last executing test programs: 3.692499456s ago: executing program 4 (id=2403): r0 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0x3d}, &(0x7f0000000040)='./file0/file0\x00', 0xff52}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.010705422s ago: executing program 4 (id=2413): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 2.599278914s ago: executing program 4 (id=2418): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 1.907260183s ago: executing program 1 (id=2429): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1, 0x0, 0x0, 0x810}, 0x40) 1.741483066s ago: executing program 1 (id=2431): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) 1.260596442s ago: executing program 0 (id=2436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.139172359s ago: executing program 2 (id=2438): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 1.138164978s ago: executing program 0 (id=2439): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 1.094885891s ago: executing program 2 (id=2440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r2, @ANYBLOB="f7ae45f8a77176"], 0x20) 1.049456853s ago: executing program 2 (id=2441): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000057c0)="03d158", 0x3}], 0x1}}], 0x1, 0x0) 973.051488ms ago: executing program 2 (id=2442): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) 944.644251ms ago: executing program 0 (id=2443): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002b000b002abd70000000000005000000080003000000ecff0b000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) 879.808852ms ago: executing program 2 (id=2444): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x80000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000440)) 870.727722ms ago: executing program 3 (id=2445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x24d}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) 860.947729ms ago: executing program 4 (id=2446): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x2, 0x4e22, 0x0, 0xa, 0x0, 0x10}, {0x4000000, 0x7, 0xfffffffffffffffd, 0x0, 0x6}, {0xfffffffffffffffc}, 0xffffffff, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0xfffffffd, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffd, 0x0, 0x0, 0xfd, 0xfffffffd, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 753.223762ms ago: executing program 2 (id=2447): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 702.487135ms ago: executing program 3 (id=2448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x3000, 0x1000}) 671.579645ms ago: executing program 4 (id=2449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0xf0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x98, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x61, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 655.466224ms ago: executing program 1 (id=2450): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 648.412351ms ago: executing program 0 (id=2451): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000580)='./file0\x00') 584.03956ms ago: executing program 3 (id=2452): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newnexthop={0x28, 0x68, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x1, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfd3fd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0xf}, {0x4, 0x7}}}, 0xffffffffffffffbd}, 0x1, 0x0, 0x0, 0x44}, 0x20008004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 439.764295ms ago: executing program 4 (id=2453): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000080)=[{0x1e, 0x10, 0x0, 0x0}], 0x1}) 402.440498ms ago: executing program 0 (id=2454): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8df726f6466ae5eb3098fea3376f7b8644126747cb39ecdb9209fb5823ddad01338a2a28", 0x24}], 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 383.068093ms ago: executing program 1 (id=2455): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB='`\x000'], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 358.170222ms ago: executing program 3 (id=2456): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='gre0\x00', 0x10) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3e5e}, 0x1c) 215.605205ms ago: executing program 1 (id=2457): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) 193.703376ms ago: executing program 0 (id=2458): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 175.508576ms ago: executing program 3 (id=2459): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) unshare(0x22020400) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 10.515996ms ago: executing program 1 (id=2460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000003000000000a6c000000060a0104000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) close(0x3) 0s ago: executing program 3 (id=2461): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xd25d, 0x13900}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dummy_hcd [ 101.210119][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.224529][ T977] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.247385][ T977] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 101.257076][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.304637][ T977] usb 2-1: Product: syz [ 101.308882][ T977] usb 2-1: Manufacturer: syz [ 101.335605][ T977] usb 2-1: SerialNumber: syz [ 101.355586][ T977] usb 2-1: config 0 descriptor?? [ 101.598390][ T977] usb 2-1: USB disconnect, device number 2 [ 102.681206][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 102.714530][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 102.833461][ T6169] veth0_to_team: entered promiscuous mode [ 102.853191][ T6169] veth0_to_team: entered allmulticast mode [ 102.924838][ T6173] warning: `syz.0.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.275377][ T6186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.647437][ T6216] netlink: 'syz.0.110': attribute type 10 has an invalid length. [ 104.739351][ T6216] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.342234][ T6231] input: syz0 as /devices/virtual/input/input5 [ 105.963405][ T6250] syz.2.126 uses old SIOCAX25GETINFO [ 106.373897][ T6258] Illegal XDP return value 4294967289 on prog (id 17) dev N/A, expect packet loss! [ 106.594983][ T6262] bridge0: entered promiscuous mode [ 106.616789][ T6262] macvlan2: entered promiscuous mode [ 107.241917][ T6282] Zero length message leads to an empty skb [ 108.357197][ T6311] loop2: detected capacity change from 0 to 7 [ 108.390352][ T6311] Dev loop2: unable to read RDB block 7 [ 108.409006][ T6311] loop2: unable to read partition table [ 108.430947][ T6311] loop2: partition table beyond EOD, truncated [ 108.452566][ T6311] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.574872][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.758762][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 108.774268][ T6329] xt_hashlimit: max too large, truncated to 1048576 [ 108.798829][ T6329] xt_hashlimit: overflow, try lower: 0/0 [ 108.799154][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.851419][ T5921] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 108.874818][ T5921] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 108.934726][ T5921] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.975855][ T5921] usb 2-1: config 1 interface 0 has no altsetting 0 [ 108.987776][ T5921] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 109.023898][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.067524][ T5921] usb 2-1: Product: syz [ 109.088101][ T5921] usb 2-1: Manufacturer: syz [ 109.114650][ T5921] usb 2-1: SerialNumber: syz [ 109.137633][ T6313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.384357][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 109.595589][ T6351] netlink: 'syz.3.173': attribute type 83 has an invalid length. [ 109.732236][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.2.176'. [ 109.995115][ T6360] sp0: Synchronizing with TNC [ 110.113743][ T5191] bcm5974 2-1:1.0: could not read from device [ 110.114252][ T977] usb 2-1: USB disconnect, device number 3 [ 110.166165][ T5191] bcm5974 2-1:1.0: could not read from device [ 110.502973][ T6379] program syz.3.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.065357][ T6395] tap0: tun_chr_ioctl cmd 1074025673 [ 111.161498][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 111.387606][ T6406] overlayfs: missing 'workdir' [ 112.077548][ T6423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.102197][ T6423] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 113.118966][ T6449] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 113.178183][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.491651][ T6492] kvm: user requested TSC rate below hardware speed [ 114.807512][ T6507] netlink: 'syz.0.246': attribute type 3 has an invalid length. [ 115.075996][ T6518] tracefs: Invalid gid '00000000000037777777777' [ 115.179382][ T5846] Bluetooth: hci5: command 0x1003 tx timeout [ 115.187339][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 116.468305][ T1217] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.645149][ T1217] usb 2-1: Using ep0 maxpacket: 16 [ 116.657133][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.691739][ T1217] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.714800][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.735032][ T1217] usb 2-1: config 0 descriptor?? [ 117.168619][ T1217] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 117.581309][ T1217] usb 2-1: USB disconnect, device number 4 [ 117.616010][ T6607] process 'syz.3.291' launched '/dev/fd/3' with NULL argv: empty string added [ 118.464595][ T1217] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.934302][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.974202][ T1217] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 118.994970][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.008894][ T1217] usb 2-1: Product: syz [ 119.017003][ T1217] usb 2-1: Manufacturer: syz [ 119.024190][ T1217] usb 2-1: SerialNumber: syz [ 119.045019][ T1217] usb 2-1: config 0 descriptor?? [ 120.171660][ T5921] usb 2-1: USB disconnect, device number 5 [ 120.989566][ T6674] mmap: syz.1.319 (6674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.504590][ T5901] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.693619][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 121.723644][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.758000][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 121.787964][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.843615][ T5901] usb 3-1: config 0 descriptor?? [ 121.883999][ T5901] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 122.692627][ T5901] gspca_vc032x: reg_w err -71 [ 122.713134][ T5901] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 122.745819][ T5901] usb 3-1: USB disconnect, device number 3 [ 123.652410][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.340'. [ 123.673758][ T6726] serio: Serial port ptm0 [ 123.974982][ T5921] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.039215][ T6742] netlink: 165 bytes leftover after parsing attributes in process `syz.0.346'. [ 124.136648][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 124.149808][ T5921] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 124.170447][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.203656][ T5921] pvrusb2: Hardware description: Terratec Grabster AV400 [ 124.240103][ T5921] pvrusb2: ********** [ 124.257034][ T5921] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 124.293780][ T5921] pvrusb2: Important functionality might not be entirely working. [ 124.316250][ T5921] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 124.338722][ T5921] pvrusb2: ********** [ 124.441979][ T2343] pvrusb2: Invalid write control endpoint [ 124.587692][ T2343] pvrusb2: Invalid write control endpoint [ 124.593632][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 124.669599][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 124.692174][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 124.739661][ T2343] pvrusb2: Device being rendered inoperable [ 124.756313][ T5921] usb 2-1: USB disconnect, device number 6 [ 124.758517][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 124.802817][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 124.837315][ T2343] pvrusb2: Attached sub-driver cx25840 [ 124.843079][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 124.863171][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 125.164951][ T977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.334507][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 125.363130][ T977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.413591][ T977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.438149][ T977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.464602][ T977] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 125.499164][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.521179][ T977] usb 1-1: config 0 descriptor?? [ 125.723481][ T6790] misc userio: Can't change port type on an already running userio instance [ 125.751238][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.771392][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.028622][ T1217] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.037790][ T977] hid (null): unknown global tag 0xd [ 126.043153][ T977] hid (null): unknown global tag 0xd [ 126.076206][ T977] hid (null): report_id 1847273988 is invalid [ 126.082676][ T977] hid (null): report_id 60295 is invalid [ 126.234298][ T5901] usb 1-1: USB disconnect, device number 2 [ 126.245814][ T1217] usb 2-1: Using ep0 maxpacket: 32 [ 126.256626][ T1217] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 126.275377][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.305806][ T6811] Bluetooth: MGMT ver 1.23 [ 126.312302][ T1217] usb 2-1: config 0 descriptor?? [ 126.394726][ T5921] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.531412][ T1217] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 126.542611][ T1217] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.558084][ T1217] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 126.567968][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 126.570058][ T1217] usb 2-1: media controller created [ 126.586172][ T5921] usb 3-1: config 0 has no interfaces? [ 126.591749][ T5921] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 126.615296][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.628617][ T5921] usb 3-1: config 0 descriptor?? [ 126.642437][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.734074][ T1217] az6027: usb out operation failed. (-71) [ 126.748133][ T1217] az6027: usb out operation failed. (-71) [ 126.753951][ T1217] stb0899_attach: Driver disabled by Kconfig [ 126.762164][ T1217] az6027: no front-end attached [ 126.762164][ T1217] [ 126.773640][ T1217] az6027: usb out operation failed. (-71) [ 126.779640][ T1217] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 126.798365][ T1217] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 126.853799][ T1217] dvb-usb: schedule remote query interval to 400 msecs. [ 126.871677][ T1217] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 126.899315][ T1217] usb 2-1: USB disconnect, device number 7 [ 127.242783][ T1217] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 127.330924][ T6833] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 127.416745][ T977] usb 3-1: USB disconnect, device number 4 [ 128.981493][ T30] audit: type=1326 audit(1752308415.188:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6846 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a338e929 code=0x7fc00000 [ 129.143977][ T6880] netlink: 'syz.2.408': attribute type 25 has an invalid length. [ 129.184990][ T6880] netlink: 'syz.2.408': attribute type 8 has an invalid length. [ 129.644761][ T6898] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 129.653593][ T6898] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 130.044542][ T5874] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.237285][ T5874] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 130.251715][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.297936][ T5874] usb 5-1: config 0 descriptor?? [ 130.523844][ T5874] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 130.658329][ T6928] program syz.1.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.705141][ T6926] block nbd0: server does not support multiple connections per device. [ 130.735349][ T6926] block nbd0: shutting down sockets [ 130.735500][ T5874] [drm:udl_init] *ERROR* Selecting channel failed [ 130.783680][ T5874] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 130.816715][ T5874] [drm] Initialized udl on minor 2 [ 130.836458][ T5874] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 130.888811][ T5874] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 130.938876][ T5893] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 130.954446][ T5874] usb 5-1: USB disconnect, device number 3 [ 130.979469][ T5893] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 131.170513][ T6936] netlink: 27 bytes leftover after parsing attributes in process `syz.0.431'. [ 132.213867][ T6965] capability: warning: `syz.3.445' uses deprecated v2 capabilities in a way that may be insecure [ 133.371499][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.380819][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.594320][ T7000] netlink: 152 bytes leftover after parsing attributes in process `syz.1.461'. [ 133.631070][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.459'. [ 134.125919][ T5921] IPVS: starting estimator thread 0... [ 134.171252][ T30] audit: type=1326 audit(1752308420.378:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 134.237777][ T7016] IPVS: using max 27 ests per chain, 64800 per kthread [ 134.244988][ T30] audit: type=1326 audit(1752308420.378:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 134.323310][ T30] audit: type=1326 audit(1752308420.378:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 134.392456][ T30] audit: type=1326 audit(1752308420.378:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7017 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 134.711222][ T7027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.323882][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 135.585658][ T7068] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.491'. [ 135.664926][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 136.495914][ T7089] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 136.539127][ T977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 136.934695][ T977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 137.156393][ T7103] block nbd2: shutting down sockets [ 137.312498][ T7112] bond0: entered promiscuous mode [ 137.364509][ T7112] bond_slave_0: entered promiscuous mode [ 137.373521][ T7112] bond_slave_1: entered promiscuous mode [ 137.380176][ T7112] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 137.404936][ T7112] bond0: left promiscuous mode [ 137.420252][ T7112] bond_slave_0: left promiscuous mode [ 137.441244][ T7112] bond_slave_1: left promiscuous mode [ 137.460830][ T7112] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 137.509321][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 137.519703][ T7122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.124516][ T1217] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.401049][ T1217] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 138.418523][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.471357][ T1217] usb 1-1: config 0 descriptor?? [ 138.510530][ T1217] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 139.188432][ T5843] Bluetooth: hci3: command tx timeout [ 139.329018][ T1217] gspca_sunplus: reg_w_riv err -71 [ 139.341022][ T1217] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 139.382795][ T1217] usb 1-1: USB disconnect, device number 3 [ 139.656330][ T7157] random: crng reseeded on system resumption [ 139.931653][ T5921] IPVS: starting estimator thread 0... [ 139.939633][ T7170] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 140.024518][ T7171] IPVS: using max 26 ests per chain, 62400 per kthread [ 141.421611][ T7237] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.569'. [ 142.158110][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 142.528875][ T5893] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.705364][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 142.719353][ T5893] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.744921][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.762031][ T5893] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 142.792882][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.820852][ T5893] usb 5-1: config 0 descriptor?? [ 143.266064][ T5893] kye 0003:0458:0138.0003: unknown main item tag 0x4 [ 143.303608][ T5893] kye 0003:0458:0138.0003: unexpected long global item [ 143.315233][ T5893] kye 0003:0458:0138.0003: parse failed [ 143.324007][ T5893] kye 0003:0458:0138.0003: probe with driver kye failed with error -22 [ 143.485977][ T5893] usb 5-1: USB disconnect, device number 4 [ 143.931621][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 144.184921][ T7307] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.599'. [ 144.392530][ T30] audit: type=1400 audit(1752308430.598:7): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=7313 comm="syz.4.603" name="113" dev="tmpfs" ino=585 [ 144.488250][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 144.618763][ T7320] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.606'. [ 145.292218][ T7336] macsec1: entered allmulticast mode [ 145.324577][ T7336] macvlan0: entered allmulticast mode [ 145.331258][ T7336] veth1_vlan: entered allmulticast mode [ 145.377914][ T7336] macvlan0: left allmulticast mode [ 145.383235][ T7336] veth1_vlan: left allmulticast mode [ 145.780918][ T7349] use of bytesused == 0 is deprecated and will be removed in the future, [ 145.793898][ T7349] use