last executing test programs: 6.755636071s ago: executing program 2 (id=20192): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="09f1127adf0a487b28832b01971a540029bb9d555cc4e783243eb84e48d217f6ca1da107fce7d149e1169c157aea4fcf583b7987d85bd06d2acbdb860c59ebac6bb40d48c3e8213e2ce37894134900b18c55bf42d30e0fd81e89cfb0827f4b0f58473c079b816806f8878191c237750253288b323ae5b3417427dce5b03902f5059813e18ca2d5c796f6f0d964088764545f80ac6c25e3c6cb368497d12e7450810dddfe") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 6.004248233s ago: executing program 2 (id=20197): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) close_range(r0, 0xffffffffffffffff, 0x2) 5.743086402s ago: executing program 2 (id=20201): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 4.392186659s ago: executing program 3 (id=20216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x0, 0x6, 0x9, 0x9, 0x4}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) 4.210038793s ago: executing program 2 (id=20218): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) 4.13641441s ago: executing program 2 (id=20219): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) unshare(0x10000800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x7ff, 0x4000105, 0x80, 0xfffffffc, 0x5]}, &(0x7f0000000400)=0x54) 2.961745317s ago: executing program 3 (id=20229): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000005fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.764043088s ago: executing program 3 (id=20230): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed841572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134fba55526983dabf2f189c70ddec701b55256d383dd802b4b09b801fb6cbe3408c9eb6d1fd85bf93b60b966680485d4550a3aa3454d888d6f8e81f669d4d87914041ac313e39f0ae29f31dedba1c5964c6729045cbd010e4469a7220335f76983c7d22a53401cb25444b9103643843726bdbb28d4032f9258f8539b9a7dfd6558b2c524d38c9e2e1c23fd7a6a42bf4bb5ebdf0b75ecc547ef15865536ee1de07155bc5e6b5a227c1170a6e4e44991f0685219c417d7194a4cdbce6a1e76f830fdd07887b49a3b648772b6e1b6fda08931540cc521e44f3fb221ce86438759704ce2422653a35f62c483a21ae6b34b14e6d900172dddecf8846a9423d784341296e141423f1c1efed6a0c334430647c0408af67c54a8cad69a43bf28ebe4a650343151223969bafa661999342df2a160f45b950f258f1e444575d6251a917bfcbb4dc834bd08d4deeb3be0dabade5f46060e54bc71f137f47e4233804eb9de", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) 2.475904657s ago: executing program 3 (id=20234): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) 2.280606823s ago: executing program 2 (id=20235): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x10, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0xd, 0x4, "dae5ac60"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.230400849s ago: executing program 4 (id=20236): syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.100096767s ago: executing program 0 (id=20237): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, 0x0, &(0x7f0000000540)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x2, 0x4, 0x7, 0x4}]}}, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 1.963552215s ago: executing program 4 (id=20238): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000f70001"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x48040) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x53, 0x0, 0x0) 1.812115548s ago: executing program 3 (id=20239): prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.378063243s ago: executing program 0 (id=20240): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000180)={r4}) 1.344354261s ago: executing program 1 (id=20241): r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4d5d, 0x10, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 1.265200352s ago: executing program 0 (id=20242): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x5}, 0x8) 1.16865018s ago: executing program 1 (id=20243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 1.106190787s ago: executing program 0 (id=20244): socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "be74ea8625aa6cf6aa7430376148861329c09e0d4be58feb1c691b2111c3f529b5831fa9711eb4596080302f79f0d53c7d126230b6ac118ce92667aec56506c9", 0x2d}, 0x48, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) 1.006982208s ago: executing program 4 (id=20245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b1000040"]) 1.000662309s ago: executing program 1 (id=20246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x6c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_CMD={0x0, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 940.702407ms ago: executing program 0 (id=20247): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) prctl$PR_SCHED_CORE(0x41555856, 0x1, 0x0, 0x3, 0x0) 776.89537ms ago: executing program 1 (id=20248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 723.959528ms ago: executing program 1 (id=20249): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x9, {[@md5sig={0x13, 0x12, "252062c4efd86773cc44777310a84b97"}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @generic={0x1, 0x12, "3836eb47f0e5d28e3dd0bcf2c0ae76b7"}, @fastopen={0x22, 0x2}, @generic={0x1, 0x11, "72c808be5c8d54f12cf3fcfb693cc6"}]}}}}}}}}, 0x0) 588.647049ms ago: executing program 4 (id=20250): syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000099000040"]) 400.093001ms ago: executing program 1 (id=20251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x1, 0xffffffff, 0xdd56, 0xa1, 0xc, 0x3}) 174.104058ms ago: executing program 4 (id=20252): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 134.35324ms ago: executing program 0 (id=20253): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x13, @void}, 0x10) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 100.279387ms ago: executing program 3 (id=20254): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=20255): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x2400) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x50, 0x2}, @period={0x59, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): wdm 4-1:1.0: skipping garbage [ 1222.054562][T18646] cdc_wdm 4-1:1.0: skipping garbage [ 1222.068121][T18646] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1222.074163][T18646] cdc_wdm 4-1:1.0: Unknown control protocol [ 1222.157266][ T5909] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 1222.329503][ T5909] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.338252][ T5909] usb 1-1: config 0 has no interface number 0 [ 1222.345594][ T5909] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1222.363259][ T5909] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1222.375710][ T5909] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1222.385201][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.401849][ T5909] usb 1-1: config 0 descriptor?? [ 1222.409932][T24534] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1222.438657][ T5909] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1222.468993][ T5888] gspca_sunplus: reg_r err -71 [ 1222.486270][ T5888] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1222.508341][ T5888] usb 5-1: USB disconnect, device number 101 [ 1222.661657][ T5909] usb 1-1: USB disconnect, device number 125 [ 1222.950072][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18683'. [ 1222.969365][T24577] vlan2: entered promiscuous mode [ 1223.718396][ T5675] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1223.877093][ T5675] usb 3-1: Using ep0 maxpacket: 32 [ 1223.885788][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.917596][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.918027][ T5909] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1223.938090][ T5675] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1223.947855][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.959569][ T5675] usb 3-1: config 0 descriptor?? [ 1223.972848][ T5675] hub 3-1:0.0: USB hub found [ 1224.097242][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 1224.105382][ T5909] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1224.124008][ T5909] usb 2-1: config 0 has no interface number 0 [ 1224.137167][ T5909] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1224.153611][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.162142][ T5909] usb 2-1: Product: syz [ 1224.166383][ T5909] usb 2-1: Manufacturer: syz [ 1224.171672][ T5909] usb 2-1: SerialNumber: syz [ 1224.186273][ T5675] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 1224.189982][ T5909] usb 2-1: config 0 descriptor?? [ 1224.203727][ T5909] asix 2-1:0.251: probe with driver asix failed with error -22 [ 1224.391833][ T5675] usbhid 3-1:0.0: can't add hid device: -71 [ 1224.403736][ T5675] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1224.441714][ T5675] usb 3-1: USB disconnect, device number 127 [ 1224.469651][ T5909] usb 2-1: USB disconnect, device number 113 [ 1224.500653][ C1] wdm_int_callback: 160 callbacks suppressed [ 1224.500701][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1224.513407][ C1] wdm_int_callback: 160 callbacks suppressed [ 1224.513426][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1224.527661][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1224.527889][T22863] usb 4-1: USB disconnect, device number 12 [ 1224.534290][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1224.546303][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1225.273707][T24676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1225.385861][T24676] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1225.473918][T24723] macsec1: entered allmulticast mode [ 1225.497535][T24723] ip6gretap0: entered allmulticast mode [ 1226.659104][T24780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.097642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1227.361402][T24810] loop6: detected capacity change from 0 to 524288000 [ 1229.929882][T24921] @: renamed from vlan0 (while UP) [ 1230.241944][T24929] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.250934][T24929] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.260117][T24929] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.268967][T24929] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.481604][T24942] netlink: 'syz.4.18791': attribute type 4 has an invalid length. [ 1231.097507][ T5675] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1231.276120][ T5675] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1231.306664][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.327916][ T5675] usb 3-1: Product: syz [ 1231.332150][ T5675] usb 3-1: Manufacturer: syz [ 1231.336784][ T5675] usb 3-1: SerialNumber: syz [ 1231.367422][ T5675] usb 3-1: config 0 descriptor?? [ 1231.586193][ T5675] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1231.878391][T24992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18807'. [ 1231.899344][T24992] netlink: 1 bytes leftover after parsing attributes in process `syz.4.18807'. [ 1231.997770][ T5675] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1232.200665][ T5909] usb 3-1: USB disconnect, device number 2 [ 1232.563869][T25028] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1232.572257][T25028] pim6reg0: linktype set to 773 [ 1232.754021][T25039] netlink: 18 bytes leftover after parsing attributes in process `syz.1.18822'. [ 1233.996189][T25081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18838'. [ 1234.498656][ T30] kauditd_printk_skb: 737 callbacks suppressed [ 1234.498676][ T30] audit: type=1326 audit(1748786526.115:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25107 comm="syz.0.18847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1234.527494][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.575364][ T30] audit: type=1326 audit(1748786526.155:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25107 comm="syz.0.18847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1234.611435][ T30] audit: type=1326 audit(1748786526.155:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25107 comm="syz.0.18847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1234.657319][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1234.668645][ T30] audit: type=1326 audit(1748786526.155:7184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25107 comm="syz.0.18847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1234.691285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1234.706056][ T30] audit: type=1326 audit(1748786526.155:7185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25107 comm="syz.0.18847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1234.767326][ T5888] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1234.827216][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 1234.839355][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.857724][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1234.887163][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1234.917331][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1234.937657][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1234.950713][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1234.964886][ T5888] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1234.977557][ T5888] usb 2-1: config 0 has no interface number 0 [ 1234.989905][ T5909] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1235.007232][ T5888] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1235.016347][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.024937][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1235.037323][T18657] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1235.037439][ T5909] usb 4-1: Product: syz [ 1235.049214][ T5888] usb 2-1: Product: syz [ 1235.053421][ T5888] usb 2-1: Manufacturer: syz [ 1235.059678][ T5888] usb 2-1: SerialNumber: syz [ 1235.066071][ T5909] usb 4-1: Manufacturer: syz [ 1235.081301][ T5888] usb 2-1: config 0 descriptor?? [ 1235.086582][ T5909] usb 4-1: SerialNumber: syz [ 1235.103490][ T5888] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1235.114509][ T5909] usb 4-1: config 0 descriptor?? [ 1235.211844][T18657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.243670][T18657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.264293][T18657] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1235.296419][T18657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.311575][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1235.317701][T18657] usb 3-1: config 0 descriptor?? [ 1235.346668][ T5909] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1235.362739][ T5909] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1235.386626][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1235.518488][T25110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.548537][ T5909] radio-si470x 4-1:0.0: software version 253, hardware version 55 [ 1235.556477][ T5909] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1235.570498][T25110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.739017][T18657] sony 0003:054C:024B.0099: unknown main item tag 0x0 [ 1235.745897][T18657] sony 0003:054C:024B.0099: unknown main item tag 0x0 [ 1235.764917][T18657] sony 0003:054C:024B.0099: unexpected long global item [ 1235.773213][ T5909] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1235.777886][T18657] sony 0003:054C:024B.0099: parse failed [ 1235.802423][T18657] sony 0003:054C:024B.0099: probe with driver sony failed with error -22 [ 1235.806535][ T5909] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1235.819822][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1235.828364][ T5888] usb 2-1: USB disconnect, device number 114 [ 1235.839926][ T5909] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1235.860059][ T5909] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1235.870255][ T5888] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1235.891963][ T5909] usb 4-1: USB disconnect, device number 13 [ 1235.908800][ T5888] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1235.927272][ T5888] quatech2 2-1:0.51: device disconnected [ 1235.945106][T18646] usb 3-1: USB disconnect, device number 3 [ 