last executing test programs: 4.634612947s ago: executing program 0 (id=283): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x9, 0xffffffff, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 4.170832481s ago: executing program 0 (id=284): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005140)={0x54, r3, 0x1, 0x70bd2a, 0x3, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 3.711550566s ago: executing program 0 (id=285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x4004010) 2.876181569s ago: executing program 1 (id=289): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xa000000000000000, 0x40000) rt_sigqueueinfo(r1, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) 2.622464892s ago: executing program 0 (id=290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x4, 0xf37, 0x3, 0x6, 0x7, "d0bdba000000000000fd00", 0x2, 0x9}) write(r1, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171faa19b3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01c592688acaefe150f0ffd163d3d54d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d7609", 0x10c) 2.622027402s ago: executing program 1 (id=291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0)=0x1, 0x4) 2.372537806s ago: executing program 0 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000005c0)={0x1, 0xfffffffc, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x5, 0x9, 0x0, 0x2c, 0x1, 0x1}) 2.271239451s ago: executing program 1 (id=293): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) close(0x3) 1.382141677s ago: executing program 1 (id=294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.155445959s ago: executing program 1 (id=295): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xff, 0xffffffff, 0xfffffffd, 0x7, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xd) 992.923508ms ago: executing program 1 (id=296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) mlockall(0x3) 0s ago: executing program 0 (id=297): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53107' (ED25519) to the list of known hosts. syzkaller login: [ 132.576424][ T3306] cgroup: Unknown subsys name 'net' [ 132.782096][ T3306] cgroup: Unknown subsys name 'cpuset' [ 132.814114][ T3306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 133.411100][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 144.124565][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.238227][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.323739][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.398828][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.159173][ T3312] hsr_slave_0: entered promiscuous mode [ 146.174194][ T3312] hsr_slave_1: entered promiscuous mode [ 146.428619][ T3311] hsr_slave_0: entered promiscuous mode [ 146.439048][ T3311] hsr_slave_1: entered promiscuous mode [ 146.444528][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 146.448884][ T3311] Cannot create hsr debugfs directory [ 148.044036][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.106629][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.143685][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.224016][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.473212][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.508312][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.538100][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.587648][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.893142][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.286088][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.983977][ T3312] veth0_vlan: entered promiscuous mode [ 156.066725][ T3312] veth1_vlan: entered promiscuous mode [ 156.255002][ T3311] veth0_vlan: entered promiscuous mode [ 156.361281][ T3311] veth1_vlan: entered promiscuous mode [ 156.476989][ T3312] veth0_macvtap: entered promiscuous mode [ 156.529241][ T3312] veth1_macvtap: entered promiscuous mode [ 156.761024][ T3311] veth0_macvtap: entered promiscuous mode [ 156.888108][ T3311] veth1_macvtap: entered promiscuous mode [ 156.897187][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.898071][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.898339][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.898596][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.418300][ T1214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.423109][ T1214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.423952][ T1214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.424430][ T1214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.618915][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 159.481058][ T3412] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 159.685999][ T3412] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.686509][ T3412] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.686999][ T3412] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.728614][ T3412] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 159.728991][ T3412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 159.729433][ T3412] usb 1-1: Product: syz [ 159.730239][ T3412] usb 1-1: Manufacturer: syz [ 159.730365][ T3412] usb 1-1: SerialNumber: syz [ 160.066127][ T3412] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 160.290673][ T3374] usb 1-1: USB disconnect, device number 2 [ 160.323361][ T3374] usblp0: removed [ 177.136171][ T3577] process 'syz.1.43' launched './file0' with NULL argv: empty string added [ 178.896613][ T3582] netlink: 27 bytes leftover after parsing