error writing address: -71 [ 1818.495355][ T6016] usb 4-1: USB disconnect, device number 79 [ 1818.495565][ T8] usb 1-1: device descriptor read/64, error -71 [ 1818.605559][ T5296] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1818.639272][ T8] usb usb1-port1: attempt power cycle [ 1818.735560][ T5296] usb 2-1: device descriptor read/64, error -71 [ 1818.864293][ T1174] usbhid 5-1:0.0: can't add hid device: -71 [ 1818.900046][ T1174] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1818.917681][ T1174] usb 5-1: USB disconnect, device number 96 [ 1818.976294][ T5296] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1818.985561][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1819.006541][ T8] usb 1-1: device descriptor read/8, error -71 [ 1819.145647][ T5296] usb 2-1: device descriptor read/64, error -71 [ 1819.245588][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1819.257334][ T5296] usb usb2-port1: attempt power cycle [ 1819.286242][ T8] usb 1-1: device descriptor read/8, error -71 [ 1819.387080][ T9974] FAULT_INJECTION: forcing a failure. [ 1819.387080][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.395851][ T8] usb usb1-port1: unable to enumerate USB device [ 1819.405671][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.3.8214 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1819.416395][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1819.426468][ T9974] Call Trace: [ 1819.429754][ T9974] [ 1819.432671][ T9974] dump_stack_lvl+0x241/0x360 [ 1819.437365][ T9974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1819.442591][ T9974] ? __pfx__printk+0x10/0x10 [ 1819.447216][ T9974] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1819.452704][ T9974] ? __pfx___might_resched+0x10/0x10 [ 1819.458024][ T9974] should_fail_ex+0x3b0/0x4e0 [ 1819.462724][ T9974] should_failslab+0xac/0x100 [ 1819.467413][ T9974] ? alloc_pipe_info+0xeb/0x4d0 [ 1819.472274][ T9974] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1819.477558][ T9974] alloc_pipe_info+0xeb/0x4d0 [ 1819.482232][ T9974] splice_direct_to_actor+0xa9e/0xc80 [ 1819.487618][ T9974] ? aa_file_perm+0x3ef/0xf50 [ 1819.492330][ T9974] ? __pfx_aa_file_perm+0x10/0x10 [ 1819.497363][ T9974] ? __pfx_direct_splice_actor+0x10/0x10 [ 1819.503018][ T9974] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1819.509022][ T9974] ? __fget_files+0x29/0x470 [ 1819.513634][ T9974] ? __pfx_lock_release+0x10/0x10 [ 1819.518692][ T9974] do_splice_direct+0x289/0x3e0 [ 1819.523574][ T9974] ? __pfx_do_splice_direct+0x10/0x10 [ 1819.528960][ T9974] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1819.534870][ T9974] ? bpf_lsm_file_permission+0x9/0x10 [ 1819.540257][ T9974] ? security_file_permission+0x74/0x280 [ 1819.545905][ T9974] ? rw_verify_area+0x1c3/0x6f0 [ 1819.550786][ T9974] do_sendfile+0x561/0xe10 [ 1819.555221][ T9974] ? __pfx_vfs_write+0x10/0x10 [ 1819.559988][ T9974] ? __pfx_do_sendfile+0x10/0x10 [ 1819.564931][ T9974] __se_sys_sendfile64+0x17c/0x1e0 [ 1819.570068][ T9974] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1819.575700][ T9974] ? do_syscall_64+0x100/0x230 [ 1819.580472][ T9974] ? do_syscall_64+0xb6/0x230 [ 1819.585180][ T9974] do_syscall_64+0xf3/0x230 [ 1819.589689][ T9974] ? clear_bhb_loop+0x35/0x90 [ 1819.594361][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.595645][ T5296] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1819.600246][ T9974] RIP: 0033:0x7f7914f7dff9 [ 1819.600270][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1819.600287][ T9974] RSP: 002b:00007f7915dc8038 EFLAGS: 00000246 [ 1819.631062][ T5296] usb 2-1: device descriptor read/8, error -71 [ 1819.631729][ T9974] ORIG_RAX: 0000000000000028 [ 1819.648643][ T9974] RAX: ffffffffffffffda RBX: 00007f7915135f80 RCX: 00007f7914f7dff9 [ 1819.656634][ T9974] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 1819.664641][ T9974] RBP: 00007f7915dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.672637][ T9974] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 1819.680606][ T9974] R13: 0000000000000000 R14: 00007f7915135f80 R15: 00007f791525fa28 [ 1819.688587][ T9974] [ 1819.730718][ T9978] fuse: Invalid rootmode [ 1819.875990][ T5296] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1819.906379][ T5296] usb 2-1: device descriptor read/8, error -71 [ 1820.005529][ T8] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1820.016517][ T5296] usb usb2-port1: unable to enumerate USB device [ 1820.159909][ T8] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1820.170934][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.180349][ T8] usb 4-1: Product: syz [ 1820.185167][ T8] usb 4-1: Manufacturer: syz [ 1820.191954][ T8] usb 4-1: SerialNumber: syz [ 1820.199794][ T8] usb 4-1: config 0 descriptor?? [ 1820.489599][ T8] usb 4-1: USB disconnect, device number 80 [ 1821.064401][T10003] fuse: Bad value for 'fd' [ 1821.534067][T10011] block device autoloading is deprecated and will be removed. [ 1821.967240][T10034] fuse: Bad value for 'fd' [ 1822.100585][T10038] tipc: Enabling of bearer rejected, failed to enable media [ 1822.255807][ T8] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1822.492698][ T8] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1822.509063][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.517834][ T8] usb 3-1: Product: syz [ 1822.523022][ T8] usb 3-1: Manufacturer: syz [ 1822.528231][ T8] usb 3-1: SerialNumber: syz [ 1822.571604][ T8] usb 3-1: config 0 descriptor?? [ 1822.775170][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1822.926459][ T6016] usb 3-1: USB disconnect, device number 112 [ 1822.955619][ T5296] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1822.997145][T10062] fuse: Bad value for 'fd' [ 1823.117210][ T5296] usb 5-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config [ 1823.135552][ T5296] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1823.144624][ T5296] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1823.155034][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.171625][ T5296] usb 5-1: config 0 descriptor?? [ 1823.381523][T10051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1823.388825][T10051] IPv6: NLM_F_CREATE should be set when creating new route [ 1823.397213][T10051] netlink: 'syz.4.8244': attribute type 27 has an invalid length. [ 1823.452979][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.460632][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.544987][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1823.545005][ T29] audit: type=1326 audit(1727519031.796:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.2.8251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9da917dff9 code=0x0 [ 1823.598428][T10051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1823.642921][T10051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1823.780928][T10051] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.802392][T10051] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.812243][T10051] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.822622][T10051] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.876291][ T5296] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1823.926777][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1823.942626][T13734] usb 5-1: USB disconnect, device number 97 [ 1824.025572][ T5296] usb 2-1: Using ep0 maxpacket: 32 [ 1824.037234][ T5296] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1824.047230][ T5296] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1824.057458][T10093] fuse: Invalid rootmode [ 1824.058143][ T5296] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1824.072055][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1824.088034][ T5296] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1824.103279][ T5296] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1824.120876][ T5296] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1824.122598][T10095] FAULT_INJECTION: forcing a failure. [ 1824.122598][T10095] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.132090][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.143516][T10095] CPU: 1 UID: 0 PID: 10095 Comm: syz.3.8260 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1824.161232][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1824.171282][T10095] Call Trace: [ 1824.174547][T10095] [ 1824.176650][ T5296] usb 2-1: config 0 descriptor?? [ 1824.177460][T10095] dump_stack_lvl+0x241/0x360 [ 1824.185650][T31978] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1824.187038][T10095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1824.187074][T10095] ? __pfx__printk+0x10/0x10 [ 1824.204497][T10095] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1824.209975][T10095] ? __pfx___might_resched+0x10/0x10 [ 1824.215282][T10095] should_fail_ex+0x3b0/0x4e0 [ 1824.219990][T10095] should_failslab+0xac/0x100 [ 1824.224695][T10095] ? fuse_dev_do_write+0x11ad/0x5de0 [ 1824.230012][T10095] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1824.235319][T10095] fuse_dev_do_write+0x11ad/0x5de0 [ 1824.240453][T10095] ? kasan_save_track+0x3f/0x80 [ 1824.245321][T10095] ? __kasan_kmalloc+0x98/0xb0 [ 1824.250099][T10095] ? __kmalloc_node_noprof+0x22a/0x440 [ 1824.255567][T10095] ? __kvmalloc_node_noprof+0x72/0x190 [ 1824.261057][T10095] ? fuse_dev_splice_write+0x197/0xaa0 [ 1824.266547][T10095] ? direct_splice_actor+0x11b/0x220 [ 1824.271847][T10095] ? splice_direct_to_actor+0x586/0xc80 [ 1824.277404][T10095] ? do_splice_direct+0x289/0x3e0 [ 1824.282444][T10095] ? do_sendfile+0x561/0xe10 [ 1824.287023][T10095] ? __se_sys_sendfile64+0x17c/0x1e0 [ 1824.292312][T10095] ? do_syscall_64+0xf3/0x230 [ 1824.296994][T10095] ? __pfx_fuse_dev_do_write+0x10/0x10 [ 1824.302482][T10095] ? rcu_is_watching+0x15/0xb0 [ 1824.307287][T10095] ? trace_kmalloc+0x1f/0xd0 [ 1824.311893][T10095] ? __kmalloc_node_noprof+0x247/0x440 [ 1824.317369][T10095] ? fuse_dev_splice_write+0x587/0xaa0 [ 1824.322857][T10095] fuse_dev_splice_write+0x850/0xaa0 [ 1824.328168][T10095] ? shmem_file_splice_read+0xbe1/0xd30 [ 1824.333726][T10095] ? __pfx_fuse_dev_splice_write+0x10/0x10 [ 1824.339548][T10095] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1824.345461][T10095] ? __pfx_fuse_dev_splice_write+0x10/0x10 [ 1824.347186][T31978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.351273][T10095] direct_splice_actor+0x11b/0x220 [ 1824.351309][T10095] splice_direct_to_actor+0x586/0xc80 [ 1824.367662][T31978] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1824.371903][T10095] ? __pfx_direct_splice_actor+0x10/0x10 [ 1824.371940][T10095] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1824.385357][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.386543][T10095] ? __fget_files+0x29/0x470 [ 1824.386569][T10095] ? __pfx_lock_release+0x10/0x10 [ 1824.386604][T10095] do_splice_direct+0x289/0x3e0 [ 1824.386634][T10095] ? __pfx_do_splice_direct+0x10/0x10 [ 1824.386659][T10095] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1824.386686][T10095] ? bpf_lsm_file_permission+0x9/0x10 [ 1824.402907][T31978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.405462][T10095] ? security_file_permission+0x74/0x280 [ 1824.405495][T10095] ? rw_verify_area+0x1c3/0x6f0 [ 1824.405523][T10095] do_sendfile+0x561/0xe10 [ 1824.405546][T10095] ? __pfx_vfs_write+0x10/0x10 [ 1824.405575][T10095] ? __pfx_do_sendfile+0x10/0x10 [ 1824.413035][T31978] usb 1-1: config 0 descriptor?? [ 1824.415414][T10095] __se_sys_sendfile64+0x17c/0x1e0 [ 1824.415445][T10095] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1824.415466][T10095] ? do_syscall_64+0x100/0x230 [ 1824.415493][T10095] ? do_syscall_64+0xb6/0x230 [ 1824.415519][T10095] do_syscall_64+0xf3/0x230 [ 1824.415544][T10095] ? clear_bhb_loop+0x35/0x90 [ 1824.415563][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.415587][T10095] RIP: 0033:0x7f7914f7dff9 [ 1824.415607][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.415624][T10095] RSP: 002b:00007f7915dc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1824.415647][T10095] RAX: ffffffffffffffda RBX: 00007f7915135f80 RCX: 00007f7914f7dff9 [ 1824.415663][T10095] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 1824.415676][T10095] RBP: 00007f7915dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.415689][T10095] R10: 00004000000053d2 R11: 0000000000000246 R12: 0000000000000001 [ 1824.415702][T10095] R13: 0000000000000000 R14: 00007f7915135f80 R15: 00007f791525fa28 [ 1824.437087][T31978] pwc: Askey VC010 type 2 USB webcam detected. [ 1824.440269][T10095] [ 1824.594230][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.597440][ T5296] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1824.616244][ T5296] usb 2-1: USB disconnect, device number 9 [ 1824.627367][ T5296] usblp0: removed [ 1824.663098][T10091] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1824.669677][T10091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1824.679968][T10091] vhci_hcd vhci_hcd.0: Device attached [ 1824.692062][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.716775][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.726958][T10098] vhci_hcd: connection closed [ 1824.727647][T31978] pwc: send_video_command error -71 [ 1824.730424][ T62] vhci_hcd: stop threads [ 1824.732341][T31978] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1824.769965][ T62] vhci_hcd: release socket [ 1824.784827][ T62] vhci_hcd: disconnect device [ 1824.796005][T31978] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1824.829824][T31978] usb 1-1: USB disconnect, device number 10 [ 1824.929821][T10108] pimreg: entered allmulticast mode [ 1825.185765][T13734] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1825.385876][T13734] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1825.408693][T10112] FAULT_INJECTION: forcing a failure. [ 1825.408693][T10112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.418979][T13734] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1825.429926][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.4.8265 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1825.440363][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1825.450410][T10112] Call Trace: [ 1825.453675][T10112] [ 1825.456596][T10112] dump_stack_lvl+0x241/0x360 [ 1825.461265][T10112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1825.466470][T10112] ? __pfx__printk+0x10/0x10 [ 1825.471053][T10112] ? __pfx_lock_release+0x10/0x10 [ 1825.476098][T10112] should_fail_ex+0x3b0/0x4e0 [ 1825.480811][T10112] _copy_from_iter+0x1ed/0x1d60 [ 1825.485663][T10112] ? __virt_addr_valid+0x183/0x530 [ 1825.490778][T10112] ? __pfx_lock_release+0x10/0x10 [ 1825.495971][T10112] ? __alloc_skb+0x28f/0x440 [ 1825.500547][T10112] ? __pfx__copy_from_iter+0x10/0x10 [ 1825.505818][T10112] ? __virt_addr_valid+0x183/0x530 [ 1825.510914][T10112] ? __virt_addr_valid+0x183/0x530 [ 1825.516009][T10112] ? __virt_addr_valid+0x45f/0x530 [ 