1236.911274][T25227] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1236.962947][T25227] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1237.027968][T18646] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1237.187901][T18646] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1237.198656][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.214927][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.228843][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.256453][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.270267][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.291499][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.314672][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.327952][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.337655][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.349359][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.361652][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.374516][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.384043][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.394332][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.406532][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.419526][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.428189][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.437796][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.449964][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.481423][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.498728][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.508170][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.524046][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.535979][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.545097][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.554622][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.569183][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.581043][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.589812][T18646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1237.604450][T18646] usb 4-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1237.617238][T18646] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1237.644073][T18646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1237.679209][T18646] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1237.688792][T18646] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1237.714191][T18646] usb 4-1: Product: syz [ 1237.728933][T18646] usb 4-1: Manufacturer: syz [ 1237.740855][T18646] usb 4-1: SerialNumber: syz [ 1237.775439][T18646] usb 4-1: config 0 descriptor?? [ 1237.817479][T18646] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1238.090408][T18646] usb 4-1: USB disconnect, device number 14 [ 1238.100513][T18646] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1238.347220][ T5909] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1238.407600][ T5888] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1238.497149][T18657] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1238.507130][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 1238.516686][ T5909] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1238.532495][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.545997][ T5909] usb 5-1: config 0 has no interface number 0 [ 1238.562228][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1238.574985][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.590738][ T5909] usb 5-1: Product: syz [ 1238.595156][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.611113][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.620351][ T5909] usb 5-1: Manufacturer: syz [ 1238.625009][ T5909] usb 5-1: SerialNumber: syz [ 1238.650205][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1238.667474][T18657] usb 1-1: Using ep0 maxpacket: 32 [ 1238.674452][ T5909] usb 5-1: config 0 descriptor?? [ 1238.679402][T18657] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1238.683496][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.710550][T18657] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 1238.714454][ T5909] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1238.728908][ T5909] usb 5-1: No valid video chain found. [ 1238.734456][ T5888] usb 2-1: Product: syz [ 1238.737579][T18657] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.756304][ T5888] usb 2-1: Manufacturer: syz [ 1238.768077][ T5888] usb 2-1: SerialNumber: syz [ 1238.798189][T18657] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1238.822402][T18657] usb 1-1: config 128 has no interface number 0 [ 1238.839843][T18657] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1238.856551][T18657] usb 1-1: config 128 interface 127 has no altsetting 0 [ 1238.866869][ T30] audit: type=1326 audit(1748786530.475:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25298 comm="syz.3.18891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1238.889432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.904824][ T30] audit: type=1326 audit(1748786530.475:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25298 comm="syz.3.18891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1238.914200][ T5909] usb 5-1: USB disconnect, device number 102 [ 1238.927614][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.934353][T18657] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1238.965738][T18657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.984729][T18657] usb 1-1: Product: syz [ 1238.989747][T18657] usb 1-1: Manufacturer: syz [ 1238.994477][T18657] usb 1-1: SerialNumber: syz [ 1238.999765][ T30] audit: type=1326 audit(1748786530.475:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25298 comm="syz.3.18891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1239.007309][ T5888] usb 2-1: 0:2 : does not exist [ 1239.022288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.064788][T25288] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1239.086070][ T5888] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1239.088067][ T30] audit: type=1326 audit(1748786530.475:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25298 comm="syz.3.18891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1239.124090][ T30] audit: type=1326 audit(1748786530.475:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25298 comm="syz.3.18891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1239.184578][ T5888] usb 2-1: USB disconnect, device number 115 [ 1239.295564][T20489] udevd[20489]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.320728][T18657] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1239.377592][ T5909] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1239.382303][T18657] usb 1-1: USB disconnect, device number 126 [ 1239.471885][T20891] udevd[20891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1239.549536][ T5909] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1239.575174][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.597137][ T5909] usb 4-1: config 0 descriptor?? [ 1239.619652][ T5909] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1239.812909][ T5909] gp8psk: usb in 128 operation failed. [ 1240.031342][ T5909] gp8psk: FW Version = 68.248.173 (0x44f8ad) Build 2048/49/50 [ 1240.232101][ T5909] gp8psk: usb in 149 operation failed. [ 1240.256039][ T5909] gp8psk: failed to get FPGA version [ 1240.280565][ T5909] gp8psk: usb in 138 operation failed. [ 1240.286188][ T5909] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1240.332210][ T5909] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1240.364686][ T5909] usb 4-1: USB disconnect, device number 15 [ 1240.403005][T25395] ip6tnl1: entered promiscuous mode [ 1241.743932][T25466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18933'. [ 1241.801306][T25471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18933'. [ 1241.947569][ T5675] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1242.097600][ T5675] usb 3-1: Using ep0 maxpacket: 32 [ 1242.109462][ T5675] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1242.134324][ T5675] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1242.147221][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.165563][ T5675] usb 3-1: Product: syz [ 1242.171864][ T5675] usb 3-1: Manufacturer: syz [ 1242.182829][ T5675] usb 3-1: SerialNumber: syz [ 1242.238773][ T5675] usb 3-1: config 0 descriptor?? [ 1242.671768][ T5675] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1243.095337][ T5675] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1243.117798][ T5675] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1243.137932][ T5675] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1243.159079][T25498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18941'. [ 1243.197934][ T5675] usb 3-1: USB disconnect, device number 4 [ 1244.037231][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1244.157735][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.164119][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.207526][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 1244.232524][ T5909] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1244.262671][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.284944][ T5909] usb 3-1: Product: syz [ 1244.294316][ T5909] usb 3-1: Manufacturer: syz [ 1244.311090][ T5909] usb 3-1: SerialNumber: syz [ 1244.331349][ T5909] usb 3-1: config 0 descriptor?? [ 1244.507478][ T5675] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1244.562481][ T5909] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1244.586419][T25556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18959'. [ 1244.680603][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 1244.690474][ T5675] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1244.713204][ T5675] usb 5-1: config 0 has no interface number 0 [ 1244.720188][ T5675] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1244.736806][ T5675] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1244.746648][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.756357][ T5675] usb 5-1: Product: syz [ 1244.763927][ T5675] usb 5-1: Manufacturer: syz [ 1244.784850][ T5675] usb 5-1: SerialNumber: syz [ 1244.833667][ T5675] usb 5-1: config 0 descriptor?? [ 1244.860388][ T5675] smsc75xx v1.0.0 [ 1245.167966][ T5909] gspca_sunplus: reg_w_riv err -71 [ 1245.186602][ T5909] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1245.209701][ T5909] usb 3-1: USB disconnect, device number 5 [ 1245.667165][ T5909] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1245.691594][ T5675] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1245.709976][ T5675] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1245.739365][ T5675] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1245.767138][ T5675] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1245.782859][ T5675] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1245.795596][ T5675] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1245.811387][ T5675] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1245.826515][ T5675] usb 5-1: USB disconnect, device number 103 [ 1245.832660][ T5888] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1245.840537][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.879246][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1245.891869][ T5909] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1245.927212][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1245.935739][ T5909] usb 2-1: SerialNumber: syz [ 1245.989390][ T5888] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1246.000572][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1246.010749][ T5888] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1246.027242][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1246.035670][ T5888] usb 4-1: Product: syz [ 1246.040568][ T5888] usb 4-1: Manufacturer: syz [ 1246.045233][ T5888] usb 4-1: SerialNumber: syz [ 1246.068344][ T5888] usb 4-1: config 0 descriptor?? [ 1246.090858][ T5888] usb 4-1: selecting invalid altsetting 0 [ 1246.207183][ T5909] usb 2-1: 0:2 : does not exist [ 1246.274093][ T5909] usb 2-1: USB disconnect, device number 116 [ 1246.391820][ T5888] usb 4-1: USB disconnect, device number 16 [ 1246.725302][T25675] tun0: tun_chr_ioctl cmd 2148553947 [ 1246.889141][T25681] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1246.927266][T25681] syzkaller1: linktype set to 32 [ 1247.237158][ T5675] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1247.273278][T25701] netlink: 'syz.1.18988': attribute type 13 has an invalid length. [ 1247.421723][ T5675] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1247.445647][ T5675] usb 3-1: config 0 has no interface number 0 [ 1247.467298][ T5675] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1247.507191][ T5675] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1247.540155][ T5675] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1247.572254][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.613944][ T5675] usb 3-1: config 0 descriptor?? [ 1247.630974][T25693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1247.657767][ T5675] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1247.911703][ T5675] usb 3-1: USB disconnect, device number 6 [ 1247.917965][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1248.555274][ T30] audit: type=1800 audit(1748786540.155:7191): pid=25741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19000" name="file0" dev="tmpfs" ino=19278 res=0 errno=0 [ 1249.801802][T25767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.227740][ T5675] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1250.389354][ T5675] usb 3-1: Using ep0 maxpacket: 8 [ 1250.428127][ T5675] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1250.451897][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1250.476569][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1250.498954][ T5675] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.524591][ T5675] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1250.627121][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.808844][T25809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19022'. [ 1250.866086][T25809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19022'. [ 1250.867114][ T5675] usb 3-1: GET_CAPABILITIES returned 0 [ 1250.907064][ T5675] usbtmc 3-1:16.0: can't read capabilities [ 1251.074990][ T5675] usb 3-1: USB disconnect, device number 7 [ 1251.654539][T25855] netlink: 'syz.1.19034': attribute type 1 has an invalid length. [ 1252.017897][ T5675] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1252.187183][ T5675] usb 3-1: Using ep0 maxpacket: 8 [ 1252.198112][ T5675] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1252.227181][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1252.260324][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1252.292195][ T5675] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.321652][ T5675] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.337033][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.570693][ T5675] usb 3-1: GET_CAPABILITIES returned 0 [ 1252.576270][ T5675] usbtmc 3-1:16.0: can't read capabilities [ 1252.820862][ T5675] usb 3-1: USB disconnect, device number 8 [ 1253.941749][ T5888] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1254.112155][ T5888] usb 3-1: config 4 has an invalid interface number: 4 but max is 0 [ 1254.126668][ T5888] usb 3-1: config 4 has no interface number 0 [ 1254.153743][ T5888] usb 3-1: config 4 interface 4 has no altsetting 0 [ 1254.173947][ T5888] usb 3-1: New USB device found, idVendor=1435, idProduct=0326, bcdDevice=ea.c7 [ 1254.196005][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.220273][ T5888] usb 3-1: Product: syz [ 1254.224507][ T5888] usb 3-1: Manufacturer: syz [ 1254.243959][ T5888] usb 3-1: SerialNumber: syz [ 1254.407399][ T5888] usb 3-1: reset full-speed USB device number 9 using dummy_hcd [ 1254.630083][T25958] syzkaller0: tun_chr_ioctl cmd 21731 [ 1255.117472][ T5888] usb 3-1: device descriptor read/64, error -71 [ 1255.343922][T25990] netlink: 'syz.4.19080': attribute type 9 has an invalid length. [ 1255.362538][ T5888] usb 3-1: reset full-speed USB device number 