attributes in process `syz.1.47'. [ 179.323027][ T3586] ip6gretap1: entered allmulticast mode [ 181.650598][ T3457] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.898471][ T3457] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.914916][ T3457] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.919105][ T3457] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.925841][ T3457] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.931141][ T3457] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.956129][ T3457] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.963300][ T3457] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.970753][ T3457] usb 1-1: Product: syz [ 181.974718][ T3457] usb 1-1: Manufacturer: syz [ 182.051590][ T3457] cdc_wdm 1-1:1.0: skipping garbage [ 182.054463][ T3457] cdc_wdm 1-1:1.0: skipping garbage [ 182.082509][ T3457] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 183.044910][ T3618] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.655407][ T3626] capability: warning: `syz.1.64' uses deprecated v2 capabilities in a way that may be insecure [ 185.027643][ T3636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.030443][ T3636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.034253][ T3374] usb 1-1: USB disconnect, device number 3 [ 186.581491][ T3457] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 186.781308][ T3457] usb 1-1: Using ep0 maxpacket: 32 [ 186.814770][ T3457] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.818605][ T3457] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.844284][ T3457] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 186.848193][ T3457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.852341][ T3457] usb 1-1: Product: syz [ 186.856886][ T3457] usb 1-1: Manufacturer: syz [ 186.859457][ T3457] usb 1-1: SerialNumber: syz [ 186.887087][ T3457] usb 1-1: config 0 descriptor?? [ 187.537445][ T3647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 187.580768][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.585659][ T30] audit: type=1326 audit(187.310:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.595986][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.605957][ T30] audit: type=1326 audit(187.330:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.613449][ T30] audit: type=1326 audit(187.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.620797][ T30] audit: type=1326 audit(187.340:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.627207][ T30] audit: type=1326 audit(187.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.642192][ T30] audit: type=1326 audit(187.340:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.646631][ T30] audit: type=1326 audit(187.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.650975][ T30] audit: type=1326 audit(187.370:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.656777][ T30] audit: type=1326 audit(187.380:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.663523][ T30] audit: type=1326 audit(187.380:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3646 comm="syz.0.72" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d15c0a8 code=0x7ffc0000 [ 187.793187][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 187.905122][ T3412] usb 1-1: USB disconnect, device number 4 [ 188.133314][ T3658] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.917700][ T3412] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 189.091103][ T3412] usb 1-1: device descriptor read/64, error -71 [ 189.341410][ T3412] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 189.480858][ T3412] usb 1-1: device descriptor read/64, error -71 [ 189.594226][ T3412] usb usb1-port1: attempt power cycle [ 189.961903][ T3412] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 190.008931][ T3412] usb 1-1: device descriptor read/8, error -71 [ 190.271215][ T3412] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.311417][ T3412] usb 1-1: device descriptor read/8, error -71 [ 190.423071][ T3412] usb usb1-port1: unable to enumerate USB device [ 198.229247][ T3700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'. [ 214.326271][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 214.625750][ T3753] Zero length message leads to an empty skb [ 219.823712][ T3776] loop3: detected capacity change from 0 to 1 [ 220.371513][ T3457] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 220.540764][ T3457] usb 1-1: Using ep0 maxpacket: 8 [ 220.564359][ T3457] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.565179][ T3457] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.565934][ T3457] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.566180][ T3457] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.566605][ T3457] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.566825][ T3457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.940694][ T3457] usb 1-1: GET_CAPABILITIES returned 0 [ 220.941376][ T3457] usbtmc 1-1:16.0: can't read capabilities [ 221.182324][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.187336][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.189724][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.194634][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.202581][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.203838][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.204864][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.206101][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.207199][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.208375][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.209493][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.225454][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.232161][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.233607][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.234736][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.235887][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 