1825.521103][T10112] ? __check_object_size+0x48e/0x900 [ 1825.526388][T10112] netlink_sendmsg+0x73d/0xcb0 [ 1825.531152][T10112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1825.536429][T10112] ? aa_sock_msg_perm+0x91/0x160 [ 1825.541355][T10112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1825.546646][T10112] __sock_sendmsg+0x221/0x270 [ 1825.551436][T10112] ____sys_sendmsg+0x52a/0x7e0 [ 1825.556191][T10112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1825.561465][T10112] __sys_sendmsg+0x292/0x380 [ 1825.566068][T10112] ? __pfx___sys_sendmsg+0x10/0x10 [ 1825.571170][T10112] ? __pfx_vfs_write+0x10/0x10 [ 1825.575936][T10112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1825.582270][T10112] ? do_syscall_64+0x100/0x230 [ 1825.587197][T10112] ? do_syscall_64+0xb6/0x230 [ 1825.591886][T10112] do_syscall_64+0xf3/0x230 [ 1825.596384][T10112] ? clear_bhb_loop+0x35/0x90 [ 1825.601045][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.606929][T10112] RIP: 0033:0x7f028717dff9 [ 1825.611330][T10112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1825.630925][T10112] RSP: 002b:00007f0287f4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1825.639343][T10112] RAX: ffffffffffffffda RBX: 00007f0287335f80 RCX: 00007f028717dff9 [ 1825.647301][T10112] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1825.655253][T10112] RBP: 00007f0287f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.663206][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.671162][T10112] R13: 0000000000000000 R14: 00007f0287335f80 R15: 00007f028745fa28 [ 1825.679128][T10112] [ 1825.682236][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.777994][T13734] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 1825.787186][T13734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.797632][T13734] usb 2-1: Product: В [ 1825.801745][T13734] usb 2-1: Manufacturer: ᘰ [ 1825.837730][T10107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1826.015754][ T5296] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1826.065723][T27440] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1826.095985][T31978] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1826.115571][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1826.177254][ T5296] usb 4-1: config 4 has an invalid interface number: 224 but max is 0 [ 1826.189018][ T5296] usb 4-1: config 4 has no interface number 0 [ 1826.200630][ T5296] usb 4-1: config 4 interface 224 has no altsetting 0 [ 1826.210168][ T5296] usb 4-1: New USB device found, idVendor=0bda, idProduct=b720, bcdDevice=9a.28 [ 1826.223347][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.231454][ T5296] usb 4-1: Product: syz [ 1826.240530][ T5296] usb 4-1: Manufacturer: syz [ 1826.250473][ T5296] usb 4-1: SerialNumber: syz [ 1826.252113][T27440] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 1826.268583][T27440] usb 5-1: config 4 has no interface number 0 [ 1826.274973][T31978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.274983][T27440] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x7 has invalid maxpacket 104, setting to 64 [ 1826.289899][T27440] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=80.20 [ 1826.297023][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1826.311834][T27440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.321947][T27440] usb 5-1: Product: syz [ 1826.326169][T31978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.326237][T31978] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1826.326262][T31978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.328433][T31978] usb 3-1: config 0 descriptor?? [ 1826.364914][T27440] usb 5-1: Manufacturer: syz [ 1826.383203][T27440] usb 5-1: SerialNumber: syz [ 1826.413506][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1826.424418][ T8] usb 1-1: config 0 has no interface number 0 [ 1826.433396][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1826.444749][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1826.483389][ T5296] usb 4-1: USB disconnect, device number 81 [ 1826.504927][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.574843][ T8] usb 1-1: config 0 descriptor?? [ 1826.621179][ T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1826.812756][ T8] usb 1-1: USB disconnect, device number 11 [ 1826.818846][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1826.831239][T31978] arvo 0003:1E7D:30D4.003B: unknown main item tag 0x0 [ 1826.847643][T27440] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1826.854417][T31978] arvo 0003:1E7D:30D4.003B: unknown main item tag 0x0 [ 1826.878322][T27440] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1826.882177][T31978] arvo 0003:1E7D:30D4.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1826.898660][ T8] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 1826.904122][T27440] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1826.913635][T27440] usb 5-1: media controller created [ 1826.930026][T27440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1826.991053][T27440] DVB: Unable to find symbol dib7000p_attach() [ 1826.999834][T27440] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1827.179082][T27440] rc_core: IR keymap rc-dib0700-rc5 not found [ 1827.185269][T27440] Registered IR keymap rc-empty [ 1827.191115][T27440] dvb-usb: could not initialize remote control. [ 1827.201655][T27440] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1827.220385][T27440] dib0700: There's no endpoint for remote controller [ 1827.247707][T31978] arvo 0003:1E7D:30D4.003B: couldn't init struct arvo_device [ 1827.282062][T31978] arvo 0003:1E7D:30D4.003B: couldn't install keyboard [ 1827.308871][T31978] arvo 0003:1E7D:30D4.003B: probe with driver arvo failed with error -71 [ 1827.321751][T31978] usb 3-1: USB disconnect, device number 113 [ 1827.405561][ T5296] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1827.442903][T27440] usb 5-1: USB disconnect, device number 98 [ 1827.460556][T27440] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1827.555531][ T5296] usb 4-1: Using ep0 maxpacket: 16 [ 1827.566957][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.598137][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.615583][ T5296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1827.633561][ T5296] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1827.645626][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.655760][ T5296] usb 4-1: config 0 descriptor?? [ 1827.939256][T13734] usbhid 2-1:1.0: can't add hid device: -71 [ 1827.946184][T13734] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1827.972679][T13734] usb 2-1: USB disconnect, device number 10 [ 1827.999553][T27440] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1828.073026][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.083200][ T5296] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 1828.091953][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.099520][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.109160][T31978] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1828.116981][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.124218][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.135397][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.142708][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.153407][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.161979][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.170828][T27440] usb 1-1: Using ep0 