9 using dummy_hcd [ 1255.367051][T25990] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.19080'. [ 1255.647749][T18657] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1255.749457][T26018] netlink: 6 bytes leftover after parsing attributes in process `syz.4.19089'. [ 1255.765993][T26018] netlink: 6 bytes leftover after parsing attributes in process `syz.4.19089'. [ 1255.819821][T18657] usb 1-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 1255.845698][T18657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.875709][T18657] usb 1-1: config 0 descriptor?? [ 1255.970762][ T5888] usb 3-1: USB disconnect, device number 9 [ 1256.110992][T18657] usbhid 1-1:0.0: can't add hid device: -71 [ 1256.123548][T18657] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1256.155890][T18657] usb 1-1: USB disconnect, device number 127 [ 1256.458508][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 1256.693878][T26068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19100'. [ 1257.392922][T26095] ALSA: mixer_oss: invalid OSS volume 'A141=w敐腣e]' [ 1257.437231][T26095] ALSA: mixer_oss: invalid OSS volume '室盉寺;T`緻$櫩綞黧cXMYd,' [ 1257.445679][T26095] ALSA: mixer_oss: invalid OSS volume 'b珟@h#' [ 1257.503182][T26095] ALSA: mixer_oss: invalid OSS volume '晳h4繓蠿瑒S4v=0漘>&湎' [ 1257.571413][T26095] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 1257.600037][T26095] ALSA: mixer_oss: invalid OSS volume '-z5矈c^鱆6$' [ 1257.624850][T26095] ALSA: mixer_oss: invalid OSS volume '0审T劗皔蒌瞵髩椽嚄俲朠&喅a飔' [ 1257.667051][T26095] ALSA: mixer_oss: invalid OSS volume '|幞髜俓' [ 1257.673586][T26095] ALSA: mixer_oss: invalid OSS volume '@鬪3b蓽憓樤G$#\("/鴒鶯' [ 1257.718743][T26095] ALSA: mixer_oss: invalid OSS volume '' [ 1257.857264][T26104] binder: 26103:26104 ioctl c018620c 200000000640 returned -22 [ 1258.978508][ T5888] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1259.074458][T26141] ALSA: seq fatal error: cannot create timer (-19) [ 1259.138879][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 1259.156872][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1259.172404][ T5888] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1259.182904][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.199822][ T5888] usb 2-1: Product: syz [ 1259.208699][ T5888] usb 2-1: Manufacturer: syz [ 1259.219064][ T5888] usb 2-1: SerialNumber: syz [ 1259.235682][ T5888] usb 2-1: config 0 descriptor?? [ 1259.253917][ T5888] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1259.284830][ T5888] usb 2-1: Detected FT232R [ 1259.474908][ T5888] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1259.723887][ T5888] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1259.933820][ T5888] usb 2-1: USB disconnect, device number 117 [ 1260.012525][ T5888] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1260.048842][ T5888] ftdi_sio 2-1:0.0: device disconnected [ 1261.496202][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19153'. [ 1261.527182][T26219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19153'. [ 1261.829111][T26233] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.19159'. [ 1261.889881][T26235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19160'. [ 1263.016223][T26277] binder: 26275:26277 ioctl c018620c 200000000040 returned -22 [ 1263.336144][T26292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.135687][T26333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19197'. [ 1264.180035][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19197'. [ 1264.847081][ T5888] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1264.857579][T18646] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1265.004171][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1265.020352][T18646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.036269][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.067104][T18646] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.121159][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1265.130975][T18646] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1265.141471][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.149936][T18646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.304661][T18646] usb 3-1: config 0 descriptor?? [ 1265.476178][ T5888] usb 5-1: GET_CAPABILITIES returned 0 [ 1265.482156][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 1265.688496][T22863] usb 5-1: USB disconnect, device number 104 [ 1265.763060][T18646] megaworld 0003:07B5:0312.009A: unknown main item tag 0x3 [ 1265.773562][ T5888] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1265.786243][T18646] megaworld 0003:07B5:0312.009A: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 1265.800581][T18646] megaworld 0003:07B5:0312.009A: no inputs found [ 1265.927685][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1265.940327][ T5888] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.967365][ T5888] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.983574][T18646] usb 3-1: USB disconnect, device number 10 [ 1265.999337][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1266.016085][ T5888] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1266.027158][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.043061][ T5888] usb 2-1: config 0 descriptor?? [ 1266.474623][ T5888] hkems 0003:2006:0118.009B: bogus close delimiter [ 1266.494017][ T5888] hkems 0003:2006:0118.009B: item 0 4 2 10 parsing failed [ 1266.512798][ T5888] hkems 0003:2006:0118.009B: parse failed [ 1266.527342][ T5888] hkems 0003:2006:0118.009B: probe with driver hkems failed with error -22 [ 1266.696578][T22863] usb 2-1: USB disconnect, device number 118 [ 1266.937158][ T5888] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1267.107044][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 1267.118084][ T5888] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1267.130517][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.161659][ T5888] usb 1-1: Product: syz [ 1267.179505][ T5888] usb 1-1: Manufacturer: syz [ 1267.194591][ T5888] usb 1-1: SerialNumber: syz [ 1267.214894][ T5888] usb 1-1: config 0 descriptor?? [ 1267.234206][ T5888] gspca_main: se401-2.14.0 probing 047d:5003 [ 1267.638523][ T5888] gspca_se401: Frame size: 0x0 1/16th janggu [ 1267.707410][T22863] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1267.850611][ T5888] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input171 [ 1267.873148][ T5888] usb 1-1: USB disconnect, device number 2 [ 1267.900409][T22863] usb 4-1: Using ep0 maxpacket: 16 [ 1267.928807][T22863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1267.943833][T22863] usb 4-1: config 0 has no interface number 0 [ 1267.952922][T22863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.970897][T22863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.980913][ T3238] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1267.997857][T22863] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1268.012443][T22863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.024222][T22863] usb 4-1: config 0 descriptor?? [ 1268.130964][ T3238] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1268.140644][ T3238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.149466][ T3238] usb 5-1: Product: syz [ 1268.153951][ T3238] usb 5-1: Manufacturer: syz [ 1268.158715][ T3238] usb 5-1: SerialNumber: syz [ 1268.167411][ T3238] usb 5-1: config 0 descriptor?? [ 1268.585776][ T3238] usb 5-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 1268.637265][ T5888] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1268.662150][T22863] uclogic 0003:28BD:0071.009C: pen parameters not found [ 1268.675928][T22863] uclogic 0003:28BD:0071.009C: interface is invalid, ignoring [ 1268.696645][T22863] usb 4-1: USB disconnect, device number 17 [ 1268.787686][ T3238] usb 5-1: failed to fetch extended address, random address set [ 1268.815119][ T5888] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1268.832312][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.848623][ T5888] usb 2-1: config 0 descriptor?? [ 1268.870301][ T5888] pwc: Samsung MPC-C10 USB webcam detected. [ 1268.880953][ T3238] usb 5-1: USB disconnect, device number 105 [ 1268.997097][T18657] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1269.075027][ T5888] pwc: send_video_command error -71 [ 1269.085595][ T5888] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1269.101854][ T5888] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1269.131928][ T5888] usb 2-1: USB disconnect, device number 119 [ 1269.181113][T18657] usb 1-1: Using ep0 maxpacket: 16 [ 1269.190358][T18657] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.205133][T18657] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1269.225750][T18657] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.247312][T18657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1269.255379][T18657] usb 1-1: SerialNumber: syz [ 1269.483519][ T5888] usb 1-1: USB disconnect, device number 3 [ 1269.540655][T18657] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1269.719032][T18657] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1269.734136][T18657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.798284][T18657] usb 2-1: config 0 descriptor?? [ 1269.849048][T18657] pwc: Samsung MPC-C10 USB webcam detected. [ 1269.927933][T26647] batadv_slave_0: entered promiscuous mode [ 1269.946864][T26647] batadv_slave_0: left promiscuous mode [ 1270.260651][T18657] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1270.294780][T18657] pwc: recv_control_msg error -71 req 02 val 2700 [ 1270.307651][T18657] pwc: recv_control_msg error -71 req 04 val 1700 [ 1270.324441][T18657] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1270.344521][T18657] pwc: recv_control_msg error -71 req 04 val 1000 [ 1270.356198][T18657] pwc: recv_control_msg error -71 req 04 val 1300 [ 1270.373866][T18657] pwc: recv_control_msg error -71 req 04 val 1400 [ 1270.394222][T18657] pwc: recv_control_msg error -71 req 02 val 2000 [ 1270.420697][T18657] pwc: recv_control_msg error -71 req 02 val 2100 [ 1270.443330][T18657] pwc: recv_control_msg error -71 req 02 val 2200 [ 1270.477226][T18657] pwc: recv_control_msg error -71 req 06 val 0600 [ 1270.496452][T18657] pwc: recv_control_msg error -71 req 04 val 1500 [ 1270.517939][T18657] pwc: recv_control_msg error -71 req 02 val 2500 [ 1270.537351][T18657] pwc: recv_control_msg error -71 req 02 val 2400 [ 1270.547437][T18657] pwc: recv_control_msg error -71 req 02 val 2600 [ 1270.563030][T18657] pwc: recv_control_msg error -71 req 02 val 2900 [ 1270.582778][T18657] pwc: recv_control_msg error -71 req 02 val 2800 [ 1270.604587][T18657] pwc: recv_control_msg error -71 req 04 val 1100 [ 1270.631253][T18657] pwc: recv_control_msg error -71 req 04 val 1200 [ 1270.650796][T18657] pwc: Registered as video103. [ 1270.687579][T18657] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input172 [ 1270.727833][T26692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19288'. [ 1270.767162][T18657] usb 2-1: USB disconnect, device number 120 [ 1270.935081][T26701] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1271.270540][T26721] xt_CT: No such helper "snmp" [ 1271.856776][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19304'. [ 1272.267268][ T5888] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1272.277082][ T3238] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1272.450276][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 1272.465980][ T5888] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1272.484904][ T3238] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 1272.494877][ T3238] usb 2-1: config 0 has no interface number 0 [ 1272.512953][ T5888] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1272.523896][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.536181][ T5888] usb 5-1: Product: syz [ 1272.543351][ T5888] usb 5-1: Manufacturer: syz [ 1272.555955][ T3238] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 1272.572280][ T3238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.580909][ T5888] usb 5-1: SerialNumber: syz [ 1272.588192][ T3238] usb 2-1: Product: syz [ 1272.598412][ T5888] usb 5-1: config 0 descriptor?? [ 1272.613784][ T3238] usb 2-1: Manufacturer: syz [ 1272.626404][ T3238] usb 2-1: SerialNumber: syz [ 1272.633584][ T5888] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1272.655708][ T3238] usb 2-1: config 0 descriptor?? [ 1272.668495][ T5888] usb 5-1: Detected FT232R [ 1272.685067][ T3238] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 1272.714649][ T3238] dvb-usb: bulk message failed: -22 (2/0) [ 1272.727051][ T3238] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1272.746497][ T3238] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 1272.766088][ T3238] usb 2-1: media controller created [ 1272.780510][ T3238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1272.824805][ T3238] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1272.854749][ T5888] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1272.865800][ T3238] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1272.977830][T26805] batadv0: entered allmulticast mode [ 1273.047351][ T3238] rc_core: IR keymap rc-dtt200u not found [ 1273.077360][ T3238] Registered IR keymap rc-empty [ 1273.088871][ T3238] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1273.133048][ T3238] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input173 [ 1273.133533][ T5888] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1273.168434][ T3238] dvb-usb: schedule remote query interval to 300 msecs. [ 1273.176621][ T3238] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 1273.278593][ T3238] usb 2-1: USB disconnect, device number 121 [ 1273.349431][ T5675] usb 5-1: USB disconnect, device number 106 [ 1273.396774][ T5675] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1273.442485][ T5675] ftdi_sio 5-1:0.0: device disconnected [ 1273.455115][ T3238] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 1273.847273][ T5888] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1274.070429][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.097035][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1274.141980][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.151861][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.172257][ T5888] usb 3-1: Product: syz [ 1274.180804][ T5888] usb 3-1: Manufacturer: syz [ 1274.187821][ T5888] usb 3-1: SerialNumber: syz [ 1274.313649][T26887] openvswitch: netlink: Multiple metadata blocks provided [ 1274.446809][T26856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.470138][T26856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.521941][ T5888] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1274.552277][ T5888] usb 3-1: USB disconnect, device number 11 [ 1274.671193][T26916] sch_tbf: burst 3092 is lower than device lo mtu (39799) ! [ 1274.727653][ T3238] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1274.897391][ T3238] usb 2-1: Using ep0 maxpacket: 32 [ 1274.909008][ T3238] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 1274.925016][ T3238] usb 2-1: config 1 has no interface number 0 [ 1274.933956][ T3238] usb 2-1: config 1 interface 242 has no altsetting 0 [ 1274.945313][ T3238] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1274.965676][ T3238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.984423][ T3238] usb 2-1: Product: syz [ 1274.989261][ T3238] usb 2-1: Manufacturer: syz [ 1274.993911][ T3238] usb 2-1: SerialNumber: syz [ 1274.998751][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1275.077339][T18646] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1275.163402][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 1275.186247][ T5888] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 1275.199317][ T5888] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.241626][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1275.257530][T18646] usb 1-1: Using ep0 maxpacket: 32 [ 1275.263421][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1275.274631][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1275.287105][T18646] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1275.295494][T18646] usb 