the actual size instead. [ 146.737637][ T977] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.910116][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 146.950082][ T977] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 146.969953][ T977] usb 2-1: config 0 has no interface number 0 [ 146.994357][ T977] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 147.011229][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.034062][ T977] usb 2-1: Product: syz [ 147.043202][ T977] usb 2-1: Manufacturer: syz [ 147.064508][ T977] usb 2-1: SerialNumber: syz [ 147.086120][ T977] usb 2-1: config 0 descriptor?? [ 147.118413][ T977] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 147.363862][ T977] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 147.432920][ T977] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 147.776371][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 147.777821][ T5893] usb 2-1: USB disconnect, device number 8 [ 147.834912][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 147.856446][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 147.868856][ T5893] quatech2 2-1:0.51: device disconnected [ 149.487453][ T7476] netlink: 44 bytes leftover after parsing attributes in process `syz.4.677'. [ 149.546873][ T7476] netlink: 43 bytes leftover after parsing attributes in process `syz.4.677'. [ 149.593727][ T7476] netlink: 'syz.4.677': attribute type 6 has an invalid length. [ 149.624564][ T7476] netlink: 'syz.4.677': attribute type 5 has an invalid length. [ 149.634270][ T7476] netlink: 43 bytes leftover after parsing attributes in process `syz.4.677'. [ 149.893892][ T7494] netlink: 27 bytes leftover after parsing attributes in process `syz.4.684'. [ 149.962138][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 149.982983][ T7499] netlink: 3 bytes leftover after parsing attributes in process `syz.2.686'. [ 152.174511][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.337195][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 152.356334][ T5874] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 152.370335][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.400402][ T5874] usb 1-1: config 0 descriptor?? [ 152.640593][ T5874] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 152.658812][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.680362][ T5874] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 152.696791][ T5874] usb 1-1: media controller created [ 152.827747][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.877597][ T7604] loop6: detected capacity change from 0 to 524287999 [ 152.899835][ T5874] az6027: usb out operation failed. (-71) [ 152.909259][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.921976][ T5874] az6027: usb out operation failed. (-71) [ 152.932652][ T5874] stb0899_attach: Driver disabled by Kconfig [ 152.941030][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.954621][ T5874] az6027: no front-end attached [ 152.954621][ T5874] [ 152.968610][ T5874] az6027: usb out operation failed. (-71) [ 152.980842][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.994742][ T5874] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 153.008688][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 153.028341][ T5874] dvb-usb: schedule remote query interval to 400 msecs. [ 153.036007][ T5874] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 153.045301][ T7606] Invalid logical block size (3) [ 153.052505][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.064604][ T5874] usb 1-1: USB disconnect, device number 4 [ 153.070751][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.082202][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.102215][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.121111][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.140653][ T7604] ldm_validate_partition_table(): Disk read failed. [ 153.170049][ T5874] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.191577][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.204907][ T7604] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.218822][ T7604] Dev loop6: unable to read RDB block 0 [ 153.230348][ T7604] loop6: unable to read partition table [ 153.237649][ T7604] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 153.815767][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 154.583851][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 154.654540][ T5874] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.754508][ T5921] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.817024][ T5874] usb 5-1: config 0 has no interfaces? [ 154.833984][ T5874] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 154.849885][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=234, SerialNumber=2 [ 154.861426][ T5874] usb 5-1: Product: syz [ 154.867993][ T5874] usb 5-1: Manufacturer: syz [ 154.873547][ T5874] usb 5-1: SerialNumber: syz [ 154.888116][ T5874] usb 5-1: config 0 descriptor?? [ 154.926961][ T5921] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.944110][ T5921] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.966129][ T5921] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.989174][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.013814][ T7655] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.035956][ T5921] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.119937][ T5893] usb 5-1: USB disconnect, device number 5 [ 155.257981][ T5921] usb 2-1: USB disconnect, device number 9 [ 156.060926][ T30] audit: type=1326 audit(1752308442.268:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.112923][ T30] audit: type=1326 audit(1752308442.268:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.171404][ T30] audit: type=1326 audit(1752308442.298:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.229913][ T30] audit: type=1326 audit(1752308442.298:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.282353][ T30] audit: type=1326 audit(1752308442.298:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.340327][ T30] audit: type=1326 audit(1752308442.298:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.408349][ T30] audit: type=1326 audit(1752308442.298:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.442052][ T30] audit: type=1326 audit(1752308442.298:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.472861][ T30] audit: type=1326 audit(1752308442.308:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.516869][ T30] audit: type=1326 audit(1752308442.308:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7690 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 156.586691][ T7702] o2cb: This node has not been configured. [ 156.612165][ T7702] o2cb: Cluster check failed. Fix errors before retrying. [ 156.632529][ T7702] (syz.1.779,7702,1):user_dlm_register:674 ERROR: status = -22 [ 156.661814][ T7702] (syz.1.779,7702,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 158.110211][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.126103][ T5893] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.149280][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.165059][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.185520][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.201877][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.210837][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.219309][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.229508][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.240534][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.251583][ T7752] netlink: 'syz.1.802': attribute type 3 has an invalid length. [ 158.305828][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.312539][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 158.325974][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.340275][ T5893] usb 3-1: config 0 descriptor?? [ 159.180923][ T5893] video4linux radio48: keene_cmd_main failed (-71) [ 159.202044][ T5893] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 159.223486][ T5893] usb 3-1: USB disconnect, device number 5 [ 159.297122][ T7779] batman_adv: batadv0: Adding interface: dummy0 [ 159.308598][ T7779] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.367690][ T7779] batman_adv: batadv0: Interface activated: dummy0 [ 159.921014][ T5893] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.120125][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 160.136094][ T5893] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 160.153539][ T5893] usb 1-1: config 0 has no interface number 0 [ 160.188160][ T5893] usb 1-1: config 0 interface 184 has no altsetting 0 [ 160.213050][ T5893] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 160.244756][ T7802] can0: slcan on ttyS3. [ 160.246780][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.265096][ T5893] usb 1-1: Product: syz [ 160.274782][ T5893] usb 1-1: Manufacturer: syz [ 160.300690][ T5893] usb 1-1: SerialNumber: syz [ 160.333623][ T5893] usb 1-1: config 0 descriptor?? [ 160.357488][ T7801] can0 (unregistered): slcan off ttyS3. [ 160.365087][ T5893] smsc75xx v1.0.0 [ 161.199522][ T5893] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 161.220886][ T5893] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 161.246343][ T5893] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 161.274478][ T5893] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 161.295619][ T5893] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 161.339452][ T5893] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 161.360300][ T5893] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 161.400577][ T5893] usb 1-1: USB disconnect, device number 5 [ 162.148387][ T7865] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 162.704616][ T5953] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.781785][ T7896] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 162.803955][ T7878] could not allocate digest TFM handle cryptd(blake2b-160) [ 162.882527][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 162.914326][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 162.947797][ T5953] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 162.970857][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.996593][ T5953] usb 3-1: config 0 descriptor?? [ 163.014567][ T7885] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.452130][ T5953] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 163.493653][ T5953] cm6533_jd 0003:0D8C:0022.0004: item fetching failed at offset 4/5 [ 163.510614][ T5953] cm6533_jd 0003:0D8C:0022.0004: parse failed [ 163.523421][ T5953] cm6533_jd 0003:0D8C:0022.0004: probe with driver cm6533_jd failed with error -22 [ 163.544427][ T7913] validate_nla: 43 callbacks suppressed [ 163.544446][ T7913] netlink: 'syz.4.872': attribute type 9 has an invalid length. [ 163.564319][ T7913] netlink: 200108 bytes leftover after parsing attributes in process `syz.4.872'. [ 163.583979][ T7913] openvswitch: netlink: Message has 5 unknown bytes. [ 163.670698][ T5893] usb 3-1: USB disconnect, device number 