maxpacket: 8 [ 1828.173125][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.183140][ T5296] microsoft 0003:045E:07DA.003C: unknown main item tag 0x0 [ 1828.188693][T27440] usb 1-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 1828.199855][T27440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.202679][ T5296] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003C/input/input72 [ 1828.215559][T27440] usb 1-1: Product: syz [ 1828.230411][T27440] usb 1-1: Manufacturer: syz [ 1828.235212][T27440] usb 1-1: SerialNumber: syz [ 1828.245136][T27440] usb 1-1: config 0 descriptor?? [ 1828.253677][T27440] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1828.262309][T27440] usb 1-1: Detected FT232A [ 1828.267817][T27440] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1828.285626][ T6016] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1828.290219][T31978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.305974][T13734] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1828.336537][T31978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.363626][T31978] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1828.385524][T31978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.406943][T31978] usb 3-1: config 0 descriptor?? [ 1828.445618][ T6016] usb 5-1: Using ep0 maxpacket: 16 [ 1828.446848][ T5296] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1828.464568][ T6016] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1828.469665][ T5296] usb 4-1: USB disconnect, device number 82 [ 1828.500600][T13734] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1828.525005][ T6016] usb 5-1: New USB device found, idVendor=2040, idProduct=d854, bcdDevice=82.38 [ 1828.540691][T13734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.549078][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.560157][T13734] usb 2-1: config 0 descriptor?? [ 1828.567274][T27440] usb 1-1: USB disconnect, device number 12 [ 1828.573469][ T6016] usb 5-1: Product: syz [ 1828.579616][T13734] pwc: Samsung MPC-C10 USB webcam detected. [ 1828.585785][ T6016] usb 5-1: Manufacturer: syz [ 1828.590397][ T6016] usb 5-1: SerialNumber: syz [ 1828.599377][T27440] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1828.610722][ T6016] usb 5-1: config 0 descriptor?? [ 1828.616162][T27440] ftdi_sio 1-1:0.0: device disconnected [ 1828.628707][ T6016] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 1828.643968][ T6016] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1828.655243][ T6016] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 1828.663609][ T6016] usb 5-1: media controller created [ 1828.683127][ T6016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1828.701113][ T6016] usb 5-1: selecting invalid altsetting 2 [ 1828.707263][ T6016] set interface failed [ 1828.707841][ T6016] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1828.719297][ T6016] error writing reg: 0xff, val: 0x00 [ 1828.739168][ T6016] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1828.774740][T13734] pwc: send_video_command error -71 [ 1828.789286][T13734] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1828.803028][T13734] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1828.818258][T13734] usb 2-1: USB disconnect, device number 11 [ 1828.837762][T31978] cougar 0003:060B:700A.003D: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.2-1/input0 [ 1828.838245][T27440] usb 5-1: USB disconnect, device number 99 [ 1829.048033][ T5296] usb 3-1: USB disconnect, device number 114 [ 1829.145663][T31978] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1829.305592][T31978] usb 4-1: Using ep0 maxpacket: 32 [ 1829.305727][T13734] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1829.310831][ T8] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1829.329090][T31978] usb 4-1: config 0 has an invalid interface number: 149 but max is 0 [ 1829.337540][T31978] usb 4-1: config 0 has no interface number 0 [ 1829.348793][T31978] usb 4-1: New USB device found, idVendor=086a, idProduct=0102, bcdDevice=c8.e6 [ 1829.358044][T31978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.367164][T31978] usb 4-1: Product: syz [ 1829.371454][T31978] usb 4-1: Manufacturer: syz [ 1829.376139][T31978] usb 4-1: SerialNumber: syz [ 1829.383122][T31978] usb 4-1: config 0 descriptor?? [ 1829.394410][T31978] emi26 - firmware loader 4-1:0.149: emi26_probe start [ 1829.403622][T31978] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1829.412285][T31978] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1829.481008][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1829.488548][T13734] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1829.492880][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64 [ 1829.502014][T13734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.516193][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1829.530910][T13734] usb 2-1: config 0 descriptor?? [ 1829.537749][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.538799][T13734] pwc: Samsung MPC-C10 USB webcam detected. [ 1829.570774][ T8] usb 1-1: config 0 descriptor?? [ 1829.579016][T10144] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1829.725540][T27440] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1829.797569][ T8] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1829.855625][ T5286] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1829.885612][T27440] usb 5-1: Using ep0 maxpacket: 16 [ 1829.892474][T27440] usb 5-1: config 9 has an invalid interface number: 195 but max is 0 [ 1829.901122][T27440] usb 5-1: config 9 has no interface number 0 [ 1829.910202][T27440] usb 5-1: New USB device found, idVendor=18e8, idProduct=6232, bcdDevice=a0.e0 [ 1829.919393][T27440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.928548][T27440] usb 5-1: Product: syz [ 1829.933139][T27440] usb 5-1: Manufacturer: syz [ 1829.937831][T27440] usb 5-1: SerialNumber: syz [ 1829.943536][T13734] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1829.951755][T13734] pwc: recv_control_msg error -32 req 02 val 2700 [ 1829.961377][T13734] pwc: recv_control_msg error -32 req 04 val 1700 [ 1829.968435][T13734] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1829.975533][T13734] pwc: recv_control_msg error -32 req 04 val 1000 [ 1829.982875][T13734] pwc: recv_control_msg error -32 req 04 val 1300 [ 1829.990010][T13734] pwc: recv_control_msg error -32 req 04 val 1400 [ 1830.003937][T13734] pwc: recv_control_msg error -32 req 02 val 2000 [ 1830.011896][T27440] usb 1-1: USB disconnect, device number 13 [ 1830.015700][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 1830.024234][T13734] pwc: recv_control_msg error -32 req 02 val 2100 [ 1830.031250][T27440] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 1830.038603][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.050039][T13734] pwc: recv_control_msg error -32 req 02 val 2200 [ 1830.060926][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.070978][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1830.083973][ T5286] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1830.094041][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.104398][ T5286] usb 3-1: config 0 descriptor?? [ 1830.276736][T13734] pwc: recv_control_msg error -71 req 04 val 1500 [ 1830.284060][T13734] pwc: recv_control_msg error -71 req 02 val 2500 [ 1830.291590][T13734] pwc: recv_control_msg error -71 req 02 val 2400 [ 1830.299525][T13734] pwc: recv_control_msg