221.266440][ T11] usb 1-1: USB disconnect, device number 9 [ 223.485493][ T3798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.122'. [ 223.501562][ T3798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.122'. [ 224.080710][ T3388] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.257634][ T3388] usb 1-1: Using ep0 maxpacket: 32 [ 224.307389][ T3802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.315390][ T3802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.418692][ T3388] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 224.493823][ T3388] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.494411][ T3388] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.494954][ T3388] usb 1-1: Product: syz [ 224.495140][ T3388] usb 1-1: Manufacturer: syz [ 224.495315][ T3388] usb 1-1: SerialNumber: syz [ 224.547954][ T3388] usb 1-1: config 0 descriptor?? [ 224.554962][ T3800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.616199][ T3388] hub 1-1:0.0: bad descriptor, ignoring hub [ 224.616960][ T3388] hub 1-1:0.0: probe with driver hub failed with error -5 [ 224.973049][ T3388] usb 1-1: USB disconnect, device number 10 [ 225.331549][ T3388] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.536723][ T3388] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.541725][ T3388] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 225.542152][ T3388] usb 1-1: can't read configurations, error -71 [ 229.747294][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.753296][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.755745][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.758287][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.761322][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.763666][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.765560][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.767563][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.770978][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 229.772904][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 231.261122][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.483823][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.487410][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.491211][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.648476][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 231.649074][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.658850][ T24] usb 1-1: Product: syz [ 231.659491][ T24] usb 1-1: Manufacturer: syz [ 231.660387][ T24] usb 1-1: SerialNumber: syz [ 232.004820][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 232.011888][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 232.384654][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 232.706471][ T24] usb 1-1: USB disconnect, device number 13 [ 232.801887][ T24] usblp0: removed [ 234.824019][ T3838] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 245.461603][ T3674] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 245.768049][ T3674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.768735][ T3674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.769451][ T3674] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.773710][ T3674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.806240][ T3674] usb 1-1: config 0 descriptor?? [ 246.538305][ T3674] hid-generic 0003:256C:006D.0001: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 247.143748][ T3878] syz.1.151 (3878): drop_caches: 2 [ 248.368640][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.375513][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.358483][ T3895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.374427][ T3895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.903232][ T3911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.910981][ T3911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.138152][ T3915] __nla_validate_parse: 42 callbacks suppressed [ 251.143021][ T3915] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.166'. [ 256.710448][ T3388] usb 1-1: USB disconnect, device number 14 [ 267.042117][ T3972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.051562][ T3972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.605095][ T3976] syzkaller0: entered promiscuous mode [ 267.607085][ T3976] syzkaller0: entered allmulticast mode [ 267.657413][ T3979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.672150][ T3979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.241199][ T3457] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 268.431340][ T3457] usb 1-1: Using ep0 maxpacket: 32 [ 268.448495][ T3457] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 268.452620][ T3457] usb 1-1: config 0 has no interface number 0 [ 268.455617][ T3457] usb 1-1: config 0 interface 12 has no altsetting 0 [ 268.488551][ T3457] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 268.493123][ T3457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.496781][ T3457] usb 1-1: Product: syz [ 268.498925][ T3457] usb 1-1: Manufacturer: syz [ 268.501650][ T3457] usb 1-1: SerialNumber: syz [ 268.532796][ T3457] usb 1-1: config 0 descriptor?? [ 269.003750][ T3457] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 269.007640][ T3457] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 269.011710][ T3457] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 269.013869][ T3457] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 269.049068][ T3457] usb 1-1: USB disconnect, device number 15 [ 269.851076][ T3457] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 270.058811][ T3457] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.063940][ T3457] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 270.070635][ T3457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.111462][ T3457] usb 1-1: config 0 descriptor?? [ 280.392621][ T3674] usb 1-1: USB disconnect, device number 16 [ 281.157333][ T4001] syz.1.194 uses obsolete (PF_INET,SOCK_PACKET) [ 281.752303][ T4006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.755118][ T4006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.070833][ T3412] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 282.271281][ T3412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.271877][ T3412] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.274246][ T3412] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 282.274525][ T3412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.294209][ T3412] usb 1-1: config 0 descriptor?? [ 282.849048][ T3412] hid-generic 0003:1038:12B6.0002: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 283.031079][ T3412] usb 1-1: USB disconnect, device number 17 [ 283.228014][ T4012] fido_id[4012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 283.954131][ T11] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 284.182617][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 284.183102][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 284.338155][ T11] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.338592][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.338958][ T11] usb 1-1: Product: syz [ 284.339065][ T11] usb 1-1: Manufacturer: syz [ 284.339165][ T11] usb 1-1: SerialNumber: syz [ 284.360114][ T11] usb 1-1: config 0 descriptor?? [ 285.052034][ T11] usb 1-1: USB disconnect, device number 18 [ 285.734691][ T3996] udevd[3996]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.891343][ T3457] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 289.072959][ T3457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 289.075424][ T3457] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 289.075792][ T3457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.088382][ T3457] usb 1-1: config 0 descriptor?? [ 289.561676][ T3457] hid-generic 0003:0458:0138.0003: unbalanced delimiter at end of report description [ 289.563450][ T3457] hid-generic 0003:0458:0138.0003: probe with driver hid-generic failed with error -22 [ 289.764495][ T11] usb 1-1: USB disconnect, device number 19 [ 292.593797][ T4068] loop7: detected capacity change from 0 to 16384 [ 296.260607][ T1908] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 296.442286][ T1908] usb 1-1: Using ep0 maxpacket: 8 [ 296.637560][ T1908] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 296.638266][ T1908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.643665][ T1908] usb 1-1: config 0 has no interfaces? [ 296.644408][ T1908] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 296.644749][ T1908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.755384][ T1908] usb 1-1: config 0 descriptor?? [ 297.552608][ T3674] usb 1-1: USB disconnect, device number 20 [ 298.444643][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 299.558132][ T4104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.563546][ T4104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.732090][ T11] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 300.129063][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.144440][ T11] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 300.147835][ T11] usb 1-1: can't read configurations, error -71 [ 300.681859][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.695198][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.551851][ T3412] atkbd serio0: keyboard reset failed on [ 301.601605][ T4115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.605711][ T4115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.463584][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'. [ 302.721948][ T3457] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 302.788787][ T4125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.795036][ T4125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.976654][ T3457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.977067][ T3457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.977471][ T3457] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.977597][ T3457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.059347][ T3457] usb 1-1: config 0 descriptor?? [ 303.675151][ T3457] hid-generic 0003:256C:006D.0004: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 303.814168][ T4131] binder: 4130:4131 tried to acquire reference to desc 0, got 1 instead [ 303.823580][ T4131] binder: 4130:4131 got transaction with invalid offset (0, min 0 max 24) or object. [ 303.825825][ T4131] binder: 4130:4131 transaction call to 4130:0 failed 5/29201/-22, code 0 size 24-24 line 3451 [ 303.844328][ T3457] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.308784][ T4136] binder: 4135:4136 tried to acquire reference to desc 0, got 1 instead [ 304.334234][ T1908] binder: release 4135:4136 transaction 10 out, still active [ 304.335004][ T1908] binder: undelivered TRANSACTION_COMPLETE [ 304.370358][ T1908] binder: send failed reply for transaction 10, target dead [ 304.768900][ T4140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.775215][ T4140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.141616][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.145415][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.542988][ T4152] pimreg0: tun_chr_ioctl cmd 1074025681 [ 306.278680][ T4162] netlink: 'syz.1.261': attribute type 83 has an invalid length. [ 312.298079][ T4207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.307498][ T4207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.865874][ T3412] usb 1-1: USB disconnect, device number 23 [ 314.370810][ T3412] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 314.540281][ T3412] usb 1-1: Using ep0 maxpacket: 32 [ 314.565999][ T3412] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 314.566472][ T3412] usb 1-1: config 0 has no interface number 0 [ 314.592111][ T3412] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 314.592488][ T3412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.592852][ T3412] usb 1-1: Product: syz [ 314.592976][ T3412] usb 1-1: Manufacturer: syz [ 314.593078][ T3412] usb 1-1: SerialNumber: syz [ 314.624641][ T3412] usb 1-1: config 0 descriptor?? [ 314.652207][ T3412] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 314.936870][ T3412] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 315.013754][ T3412] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 315.286279][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 315.302228][ T3412] usb 1-1: USB disconnect, device number 24 [ 315.446441][ T3412] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 315.504037][ T3412] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 315.509224][ T3412] quatech2 1-1:0.51: device disconnected [ 316.992097][ T4238] mmap: syz.1.288 (4238) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 318.793620][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.796736][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.551761][ T11] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 320.750809][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 320.867543][ T11] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 320.868111][ T11] usb 1-1: config 0 has no interface number 0 [ 320.868829][ T11] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.891218][ T11] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 320.892029][ T11] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 320.893459][ T11] usb 1-1: Product: syz [ 320.893670][ T11] usb 1-1: SerialNumber: syz [ 320.922511][ T11] usb 1-1: config 0 descriptor?? [ 320.985097][ T11] cm109 1-1:0.8: invalid payload size 257, expected 4 [ 321.011653][ T11] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input2 [ 321.483804][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 321.484296][ C0] ------------[ cut here ]------------ [ 321.484415][ C0] URB 0000000046aabffe submitted while active [ 321.485648][ T3457] usb 1-1: USB disconnect, device number 25 [ 321.485677][ C0] WARNING: CPU: 0 PID: 4261 at drivers/usb/core/urb.c:379 usb_submit_urb+0x4f4/0x550 [ 321.497397][ C0] Modules linked in: [ 321.500401][ C0] CPU: 0 UID: 0 PID: 4261 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT [ 321.502282][ C0] Hardware name: linux,dummy-virt (DT) [ 321.503171][ C0] pstate: 604020c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 321.504191][ C0] pc : usb_submit_urb+0x4f4/0x550 [ 321.504836][ C0] lr : usb_submit_urb+0x4f4/0x550 [ 321.505417][ C0] sp : ffff800080003ca0 [ 321.505934][ C0] x29: ffff800080003ca0 x28: f4f000000dab0540 x27: f4f0000005556e50 [ 321.507269][ C0] x26: 0000000000000000 x25: f1f000000c188380 x24: fcf0000005166000 [ 321.508441][ C0] x23: f4f0000005556c00 x22: fdf000000c228c53 x21: fdf000000c228c54 [ 321.509736][ C0] x20: 00000000000000c0 x19: fdf000000dab0000 x18: 0000000000000010 [ 321.510850][ C0] x17: fff07ffffcfe1000 x16: ffff800080000000 x15: ffff800080003820 [ 321.512112][ C0] x14: 00000000ffffffea x13: ffff800080003968 x12: ffff8000829ef238 [ 321.514019][ C0] x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8 [ 321.515658][ C0] x8 : c0000000ffffdfff x7 : ffff80008293f1b0 x6 : 00000000000affa8 [ 321.516760][ C0] x5 : fff000007f8ca4c8 x4 : 0000000000000000 x3 : fff07ffffcfe1000 [ 321.517858][ C0] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5f000000ad14a00 [ 321.519313][ C0] Call trace: [ 321.520376][ C0] usb_submit_urb+0x4f4/0x550 (P) [ 321.521528][ C0] cm109_urb_irq_callback+0xdc/0x2b8 [ 321.522421][ C0] __usb_hcd_giveback_urb+0x9c/0x15c [ 321.523161][ C0] usb_hcd_giveback_urb+0x11c/0x12c [ 321.523867][ C0] dummy_timer+0x784/0xfb8 [ 321.524705][ C0] __hrtimer_run_queues+0x138/0x1bc [ 321.525445][ C0] hrtimer_run_softirq+0x6c/0xc4 [ 321.526244][ C0] handle_softirqs+0x108/0x240 [ 321.527022][ C0] __do_softirq+0x14/0x20 [ 321.527972][ C0] ____do_softirq+0x10/0x1c [ 321.528602][ C0] call_on_irq_stack+0x30/0x48 [ 321.529324][ C0] do_softirq_own_stack+0x1c/0x2c [ 321.530435][ C0] __irq_exit_rcu+0xd8/0x110 [ 321.531024][ C0] irq_exit_rcu+0x10/0x1c [ 321.531698][ C0] el1_interrupt+0x38/0x64 [ 321.532387][ C0] el1h_64_irq_handler+0x18/0x24 [ 321.533127][ C0] el1h_64_irq+0x6c/0x70 [ 321.533912][ C0] alloc_pages_mpol+0x3c/0x1b8 (P) [ 321.534627][ C0] folio_alloc_mpol_noprof+0x14/0x6c [ 321.535467][ C0] vma_alloc_folio_noprof+0x7c/0xcc [ 321.536166][ C0] vma_alloc_zeroed_movable_folio+0x38/0x44 [ 321.536902][ C0] __handle_mm_fault+0x1344/0x1a6c [ 321.537987][ C0] handle_mm_fault+0x158/0x308 [ 321.538798][ C0] __get_user_pages+0x1e0/0xcc8 [ 321.539561][ C0] populate_vma_page_range+0x84/0xd8 [ 321.540619][ C0] __mm_populate+0xb8/0x178 [ 321.541268][ C0] __arm64_sys_mlockall+0x178/0x1a4 [ 321.542136][ C0] invoke_syscall+0x48/0x110 [ 321.542899][ C0] el0_svc_common.constprop.0+0x40/0xe0 [ 321.543721][ C0] do_el0_svc+0x1c/0x28 [ 321.544533][ C0] el0_svc+0x34/0x10c [ 321.545352][ C0] el0t_64_sync_handler+0xa0/0xe4 [ 321.546176][ C0] el0t_64_sync+0x1a4/0x1a8 [ 321.547262][ C0] ---[ end trace 0000000000000000 ]--- [ 321.548700][ C0] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -16 [ 321.549316][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 321.553909][ T3457] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 321.556660][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 323.463739][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.537371][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.637218][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.743243][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.780470][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.850354][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.897019][ T12] bond0 (unregistering): Released all slaves [ 325.091958][ T12] hsr_slave_0: left promiscuous mode [ 325.104640][ T12] hsr_slave_1: left promiscuous mode [ 325.145581][ T12] veth1_macvtap: left promiscuous mode [ 325.146360][ T12] veth0_macvtap: left promiscuous mode [ 325.147222][ T12] veth1_vlan: left promiscuous mode [ 325.147887][ T12] veth0_vlan: left promiscuous mode [ 341.523411][ T1214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.634617][ T1214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.734250][ T1214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.867469][ T1214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.914249][ T1214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.959029][ T1214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.003052][ T1214] bond0 (unregistering): Released all slaves [ 343.251386][ T1214] hsr_slave_0: left promiscuous mode [ 343.257485][ T1214] hsr_slave_1: left promiscuous mode [ 343.299019][ T1214] veth1_macvtap: left promiscuous mode [ 343.300744][ T1214] veth0_macvtap: left promiscuous mode [ 343.301488][ T1214] veth1_vlan: left promiscuous mode [ 343.302051][ T1214] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 09:01:03 Registers: info registers vcpu 0 CPU#0 PC=ffff8000800b24f4 X00=ffff800082bce4e8 X01=f5f000000ad14a00 X02=0000000000000000 X03=0000000000000000 X04=0000000000000018 X05=8080808080000000 X06=fefefefeff636473 X07=7f7f7f7f7f7f7f7f X08=0101010101010101 X09=000000000002ffe8 X10=0000000000000001 X11=0000000000000001 X12=ffff8000829ef238 X13=ffff800080003788 X14=00000000ffffffea X15=ffff8000800033d0 X16=ffff800080000000 X17=fff07ffffcfe1000 X18=00000000ffffffff X19=ffff800080003b50 X20=f5f000000ad15180 X21=ffff80008261d6b8 X22=ffff80008261d6b8 X23=0000000000000009 X24=0000000000000000 X25=00000000000010a5 X26=0000000000000000 X27=ffff80008261d6b8 X28=f5f000000ad14a00 X29=ffff8000800038b0 X30=ffff8000800b24f4 SP=ffff8000800038b0 PSTATE=624023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=000000000000ffff P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000756c6c2570:6f6f6c2f7665642f Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000f0000000f0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff000000ff00:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff000f000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffcd6233f0:0000ffffcd6233f0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffcd6233c0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b16994 X00=ffff800081b16990 X01=f0f000000aa23780 X02=0000000000000001 X03=0000000000000000 X04=ffff8000828f2c80 X05=0000004acb656600 X06=0000004acacccf80 X07=7fffffffffffffff X08=0000004acacccf80 X09=00000000000000c0 X10=000000000000014b X11=0000000000000003 X12=0000000000000008 X13=0000000000000001 X14=000000000000014b X15=0000000000000000 X16=ffff800080008000 X17=fff07ffffcffa000 X18=0000000000000000 X19=0000000000000000 X20=ffff800082a21508 X21=ffff800082a21500 X22=f0f000000aa23780 X23=0000000000000004 X24=ffff800082a21508 X25=0000000000000028 X26=0000000000000000 X27=0000000000000000 X28=0000000000000100 X29=ffff80008000be90 X30=ffff800080181ce4 SP=ffff80008000be90 PSTATE=604020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000072657275:74636166756e616d Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffff00000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffff000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3333333333333333:3333333333333333 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:cccccccccccccccc Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2c3230322c313032:2c3030322c38462c Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2c3630322c353032:2c3430322c333032 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffc67794b0:0000ffffc67794b0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffc6779480 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000