1-1: config 0 has no interface number 0 [ 1275.302425][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.314010][T18646] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1275.321984][T26943] netlink: 'syz.3.19355': attribute type 9 has an invalid length. [ 1275.324793][T18646] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1275.342941][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1275.352383][T26943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19355'. [ 1275.353375][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.370321][T18646] usb 1-1: config 0 interface 126 has no altsetting 0 [ 1275.381091][T18646] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1275.394492][T18646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.404555][T26943] macvlan2: entered promiscuous mode [ 1275.404982][T18646] usb 1-1: Product: syz [ 1275.421207][T26943] hsr0: entered promiscuous mode [ 1275.429927][T18646] usb 1-1: Manufacturer: syz [ 1275.432427][T26943] macvlan2: entered allmulticast mode [ 1275.442727][T26943] hsr0: entered allmulticast mode [ 1275.445659][T18646] usb 1-1: SerialNumber: syz [ 1275.452263][T26943] hsr_slave_0: entered allmulticast mode [ 1275.461296][T26943] hsr_slave_1: entered allmulticast mode [ 1275.477355][T18646] usb 1-1: config 0 descriptor?? [ 1275.483713][T26929] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1275.491783][T26929] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1275.625610][ T5888] usb 3-1: usb_control_msg returned -71 [ 1275.636603][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 1275.658766][ T5888] usb 3-1: USB disconnect, device number 12 [ 1275.844986][ T3238] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1275.860790][ T3238] aqc111 2-1:1.242: probe with driver aqc111 failed with error -71 [ 1275.881878][ T3238] usb 2-1: USB disconnect, device number 122 [ 1275.912814][T18646] ir_usb 1-1:0.126: IR Dongle converter detected [ 1276.112514][T18646] usb 1-1: IRDA class descriptor not found, device not bound [ 1276.140662][ T30] audit: type=1326 audit(1748786567.755:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26983 comm="syz.4.19362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7b0f8e969 code=0x0 [ 1276.361555][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19365'. [ 1276.380757][T18657] usb 1-1: USB disconnect, device number 4 [ 1276.471288][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19367'. [ 1276.481000][T27008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19367'. [ 1276.490504][T27008] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19367'. [ 1276.502588][T27008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19367'. [ 1276.525071][T27008] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19367'. [ 1277.337235][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19382'. [ 1277.377563][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19382'. [ 1277.552346][ T30] audit: type=1326 audit(1748786569.155:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27066 comm="syz.0.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1277.587299][T18657] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1277.603098][ T30] audit: type=1326 audit(1748786569.155:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27066 comm="syz.0.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1277.654355][ T30] audit: type=1326 audit(1748786569.185:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27066 comm="syz.0.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1277.679974][ T30] audit: type=1326 audit(1748786569.185:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27066 comm="syz.0.19387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a078e969 code=0x7ffc0000 [ 1277.777608][T18657] usb 5-1: Using ep0 maxpacket: 16 [ 1277.791353][T18657] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.802952][T18657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1277.814651][T18657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59152, setting to 1024 [ 1277.827055][T18657] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.843419][T18657] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1277.855401][T18657] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1277.863778][T18657] usb 5-1: Manufacturer: syz [ 1277.887079][ T5675] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1277.908989][T18657] usb 5-1: config 0 descriptor?? [ 1278.061055][ T5675] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1278.078162][ T5675] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1278.094358][ T5675] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.116654][ T5675] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1278.138238][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1278.146600][ T5675] usb 1-1: Product: syz [ 1278.151769][ T5675] usb 1-1: Manufacturer: syz [ 1278.157201][ T5675] usb 1-1: SerialNumber: syz [ 1278.227135][T18646] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1278.267460][T18657] rc_core: IR keymap rc-hauppauge not found [ 1278.273599][T18657] Registered IR keymap rc-empty [ 1278.295693][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.340425][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.375846][T18657] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1278.391335][ T5675] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1278.394402][T18646] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1278.409356][T18657] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input174 [ 1278.435761][T18646] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.446853][T18646] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1278.454370][T18646] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1278.465085][T18646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.494950][T18646] usb 3-1: config 0 descriptor?? [ 1278.500542][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.557928][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.577924][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.607846][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.625111][ T5888] usb 1-1: USB disconnect, device number 5 [ 1278.637850][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.657575][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.665025][ T5888] usblp0: removed [ 1278.691873][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.719611][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.757831][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.777787][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.808765][T18657] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1278.829607][T18657] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1278.845842][T18657] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1278.866245][T18657] usb 5-1: USB disconnect, device number 107 [ 1278.872970][ T5675] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1279.029435][ T5675] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.040310][ T5675] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1279.051359][ T5675] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1279.061157][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1279.071171][ T5675] usb 4-1: SerialNumber: syz [ 1279.315982][ T5675] usb 4-1: 0:2 : does not exist [ 1279.390784][ T5675] usb 4-1: USB disconnect, device number 18 [ 1279.512726][T20489] udevd[20489]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1279.648549][ T5675] usb 3-1: USB disconnect, device number 13 [ 1279.737244][T22863] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1279.927579][T22863] usb 5-1: Using ep0 maxpacket: 16 [ 1279.959714][T22863] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1279.968407][T22863] usb 5-1: config 0 has no interface number 0 [ 1280.011626][T22863] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1280.021703][T22863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.034016][T22863] usb 5-1: Product: syz [ 1280.048368][T22863] usb 5-1: Manufacturer: syz [ 1280.055373][T22863] usb 5-1: SerialNumber: syz [ 1280.070151][T22863] usb 5-1: config 0 descriptor?? [ 1280.098776][T22863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1280.905509][T22863] gspca_spca1528: reg_w err -71 [ 1280.937308][T22863] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1280.968719][T22863] usb 5-1: USB disconnect, device number 108 [ 1281.377784][T27246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1281.717344][T18646] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1281.877208][T18646] usb 2-1: Using ep0 maxpacket: 8 [ 1281.892314][T18646] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1281.906866][T18646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.924917][T18646] usb 2-1: Product: syz [ 1281.930849][T18646] usb 2-1: Manufacturer: syz [ 1281.942418][T18646] usb 2-1: SerialNumber: syz [ 1281.970503][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19435'. [ 1281.993862][T18646] usb 2-1: config 0 descriptor?? [ 1282.015326][T18646] gspca_main: se401-2.14.0 probing 047d:5003 [ 1282.567749][T18646] usb 2-1: reset high-speed USB device number 123 using dummy_hcd [ 1283.163554][T18646] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1283.192471][T18646] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 1283.224860][T18646] usb 2-1: USB disconnect, device number 123 [ 1283.394955][T27351] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19449'. [ 1284.051934][T27362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19454'. [ 1284.071320][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19454'. [ 1284.608009][T27374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19458'. [ 1284.630660][T27374] netlink: 'syz.2.19458': attribute type 9 has an invalid length. [ 1284.719917][T27374] macvlan3: entered allmulticast mode [ 1284.759665][T27374] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 1285.087351][T18646] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1285.239279][ T5888] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1285.267334][T18646] usb 1-1: Using ep0 maxpacket: 16 [ 1285.280358][T18646] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1285.302270][T18646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.338371][T18646] usb 1-1: config 0 descriptor?? [ 1285.374829][T18646] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1285.377618][T27410] VFS: Mount too revealing [ 1285.422422][ T5888] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1285.447513][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.466613][ T5888] usb 3-1: Product: syz [ 1285.471486][ T5888] usb 3-1: Manufacturer: syz [ 1285.476331][ T5888] usb 3-1: SerialNumber: syz [ 1285.477866][T27416] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.19472'. [ 1285.526172][ T5888] usb 3-1: config 0 descriptor?? [ 1285.553081][ T5888] ch341 3-1:0.0: ch341-uart converter detected [ 1286.107294][T18657] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1286.197769][T18646] gspca_sonixj: reg_r err -71 [ 1286.202610][T18646] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1286.229888][T18646] usb 1-1: USB disconnect, device number 6 [ 1286.268483][T18657] usb 5-1: Using ep0 maxpacket: 16 [ 1286.278793][T18657] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1286.295955][T18657] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1286.313315][T18657] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1286.323281][T18657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.332230][T18657] usb 5-1: Product: syz [ 1286.336539][T18657] usb 5-1: Manufacturer: syz [ 1286.342037][T18657] usb 5-1: SerialNumber: syz [ 1286.351165][T18657] usb 5-1: config 0 descriptor?? [ 1286.365700][T18657] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1286.372141][ T5888] usb 3-1: failed to send control message: -71 [ 1286.382170][T18657] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1286.398369][ T5888] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1286.416760][ T5888] usb 3-1: USB disconnect, device number 14 [ 1286.427402][T22863] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1286.434422][ T5888] ch341 3-1:0.0: device disconnected [ 1286.587131][T22863] usb 4-1: Using ep0 maxpacket: 8 [ 1286.595073][T22863] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1286.604950][T22863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.624172][T22863] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1286.632098][T22863] pvrusb2: ********** [ 1286.636326][T22863] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1286.647162][T22863] pvrusb2: Important functionality might not be entirely working. [ 1286.655508][T22863] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1286.668103][T22863] pvrusb2: ********** [ 1286.830732][ T2345] pvrusb2: Invalid write control endpoint [ 1286.983885][ T2345] pvrusb2: Invalid write control endpoint [ 1286.990716][T18657] em28xx 5-1:0.0: chip ID is em28178 [ 1287.019847][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1287.068384][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1287.076002][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1287.094375][ T2345] pvrusb2: Device being rendered inoperable [ 1287.103811][T22863] usb 4-1: USB disconnect, device number 19 [ 1287.123439][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1287.138050][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1287.155309][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1287.165012][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1287.187042][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1287.211707][ T5888] usb 5-1: USB disconnect, device number 109 [ 1287.241901][ T5888] em28xx 5-1:0.0: Disconnecting em28xx [ 1287.296734][ T5888] em28xx 5-1:0.0: Freeing device [ 1288.020097][T22863] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1288.069907][T27551] netlink: 277 bytes leftover after parsing attributes in process `syz.4.19504'. [ 1288.177693][T22863] usb 4-1: Using ep0 maxpacket: 16 [ 1288.185479][T22863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1288.195949][T22863] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1288.207961][T22863] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1288.220296][T22863] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1288.240576][T22863] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1288.251776][T22863] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1288.261900][T22863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.273668][T22863] usb 4-1: Product: syz [ 1288.278854][T22863] usb 4-1: Manufacturer: syz [ 1288.284079][T22863] usb 4-1: SerialNumber: syz [ 1288.298967][T27537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1288.548130][T22863] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input175 [ 1288.691612][T27574] netlink: 'syz.4.19512': attribute type 2 has an invalid length. [ 1288.947643][ C0] bcm5974 4-1:1.0: trackpad urb failed: -1 [ 1289.163883][ T5187] bcm5974 4-1:1.0: could not read from device [ 1289.171676][T22863] usb 4-1: USB disconnect, device number 20 [ 1289.180063][ T5187] bcm5974 4-1:1.0: could not read from device [ 1289.194121][T26825] bcm5974 4-1:1.0: could not read from device [ 1290.447152][T18646] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1290.540842][T27701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19545'. [ 1290.609146][T18646] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1290.635266][T18646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.653486][T18646] usb 2-1: config 0 descriptor?? [ 1290.671619][T18646] cp210x 2-1:0.0: cp210x converter detected [ 1291.053182][T27721] netlink: 'syz.2.19553': attribute type 3 has an invalid length. [ 1291.071843][T27721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19553'. [ 1291.094725][T18646] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1291.123899][T18646] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1291.275150][T27736] tmpfs: Unknown parameter '嫎豇鐁%掖\w訝R(4胬;a; [ 