6 [ 164.533135][ T7951] ======================================================= [ 164.533135][ T7951] WARNING: The mand mount option has been deprecated and [ 164.533135][ T7951] and is ignored by this kernel. Remove the mand [ 164.533135][ T7951] option from the mount to silence this warning. [ 164.533135][ T7951] ======================================================= [ 164.699080][ T30] audit: type=1326 audit(1752308450.908:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 164.783703][ T30] audit: type=1326 audit(1752308450.938:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 164.831683][ T30] audit: type=1326 audit(1752308450.938:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 164.866931][ T977] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.894598][ T30] audit: type=1326 audit(1752308450.938:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 164.934832][ T30] audit: type=1326 audit(1752308450.938:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 165.069132][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.097772][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.125730][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.159416][ T977] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 165.189389][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.222781][ T977] usb 2-1: config 0 descriptor?? [ 165.439820][ T7983] netlink: 56 bytes leftover after parsing attributes in process `syz.0.904'. [ 165.668414][ T977] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0 [ 165.699346][ T977] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x2 [ 165.724453][ T977] hid-rmi 0003:1532:011D.0005: item fetching failed at offset 3/4 [ 165.753713][ T977] hid-rmi 0003:1532:011D.0005: parse failed [ 165.773207][ T977] hid-rmi 0003:1532:011D.0005: probe with driver hid-rmi failed with error -22 [ 165.898761][ T977] usb 2-1: USB disconnect, device number 10 [ 166.526711][ T30] audit: type=1326 audit(1752308452.738:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a338e929 code=0x7fc00000 [ 166.602354][ T30] audit: type=1326 audit(1752308452.738:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04a338e929 code=0x7fc00000 [ 166.659948][ T30] audit: type=1326 audit(1752308452.738:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a338e929 code=0x7fc00000 [ 166.691006][ T30] audit: type=1326 audit(1752308452.738:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a338e929 code=0x7fc00000 [ 166.760446][ T30] audit: type=1326 audit(1752308452.738:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.2.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a338e929 code=0x7fc00000 [ 167.252789][ T1217] IPVS: starting estimator thread 0... [ 167.344511][ T8048] IPVS: using max 25 ests per chain, 60000 per kthread [ 167.594733][ T5874] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.775899][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 167.874286][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.924738][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.964646][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.044217][ T5874] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.081566][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.132557][ T5874] usb 5-1: config 0 descriptor?? [ 168.642838][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.680728][ T5874] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 168.696984][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.714459][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.732105][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.752587][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.764773][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.788282][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.814628][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.832198][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.874108][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.895517][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.902885][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.945808][ T5874] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 168.973556][ T5874] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0 [ 169.012542][ T5874] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0 [ 169.086396][ T5874] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 169.114476][ T5874] microsoft 0003:045E:07DA.0006: no inputs found [ 169.120993][ T5874] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 169.191153][ T5874] usb 5-1: USB disconnect, device number 6 [ 169.216443][ T8093] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 4294967272. macoff=96 [ 170.099185][ T8112] team0: Device gtp0 is of different type [ 170.147684][ T8117] overlayfs: failed to clone upperpath [ 170.342545][ T8120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.968'. [ 170.378095][ T59] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 171.125006][ T8152] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.978'. [ 171.275661][ T8161] netlink: 260 bytes leftover after parsing attributes in process `syz.3.983'. [ 172.113117][ T8195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.169946][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1000'. [ 172.725742][ T1217] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.927028][ T1217] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 172.939240][ T1217] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 172.972595][ T1217] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.015164][ T1217] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 173.054441][ T1217] usb 5-1: config 0 has no interface number 0 [ 173.081254][ T1217] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 173.100841][ T1217] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 173.128935][ T1217] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.161448][ T1217] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.214562][ T1217] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 173.232005][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.255666][ T1217] usb 5-1: config 0 descriptor?? [ 173.273991][ T1217] gspca_main: spca561-2.14.0 probing abcd:cdee [ 173.379991][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 173.478843][ T1217] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 173.491970][ T1217] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.513132][ T1217] usb 5-1: MIDIStreaming interface descriptor not found [ 173.664863][ T1217] usb 5-1: USB disconnect, device number 7 [ 174.194577][ T3413] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.370278][ T3413] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.410312][ T3413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.434125][ T3413] usb 3-1: config 0 descriptor?? [ 174.442394][ T3413] cp210x 3-1:0.0: cp210x converter detected [ 174.873479][ T3413] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 174.901366][ T3413] usb 3-1: cp210x converter now attached to ttyUSB0 [ 175.100711][ T1217] usb 3-1: USB disconnect, device number 7 [ 175.120150][ T1217] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.141488][ T1217] cp210x 3-1:0.0: device disconnected [ 175.299468][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 175.299488][ T30] audit: type=1326 audit(1752308461.508:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.327240][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.370109][ T8287] futex_wake_op: syz.0.1043 tries to shift op by 36; fix this program [ 175.370771][ T30] audit: type=1326 audit(1752308461.508:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.409879][ T30] audit: type=1326 audit(1752308461.518:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.482169][ T30] audit: type=1326 audit(1752308461.518:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.531867][ T30] audit: type=1326 audit(1752308461.518:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.581193][ T30] audit: type=1326 audit(1752308461.528:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.631604][ T30] audit: type=1326 audit(1752308461.558:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.730364][ T30] audit: type=1326 audit(1752308461.578:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.774989][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.790561][ T30] audit: type=1326 audit(1752308461.678:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 175.862205][ T30] audit: type=1326 audit(1752308461.678:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 176.244931][ T5921] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 176.397344][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.408724][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.436870][ T5921] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 176.453626][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.467127][ T5921] usb 5-1: config 0 descriptor?? [ 176.946114][ T5921] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 177.320358][ T5921] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 177.343966][ T5921] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 177.376286][ T5921] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71 [ 177.401270][ T5921] usb 5-1: USB disconnect, device number 8 [ 177.609954][ T8373] loop9: detected capacity change from 0 to 524288000 [ 178.729969][ T8403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.735032][ T8407] binder: 8406:8407 ioctl c018620c 200000000700 returned -1 [ 179.197737][ T8420] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1102'. [ 179.359965][ T8424] overlayfs: failed to clone lowerpath [ 179.414865][ T5893] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.578841][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.604699][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.634565][ T5893] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 179.643696][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.688267][ T5893] usb 2-1: config 0 descriptor?? [ 180.109999][ T5893] cherry 0003:046A:0023.0008: unexpected long global item [ 180.128195][ T5893] cherry 0003:046A:0023.0008: probe with driver cherry failed with error -22 [ 180.310510][ T5893] usb 2-1: USB disconnect, device number 11 [ 181.261553][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 182.041446][ T8527] program syz.1.