error -71 req 02 val 2600 [ 1830.306345][T13734] pwc: recv_control_msg error -71 req 02 val 2900 [ 1830.313056][T13734] pwc: recv_control_msg error -71 req 02 val 2800 [ 1830.321684][T13734] pwc: recv_control_msg error -71 req 04 val 1100 [ 1830.329450][T13734] pwc: recv_control_msg error -71 req 04 val 1200 [ 1830.340796][T13734] pwc: Registered as video71. [ 1830.346889][T13734] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input73 [ 1830.368903][T27440] usb 5-1: USB disconnect, device number 100 [ 1830.386453][T13734] usb 2-1: USB disconnect, device number 12 [ 1830.544223][ T5286] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1830.560494][ T5286] microsoft 0003:045E:07DA.003E: ignoring exceeding usage max [ 1830.581710][ T5286] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003E/input/input74 [ 1830.751030][ T5286] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1830.768140][ T5286] usb 3-1: USB disconnect, device number 115 [ 1830.816559][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1830.975580][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1830.984396][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1830.995010][ T8] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1831.005551][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.013548][ T8] usb 1-1: Product: syz [ 1831.020812][ T8] usb 1-1: Manufacturer: syz [ 1831.025482][ T8] usb 1-1: SerialNumber: syz [ 1831.031536][ T8] usb 1-1: config 0 descriptor?? [ 1831.038778][ T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1831.047051][ T8] usb 1-1: Detected FT232R [ 1831.085681][T13734] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1831.145607][ T5296] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1831.235603][T13734] usb 2-1: Using ep0 maxpacket: 16 [ 1831.244481][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1831.252164][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1831.254055][T13734] usb 2-1: config 64 has an invalid interface number: 79 but max is 0 [ 1831.263862][ T8] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1831.277310][T13734] usb 2-1: config 64 has no interface number 0 [ 1831.283727][T13734] usb 2-1: config 64 interface 79 has no altsetting 0 [ 1831.284591][ T8] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1831.316149][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1831.316662][T13734] usb 2-1: New USB device found, idVendor=0ccd, idProduct=005a, bcdDevice=4f.c1 [ 1831.335572][ T8] usb 1-1: USB disconnect, device number 14 [ 1831.342593][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64 [ 1831.353858][T13734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.369581][T13734] usb 2-1: Product: syz [ 1831.374771][T13734] usb 2-1: Manufacturer: syz [ 1831.379836][T13734] usb 2-1: SerialNumber: syz [ 1831.381032][ T5296] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1831.403015][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1831.414256][ T8] ftdi_sio 1-1:0.0: device disconnected [ 1831.420340][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.434465][ T5296] usb 5-1: config 0 descriptor?? [ 1831.443085][T10159] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1831.594458][T13734] dvb-usb: found a 'Terratec Cinergy DT XS Diversity' in warm state. [ 1831.605077][T13734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1831.615218][T13734] dvbdev: DVB: registering new adapter (Terratec Cinergy DT XS Diversity) [ 1831.623986][T27440] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1831.634338][T13734] usb 2-1: media controller created [ 1831.649199][T13734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1831.664764][ T5296] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1831.697612][T13734] DVB: Unable to find symbol dib7000p_attach() [ 1831.703803][T13734] dvb-usb: no frontend was attached by 'Terratec Cinergy DT XS Diversity' [ 1831.713014][T13734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1831.723151][T13734] dvbdev: DVB: registering new adapter (Terratec Cinergy DT XS Diversity) [ 1831.733301][T13734] usb 2-1: media controller created [ 1831.745995][T13734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1831.775630][T13734] DVB: Unable to find symbol dib7000p_attach() [ 1831.781853][T13734] dvb-usb: no frontend was attached by 'Terratec Cinergy DT XS Diversity' [ 1831.793798][T27440] usb 3-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 1831.820209][T27440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.835528][T27440] usb 3-1: Product: syz [ 1831.839736][T27440] usb 3-1: Manufacturer: syz [ 1831.844366][T27440] usb 3-1: SerialNumber: syz [ 1831.862354][T27440] usb 3-1: config 0 descriptor?? [ 1831.872738][ T80] usb 5-1: USB disconnect, device number 101 [ 1831.878927][T13734] rc_core: IR keymap rc-dib0700-rc5 not found [ 1831.887544][T13734] Registered IR keymap rc-empty [ 1831.892622][T13734] dvb-usb: could not initialize remote control. [ 1831.901190][ T80] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 1831.910961][T27440] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1831.927788][T27440] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1831.936671][T13734] dvb-usb: Terratec Cinergy DT XS Diversity successfully initialized and connected. [ 1831.952013][T13734] usb 2-1: USB disconnect, device number 13 [ 1832.004211][T13734] dvb-usb: Terratec Cinergy DT XS Diversity successfully deinitialized and disconnected. [ 1832.175633][ T5296] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1832.312830][T27440] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 1832.321738][T27440] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1832.329306][T27440] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1832.341072][ T5296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.370623][ T5296] usb 1-1: config 0 has no interfaces? [ 1832.386507][ T5296] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1832.408538][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.431718][ T5296] usb 1-1: config 0 descriptor?? [ 1832.523813][ T8] usb 3-1: USB disconnect, device number 116 [ 1832.578292][T10181] [ 1832.580661][T10181] ===================================================== [ 1832.587619][T10181] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1832.595090][T10181] 6.11.0-syzkaller-11728-gad46e8f95e93 #0 Not tainted [ 1832.601865][T10181] ----------------------------------------------------- [ 1832.608810][T10181] syz.1.8293/10181 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1832.616556][T10181] ffff8880277718a0 (&new->fa_lock){...-}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 1832.625308][T10181] [ 1832.625308][T10181] and this task is already holding: [ 1832.632687][T10181] ffff88805c8d4028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 1832.642473][T10181] which would create a new lock dependency: [ 1832.648370][T10181] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){...-}-{2:2} [ 1832.656499][T10181] [ 1832.656499][T10181] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1832.665939][T10181] (&dev->event_lock#2){..-.