1291.275150][T27736] MU羐6晻&x@2<潧5蕧2T裉Z5w鞖V龝㑳剭蚞┐薄T灝m矽茜P錤吉<M;瀤Y9]g艦倠鬾褊旗;O噸戂箜泴u [ 1291.275150][T27736] ~^>皮穜&溿郉騫.;俾靲<2矨嚘U' [ 1291.290017][T27738] batadv0: left allmulticast mode [ 1291.334214][T18646] usb 2-1: USB disconnect, device number 124 [ 1291.390971][T18646] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1291.423833][T18646] cp210x 2-1:0.0: device disconnected [ 1292.148161][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19574'. [ 1292.287169][ T5888] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1292.463759][ T5888] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1292.527639][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1292.543934][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1292.567587][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.598450][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1292.626158][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1292.659506][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.683791][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1292.716230][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1292.739012][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.757128][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1292.773700][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1292.804534][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.824288][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1292.842354][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1292.877139][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.898343][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1292.917348][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1292.939066][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.961239][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1292.975285][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1293.007870][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1293.016279][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1293.032623][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1293.052910][T27838] netlink: 200 bytes leftover after parsing attributes in process `syz.3.19583'. [ 1293.064193][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1293.076727][ T5888] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1293.093319][ T5888] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1293.105207][ T5888] usb 2-1: Product: syz [ 1293.122964][ T5888] usb 2-1: Manufacturer: syz [ 1293.137236][ T5888] usb 2-1: SerialNumber: syz [ 1293.159252][ T5888] usb 2-1: config 0 descriptor?? [ 1293.194831][ T5888] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1293.544871][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 1293.555264][T18646] usb 2-1: USB disconnect, device number 125 [ 1293.572255][T18646] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1295.112005][T27888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19596'. [ 1295.231995][T27894] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1296.167482][ T5675] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1296.337566][ T5675] usb 4-1: Using ep0 maxpacket: 8 [ 1296.358731][ T5675] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1296.380331][ T5675] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1296.407004][ T5675] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1296.437252][ T5675] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1296.450965][ T5675] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1296.481482][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.732559][ T5675] usb 4-1: GET_CAPABILITIES returned 0 [ 1296.738824][ T5675] usbtmc 4-1:16.0: can't read capabilities [ 1296.936894][T18646] usb 4-1: USB disconnect, device number 21 [ 1297.336614][T28006] netlink: 31 bytes leftover after parsing attributes in process `syz.2.19635'. [ 1297.433612][T28016] ipvlan2: entered promiscuous mode [ 1297.442548][T28016] ipvlan2: entered allmulticast mode [ 1297.451051][T28016] macvlan1: entered allmulticast mode [ 1297.575827][T28029] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 1297.777149][T18646] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1297.949658][T18646] usb 5-1: Using ep0 maxpacket: 32 [ 1297.962877][T18646] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1297.973839][T18646] usb 5-1: config 0 has no interface number 0 [ 1298.015143][T18646] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1298.044474][T18646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.054700][T18646] usb 5-1: Product: syz [ 1298.065117][T18646] usb 5-1: Manufacturer: syz [ 1298.071201][T18646] usb 5-1: SerialNumber: syz [ 1298.091151][T18646] usb 5-1: config 0 descriptor?? [ 1298.123945][T18646] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1298.339520][T18646] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1298.378143][T18646] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1298.558979][T28097] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19653'. [ 1298.770941][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1298.774382][ T5675] usb 5-1: USB disconnect, device number 110 [ 1298.802238][ T5675] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1298.851841][ T5675] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1298.879211][ T5675] quatech2 5-1:0.51: device disconnected [ 1300.945970][T28186] netlink: 'syz.3.19684': attribute type 11 has an invalid length. [ 1301.177177][ T3238] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1301.328633][ T3238] usb 2-1: Using ep0 maxpacket: 8 [ 1301.351687][ T3238] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1301.382687][ T3238] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1301.426428][ T3238] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1301.443697][ T3238] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.487972][ T3238] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1301.505309][ T3238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.742615][ T3238] usb 2-1: GET_CAPABILITIES returned 0 [ 1301.758435][ T3238] usbtmc 2-1:16.0: can't read capabilities [ 1301.986075][ T3238] usb 2-1: USB disconnect, device number 126 [ 1302.733549][T28292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19714'. [ 1302.827375][ T3238] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1302.920413][T22863] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1302.987186][ T3238] usb 1-1: Using ep0 maxpacket: 16 [ 1303.001209][ T3238] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1303.025479][ T3238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.049831][ T3238] usb 1-1: Product: syz [ 1303.054096][ T3238] usb 1-1: Manufacturer: syz [ 1303.071526][ T3238] usb 1-1: SerialNumber: syz [ 1303.090515][ T3238] usb 1-1: config 0 descriptor?? [ 1303.092832][T22863] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1303.106745][ T3238] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1303.122901][T28308] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1303.137335][T22863] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1303.157682][T22863] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1303.183397][T22863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.220653][T28284] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1303.254898][T22863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1303.374389][ T3238] usb 1-1: USB disconnect, device number 7 [ 1303.545561][ T5888] usb 5-1: USB disconnect, device number 111 [ 1303.680583][T28367] veth0_vlan: left promiscuous mode [ 1303.685975][T28367] veth0_vlan: entered promiscuous mode [ 1303.695467][T28367] veth0_vlan: entered allmulticast mode [ 1304.029794][T28380] netlink: 'syz.3.19735': attribute type 1 has an invalid length. [ 1304.041592][T28380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19735'. [ 1304.281838][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19741'. [ 1304.291378][T28394] netlink: 'syz.3.19741': attribute type 1 has an invalid length. [ 1304.299898][T28394] netlink: 'syz.3.19741': attribute type 2 has an invalid length. [ 1304.458986][T28401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19745'. [ 1304.593625][T28408] macvlan1: entered promiscuous mode [ 1304.607590][T28408] macvlan1: left promiscuous mode [ 1305.238170][ T3238] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1305.267514][ T5888] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1305.399870][ T3238] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1305.418893][ T3238] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.439168][ T5888] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 1305.459730][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.470604][ T3238] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1305.480429][ T3238] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.492969][ T5888] usb 5-1: config 0 has no interface number 0 [ 1305.515147][ T5888] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1305.536083][ T5888] usb 5-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1305.558202][ T3238] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1305.573411][ T3238] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1305.586692][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.594088][ T5888] usb 5-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 1305.597477][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.604632][ T3238] usb 3-1: Product: syz [ 1305.617179][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.645905][ T3238] usb 3-1: Manufacturer: syz [ 1305.650751][ T5888] usb 5-1: Product: syz [ 1305.654990][ T5888] usb 5-1: Manufacturer: syz [ 1305.681989][ T3238] cdc_wdm 3-1:1.0: skipping garbage [ 1305.688551][ T5888] usb 5-1: SerialNumber: syz [ 1305.702089][ T3238] cdc_wdm 3-1:1.0: skipping garbage [ 1305.719600][ T5888] usb 5-1: config 0 descriptor?? [ 1305.732654][ T5888] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 1305.746595][ T3238] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1305.757035][ T3238] cdc_wdm 3-1:1.0: Unknown control protocol [ 1305.763213][ T5888] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1305.773152][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 1305.796068][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1305.849809][ T5888] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 1305.947540][ T5888] usb 3-1: USB disconnect, device number 15 [ 1306.001323][ T3238] usb 5-1: USB disconnect, device number 112 [ 1306.887435][T18657] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1307.000315][T28546] macvtap1: entered allmulticast mode [ 1307.005749][T28546] veth0_macvtap: entered allmulticast mode [ 1307.057515][T18657] usb 4-1: Using ep0 maxpacket: 8 [ 1307.075642][T18657] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.109535][T18657] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1307.132817][T18657] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1307.142512][T18657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.177168][T18657] usb 4-1: Product: syz [ 1307.181409][T18657] usb 4-1: Manufacturer: syz [ 1307.197937][T18657] usb 4-1: SerialNumber: syz [ 1307.453935][T18657] cdc_ncm 4-1:1.0: bind() failure [ 1307.476414][T18657] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1307.484453][T18657] cdc_ncm 4-1:1.1: bind() failure [ 1307.522236][T18657] usb 4-1: USB disconnect, device number 22 [ 1308.087029][T22863] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1308.247148][T22863] usb 1-1: Using ep0 maxpacket: 8 [ 1308.254473][T22863] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1308.267448][ T3238] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1308.280855][T22863] usb 1-1: config 179 has no interface number 0 [ 1308.294571][T22863] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1308.327435][T22863] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1308.352268][T22863] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1308.373945][T22863] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1308.412850][T22863] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1308.434835][T22863] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1308.440531][ T3238] usb 4-1: Using ep0 maxpacket: 16 [ 1308.454629][T22863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.479328][ T3238] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1308.488560][T28591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1308.515056][ T3238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1308.580075][ T3238] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1308.597474][ T3238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.621365][ T3238] usb 4-1: Product: syz [ 1308.625731][ T3238] usb 4-1: Manufacturer: syz [ 1308.639804][ T3238] usb 4-1: SerialNumber: syz [ 1308.664725][ T3238] usb 4-1: config 0 descriptor?? [ 1308.683275][ T3238] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1308.710796][ T3238] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1308.820751][T22863] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input177 [ 1309.030438][T22863] usb 1-1: USB disconnect, device number 8 [ 1309.030503][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1309.044892][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1309.059361][T22863] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1309.363270][ T3238] em28xx 4-1:0.0: unknown em28xx chip ID (86) [ 1309.570455][ T3238] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1309.583016][ T3238] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1309.607051][ T3238] em28xx 4-1:0.0: No AC97 audio processor [ 1309.645710][ T3238] usb 4-1: USB disconnect, device number 23 [ 1309.680025][ T3238] em28xx 4-1:0.0: Disconnecting em28xx [ 1309.727139][ T3238] em28xx 4-1:0.0: Freeing device [ 1310.037041][ T5675] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1310.197557][ T5675] usb 2-1: Using ep0 maxpacket: 32 [ 1310.209295][ T5675] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1310.227135][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.247945][ T5675] usb 2-1: config 0 descriptor?? [ 1310.269896][ T5675] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1311.064844][ T5675] gspca_sunplus: reg_r err -71 [ 1311.070500][ T5675] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1311.098378][ T5675] usb 2-1: USB disconnect, device number 127 [ 1311.587220][T12178] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1311.654331][ T3238] hid-generic 0000:0003:0000.009E: unknown main item tag 0x0 [ 1311.667450][ T3238] hid-generic 0000:0003:0000.009E: unknown main item tag 0x0 [ 1311.688669][ T3238] hid-generic 0000:0003:0000.009E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1311.757094][T12178] usb 4-1: Using ep0 maxpacket: 16 [ 1311.778034][T12178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.795691][T28769] fido_id[28769]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1311.817229][T12178] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.842512][T12178] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1311.895534][T12178] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1311.932349][T12178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.961426][T12178] usb 4-1: config 0 descriptor?? [ 1312.194346][T28792] netlink: 'syz.4.19864': attribute type 1 has an invalid length. [ 1312.396748][T12178] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 1312.427731][T12178] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 1312.571972][T12178] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.009F/input/input178 [ 1312.649900][T12178] microsoft 0003:045E:07DA.009F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1312.726679][T12178] usb 4-1: USB disconnect, device number 24 [ 1312.819011][T28831] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19873'. [ 1312.911795][T28821] fido_id[28821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1313.617148][T12178] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1313.767676][ T30] audit: type=1326 audit(1748786605.365:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1313.806449][ T30] audit: type=1326 audit(1748786605.365:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1313.832337][T12178] usb 1-1: Using ep0 maxpacket: 32 [ 1313.844271][ T30] audit: type=1326 audit(1748786605.365:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1313.887440][T12178] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1313.913687][ T30] audit: type=1326 audit(1748786605.365:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1313.936555][T12178] usb 1-1: config 0 has no interface number 0 [ 1313.936618][T12178] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.936647][T12178] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.936693][T12178] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1313.936718][T12178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.940266][T12178] usb 1-1: config 0 descriptor?? [ 1313.954778][ T30] audit: type=1326 audit(1748786605.365:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1314.092857][ T30] audit: type=1326 audit(1748786605.365:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1314.177067][ T30] audit: type=1326 audit(1748786605.365:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1314.222031][ T30] audit: type=1326 audit(1748786605.365:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1314.279377][ T30] audit: type=1326 audit(1748786605.365:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1314.302156][ T30] audit: type=1326 audit(1748786605.365:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.3.19888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1314.447477][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1314.624061][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 1314.641214][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.663281][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1314.682280][T12178] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.00A0/input/input179 [ 1314.705116][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1314.730108][ T5888] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1314.750347][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1314.785535][ T5888] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1314.797732][ T5888] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1314.808533][ T5888] usb 2-1: Manufacturer: syz [ 1314.838422][ T5888] usb 2-1: config 0 descriptor?? [ 1314.851714][T12178] uclogic 0003:28BD:0094.00A0: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 1314.912498][T12178] usb 1-1: USB disconnect, device number 9 [ 1315.095026][T28946] fido_id[28946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1315.238978][ T5888] rc_core: IR keymap rc-hauppauge not found [ 1315.270623][ T5888] Registered IR keymap rc-empty [ 1315.289653][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.318080][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.358677][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1315.391216][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input180 [ 1315.416271][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.438963][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.477667][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.507168][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.557607][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.597248][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.626101][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.663743][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.707364][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.738929][ T5888] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1315.784964][ T5888] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1315.814203][ T5888] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1315.834788][T28989] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1315.897560][ T5888] usb 2-1: USB disconnect, device number 2 [ 1316.170122][T29008] blkio.reset_stats is deprecated [ 1316.917086][ T5675] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1317.107957][ T5675] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1317.133291][ T5675] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1317.167031][ T5675] usb 5-1: config 0 has no interface number 0 [ 1317.200553][ T5675] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1317.227466][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.235521][ T5675] usb 5-1: Product: syz [ 1317.281473][ T5675] usb 5-1: Manufacturer: syz [ 1317.286135][ T5675] usb 5-1: SerialNumber: syz [ 1317.326811][ T5675] usb 5-1: config 0 descriptor?? [ 1317.732421][T29082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19940'. [ 1317.754937][ T5675] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 1317.773141][ T5675] usb 5-1: No valid video chain found. [ 1317.793705][ T5675] usb 5-1: USB disconnect, device number 113 [ 1317.961999][T12178] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1318.096100][T29106] netlink: 35 bytes leftover after parsing attributes in process `syz.0.19947'. [ 1318.121377][T12178] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1318.135229][T12178] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1318.145630][T12178] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1318.160666][T12178] usb 4-1: config 1 has no interface number 0 [ 1318.178011][T12178] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1318.189898][T12178] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1318.203195][T12178] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1318.212715][T12178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.239093][T12178] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1318.449640][T29080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.477661][T29080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.858538][T12178] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1319.070135][T22863] usb 4-1: USB disconnect, device number 25 [ 1319.082333][T22863] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1319.227557][T12178] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1319.267431][ T5888] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1319.354751][T29169] ipvlan2: entered promiscuous mode [ 1319.361137][T29169] ipvlan2: entered allmulticast mode [ 1319.366480][T29169] erspan0: entered allmulticast mode [ 1319.387092][T12178] usb 3-1: Using ep0 maxpacket: 8 [ 1319.404785][T12178] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1319.414866][T12178] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1319.427065][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1319.433910][T12178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1319.447738][ T5888] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1319.455941][ T5888] usb 2-1: config 0 has no interface number 0 [ 1319.463173][T12178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1319.474034][T12178] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1319.491680][ T5888] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1319.506970][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.515038][ T5888] usb 2-1: Product: syz [ 1319.527489][T12178] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1319.536613][T12178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.555170][ T5888] usb 2-1: Manufacturer: syz [ 1319.560590][ T5888] usb 2-1: SerialNumber: syz [ 1319.628746][ T5888] usb 2-1: config 0 descriptor?? [ 1319.671189][ T5888] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1319.784656][T12178] usb 3-1: GET_CAPABILITIES returned 0 [ 1319.796613][T12178] usbtmc 3-1:16.0: can't read capabilities [ 1319.892760][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1319.930195][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1319.989371][T22863] usb 3-1: USB disconnect, device number 16 [ 1320.316080][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1320.317998][T22863] usb 2-1: USB disconnect, device number 3 [ 1320.341890][T22863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1320.372989][T22863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1320.394330][T22863] quatech2 2-1:0.51: device disconnected [ 1320.407071][ T5675] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1320.561919][ T5675] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1320.572924][ T5675] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1320.617382][ T5675] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1320.645162][ T5675] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1320.653841][T29247] loop6: detected capacity change from 0 to 524287999 [ 1320.762318][ T5675] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1320.805773][ T5675] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1320.839846][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1320.874471][ T5675] usb 5-1: Product: syz [ 1320.892108][ T5675] usb 5-1: Manufacturer: syz [ 1320.920168][ T5675] cdc_wdm 5-1:1.0: skipping garbage [ 1320.932267][ T5675] cdc_wdm 5-1:1.0: skipping garbage [ 1320.968211][ T5675] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1320.974182][ T5675] cdc_wdm 5-1:1.0: Unknown control protocol [ 1321.289533][T29285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19985'. [ 1321.408638][T22863] usb 5-1: USB disconnect, device number 114 [ 1322.127340][ T5675] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1322.306607][ T5675] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1322.332432][ T5675] usb 3-1: config 0 has no interface number 0 [ 1322.341379][ T5675] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1322.369880][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.397350][ T5675] usb 3-1: Product: syz [ 1322.401598][ T5675] usb 3-1: Manufacturer: syz [ 1322.406232][ T5675] usb 3-1: SerialNumber: syz [ 1322.437978][ T5675] usb 3-1: config 0 descriptor?? [ 1322.484128][T29337] netlink: 72 bytes leftover after parsing attributes in process `syz.4.20001'. [ 1322.657542][ T5675] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1322.681015][ T5675] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1322.699019][ T5675] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1322.716095][ T5675] usb 3-1: media controller created [ 1322.727429][ T5888] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1322.755495][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1322.865184][T29360] input: syz1 as /devices/virtual/input/input181 [ 1322.909926][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 1322.958237][ T5888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.975549][ T5888] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1322.997034][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1323.005079][ T5888] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1323.036496][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.061398][ T5888] usb 4-1: config 0 descriptor?? [ 1323.273988][T29341] netlink: 'syz.3.20002': attribute type 1 has an invalid length. [ 1323.287168][T29341] netlink: 7718 bytes leftover after parsing attributes in process `syz.3.20002'. [ 1323.302573][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 1323.314901][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1323.339035][ T5888] usb 4-1: USB disconnect, device number 26 [ 1323.932684][ T5675] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1324.015052][ T5675] usb 3-1: USB disconnect, device number 17 [ 1324.467697][T29431] vivid-003: disconnect [ 1324.472906][T29431] vivid-003: reconnect [ 1324.482402][T29432] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1324.847061][ T5888] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1324.977433][ T5675] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1325.067196][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 1325.078448][ T5888] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1325.086688][ T5888] usb 3-1: config 0 has no interface number 0 [ 1325.117043][ T5888] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1325.129278][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1325.141679][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.148075][ T5888] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1325.159403][ T5675] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1325.178015][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.186116][ T5888] usb 3-1: Product: syz [ 1325.187296][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.203352][T18657] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1325.207019][ T5888] usb 3-1: Manufacturer: syz [ 1325.222420][ T5888] usb 3-1: SerialNumber: syz [ 1325.238604][ T5675] usb 2-1: config 0 descriptor?? [ 1325.249534][ T5888] usb 3-1: config 0 descriptor?? [ 1325.268301][ T5888] smsc75xx v1.0.0 [ 1325.367097][T18657] usb 4-1: Using ep0 maxpacket: 16 [ 1325.393719][T18657] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1325.407995][T18657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.426557][T18657] usb 4-1: Product: syz [ 1325.432135][T18657] usb 4-1: Manufacturer: syz [ 1325.437466][T18657] usb 4-1: SerialNumber: syz [ 1325.450580][T18657] usb 4-1: config 0 descriptor?? [ 1325.479866][T18657] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1325.707829][ T5675] savu 0003:1E7D:2D5A.00A1: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1325.868613][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1325.889622][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1325.952624][ T5675] usb 2-1: USB disconnect, device number 4 [ 1326.018430][T29500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.118536][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1326.141336][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1326.161797][ T5888] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1326.186759][ T5888] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1326.212893][ T5888] usb 3-1: USB disconnect, device number 18 [ 1326.285399][T29526] input: syz1 as /devices/virtual/input/input182 [ 1326.301957][T18657] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 1326.324682][T18657] usb 4-1: USB disconnect, device number 27 [ 1327.142481][T29579] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20067'. [ 1327.157695][T29579] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20067'. [ 1327.242546][T29582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20069'. [ 1327.287192][T29582] bond0: option use_carrier: invalid value (8) [ 1327.557213][ T5888] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1327.567191][T12178] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1327.717259][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 1327.724763][T12178] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1327.745105][T12178] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1327.755175][ T5888] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1327.765202][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.773817][T12178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.788854][T12178] usb 1-1: config 0 descriptor?? [ 1327.810173][T29592] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1327.818376][ T5888] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1327.842435][ T5888] pvrusb2: ********** [ 1327.857140][ T5888] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1327.878017][ T5888] pvrusb2: Important functionality might not be entirely working. [ 1327.895983][ T5888] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1327.930639][ T5888] pvrusb2: ********** [ 1328.017038][ T2345] pvrusb2: Invalid write control endpoint [ 1328.181819][ T2345] pvrusb2: Invalid write control endpoint [ 1328.200973][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1328.225499][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1328.239890][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1328.251879][ T2345] pvrusb2: Device being rendered inoperable [ 1328.261394][T29587] pvrusb2: Attempted to execute control transfer when device not ok [ 1328.272782][T12178] elan 0003:04F3:0755.00A2: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1328.282057][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1328.314497][ T5888] usb 3-1: USB disconnect, device number 19 [ 1328.324210][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1328.358587][ T2345] pvrusb2: Attached sub-driver cx25840 [ 1328.376765][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1328.405050][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1328.475040][T12178] usb 1-1: USB disconnect, device number 10 [ 1328.939707][T29698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.957120][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1329.117121][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 1329.131439][ T5888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1329.158976][ T5888] usb 2-1: config 0 has no interface number 0 [ 1329.165193][ T5888] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1329.200935][ T5888] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1329.211356][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.238128][ T5888] usb 2-1: config 0 descriptor?? [ 1329.263992][ T5888] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1329.537683][ T5675] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1329.649798][T29747] ALSA: mixer_oss: invalid OSS volume '' [ 1329.711515][ T5675] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1329.736545][ T5675] usb 3-1: no configurations [ 1329.736990][T12178] usb 2-1: USB disconnect, device number 5 [ 1329.744316][ T5675] usb 3-1: can't read configurations, error -22 [ 1329.907334][ T5888] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1330.097139][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 1330.114592][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1330.134353][ T5888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1330.144936][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.159365][ T5888] usb 5-1: config 0 descriptor?? [ 1330.413047][ T5888] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1330.820709][ T5675] usb 5-1: USB disconnect, device number 115 [ 1331.672703][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20134'. [ 1331.705124][T29849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20134'. [ 1331.847755][T18657] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1332.007297][T18657] usb 5-1: Using ep0 maxpacket: 16 [ 1332.031879][T18657] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1332.046039][T18657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.056719][T18657] usb 5-1: Product: syz [ 1332.066332][T18657] usb 5-1: Manufacturer: syz [ 1332.073205][T18657] usb 5-1: SerialNumber: syz [ 1332.091026][T18657] usb 5-1: config 0 descriptor?? [ 1332.109321][T18657] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1332.310946][T18657] gp8psk: usb in 128 operation failed. [ 1332.319471][T18657] gp8psk: usb in 137 operation failed. [ 1332.325427][T18657] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1332.349123][T18657] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1332.391672][T18657] usb 5-1: media controller created [ 1332.481428][T18657] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1332.510856][T18657] gp8psk_fe: Frontend revision 1 attached [ 1332.522543][T18657] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1332.531327][T18657] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1332.676734][T18657] gp8psk: usb in 138 operation failed. [ 1332.696602][T18657] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1332.726705][T18657] gp8psk: found Genpix USB device pID = 201 (hex) [ 1332.797314][T18657] usb 5-1: USB disconnect, device number 116 [ 1333.157757][T18657] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1333.404997][T29938] VFS: Mount too revealing [ 1333.720389][T29957] vivid-001: disconnect [ 1333.729888][T29956] vivid-001: reconnect [ 1334.278185][T18657] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1334.337620][ T5675] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1334.437858][T18657] usb 1-1: Using ep0 maxpacket: 8 [ 1334.453845][T18657] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1334.477701][T18657] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.498256][T18657] usb 1-1: config 0 has no interface number 0 [ 1334.507069][ T5675] usb 4-1: Using ep0 maxpacket: 16 [ 1334.524177][T18657] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1334.534737][ T5675] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1334.567075][T18657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.575140][T18657] usb 1-1: Product: syz [ 1334.579723][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.593451][ T5675] usb 4-1: Product: syz [ 1334.597917][T18657] usb 1-1: Manufacturer: syz [ 1334.605504][ T5675] usb 4-1: Manufacturer: syz [ 1334.612498][T18657] usb 1-1: SerialNumber: syz [ 1334.627082][ T5675] usb 4-1: SerialNumber: syz [ 1334.634954][T18657] usb 1-1: config 0 descriptor?? [ 1334.648083][ T5675] usb 4-1: config 0 descriptor?? [ 1334.678891][ T5675] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1334.699174][ T5675] usb 4-1: Detected FT232H [ 1334.865395][T18657] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1334.873127][ T5675] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1334.880600][T18657] usb 1-1: No valid video chain found. [ 1334.904793][T30007] sctp: [Deprecated]: syz.2.20175 (pid 30007) Use of int in max_burst socket option. [ 1334.904793][T30007] Use struct sctp_assoc_value instead [ 1335.071325][T18657] usb 1-1: USB disconnect, device number 11 [ 1335.319369][ T5675] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1335.487070][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1335.529947][T12178] usb 4-1: USB disconnect, device number 28 [ 1335.570029][T12178] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1335.599245][T12178] ftdi_sio 4-1:0.0: device disconnected [ 1335.660535][ T5888] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1335.679879][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.703755][ T5888] usb 3-1: config 0 descriptor?? [ 1335.716144][ T5888] cp210x 3-1:0.0: cp210x converter detected [ 1336.123128][ T5888] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1336.161919][ T5888] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1336.359390][ T5888] usb 3-1: USB disconnect, device number 22 [ 1336.379108][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1336.405479][ T5888] cp210x 3-1:0.0: device disconnected [ 1338.118786][T30145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20200'. [ 1338.417142][ T5675] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1338.476267][T30163] IPVS: sed: UDP 224.0.0.2:20004 - no destination available [ 1338.588868][ T5675] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.623372][ T5675] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1338.638554][ T5888] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1338.654281][ T5675] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1338.669119][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1338.686131][ T5675] usb 3-1: SerialNumber: syz [ 1338.809407][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.833410][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.872035][ T5888] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1338.896861][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.930522][ T5675] usb 3-1: 0:2 : does not exist [ 1338.940600][ T5888] usb 1-1: config 0 descriptor?? [ 1339.036291][ T5675] usb 3-1: USB disconnect, device number 23 [ 1339.143301][T20489] udevd[20489]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.575973][T30235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20217'. [ 1340.024195][ T5888] usb 1-1: USB disconnect, device number 12 [ 1340.329528][T12178] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1340.534073][T12178] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1340.597989][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1340.617190][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1340.660210][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1340.681630][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1340.707038][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1340.736258][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1340.759860][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1340.779363][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1340.817197][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1340.841883][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1340.863795][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1340.905443][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1340.928451][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1340.947133][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1340.977053][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1340.995413][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.018968][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1341.047213][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1341.065457][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.092429][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1341.138160][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1341.151788][T12178] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1341.170928][T12178] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1341.204743][T12178] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1341.221139][T12178] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1341.247428][T12178] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1341.255840][T12178] usb 2-1: Product: syz [ 1341.277949][T12178] usb 2-1: Manufacturer: syz [ 1341.282607][T12178] usb 2-1: SerialNumber: syz [ 1341.306806][T12178] usb 2-1: config 0 descriptor?? [ 1341.362394][T12178] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1341.684020][T18657] usb 2-1: USB disconnect, device number 6 [ 1341.717530][T18657] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1341.814118][T30333] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.20236'. [ 1341.856850][T30339] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20237'. [ 1341.884011][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1341.884029][ T30] audit: type=1326 audit(1748786633.495:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1341.945295][ T30] audit: type=1326 audit(1748786633.525:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1341.969614][ T30] audit: type=1326 audit(1748786633.525:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1341.992141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1341.999511][ T30] audit: type=1326 audit(1748786633.525:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1342.021943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.032909][ T30] audit: type=1326 audit(1748786633.525:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf18e969 code=0x7ffc0000 [ 1342.055492][ C0] vkms_vblank_simulate: vblank timer overrun [ 1342.063137][T18288] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1342.069307][ T30] audit: type=1326 audit(1748786633.525:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1342.101923][ T30] audit: type=1326 audit(1748786633.525:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1342.129348][ T30] audit: type=1326 audit(1748786633.525:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1342.156664][ T30] audit: type=1326 audit(1748786633.525:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1342.179897][ T30] audit: type=1326 audit(1748786633.525:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30318 comm="syz.3.20234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cf12ab39 code=0x7ffc0000 [ 1342.262654][T18288] usb 3-1: Using ep0 maxpacket: 32 [ 1342.271201][T18288] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1342.281274][T18288] usb 3-1: config 0 has no interface number 0 [ 1342.291399][T18288] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1342.302325][T18288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.310815][T18288] usb 3-1: Product: syz [ 1342.315032][T18288] usb 3-1: Manufacturer: syz [ 1342.320088][T18288] usb 3-1: SerialNumber: syz [ 1342.332278][T18288] usb 3-1: config 0 descriptor?? [ 1342.352095][T18288] smsc95xx v2.0.0 [ 1342.767519][T30354] binder: 30353:30354 ioctl c0306201 200000000480 returned -14 [ 1342.829434][T30356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20244'. [ 1342.921401][T30358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20246'. [ 1342.963015][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20246'. [ 1343.037791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1343.046708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1343.157284][T18288] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1343.279433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1343.359570][T18288] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1343.463485][T18288] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1343.527757][T18288] usb 3-1: USB disconnect, device number 24 [ 1343.717343][ T5675] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1343.860981][T30398] [ 1343.863366][T30398] ===================================================== [ 1343.870330][T30398] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1343.877851][T30398] 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 Not tainted [ 1343.884622][T30398] ----------------------------------------------------- [ 1343.891558][T30398] syz.4.20255/30398 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1343.899377][T30398] ffff88804a0bd750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1343.908105][T30398] [ 1343.908105][T30398] and this task is already holding: [ 1343.915468][T30398] ffff888042d6c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1343.925334][T30398] which would create a new lock dependency: [ 1343.931225][T30398] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1343.939428][T30398] [ 1343.939428][T30398] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1343.948879][T30398] (&dev->event_lock#2){..-.}-{3:3} [ 1343.948914][T30398] [ 1343.948914][T30398] ... which became SOFTIRQ-irq-safe at: [ 1343.961806][T30398] lock_acquire+0x120/0x360 [ 1343.966751][T30398] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1343.972042][T30398] input_inject_event+0xab/0x320 [ 1343.977085][T30398] led_trigger_event+0x138/0x210 [ 1343.982210][T30398] kbd_bh+0x1c6/0x2e0 [ 1343.986290][T30398] tasklet_action_common+0x369/0x580 [ 1343.991670][T30398] handle_softirqs+0x283/0x870 [ 1343.996529][T30398] run_ksoftirqd+0x9b/0x100 [ 1344.001154][T30398] smpboot_thread_fn+0x542/0xa60 [ 1344.006209][T30398] kthread+0x711/0x8a0 [ 1344.010393][T30398] ret_from_fork+0x3fc/0x770 [ 1344.015077][T30398] ret_from_fork_asm+0x1a/0x30 [ 1344.019957][T30398] [ 1344.019957][T30398] to a SOFTIRQ-irq-unsafe lock: [ 1344.026977][T30398] (tasklist_lock){.+.