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.240449][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 182.270514][ T8533] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1153'. [ 183.802730][ T8586] ref_ctr_offset mismatch. inode: 0x482 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 184.790787][ T8633] netlink: 888 bytes leftover after parsing attributes in process `syz.0.1194'. [ 185.217178][ T8656] vxcan0: tx address claim with dlc 0 [ 185.867745][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 186.163169][ T8689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.338395][ T8689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.442253][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'. [ 186.642343][ T8689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.876657][ T8689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.958319][ T8713] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1233'. [ 187.005199][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 187.005226][ T30] audit: type=1326 audit(1752308473.208:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 187.072860][ T30] audit: type=1326 audit(1752308473.208:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 187.156566][ T30] audit: type=1326 audit(1752308473.268:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 187.211128][ T30] audit: type=1326 audit(1752308473.268:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 187.256446][ T8689] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.270201][ T30] audit: type=1326 audit(1752308473.268:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 187.313724][ T8689] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.345525][ T30] audit: type=1326 audit(1752308473.268:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 187.374107][ T30] audit: type=1326 audit(1752308473.268:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5fa7f858e7 code=0x7ffc0000 [ 187.413890][ T8689] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.430188][ T30] audit: type=1326 audit(1752308473.278:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5fa7f2ab19 code=0x7ffc0000 [ 187.461872][ T8689] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.485120][ T30] audit: type=1326 audit(1752308473.278:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5fa7f8e929 code=0x7ffc0000 [ 187.559831][ T30] audit: type=1326 audit(1752308473.278:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5fa7f858e7 code=0x7ffc0000 [ 188.277177][ T8758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.840188][ T8779] syz.1.1263: attempt to access beyond end of device [ 188.840188][ T8779] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 188.874586][ T8779] gfs2: error -5 reading superblock [ 189.404647][ T5953] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 189.427545][ T8800] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 189.444726][ T8800] syzkaller1: linktype set to 768 [ 189.585280][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 189.594778][ T5953] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 189.617696][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.641928][ T5953] usb 2-1: config 0 descriptor?? [ 189.934760][ T977] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 190.061419][ T5953] microsoft 0003:045E:009D.0009: unknown main item tag 0x0 [ 190.073062][ T5953] microsoft 0003:045E:009D.0009: unknown main item tag 0x0 [ 190.083796][ T5953] microsoft 0003:045E:009D.0009: unknown main item tag 0x0 [ 190.128672][ T5953] microsoft 0003:045E:009D.0009: unknown main item tag 0x0 [ 190.141325][ T5953] microsoft 0003:045E:009D.0009: unknown main item tag 0x0 [ 190.152018][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.162533][ T977] usb 1-1: config 0 has no interfaces? [ 190.173846][ T977] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.183732][ T5953] microsoft 0003:045E:009D.0009: hidraw0: USB HID v0.03 Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 190.196869][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.205001][ T5953] microsoft 0003:045E:009D.0009: no inputs found [ 190.213494][ T5953] microsoft 0003:045E:009D.0009: could not initialize ff, continuing anyway [ 190.224934][ T977] usb 1-1: config 0 descriptor?? [ 190.261260][ T3413] usb 2-1: USB disconnect, device number 12 [ 190.437538][ T977] usb 1-1: USB disconnect, device number 6 [ 190.525573][ T5953] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.685479][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 190.697057][ T5953] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 190.719439][ T5953] usb 3-1: config 0 has no interface number 0 [ 190.739472][ T5953] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 190.753666][ T5953] usb 3-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 190.772798][ T5953] usb 3-1: Product: syz [ 190.783156][ T5953] usb 3-1: Manufacturer: syz [ 190.793040][ T5953] usb 3-1: SerialNumber: syz [ 190.805615][ T5953] usb 3-1: config 0 descriptor?? [ 191.055994][ T5953] sierra 3-1:0.153: Sierra USB modem converter detected [ 191.081846][ T5953] usb 3-1: USB disconnect, device number 8 [ 191.100875][ T5953] sierra 3-1:0.153: device disconnected [ 191.288159][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1305'. [ 191.324046][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.328963][ T8870] block device autoloading is deprecated and will be removed. [ 191.332902][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.112250][ T8899] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1319'. [ 192.416729][ T8913] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1326'. [ 192.574296][ T8914] bridge_slave_1: left allmulticast mode [ 192.582869][ T8914] bridge_slave_1: left promiscuous mode [ 192.615044][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.679793][ T8914] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 192.841417][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 192.874845][ T8925] netem: invalid attributes len -6 [ 192.880056][ T8925] netem: change failed [ 193.444858][ T5953] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.605532][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 193.624960][ T5953] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 193.634007][ T5953] usb 1-1: config 0 has no interface number 0 [ 193.643678][ T5953] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 193.658651][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.667106][ T977] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 193.689152][ T5953] usb 1-1: Product: syz [ 193.695925][ T5953] usb 1-1: Manufacturer: syz [ 193.701803][ T5953] usb 1-1: SerialNumber: syz [ 193.710196][ T5953] usb 1-1: config 0 descriptor?? [ 193.734703][ T5953] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 193.765138][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 193.854688][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 193.872493][ T977] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 193.893241][ T977] usb 2-1: config 0 has no interface number 0 [ 193.908764][ T977] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 193.927548][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.961091][ T5953] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 193.970562][ T977] usb 2-1: Product: syz [ 193.983173][ T977] usb 2-1: Manufacturer: syz [ 193.999157][ T977] usb 2-1: SerialNumber: syz [ 194.010788][ T5953] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 194.024193][ T977] usb 2-1: config 0 descriptor?? [ 194.042672][ T977] hub 2-1:0.132: bad descriptor, ignoring hub [ 194.058896][ T977] hub 2-1:0.132: probe with driver hub failed with error -5 [ 194.077635][ T977] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input12 [ 194.169854][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 194.371267][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 194.383107][ T977] usb 1-1: USB disconnect, device number 7 [ 194.420480][ T977] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 194.473804][ T977] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 194.512221][ T977] quatech2 1-1:0.51: device disconnected [ 194.785741][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.792141][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.923967][ T8991] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1359'. [ 194.933852][ T8991] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1359'. [ 195.145729][ T977] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 195.316482][ T977] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.349267][ T977] usb 3-1: config 0 has no interface number 0 [ 195.379775][ T977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 195.480760][ T977] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 195.493559][ T977] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 195.503430][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.533003][ T977] usb 3-1: config 0 descriptor?? [ 195.552556][ T8989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.596495][ T977] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 195.811702][ T5893] usb 3-1: USB disconnect, device number 9 [ 196.149430][ T9026] dvmrp1: entered allmulticast mode [ 196.167975][ T9026] dvmrp1: left allmulticast mode [ 196.476144][ T9032] macvlan3: entered allmulticast mode [ 196.491904][ T9032] veth1_vlan: entered allmulticast mode [ 196.540755][ T9032] veth1_vlan: left allmulticast mode [ 197.660938][ T5921] usb 2-1: USB disconnect, device number 13 [ 197.870345][ T9092] netlink: 'syz.4.1409': attribute type 10 has an invalid length. [ 197.881969][ T9092] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1409'. [ 198.123665][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 198.123684][ T30] audit: type=1326 audit(1752308485.332:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 198.163689][ T30] audit: type=1326 audit(1752308485.352:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x7ffc0000 [ 198.490385][ T9113] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 199.497486][ T9139] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1430'. [ 199.518036][ T9139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1430'. [ 199.618557][ T3413] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 199.660012][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 199.776098][ T3413] usb 5-1: Using ep0 maxpacket: 16 [ 199.787307][ T3413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.807137][ T3413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.833246][ T3413] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 199.853448][ T3413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.893441][ T3413] usb 5-1: config 0 descriptor?? [ 199.997728][ T977] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 200.155263][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 200.171549][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 200.182999][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 200.207712][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.243442][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.258786][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.272099][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 200.297852][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 200.322880][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.341976][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.376979][ T3413] playstation 0003:054C:05C4.000A: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 200.388769][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.406950][ T977] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 