}-{2:2} [ 1832.665973][T10181] [ 1832.665973][T10181] ... which became SOFTIRQ-irq-safe at: [ 1832.678867][T10181] lock_acquire+0x1ed/0x550 [ 1832.683465][T10181] _raw_spin_lock_irqsave+0xd5/0x120 [ 1832.688836][T10181] input_inject_event+0xc5/0x340 [ 1832.693854][T10181] kd_sound_helper+0x101/0x210 [ 1832.698699][T10181] input_handler_for_each_handle+0x103/0x1d0 [ 1832.704775][T10181] call_timer_fn+0x18e/0x650 [ 1832.709537][T10181] __run_timer_base+0x66a/0x8e0 [ 1832.714469][T10181] run_timer_softirq+0xb7/0x170 [ 1832.719398][T10181] handle_softirqs+0x2c5/0x980 [ 1832.724240][T10181] __irq_exit_rcu+0xf4/0x1c0 [ 1832.728908][T10181] irq_exit_rcu+0x9/0x30 [ 1832.733231][T10181] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1832.738940][T10181] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1832.744999][T10181] __read_once_word_nocheck+0x3/0x10 [ 1832.750368][T10181] unwind_next_frame+0xc9b/0x22d0 [ 1832.755472][T10181] arch_stack_walk+0x11c/0x150 [ 1832.760313][T10181] stack_trace_save+0x118/0x1d0 [ 1832.765247][T10181] kasan_save_stack+0x3f/0x60 [ 1832.769999][T10181] __kasan_record_aux_stack+0xac/0xc0 [ 1832.775490][T10181] call_rcu+0x167/0xa70 [ 1832.779727][T10181] kernfs_put+0x1dc/0x370 [ 1832.784144][T10181] kernfs_remove_by_name_ns+0xe4/0x160 [ 1832.789763][T10181] sysfs_remove_group+0xfe/0x2c0 [ 1832.794778][T10181] sysfs_remove_groups+0x54/0xb0 [ 1832.799794][T10181] device_remove_attrs+0x1dc/0x290 [ 1832.804987][T10181] device_del+0x572/0x9b0 [ 1832.809405][T10181] device_unregister+0x20/0xc0 [ 1832.814247][T10181] usb_remove_ep_devs+0x50/0x80 [ 1832.819175][T10181] usb_disable_device+0x33b/0x850 [ 1832.824274][T10181] usb_disconnect+0x340/0x950 [ 1832.829032][T10181] hub_event+0x1ebc/0x5150 [ 1832.833527][T10181] process_scheduled_works+0xa63/0x1850 [ 1832.839150][T10181] worker_thread+0x870/0xd30 [ 1832.843820][T10181] kthread+0x2f0/0x390 [ 1832.847961][T10181] ret_from_fork+0x4b/0x80 [ 1832.852459][T10181] ret_from_fork_asm+0x1a/0x30 [ 1832.857303][T10181] [ 1832.857303][T10181] to a SOFTIRQ-irq-unsafe lock: [ 1832.864395][T10181] (tasklist_lock){.+.+}-{2:2} [ 1832.864422][T10181] [ 1832.864422][T10181] ... which became SOFTIRQ-irq-unsafe at: [ 1832.877113][T10181] ... [ 1832.877122][T10181] lock_acquire+0x1ed/0x550 [ 1832.884271][T10181] _raw_read_lock+0x36/0x50 [ 1832.888872][T10181] __do_wait+0x12d/0x850 [ 1832.893306][T10181] do_wait+0x1e9/0x560 [ 1832.897468][T10181] kernel_wait+0xe9/0x240 [ 1832.901879][T10181] call_usermodehelper_exec_work+0xbd/0x230 [ 1832.907854][T10181] process_scheduled_works+0xa63/0x1850 [ 1832.913479][T10181] worker_thread+0x870/0xd30 [ 1832.918145][T10181] kthread+0x2f0/0x390 [ 1832.922291][T10181] ret_from_fork+0x4b/0x80 [ 1832.926796][T10181] ret_from_fork_asm+0x1a/0x30 [ 1832.931640][T10181] [ 1832.931640][T10181] other info that might help us debug this: [ 1832.931640][T10181] [ 1832.941968][T10181] Chain exists of: [ 1832.941968][T10181] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1832.941968][T10181] [ 1832.955616][T10181] Possible interrupt unsafe locking scenario: [ 1832.955616][T10181] [ 1832.964010][T10181] CPU0 CPU1 [ 1832.969367][T10181] ---- ---- [ 1832.974720][T10181] lock(tasklist_lock); [ 1832.978956][T10181] local_irq_disable(); [ 1832.985694][T10181] lock(&dev->event_lock#2); [ 1832.992885][T10181] lock(&client->buffer_lock); [ 1833.000242][T10181] [ 1833.003680][T10181] lock(&dev->event_lock#2); [ 1833.008527][T10181] [ 1833.008527][T10181] *** DEADLOCK *** [ 1833.008527][T10181] [ 1833.016661][T10181] 7 locks held by syz.1.8293/10181: [ 1833.021840][T10181] #0: ffff88814577e110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 1833.031067][T10181] #1: ffff888143ed5230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 1833.041158][T10181] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 1833.050808][T10181] #3: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 1833.060375][T10181] #4: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x6f/0x300 [ 1833.069516][T10181] #5: ffff88805c8d4028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 1833.079700][T10181] #6: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 1833.088749][T10181] [ 1833.088749][T10181] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1833.099143][T10181] -> (&dev->event_lock#2){..-.}-{2:2} { [ 1833.104787][T10181] IN-SOFTIRQ-W at: [ 1833.108843][T10181] lock_acquire+0x1ed/0x550 [ 1833.115163][T10181] _raw_spin_lock_irqsave+0xd5/0x120 [ 1833.122264][T10181] input_inject_event+0xc5/0x340 [ 1833.129020][T10181] kd_sound_helper+0x101/0x210 [ 1833.135598][T10181] input_handler_for_each_handle+0x103/0x1d0 [ 1833.143395][T10181] call_timer_fn+0x18e/0x650 [ 1833.149818][T10181] __run_timer_base+0x66a/0x8e0 [ 1833.156509][T10181] run_timer_softirq+0xb7/0x170 [ 1833.163188][T10181] handle_softirqs+0x2c5/0x980 [ 1833.169784][T10181] __irq_exit_rcu+0xf4/0x1c0 [ 1833.176205][T10181] irq_exit_rcu+0x9/0x30 [ 1833.182270][T10181] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1833.189728][T10181] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1833.197536][T10181] __read_once_word_nocheck+0x3/0x10 [ 1833.204643][T10181] unwind_next_frame+0xc9b/0x22d0 [ 1833.211486][T10181] arch_stack_walk+0x11c/0x150 [ 1833.218062][T10181] stack_trace_save+0x118/0x1d0 [ 1833.224726][T10181] kasan_save_stack+0x3f/0x60 [ 1833.231214][T10181] __kasan_record_aux_stack+0xac/0xc0 [ 1833.238400][T10181] call_rcu+0x167/0xa70 [ 1833.244368][T10181] kernfs_put+0x1dc/0x370 [ 1833.250511][T10181] kernfs_remove_by_name_ns+0xe4/0x160 [ 1833.257782][T10181] sysfs_remove_group+0xfe/0x2c0 [ 1833.264534][T10181] sysfs_remove_groups+0x54/0xb0 [ 1833.271291][T10181] device_remove_attrs+0x1dc/0x290 [ 1833.278251][T10181] device_del+0x572/0x9b0 [ 1833.284416][T10181] device_unregister+0x20/0xc0 [ 1833.291023][T10181] usb_remove_ep_devs+0x50/0x80 [ 1833.297699][T10181] usb_disable_device+0x33b/0x850 [ 1833.304539][T10181] usb_disconnect+0x340/0x950 [ 1833.311473][T10181] hub_event+0x1ebc/0x5150 [ 1833.317716][T10181] process_scheduled_works+0xa63/0x1850 [ 1833.325167][T10181] worker_thread+0x870/0xd30 [ 1833.331587][T10181] kthread+0x2f0/0x390 [ 1833.337485][T10181] ret_from_fork+0x4b/0x80 [ 1833.343733][T10181] ret_from_fork_asm+0x1a/0x30 [ 1833.350353][T10181] INITIAL USE at: [ 1833.354328][T10181] lock_acquire+0x1ed/0x550 [ 1833.360572][T10181] _raw_spin_lock_irqsave+0xd5/0x120 [ 1833.367591][T10181] input_inject_event+0xc5/0x340 [ 1833.374264][T10181] kbd_led_trigger_activate+0xb8/0x100 [ 1833.381461][T10181] led_trigger_set+0x582/0x9c0 [ 1833.387954][T10181] led_trigger_set_default+0x229/0x260 [ 1833.395136][T10181] led_classdev_register_ext+0x6e6/0x8a0 [ 1833.402505][T10181] input_leds_connect+0x489/0x630 [ 1833.409691][T10181] input_register_device+0xd3b/0x1110 [ 1833.416795][T10181] atkbd_connect+0x752/0xa00 [ 1833.423224][T10181] serio_driver_probe+0x7f/0xa0 [ 1833.429819][T10181] really_probe+0x2b8/0xad0 [ 1833.436053][T10181] __driver_probe_device+0x1a2/0x390 [ 1833.443071][T10181] driver_probe_device+0x50/0x430 [ 1833.449821][T10181] __driver_attach+0x45f/0x710 [ 1833.456314][T10181] bus_for_each_dev+0x239/0x2b0 [ 1833.462894][T10181] serio_handle_event+0x1c7/0x920 [ 1833.469649][T10181] process_scheduled_works+0xa63/0x1850 [ 1833.477018][T10181] worker_thread+0x870/0xd30 [ 1833.483348][T10181] kthread+0x2f0/0x390 [ 1833.489235][T10181] ret_from_fork+0x4b/0x80 [ 1833.495385][T10181] ret_from_fork_asm+0x1a/0x30 [ 1833.501881][T10181] } [ 1833.504455][T10181] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1833.513556][T10181] -> (&client->buffer_lock){....