+}-{3:3} [ 1344.027008][T30398] [ 1344.027008][T30398] ... which became SOFTIRQ-irq-unsafe at: [ 1344.039641][T30398] ... [ 1344.039651][T30398] lock_acquire+0x120/0x360 [ 1344.046829][T30398] _raw_read_lock+0x36/0x50 [ 1344.051432][T30398] __do_wait+0xde/0x740 [ 1344.055722][T30398] do_wait+0x1f8/0x520 [ 1344.059888][T30398] kernel_wait+0xab/0x170 [ 1344.064480][T30398] call_usermodehelper_exec_work+0xbe/0x230 [ 1344.070472][T30398] process_scheduled_works+0xade/0x17b0 [ 1344.076202][T30398] worker_thread+0x8a0/0xda0 [ 1344.080896][T30398] kthread+0x711/0x8a0 [ 1344.085052][T30398] ret_from_fork+0x3fc/0x770 [ 1344.089730][T30398] ret_from_fork_asm+0x1a/0x30 [ 1344.094582][T30398] [ 1344.094582][T30398] other info that might help us debug this: [ 1344.094582][T30398] [ 1344.104914][T30398] Chain exists of: [ 1344.104914][T30398] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1344.104914][T30398] [ 1344.118503][T30398] Possible interrupt unsafe locking scenario: [ 1344.118503][T30398] [ 1344.126915][T30398] CPU0 CPU1 [ 1344.132288][T30398] ---- ---- [ 1344.137653][T30398] lock(tasklist_lock); [ 1344.141908][T30398] local_irq_disable(); [ 1344.148662][T30398] lock(&dev->event_lock#2); [ 1344.155882][T30398] lock(&client->buffer_lock); [ 1344.163256][T30398] [ 1344.166881][T30398] lock(&dev->event_lock#2); [ 1344.171761][T30398] [ 1344.171761][T30398] *** DEADLOCK *** [ 1344.171761][T30398] [ 1344.179913][T30398] 7 locks held by syz.4.20255/30398: [ 1344.185199][T30398] #0: ffff8881467d5118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1344.194355][T30398] #1: ffff888146775230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1344.204574][T30398] #2: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1344.215153][T30398] #3: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1344.224755][T30398] #4: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1344.233917][T30398] #5: ffff888042d6c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1344.244200][T30398] #6: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1344.253274][T30398] [ 1344.253274][T30398] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1344.263684][T30398] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1344.269369][T30398] IN-SOFTIRQ-W at: [ 1344.273443][T30398] lock_acquire+0x120/0x360 [ 1344.279780][T30398] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1344.286805][T30398] input_inject_event+0xab/0x320 [ 1344.293575][T30398] led_trigger_event+0x138/0x210 [ 1344.300350][T30398] kbd_bh+0x1c6/0x2e0 [ 1344.306175][T30398] tasklet_action_common+0x369/0x580 [ 1344.313305][T30398] handle_softirqs+0x283/0x870 [ 1344.319904][T30398] run_ksoftirqd+0x9b/0x100 [ 1344.326243][T30398] smpboot_thread_fn+0x542/0xa60 [ 1344.333014][T30398] kthread+0x711/0x8a0 [ 1344.338993][T30398] ret_from_fork+0x3fc/0x770 [ 1344.345412][T30398] ret_from_fork_asm+0x1a/0x30 [ 1344.352003][T30398] INITIAL USE at: [ 1344.355987][T30398] lock_acquire+0x120/0x360 [ 1344.362243][T30398] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1344.369198][T30398] input_inject_event+0xab/0x320 [ 1344.375884][T30398] kbd_led_trigger_activate+0xbc/0x100 [ 1344.383366][T30398] led_trigger_set+0x52d/0x950 [ 1344.390066][T30398] led_trigger_set_default+0x215/0x250 [ 1344.397271][T30398] led_classdev_register_ext+0x73d/0x930 [ 1344.404906][T30398] input_leds_connect+0x517/0x790 [ 1344.411680][T30398] input_register_device+0xcee/0x10b0 [ 1344.418814][T30398] atkbd_connect+0x70e/0x9c0 [ 1344.425168][T30398] serio_driver_probe+0x82/0xa0 [ 1344.431801][T30398] really_probe+0x26a/0x9a0 [ 1344.438143][T30398] __driver_probe_device+0x18c/0x2f0 [ 1344.445188][T30398] driver_probe_device+0x4f/0x430 [ 1344.451981][T30398] __driver_attach+0x452/0x700 [ 1344.458517][T30398] bus_for_each_dev+0x230/0x2b0 [ 1344.465262][T30398] serio_handle_event+0x1a2/0x860 [ 1344.472048][T30398] process_scheduled_works+0xade/0x17b0 [ 1344.479349][T30398] worker_thread+0x8a0/0xda0 [ 1344.485690][T30398] kthread+0x711/0x8a0 [ 1344.491590][T30398] ret_from_fork+0x3fc/0x770 [ 1344.497974][T30398] ret_from_fork_asm+0x1a/0x30 [ 1344.504517][T30398] } [ 1344.507125][T30398] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1344.516246][T30398] -> (&client->buffer_lock){....}-{3:3} { [ 1344.522005][T30398] INITIAL USE at: [ 1344.525922][T30398] lock_acquire+0x120/0x360 [ 1344.532000][T30398] _raw_spin_lock+0x2e/0x40 [ 1344.538074][T30398] evdev_pass_values+0xb9/0xbd0 [ 1344.544591][T30398] evdev_events+0x1e6/0x340 [ 1344.550666][T30398] input_pass_values+0x288/0x890 [ 1344.557186][T30398] input_event_dispose+0x330/0x6b0 [ 1344.563874][T30398] input_inject_event+0x1fe/0x320 [ 1344.570475][T30398] evdev_write+0x2fc/0x480 [ 1344.576485][T30398] vfs_write+0x27e/0xa90 [ 1344.582419][T30398] ksys_write+0x145/0x250 [ 1344.588435][T30398] do_syscall_64+0xfa/0x3b0 [ 1344.594629][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.602182][T30398] } [ 1344.604684][T30398] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1344.612861][T30398] ... acquired at: [ 1344.616677][T30398] lock_acquire+0x120/0x360 [ 1344.621372][T30398] _raw_spin_lock+0x2e/0x40 [ 1344.626059][T30398] evdev_pass_values+0xb9/0xbd0 [ 1344.631090][T30398] evdev_events+0x1e6/0x340 [ 1344.635768][T30398] input_pass_values+0x288/0x890 [ 1344.641093][T30398] input_event_dispose+0x330/0x6b0 [ 1344.646409][T30398] input_inject_event+0x1fe/0x320 [ 1344.651618][T30398] evdev_write+0x2fc/0x480 [ 1344.656215][T30398] vfs_write+0x27e/0xa90 [ 1344.660641][T30398] ksys_write+0x145/0x250 [ 1344.665152][T30398] do_syscall_64+0xfa/0x3b0 [ 1344.669963][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.676038][T30398] [ 1344.678376][T30398] [ 1344.678376][T30398] the dependencies between the lock to be acquired [ 1344.678387][T30398] and SOFTIRQ-irq-unsafe lock: [ 1344.691912][T30398] -> (tasklist_lock){.+.+}-{3:3} { [ 1344.697226][T30398] HARDIRQ-ON-R at: [ 1344.701382][T30398] lock_acquire+0x120/0x360 [ 1344.708244][T30398] _raw_read_lock+0x36/0x50 [ 1344.714839][T30398] __do_wait+0xde/0x740 [ 1344.721020][T30398] do_wait+0x1f8/0x520 [ 1344.727108][T30398] kernel_wait+0xab/0x170 [ 1344.733466][T30398] call_usermodehelper_exec_work+0xbe/0x230 [ 1344.741372][T30398] process_scheduled_works+0xade/0x17b0 [ 1344.748930][T30398] worker_thread+0x8a0/0xda0 [ 1344.755529][T30398] kthread+0x711/0x8a0 [ 1344.761599][T30398] ret_from_fork+0x3fc/0x770 [ 1344.768199][T30398] ret_from_fork_asm+0x1a/0x30 [ 1344.774977][T30398] SOFTIRQ-ON-R at: [ 1344.779154][T30398] lock_acquire+0x120/0x360 [ 1344.785664][T30398] _raw_read_lock+0x36/0x50 [ 1344.792171][T30398] __do_wait+0xde/0x740 [ 1344.798329][T30398] do_wait+0x1f8/0x520 [ 1344.804400][T30398] kernel_wait+0xab/0x170 [ 1344.810815][T30398] call_usermodehelper_exec_work+0xbe/0x230 [ 1344.818712][T30398] process_scheduled_works+0xade/0x17b0 [ 1344.826704][T30398] worker_thread+0x8a0/0xda0 [ 1344.833300][T30398] kthread+0x711/0x8a0 [ 1344.839365][T30398] ret_from_fork+0x3fc/0x770 [ 1344.845960][T30398] ret_from_fork_asm+0x1a/0x30 [ 1344.852726][T30398] INITIAL USE at: [ 1344.856799][T30398] lock_acquire+0x120/0x360 [ 1344.863219][T30398] _raw_write_lock_irq+0xa2/0xf0 [ 1344.870084][T30398] copy_process+0x224f/0x3c00 [ 1344.876682][T30398] kernel_clone+0x21e/0x870 [ 1344.883108][T30398] user_mode_thread+0xdd/0x140 [ 1344.889798][T30398] rest_init+0x23/0x300 [ 1344.895901][T30398] start_kernel+0x47d/0x500 [ 1344.902324][T30398] x86_64_start_reservations+0x24/0x30 [ 1344.909716][T30398] x86_64_start_kernel+0x143/0x1c0 [ 1344.916749][T30398] common_startup_64+0x13e/0x147 [ 1344.923615][T30398] INITIAL READ USE at: [ 1344.928122][T30398] lock_acquire+0x120/0x360 [ 1344.934977][T30398] _raw_read_lock+0x36/0x50 [ 1344.941831][T30398] __do_wait+0xde/0x740 [ 1344.948342][T30398] do_wait+0x1f8/0x520 [ 1344.954757][T30398] kernel_wait+0xab/0x170 [ 1344.961433][T30398] call_usermodehelper_exec_work+0xbe/0x230 [ 1344.969770][T30398] process_scheduled_works+0xade/0x17b0 [ 1344.977667][T30398] worker_thread+0x8a0/0xda0 [ 1344.984618][T30398] kthread+0x711/0x8a0 [ 1344.991035][T30398] ret_from_fork+0x3fc/0x770 [ 1344.997974][T30398] ret_from_fork_asm+0x1a/0x30 [ 1345.005088][T30398] } [ 1345.007763][T30398] ... key at: [] tasklist_lock+0x18/0x40 [ 1345.015658][T30398] ... acquired at: [ 1345.019640][T30398] lock_acquire+0x120/0x360 [ 1345.024325][T30398] _raw_read_lock+0x36/0x50 [ 1345.029003][T30398] send_sigio+0x101/0x370 [ 1345.033513][T30398] kill_fasync+0x24d/0x4d0 [ 1345.038110][T30398] lease_break_callback+0x26/0x30 [ 1345.043411][T30398] __break_lease+0x6a5/0x1620 [ 1345.048272][T30398] do_dentry_open+0xd62/0x1970 [ 1345.053216][T30398] vfs_open+0x3b/0x340 [ 1345.057464][T30398] path_openat+0x2ee5/0x3830 [ 1345.062244][T30398] do_filp_open+0x1fa/0x410 [ 1345.066945][T30398] do_sys_openat2+0x121/0x1c0 [ 1345.071809][T30398] __x64_sys_open+0x11e/0x150 [ 1345.076670][T30398] do_syscall_64+0xfa/0x3b0 [ 1345.081353][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.087513][T30398] [ 1345.089837][T30398] -> (&f_owner->lock){....}-{3:3} { [ 1345.095159][T30398] INITIAL USE at: [ 1345.099142][T30398] lock_acquire+0x120/0x360 [ 1345.105391][T30398] _raw_write_lock_irq+0xa2/0xf0 [ 1345.112072][T30398] __f_setown+0x67/0x370 [ 1345.118057][T30398] fcntl_dirnotify+0x3d6/0x690 [ 1345.124649][T30398] do_fcntl+0x6d0/0x1910 [ 1345.130650][T30398] __se_sys_fcntl+0xc8/0x150 [ 1345.136985][T30398] do_syscall_64+0xfa/0x3b0 [ 1345.143235][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.150965][T30398] INITIAL READ USE at: [ 1345.155414][T30398] lock_acquire+0x120/0x360 [ 1345.162097][T30398] _raw_read_lock_irq+0xaa/0xf0 [ 1345.169132][T30398] f_getown+0x54/0x2a0 [ 1345.175395][T30398] sock_ioctl+0x536/0x790 [ 1345.181907][T30398] __se_sys_ioctl+0xfc/0x170 [ 1345.188692][T30398] do_syscall_64+0xfa/0x3b0 [ 1345.195491][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.203736][T30398] } [ 1345.206328][T30398] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1345.215363][T30398] ... acquired at: [ 1345.219259][T30398] lock_acquire+0x120/0x360 [ 1345.224381][T30398] _raw_read_lock_irqsave+0xaf/0x100 [ 1345.229851][T30398] send_sigio+0x38/0x370 [ 1345.234292][T30398] kill_fasync+0x24d/0x4d0 [ 1345.238890][T30398] lease_break_callback+0x26/0x30 [ 1345.244188][T30398] __break_lease+0x6a5/0x1620 [ 1345.249045][T30398] do_dentry_open+0xd62/0x1970 [ 1345.253982][T30398] vfs_open+0x3b/0x340 [ 1345.258241][T30398] path_openat+0x2ee5/0x3830 [ 1345.263096][T30398] do_filp_open+0x1fa/0x410 [ 1345.267781][T30398] do_sys_openat2+0x121/0x1c0 [ 1345.272654][T30398] __x64_sys_open+0x11e/0x150 [ 1345.277607][T30398] do_syscall_64+0xfa/0x3b0 [ 1345.282377][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.288475][T30398] [ 1345.290802][T30398] -> (&new->fa_lock){....}-{3:3} { [ 1345.296143][T30398] INITIAL USE at: [ 1345.300043][T30398] lock_acquire+0x120/0x360 [ 1345.306319][T30398] _raw_write_lock_irq+0xa2/0xf0 [ 1345.312827][T30398] fasync_remove_entry+0xf1/0x1c0 [ 1345.319690][T30398] __fput+0x89f/0xa70 [ 1345.325254][T30398] task_work_run+0x1d4/0x260 [ 1345.331430][T30398] exit_to_user_mode_loop+0xec/0x110 [ 1345.338288][T30398] do_syscall_64+0x2bd/0x3b0 [ 1345.344454][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.351915][T30398] INITIAL READ USE at: [ 1345.356253][T30398] lock_acquire+0x120/0x360 [ 1345.362764][T30398] _raw_read_lock_irqsave+0xaf/0x100 [ 1345.370064][T30398] kill_fasync+0x199/0x4d0 [ 1345.376485][T30398] pipe_release+0x19c/0x330 [ 1345.382989][T30398] __fput+0x449/0xa70 [ 1345.388983][T30398] task_work_run+0x1d4/0x260 [ 1345.395574][T30398] exit_to_user_mode_loop+0xec/0x110 [ 1345.402863][T30398] do_syscall_64+0x2bd/0x3b0 [ 1345.409488][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.417483][T30398] } [ 1345.419983][T30398] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1345.428665][T30398] ... acquired at: [ 1345.432557][T30398] lock_acquire+0x120/0x360 [ 1345.437243][T30398] _raw_read_lock_irqsave+0xaf/0x100 [ 1345.442709][T30398] kill_fasync+0x199/0x4d0 [ 1345.447309][T30398] evdev_pass_values+0x627/0xbd0 [ 1345.452426][T30398] evdev_events+0x1e6/0x340 [ 1345.457105][T30398] input_pass_values+0x288/0x890 [ 1345.462231][T30398] input_event_dispose+0x330/0x6b0 [ 1345.467537][T30398] input_inject_event+0x1fe/0x320 [ 1345.472785][T30398] evdev_write+0x2fc/0x480 [ 1345.477391][T30398] vfs_write+0x27e/0xa90 [ 1345.481820][T30398] ksys_write+0x145/0x250 [ 1345.486332][T30398] do_syscall_64+0xfa/0x3b0 [ 1345.491021][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.497092][T30398] [ 1345.499417][T30398] [ 1345.499417][T30398] stack backtrace: [ 1345.505307][T30398] CPU: 1 UID: 0 PID: 30398 Comm: syz.4.20255 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1345.505329][T30398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1345.505340][T30398] Call Trace: [ 1345.505350][T30398] [ 1345.505358][T30398] dump_stack_lvl+0x189/0x250 [ 1345.505389][T30398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1345.505414][T30398] ? __pfx__printk+0x10/0x10 [ 1345.505436][T30398] validate_chain+0x1f05/0x2140 [ 1345.505469][T30398] __lock_acquire+0xab9/0xd20 [ 1345.505490][T30398] ? kill_fasync+0x199/0x4d0 [ 1345.505509][T30398] lock_acquire+0x120/0x360 [ 1345.505528][T30398] ? kill_fasync+0x199/0x4d0 [ 1345.505552][T30398] _raw_read_lock_irqsave+0xaf/0x100 [ 1345.505573][T30398] ? kill_fasync+0x199/0x4d0 [ 1345.505591][T30398] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1345.505609][T30398] ? do_raw_spin_lock+0x121/0x290 [ 1345.505638][T30398] kill_fasync+0x199/0x4d0 [ 1345.505656][T30398] ? kill_fasync+0x53/0x4d0 [ 1345.505676][T30398] evdev_pass_values+0x627/0xbd0 [ 1345.505695][T30398] ? evdev_pass_values+0x601/0xbd0 [ 1345.505713][T30398] evdev_events+0x1e6/0x340 [ 1345.505727][T30398] ? evdev_events+0x79/0x340 [ 1345.505742][T30398] ? input_pass_values+0x8d/0x890 [ 1345.505773][T30398] input_pass_values+0x288/0x890 [ 1345.505801][T30398] ? input_handle_event+0x70c/0xf30 [ 1345.505824][T30398] input_event_dispose+0x330/0x6b0 [ 1345.505847][T30398] input_inject_event+0x1fe/0x320 [ 1345.505869][T30398] ? input_inject_event+0xbc/0x320 [ 1345.505891][T30398] evdev_write+0x2fc/0x480 [ 1345.505909][T30398] ? __pfx_evdev_write+0x10/0x10 [ 1345.505925][T30398] ? bpf_lsm_file_permission+0x9/0x20 [ 1345.505946][T30398] ? security_file_permission+0x75/0x290 [ 1345.505966][T30398] ? rw_verify_area+0x258/0x650 [ 1345.505987][T30398] ? __pfx_evdev_write+0x10/0x10 [ 1345.506003][T30398] vfs_write+0x27e/0xa90 [ 1345.506029][T30398] ? __pfx_vfs_write+0x10/0x10 [ 1345.506051][T30398] ? __fget_files+0x2a/0x420 [ 1345.506067][T30398] ? __fget_files+0x2a/0x420 [ 1345.506082][T30398] ? __fget_files+0x3a0/0x420 [ 1345.506096][T30398] ? __fget_files+0x2a/0x420 [ 1345.506114][T30398] ksys_write+0x145/0x250 [ 1345.506141][T30398] ? __pfx_ksys_write+0x10/0x10 [ 1345.506163][T30398] ? rcu_is_watching+0x15/0xb0 [ 1345.506187][T30398] ? do_syscall_64+0xbe/0x3b0 [ 1345.506209][T30398] do_syscall_64+0xfa/0x3b0 [ 1345.506231][T30398] ? lockdep_hardirqs_on+0x9c/0x150 [ 1345.506250][T30398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.506267][T30398] ? clear_bhb_loop+0x60/0xb0 [ 1345.506285][T30398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.506302][T30398] RIP: 0033:0x7fc7b0f8e969 [ 1345.506318][T30398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1345.506333][T30398] RSP: 002b:00007fc7b1d54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1345.506352][T30398] RAX: ffffffffffffffda RBX: 00007fc7b11b5fa0 RCX: 00007fc7b0f8e969 [ 1345.506365][T30398] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 1345.506381][T30398] RBP: 00007fc7b1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1345.506392][T30398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1345.506402][T30398] R13: 0000000000000000 R14: 00007fc7b11b5fa0 R15: 00007fc7b12dfa28 [ 1345.506420][T30398] [ 1345.906328][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.920319][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.932130][ T5675] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1345.948221][ T5675] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1345.958736][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.968112][T12178] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1345.975718][ T5675] usb 2-1: config 0 descriptor?? [ 1346.140222][T12178] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1346.149364][T12178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.157555][T12178] usb 4-1: Product: syz [ 1346.161744][T12178] usb 4-1: Manufacturer: syz [ 1346.166370][T12178] usb 4-1: SerialNumber: syz [ 1346.172767][T12178] usb 4-1: config 0 descriptor?? [ 1346.389224][ T5675] plantronics 0003:047F:FFFF.00A4: No inputs registered, leaving [ 1346.406205][ T5675] plantronics 0003:047F:FFFF.00A4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1346.586173][T12178] airspy 4-1:0.0: Board ID: 00 [ 1346.591082][T12178] airspy 4-1:0.0: Firmware version: [ 1347.190806][T12178] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 1347.200130][T12178] airspy 4-1:0.0: Registered as swradio24 [ 1347.206024][T12178] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1347.220978][T12178] usb 4-1: USB disconnect, device number 29 [ 1348.468131][T18646] usb 2-1: USB disconnect, device number 7