200.419533][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 200.462927][ T977] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.485551][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.512994][ T977] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.529584][ T3413] playstation 0003:054C:05C4.000A: Invalid reportID received, expected 18 got 113 [ 200.537713][ T977] usb 1-1: string descriptor 0 read error: -22 [ 200.545561][ T977] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.564832][ T3413] playstation 0003:054C:05C4.000A: Failed to retrieve DualShock4 pairing info: -22 [ 200.584505][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.585296][ T3413] playstation 0003:054C:05C4.000A: Failed to get MAC address from DualShock4 [ 200.611495][ T977] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 200.640083][ T3413] playstation 0003:054C:05C4.000A: Failed to create dualshock4. [ 200.675793][ T3413] playstation 0003:054C:05C4.000A: probe with driver playstation failed with error -22 [ 200.769027][ T3413] usb 5-1: USB disconnect, device number 9 [ 200.910493][ T10] usb 1-1: USB disconnect, device number 8 [ 201.050996][ T9165] loop6: detected capacity change from 0 to 524287487 [ 201.058817][ T9165] buffer_io_error: 6 callbacks suppressed [ 201.058833][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.085941][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.120447][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.133472][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.144162][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.157595][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.169499][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.180821][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.191323][ T9165] ldm_validate_partition_table(): Disk read failed. [ 201.201992][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.212479][ T9165] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.224469][ T9165] Dev loop6: unable to read RDB block 0 [ 201.230708][ T9165] loop6: unable to read partition table [ 201.245053][ T9165] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 202.055742][ T3413] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 202.261985][ T3413] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 202.274512][ T3413] usb 5-1: config 0 has no interface number 0 [ 202.301374][ T3413] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 202.321017][ T3413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.355065][ T3413] usb 5-1: Product: syz [ 202.359541][ T3413] usb 5-1: Manufacturer: syz [ 202.364185][ T3413] usb 5-1: SerialNumber: syz [ 202.395437][ T3413] usb 5-1: config 0 descriptor?? [ 202.622969][ T3413] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 202.646347][ T3413] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 202.655269][ T5921] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 202.675288][ T3413] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 202.707006][ T3413] usb 5-1: media controller created [ 202.717124][ T3413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.822621][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.854660][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 202.876971][ T3413] DVB: Unable to find symbol dib7000p_attach() [ 202.883224][ T3413] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 202.904092][ T5921] usb 1-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 202.930865][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.943221][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1460'. [ 202.961071][ T3413] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 202.975262][ T5921] usb 1-1: config 0 descriptor?? [ 202.984667][ T9203] netlink: 'syz.3.1460': attribute type 18 has an invalid length. [ 202.995272][ T9194] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.014647][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 203.015265][ T3413] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 203.055639][ T3413] usb 5-1: media controller created [ 203.066515][ T3413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.113763][ T3413] dib0700: the master dib7090 has to be initialized first [ 203.131284][ T3413] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 203.314740][ T3413] rc_core: IR keymap rc-dib0700-rc5 not found [ 203.320952][ T3413] Registered IR keymap rc-empty [ 203.345275][ T3413] dvb-usb: could not initialize remote control. [ 203.357818][ T3413] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 203.388519][ T3413] usb 5-1: USB disconnect, device number 10 [ 203.439367][ T5921] logitech 0003:046D:C29B.000B: unknown main item tag 0x0 [ 203.457742][ T5921] logitech 0003:046D:C29B.000B: unknown main item tag 0x0 [ 203.472308][ T5921] logitech 0003:046D:C29B.000B: unknown main item tag 0x0 [ 203.488624][ T5921] logitech 0003:046D:C29B.000B: unknown main item tag 0x0 [ 203.499255][ T5921] logitech 0003:046D:C29B.000B: unknown main item tag 0x0 [ 203.511767][ T3413] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 203.528808][ T5921] logitech 0003:046D:C29B.000B: unknown main item tag 0x0 [ 203.548816][ T5921] logitech 0003:046D:C29B.000B: unknown main item tag 0x0 [ 203.571049][ T5921] logitech 0003:046D:C29B.000B: hidraw0: USB HID vff.fa Device [HID 046d:c29b] on usb-dummy_hcd.0-1/input0 [ 203.596795][ T5921] logitech 0003:046D:C29B.000B: no inputs found [ 203.674243][ T5921] usb 1-1: USB disconnect, device number 9 [ 204.455839][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 205.052647][ T9248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1480'. [ 205.063549][ T9248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1480'. [ 205.150760][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1481'. [ 205.171318][ T9252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1482'. [ 205.184875][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.185896][ T9251] netlink: 'syz.4.1481': attribute type 7 has an invalid length. [ 205.225235][ T9251] netlink: 'syz.4.1481': attribute type 8 has an invalid length. [ 205.236008][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 205.363253][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 205.389013][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 205.412631][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.437777][ T10] usb 1-1: config 0 descriptor?? [ 205.658734][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.689333][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.716418][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.731932][ T10] usb 1-1: media controller created [ 205.767840][ T9273] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.808252][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.855989][ T9241] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 205.886435][ T10] az6027: usb out operation failed. (-71) [ 205.907424][ T10] az6027: usb out operation failed. (-71) [ 205.913674][ T10] stb0899_attach: Driver disabled by Kconfig [ 205.924672][ T10] az6027: no front-end attached [ 205.924672][ T10] [ 205.957331][ T10] az6027: usb out operation failed. (-71) [ 205.976639][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 206.006195][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 206.046834][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 206.070050][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 206.106791][ T10] usb 1-1: USB disconnect, device number 10 [ 206.230638][ T9297] trusted_key: encrypted_key: keyword 'upw' not recognized [ 206.247326][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 206.962521][ T9332] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 207.172428][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1522'. [ 208.268876][ T9364] program syz.2.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.133847][ T9394] wireguard0: entered allmulticast mode [ 209.277765][ T9400] netlink: 'syz.1.1549': attribute type 2 has an invalid length. [ 209.292096][ T9400] netlink: 'syz.1.1549': attribute type 8 has an invalid length. [ 209.310347][ T9400] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1549'. [ 209.731152][ T9416] netlink: 'syz.4.1556': attribute type 39 has an invalid length. [ 209.818564][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'. [ 209.878371][ T9421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1557'. [ 210.083225][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 210.121686][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 210.684186][ T9447] ipvlan2: entered allmulticast mode [ 210.714318][ T9447] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 211.380232][ T9467] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1579'. [ 211.560455][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 211.815658][ T9488] netlink: 'syz.4.1588': attribute type 83 has an invalid length. [ 212.037412][ T5953] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 212.194448][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 212.207994][ T5953] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 212.218935][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.225938][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 212.225977][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 212.243990][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 212.250472][ T5953] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 212.265463][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 212.275336][ T5953] usb 1-1: config 1 has no interface number 0 [ 212.281653][ T5953] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.293221][ T5953] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 212.307941][ T5953] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 212.319210][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.359057][ T5953] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 212.568637][ T5953] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 212.837807][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 212.921308][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'. [ 213.031931][ T5921] usb 1-1: USB disconnect, device number 11 [ 213.047400][ T5921] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 213.089808][ T9528] sctp: [Deprecated]: syz.1.1607 (pid 9528) Use of int in maxseg socket option. [ 213.089808][ T9528] Use struct sctp_assoc_value instead [ 213.291261][ T30] audit: type=1800 audit(1752308500.502:101): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1611" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 213.487081][ T30] audit: type=1326 audit(1752308500.702:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9547 comm="syz.4.1616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f868518e929 code=0x0 [ 213.806863][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 214.504448][ T5953] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 214.515160][ T3413] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.674484][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 