}-{2:2} { [ 1833.519353][T10181] INITIAL USE at: [ 1833.523235][T10181] lock_acquire+0x1ed/0x550 [ 1833.529296][T10181] _raw_spin_lock_irq+0xd3/0x120 [ 1833.535819][T10181] evdev_read+0x535/0xe00 [ 1833.541720][T10181] vfs_read+0x201/0xbc0 [ 1833.547445][T10181] ksys_read+0x183/0x2b0 [ 1833.553253][T10181] do_syscall_64+0xf3/0x230 [ 1833.559326][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.566867][T10181] } [ 1833.569353][T10181] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 1833.577497][T10181] ... acquired at: [ 1833.581286][T10181] lock_acquire+0x1ed/0x550 [ 1833.585964][T10181] _raw_spin_lock+0x2e/0x40 [ 1833.590635][T10181] evdev_pass_values+0xf2/0xad0 [ 1833.595653][T10181] evdev_events+0x1c2/0x300 [ 1833.600321][T10181] input_pass_values+0x286/0x860 [ 1833.605510][T10181] input_event_dispose+0x3a4/0x600 [ 1833.610785][T10181] input_handle_event+0xa71/0xbe0 [ 1833.615974][T10181] input_inject_event+0x22f/0x340 [ 1833.621161][T10181] kd_sound_helper+0x101/0x210 [ 1833.626089][T10181] input_handler_for_each_handle+0x103/0x1d0 [ 1833.632233][T10181] kd_mksound+0xa9/0x1a0 [ 1833.636646][T10181] do_con_write+0x2cf6/0x4c30 [ 1833.641485][T10181] con_write+0x26/0x40 [ 1833.645714][T10181] n_tty_write+0xd62/0x1230 [ 1833.650382][T10181] file_tty_write+0x546/0x9b0 [ 1833.655217][T10181] vfs_write+0xa6d/0xc90 [ 1833.659623][T10181] ksys_write+0x183/0x2b0 [ 1833.664117][T10181] do_syscall_64+0xf3/0x230 [ 1833.668785][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.674845][T10181] [ 1833.677155][T10181] [ 1833.677155][T10181] the dependencies between the lock to be acquired [ 1833.677165][T10181] and SOFTIRQ-irq-unsafe lock: [ 1833.690657][T10181] -> (tasklist_lock){.+.+}-{2:2} { [ 1833.695957][T10181] HARDIRQ-ON-R at: [ 1833.700097][T10181] lock_acquire+0x1ed/0x550 [ 1833.706592][T10181] _raw_read_lock+0x36/0x50 [ 1833.713085][T10181] __do_wait+0x12d/0x850 [ 1833.719320][T10181] do_wait+0x1e9/0x560 [ 1833.725402][T10181] kernel_wait+0xe9/0x240 [ 1833.731741][T10181] call_usermodehelper_exec_work+0xbd/0x230 [ 1833.739621][T10181] process_scheduled_works+0xa63/0x1850 [ 1833.747156][T10181] worker_thread+0x870/0xd30 [ 1833.753733][T10181] kthread+0x2f0/0x390 [ 1833.759794][T10181] ret_from_fork+0x4b/0x80 [ 1833.766202][T10181] ret_from_fork_asm+0x1a/0x30 [ 1833.772953][T10181] SOFTIRQ-ON-R at: [ 1833.777096][T10181] lock_acquire+0x1ed/0x550 [ 1833.783592][T10181] _raw_read_lock+0x36/0x50 [ 1833.790173][T10181] __do_wait+0x12d/0x850 [ 1833.796403][T10181] do_wait+0x1e9/0x560 [ 1833.802455][T10181] kernel_wait+0xe9/0x240 [ 1833.808768][T10181] call_usermodehelper_exec_work+0xbd/0x230 [ 1833.816735][T10181] process_scheduled_works+0xa63/0x1850 [ 1833.824265][T10181] worker_thread+0x870/0xd30 [ 1833.830849][T10181] kthread+0x2f0/0x390 [ 1833.836903][T10181] ret_from_fork+0x4b/0x80 [ 1833.843402][T10181] ret_from_fork_asm+0x1a/0x30 [ 1833.850155][T10181] INITIAL USE at: [ 1833.854211][T10181] lock_acquire+0x1ed/0x550 [ 1833.860615][T10181] _raw_write_lock_irq+0xd3/0x120 [ 1833.867544][T10181] copy_process+0x2267/0x3d50 [ 1833.874153][T10181] kernel_clone+0x226/0x8f0 [ 1833.880556][T10181] user_mode_thread+0x132/0x1a0 [ 1833.887314][T10181] rest_init+0x23/0x300 [ 1833.893377][T10181] start_kernel+0x47f/0x500 [ 1833.899781][T10181] x86_64_start_reservations+0x2a/0x30 [ 1833.907142][T10181] x86_64_start_kernel+0x9f/0xa0 [ 1833.913979][T10181] common_startup_64+0x13e/0x147 [ 1833.920814][T10181] INITIAL READ USE at: [ 1833.925304][T10181] lock_acquire+0x1ed/0x550 [ 1833.932146][T10181] _raw_read_lock+0x36/0x50 [ 1833.938985][T10181] __do_wait+0x12d/0x850 [ 1833.945566][T10181] do_wait+0x1e9/0x560 [ 1833.951968][T10181] kernel_wait+0xe9/0x240 [ 1833.958629][T10181] call_usermodehelper_exec_work+0xbd/0x230 [ 1833.966856][T10181] process_scheduled_works+0xa63/0x1850 [ 1833.974745][T10181] worker_thread+0x870/0xd30 [ 1833.981677][T10181] kthread+0x2f0/0x390 [ 1833.988082][T10181] ret_from_fork+0x4b/0x80 [ 1833.994837][T10181] ret_from_fork_asm+0x1a/0x30 [ 1834.001939][T10181] } [ 1834.004596][T10181] ... key at: [] tasklist_lock+0x18/0x40 [ 1834.012484][T10181] ... acquired at: [ 1834.016447][T10181] lock_acquire+0x1ed/0x550 [ 1834.021113][T10181] _raw_read_lock+0x36/0x50 [ 1834.025782][T10181] send_sigio+0x108/0x390 [ 1834.030280][T10181] dnotify_handle_event+0x157/0x460 [ 1834.035639][T10181] fsnotify+0x1738/0x1f70 [ 1834.040130][T10181] __fsnotify_parent+0x4f5/0x5e0 [ 1834.045319][T10181] notify_change+0xc0c/0xe90 [ 1834.050079][T10181] do_truncate+0x220/0x310 [ 1834.054661][T10181] path_openat+0x2e1e/0x3590 [ 1834.059417][T10181] do_filp_open+0x235/0x490 [ 1834.064084][T10181] do_sys_openat2+0x13e/0x1d0 [ 1834.068924][T10181] __x64_sys_creat+0x123/0x170 [ 1834.073853][T10181] do_syscall_64+0xf3/0x230 [ 1834.078525][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.084582][T10181] [ 1834.086892][T10181] -> (&f_owner->lock){....}-{2:2} { [ 1834.092188][T10181] INITIAL USE at: [ 1834.096160][T10181] lock_acquire+0x1ed/0x550 [ 1834.102393][T10181] _raw_write_lock_irq+0xd3/0x120 [ 1834.109148][T10181] __f_setown+0x6b/0x380 [ 1834.115119][T10181] f_setown+0x243/0x310 [ 1834.121000][T10181] do_fcntl+0x115/0x1a60 [ 1834.126969][T10181] __se_sys_fcntl+0xd2/0x1e0 [ 1834.133288][T10181] do_syscall_64+0xf3/0x230 [ 1834.139524][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.147150][T10181] INITIAL READ USE at: [ 1834.151562][T10181] lock_acquire+0x1ed/0x550 [ 1834.158231][T10181] _raw_read_lock_irqsave+0xdd/0x130 [ 1834.165684][T10181] send_sigio+0x37/0x390 [ 1834.172088][T10181] kill_fasync+0x256/0x4f0 [ 1834.178668][T10181] sock_wake_async+0x147/0x170 [ 1834.185596][T10181] sk_wake_async+0x183/0x280 [ 1834.192359][T10181] unix_release_sock+0x727/0xd00 [ 1834.199461][T10181] unix_release+0x91/0xc0 [ 1834.205953][T10181] sock_close+0xbc/0x240 [ 1834.212356][T10181] __fput+0x23f/0x880 [ 1834.218501][T10181] task_work_run+0x24f/0x310 [ 1834.225256][T10181] syscall_exit_to_user_mode+0x168/0x370 [ 1834.233056][T10181] do_syscall_64+0x100/0x230 [ 1834.239809][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.247868][T10181] } [ 1834.250439][T10181] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1834.259365][T10181] ... acquired at: [ 1834.263766][T10181] lock_acquire+0x1ed/0x550 [ 1834.268436][T10181] _raw_read_lock_irqsave+0xdd/0x130 [ 1834.274059][T10181] send_sigio+0x37/0x390 [ 1834.278465][T10181] kill_fasync+0x256/0x4f0 [ 1834.283041][T10181] sock_wake_async+0x147/0x170 [ 1834.287968][T10181] sk_wake_async+0x183/0x280 [ 1834.292723][T10181] unix_release_sock+0x727/0xd00 [ 1834.297928][T10181] unix_release+0x91/0xc0 [ 1834.302440][T10181] sock_close+0xbc/0x240 [ 1834.306859][T10181] __fput+0x23f/0x880 [ 1834.311012][T10181] task_work_run+0x24f/0x310 [ 1834.315769][T10181] syscall_exit_to_user_mode+0x168/0x370 [ 1834.321570][T10181] do_syscall_64+0x100/0x230 [ 1834.326325][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.332387][T10181] [ 1834.334696][T10181] -> (&new->fa_lock){...