214.689415][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 214.690506][ T3413] usb 2-1: Using ep0 maxpacket: 16 [ 214.728387][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 214.728719][ T3413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.771416][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 214.795375][ T3413] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 214.808244][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 214.821106][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 214.832579][ T3413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.857160][ T5953] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 214.877262][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.894813][ T5953] usb 1-1: Product: syz [ 214.894929][ T3413] usb 2-1: config 0 descriptor?? [ 214.909834][ T5953] usb 1-1: Manufacturer: syz [ 214.944581][ T5953] usb 1-1: SerialNumber: syz [ 214.966208][ T5953] usb 1-1: config 0 descriptor?? [ 215.255648][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 215.358826][ T3413] logitech-djreceiver 0003:046D:C513.000C: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.1-1/input0 [ 215.390547][ T5953] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 215.404853][ T5953] input input15: Device does not respond to id packet M [ 215.413913][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'. [ 215.636268][ T5953] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 215.657199][ T5953] input input15: Device does not respond to id packet B [ 215.684423][ T5953] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 215.704538][ T977] usb 2-1: USB disconnect, device number 14 [ 215.712905][ T5953] input input15: Device does not respond to id packet N [ 215.735795][ T5953] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 215.750110][ T5953] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 215.769265][ T5953] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 215.788401][ T5953] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 215.809830][ T5953] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 215.845987][ T5953] usb 1-1: USB disconnect, device number 12 [ 216.106958][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1646'. [ 216.279311][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 216.881257][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.818147][ T9701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.005925][ T9713] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 218.014045][ T9713] netlink: 'syz.0.1681': attribute type 4 has an invalid length. [ 218.023408][ T9713] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1681'. [ 218.034295][ T9713] NCSI netlink: No device for ifindex 458760 [ 218.734567][ T5874] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 218.866503][ T9743] syz.3.1695 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 218.915277][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 218.989049][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.047679][ T5874] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 219.090890][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.128754][ T5874] usb 1-1: config 0 descriptor?? [ 219.224245][ T9758] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1703'. [ 219.574076][ T5874] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 219.594553][ T5874] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 219.615651][ T5874] arvo 0003:1E7D:30D4.000D: item fetching failed at offset 2/5 [ 219.643618][ T5874] arvo 0003:1E7D:30D4.000D: parse failed [ 219.664960][ T5874] arvo 0003:1E7D:30D4.000D: probe with driver arvo failed with error -22 [ 219.724263][ T977] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 219.765750][ T977] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.806722][ T3413] usb 1-1: USB disconnect, device number 13 [ 220.803318][ T9809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1725'. [ 221.054714][ T9818] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 221.140485][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 221.541922][ T9843] ip6gre1: entered promiscuous mode [ 221.584494][ T9843] ip6gre1: entered allmulticast mode [ 221.686065][ T9851] 9pnet_fd: Insufficient options for proto=fd [ 221.947794][ T9861] can0: slcan on ttyS3. [ 222.055000][ T9861] can0 (unregistered): slcan off ttyS3. [ 222.061226][ T9861] Falling back ldisc for ttyS3. [ 222.824504][ T3413] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 222.996205][ T3413] usb 3-1: Using ep0 maxpacket: 8 [ 223.045809][ T3413] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 223.064518][ T3413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.101605][ T3413] pvrusb2: Hardware description: Terratec Grabster AV400 [ 223.252188][ T3413] pvrusb2: ********** [ 223.257785][ T3413] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 223.289790][ T3413] pvrusb2: Important functionality might not be entirely working. [ 223.334015][ T3413] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 223.384560][ T3413] pvrusb2: ********** [ 223.402446][ T2343] pvrusb2: Invalid write control endpoint [ 223.610618][ T2343] pvrusb2: Invalid write control endpoint [ 223.633381][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 223.680427][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 223.710092][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 223.741046][ T2343] pvrusb2: Device being rendered inoperable [ 223.776920][ T3413] usb 3-1: USB disconnect, device number 10 [ 223.778498][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 223.822142][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 223.862879][ T2343] pvrusb2: Attached sub-driver cx25840 [ 223.894917][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 223.914773][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 224.164990][ T977] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 224.334683][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 224.345980][ T977] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 224.365936][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.420522][ T977] pvrusb2: Hardware description: Terratec Grabster AV400 [ 224.464742][ T977] pvrusb2: ********** [ 224.484730][ T977] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 224.531784][ T9884] syz.0.1758 (9884) used greatest stack depth: 18264 bytes left [ 224.556124][ T977] pvrusb2: Important functionality might not be entirely working. [ 224.564094][ T977] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 224.676240][ T977] pvrusb2: ********** [ 224.705208][ T2343] pvrusb2: Invalid write control endpoint [ 224.909426][ T2343] pvrusb2: Invalid write control endpoint [ 224.939273][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.970408][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 225.020085][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 225.050669][ T2343] pvrusb2: Device being rendered inoperable [ 225.069106][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 225.078853][ T3413] usb 2-1: USB disconnect, device number 15 [ 225.097296][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 225.119492][ T2343] pvrusb2: Attached sub-driver cx25840 [ 225.139099][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 225.150127][ T9942] CIFS: VFS: Malformed UNC in devname [ 225.180202][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.347193][ T9948] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 225.381951][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.390075][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.761429][ T9966] gretap0: entered promiscuous mode [ 225.780559][ T9966] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1795'. [ 225.866836][ T3413] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 225.975231][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1800'. [ 226.034585][ T3413] usb 1-1: Using ep0 maxpacket: 16 [ 226.049168][ T3413] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.076848][ T3413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.091364][ T3413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.121788][ T3413] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.152248][ T3413] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.197349][ T3413] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.215845][ T3413] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.223972][ T3413] usb 1-1: Manufacturer: syz [ 226.258206][ T3413] usb 1-1: config 0 descriptor?? [ 226.286446][ T977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 226.364834][ T9989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1808'. [ 226.404574][ T9989] bond0: option ad_select: unable to set because the bond device is up [ 226.480121][ T977] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 226.514593][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.541570][ T977] usb 5-1: Product: syz [ 226.554926][ T977] usb 5-1: Manufacturer: syz [ 226.566617][ T977] usb 5-1: SerialNumber: syz [ 226.587203][ T977] usb 5-1: config 0 descriptor?? [ 226.634556][ T3413] rc_core: IR keymap rc-hauppauge not found [ 226.640637][ T3413] Registered IR keymap rc-empty [ 226.680923][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.723395][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.757026][ T3413] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 226.787259][ T3413] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 226.836155][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.846560][ C1] mceusb 1-1:0.0: long-range (0x1) receiver active [ 226.884758][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.914967][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.935178][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.964597][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.985012][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.015401][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.034731][ T30] audit: type=1400 audit(1752308514.242:103): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10006 comm="syz.1.1815" dest=20002 netif=wpan0 [ 227.034834][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.142375][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.187097][ T3413] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.237585][ T3413] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 227.257083][ T3413] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 227.295471][ T3413] usb 1-1: USB disconnect, device number 14 [ 227.419560][ T977] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 227.451272][ T977] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 227.497413][ T977] asix 5-1:0.0: probe with driver asix failed with error -71 [ 227.538159][ T977] usb 5-1: USB disconnect, device number 11 [ 227.713262][T10024] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 227.743196][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1821'. [ 