-}-{2:2} { [ 1834.339819][T10181] IN-SOFTIRQ-R at: [ 1834.343785][T10181] lock_acquire+0x1ed/0x550 [ 1834.349933][T10181] _raw_read_lock_irqsave+0xdd/0x130 [ 1834.356858][T10181] kill_fasync+0x199/0x4f0 [ 1834.363000][T10181] sock_wake_async+0x147/0x170 [ 1834.369406][T10181] sock_def_readable+0x3df/0x5b0 [ 1834.375983][T10181] tcp_urg+0x2fa/0x450 [ 1834.381690][T10181] tcp_rcv_established+0xfaf/0x2020 [ 1834.388530][T10181] tcp_v6_do_rcv+0x5c8/0x13a0 [ 1834.394845][T10181] tcp_v6_rcv+0x253a/0x2fb0 [ 1834.401074][T10181] ip6_protocol_deliver_rcu+0xc79/0x1580 [ 1834.408346][T10181] ip6_input_finish+0x187/0x2d0 [ 1834.414843][T10181] NF_HOOK+0x3a4/0x450 [ 1834.420562][T10181] NF_HOOK+0x3a4/0x450 [ 1834.426267][T10181] __netif_receive_skb+0x1ea/0x650 [ 1834.433102][T10181] process_backlog+0x662/0x15b0 [ 1834.439592][T10181] __napi_poll+0xcb/0x490 [ 1834.445558][T10181] net_rx_action+0x89b/0x1240 [ 1834.451878][T10181] handle_softirqs+0x2c5/0x980 [ 1834.458288][T10181] do_softirq+0x11b/0x1e0 [ 1834.464300][T10181] __local_bh_enable_ip+0x1bb/0x200 [ 1834.471141][T10181] sk_stream_wait_memory+0x762/0xfa0 [ 1834.478068][T10181] tcp_sendmsg_locked+0x14f3/0x50a0 [ 1834.484908][T10181] tcp_sendmsg+0x30/0x50 [ 1834.490785][T10181] __sock_sendmsg+0xef/0x270 [ 1834.497194][T10181] __sys_sendto+0x39b/0x4f0 [ 1834.503345][T10181] __x64_sys_sendto+0xde/0x100 [ 1834.509753][T10181] do_syscall_64+0xf3/0x230 [ 1834.515903][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.523466][T10181] INITIAL USE at: [ 1834.527372][T10181] lock_acquire+0x1ed/0x550 [ 1834.533458][T10181] _raw_write_lock_irq+0xd3/0x120 [ 1834.540057][T10181] fasync_remove_entry+0xff/0x1d0 [ 1834.546642][T10181] sock_fasync+0x87/0x100 [ 1834.552527][T10181] __fput+0x71b/0x880 [ 1834.558063][T10181] task_work_run+0x24f/0x310 [ 1834.564211][T10181] syscall_exit_to_user_mode+0x168/0x370 [ 1834.571406][T10181] do_syscall_64+0x100/0x230 [ 1834.577555][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.585027][T10181] INITIAL READ USE at: [ 1834.589350][T10181] lock_acquire+0x1ed/0x550 [ 1834.595846][T10181] _raw_read_lock_irqsave+0xdd/0x130 [ 1834.603126][T10181] kill_fasync+0x199/0x4f0 [ 1834.609538][T10181] sock_wake_async+0x147/0x170 [ 1834.616297][T10181] sk_wake_async+0x183/0x280 [ 1834.622881][T10181] unix_release_sock+0x727/0xd00 [ 1834.630157][T10181] unix_release+0x91/0xc0 [ 1834.636482][T10181] sock_close+0xbc/0x240 [ 1834.642714][T10181] __fput+0x23f/0x880 [ 1834.648688][T10181] task_work_run+0x24f/0x310 [ 1834.655265][T10181] syscall_exit_to_user_mode+0x168/0x370 [ 1834.662888][T10181] do_syscall_64+0x100/0x230 [ 1834.669470][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.677356][T10181] } [ 1834.679840][T10181] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1834.688509][T10181] ... acquired at: [ 1834.692296][T10181] lock_acquire+0x1ed/0x550 [ 1834.696977][T10181] _raw_read_lock_irqsave+0xdd/0x130 [ 1834.702430][T10181] kill_fasync+0x199/0x4f0 [ 1834.707014][T10181] evdev_pass_values+0x58a/0xad0 [ 1834.712122][T10181] evdev_events+0x1c2/0x300 [ 1834.716792][T10181] input_pass_values+0x286/0x860 [ 1834.722159][T10181] input_event_dispose+0x30f/0x600 [ 1834.727434][T10181] input_handle_event+0xa71/0xbe0 [ 1834.732620][T10181] input_inject_event+0x22f/0x340 [ 1834.737822][T10181] evdev_write+0x5fd/0x790 [ 1834.742402][T10181] vfs_write+0x29c/0xc90 [ 1834.746810][T10181] ksys_write+0x183/0x2b0 [ 1834.751305][T10181] do_syscall_64+0xf3/0x230 [ 1834.755975][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.762053][T10181] [ 1834.764377][T10181] [ 1834.764377][T10181] stack backtrace: [ 1834.770265][T10181] CPU: 1 UID: 0 PID: 10181 Comm: syz.1.8293 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 1834.780672][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1834.790719][T10181] Call Trace: [ 1834.793989][T10181] [ 1834.796913][T10181] dump_stack_lvl+0x241/0x360 [ 1834.801698][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1834.806896][T10181] ? __pfx__printk+0x10/0x10 [ 1834.811488][T10181] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1834.817899][T10181] validate_chain+0x4ebd/0x5920 [ 1834.822753][T10181] ? __pfx_validate_chain+0x10/0x10 [ 1834.827961][T10181] ? rcu_read_lock_sched_held+0x8d/0x130 [ 1834.833694][T10181] ? rcu_is_watching+0x15/0xb0 [ 1834.838545][T10181] ? __pfx_validate_chain+0x10/0x10 [ 1834.843744][T10181] ? register_lock_class+0x102/0x980 [ 1834.849029][T10181] ? __pfx_register_lock_class+0x10/0x10 [ 1834.854668][T10181] ? mark_lock+0x9a/0x360 [ 1834.858987][T10181] __lock_acquire+0x1384/0x2050 [ 1834.863837][T10181] lock_acquire+0x1ed/0x550 [ 1834.868334][T10181] ? kill_fasync+0x199/0x4f0 [ 1834.872921][T10181] ? __pfx_lock_acquire+0x10/0x10 [ 1834.877940][T10181] ? __pfx_lock_acquire+0x10/0x10 [ 1834.882958][T10181] _raw_read_lock_irqsave+0xdd/0x130 [ 1834.888251][T10181] ? kill_fasync+0x199/0x4f0 [ 1834.892854][T10181] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1834.898741][T10181] ? do_raw_spin_lock+0x14f/0x370 [ 1834.903757][T10181] kill_fasync+0x199/0x4f0 [ 1834.908168][T10181] ? kill_fasync+0x54/0x4f0 [ 1834.912666][T10181] evdev_pass_values+0x58a/0xad0 [ 1834.917614][T10181] ? evdev_pass_values+0x5c1/0xad0 [ 1834.922728][T10181] evdev_events+0x1c2/0x300 [ 1834.927265][T10181] ? evdev_events+0x6f/0x300 [ 1834.931849][T10181] input_pass_values+0x286/0x860 [ 1834.936788][T10181] ? input_pass_values+0x8f/0x860 [ 1834.941807][T10181] input_event_dispose+0x30f/0x600 [ 1834.946911][T10181] input_handle_event+0xa71/0xbe0 [ 1834.951928][T10181] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1834.957382][T10181] ? __pfx_input_handle_event+0x10/0x10 [ 1834.962925][T10181] input_inject_event+0x22f/0x340 [ 1834.967943][T10181] ? input_inject_event+0xd6/0x340 [ 1834.973046][T10181] evdev_write+0x5fd/0x790 [ 1834.977546][T10181] ? __pfx_evdev_write+0x10/0x10 [ 1834.982476][T10181] ? bpf_lsm_file_permission+0x9/0x10 [ 1834.987846][T10181] ? security_file_permission+0x74/0x280 [ 1834.993516][T10181] ? rw_verify_area+0x1c3/0x6f0 [ 1834.998370][T10181] ? __pfx_evdev_write+0x10/0x10 [ 1835.003340][T10181] vfs_write+0x29c/0xc90 [ 1835.007930][T10181] ? kmem_cache_free+0x1a2/0x420 [ 1835.012867][T10181] ? __pfx_vfs_write+0x10/0x10 [ 1835.017629][T10181] ? __fget_files+0x29/0x470 [ 1835.022214][T10181] ? __fget_files+0x3f3/0x470 [ 1835.026881][T10181] ? __fget_files+0x29/0x470 [ 1835.031462][T10181] ? fdget_pos+0x19a/0x320 [ 1835.035872][T10181] ksys_write+0x183/0x2b0 [ 1835.040197][T10181] ? __pfx_ksys_write+0x10/0x10 [ 1835.045043][T10181] ? do_syscall_64+0x100/0x230 [ 1835.049806][T10181] ? do_syscall_64+0xb6/0x230 [ 1835.054478][T10181] do_syscall_64+0xf3/0x230 [ 1835.058996][T10181] ? clear_bhb_loop+0x35/0x90 [ 1835.063661][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.069551][T10181] RIP: 0033:0x7f3e0977dff9 [ 1835.073966][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1835.093678][T10181] RSP: 002b:00007f3e0a552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1835.102087][T10181] RAX: ffffffffffffffda RBX: 00007f3e09935f80 RCX: 00007f3e0977dff9 [ 1835.110055][T10181] RDX: 0000000000001068 RSI: 0000000020000040 RDI: 0000000000000004 [ 1835.118023][T10181] RBP: 00007f3e097f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1835.125987][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1835.133951][T10181] R13: 0000000000000000 R14: 00007f3e09935f80 R15: 00007f3e09a5fa28 [ 1835.141927][T10181] [ 1835.220072][T27440] usb 1-1: USB disconnect, device number 15 [ 1835.225638][ T5296] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1835.388198][ T5296] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1835.397901][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.408434][ T5296] usb 5-1: config 0 descriptor?? [ 1835.422823][ T5296] pwc: Creative Labs Webcam 5 detected. [ 1835.495861][ T5296] pwc: Failed to set LED on/off time (-71) [ 1835.502356][ T5296] pwc: send_video_command error -71 [ 1835.509642][ T5296] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1835.517244][ T5296] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1835.528743][ T5296] usb 5-1: USB disconnect, device number 102