228.539626][T10046] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1831'. [ 228.585178][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 229.048296][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 229.071851][T10058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 229.106401][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 229.142682][T10058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'. [ 229.212085][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1841'. [ 231.136404][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'. [ 231.851672][T10135] netem: incorrect gi model size [ 231.857883][T10135] netem: change failed [ 231.870938][ T8618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.882709][ T8618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.894984][ T5921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.014541][ T977] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 232.165017][ T5921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.169463][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 232.199456][ T977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.234552][ T977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.270458][ T977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.291994][ T977] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 232.324460][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.359996][ T977] usb 1-1: config 0 descriptor?? [ 232.659228][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 232.696461][ T5921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.818187][ T977] apple 0003:05AC:0247.000F: unexpected long global item [ 232.852944][ T977] apple 0003:05AC:0247.000F: parse failed [ 232.879085][ T977] apple 0003:05AC:0247.000F: probe with driver apple failed with error -22 [ 232.906683][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.915703][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.191189][T10183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.208630][ T43] usb 1-1: USB disconnect, device number 15 [ 233.210934][T10183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.782056][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 233.794519][T10183] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.824428][T10183] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.854297][T10183] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.879256][T10183] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.138940][T10215] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1903'. [ 234.210040][T10231] binder: 10230:10231 ioctl 400c620e 200000000240 returned -22 [ 235.664562][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.135292][T10287] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 236.161619][T10287] team0: Port device batadv1 added [ 236.464723][T10220] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.624491][T10220] usb 3-1: Using ep0 maxpacket: 16 [ 236.633715][T10220] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.649620][T10220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.661306][T10220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.678407][T10220] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 236.692208][T10220] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.712503][T10220] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.723191][T10220] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.734955][T10220] usb 3-1: Manufacturer: syz [ 236.748969][T10220] usb 3-1: config 0 descriptor?? [ 237.084944][T10220] rc_core: IR keymap rc-hauppauge not found [ 237.099936][T10220] Registered IR keymap rc-empty [ 237.124632][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.144589][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.165608][T10220] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 237.213321][T10220] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 237.241578][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.269148][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.304570][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.324673][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.366764][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.395478][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.418775][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.445692][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.474885][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.494773][T10220] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 237.535257][T10220] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 237.553780][T10220] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.586582][T10220] usb 3-1: USB disconnect, device number 11 [ 237.651194][T10330] sch_tbf: peakrate 2 is lower than or equals to rate 9622228065856960865 ! [ 238.045847][T10345] veth0: entered promiscuous mode [ 238.053843][T10343] veth0: left promiscuous mode [ 238.504533][T10221] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 238.661197][T10221] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 238.683959][T10221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.768170][T10221] usb 5-1: Product: syz [ 238.778782][T10221] usb 5-1: Manufacturer: syz [ 238.785565][T10221] usb 5-1: SerialNumber: syz [ 238.799499][T10221] usb 5-1: config 0 descriptor?? [ 238.810609][T10221] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 239.459867][ T30] audit: type=1326 audit(1752308526.672:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.484107][ T30] audit: type=1326 audit(1752308526.672:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.512603][ T30] audit: type=1326 audit(1752308526.672:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.535484][ T30] audit: type=1326 audit(1752308526.672:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.559219][ T30] audit: type=1326 audit(1752308526.672:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.645737][T10221] gspca_sunplus: reg_r err -71 [ 239.650799][T10221] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 239.676176][ T30] audit: type=1326 audit(1752308526.672:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.688653][T10221] usb 5-1: USB disconnect, device number 12 [ 239.761263][ T30] audit: type=1326 audit(1752308526.672:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.820146][T10400] netlink: 'syz.0.1985': attribute type 3 has an invalid length. [ 239.841575][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 239.853782][ T30] audit: type=1326 audit(1752308526.672:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 239.921048][ T30] audit: type=1326 audit(1752308526.672:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10390 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c72d8e929 code=0x7ffc0000 [ 240.043496][T10411] io-wq is not configured for unbound workers [ 240.194473][T10221] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 240.367634][T10221] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 240.387947][T10221] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.443575][T10419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.458758][T10221] usb 2-1: config 0 has no interface number 0 [ 240.468953][T10221] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 240.485918][T10419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.494999][T10221] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.508482][T10200] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 240.525951][T10221] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 240.544669][T10221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.553029][T10221] usb 2-1: Product: syz [ 240.580752][T10221] usb 2-1: Manufacturer: syz [ 240.592831][T10221] usb 2-1: SerialNumber: syz [ 240.608532][T10221] usb 2-1: config 0 descriptor?? [ 240.669436][T10200] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 240.678861][T10200] usb 3-1: config 0 has no interface number 0 [ 240.703124][T10200] usb 3-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 240.716238][T10200] usb 3-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 240.746794][T10200] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 1696, setting to 64 [ 240.759880][T10200] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 240.769606][T10200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.819486][T10419] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.845494][T10419] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.856502][T10200] usb 3-1: config 0 descriptor?? [ 240.857536][T10417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 240.876630][T10419] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.894319][T10419] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.071282][T10200] usb 3-1: string descriptor 0 read error: -71 [ 241.089400][T10200] usbtest 3-1:0.138: Linux gadget zero [ 241.100746][T10200] usbtest 3-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 241.115500][T10200] usb 3-1: USB disconnect, device number 12 [ 241.297215][ T5874] usb 2-1: USB disconnect, device number 16 [ 241.400684][T10437] veth0_to_team: entered promiscuous mode [ 241.408118][T10437] veth0_to_team: entered allmulticast mode [ 241.680706][T10450] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2007'. [ 242.026924][T10462] sctp: [Deprecated]: syz.2.2012 (pid 10462) Use of int in max_burst socket option. [ 242.026924][T10462] Use struct sctp_assoc_value instead [ 242.174586][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'. [ 242.585779][ T30] audit: type=1326 audit(1752308529.802:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.3.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486e98e929 code=0x7ffc0000 [ 243.864613][T10200] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 244.048662][T10200] usb 3-1: Using ep0 maxpacket: 8 [ 244.083367][T10200] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 244.107697][T10200] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 244.128929][T10200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.157050][T10200] usb 3-1: Product: syz [ 244.162939][T10200] usb 3-1: Manufacturer: syz [ 244.180587][T10200] usb 3-1: SerialNumber: syz [ 244.193875][T10200] usb 3-1: config 0 descriptor?? [ 244.203360][T10200] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 244.229049][T10200] usb 3-1: setting power ON [ 244.234143][T10200] dvb-usb: bulk message failed: -22 (2/0) [ 244.278125][T10200] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.300656][T10200] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 244.310016][T10200] usb 3-1: media controller created [ 244.355239][T10200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.410085][T10539] dvb-usb: bulk message failed: -22 (3/0) [ 244.414717][T10562] netlink: 'syz.0.2059': attribute type 1 has an invalid length. [ 244.435006][T10539] dvb-usb: bulk message failed: -22 (37/0) [ 244.437707][T10562] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2059'. [ 244.455886][T10200] usb 3-1: selecting invalid altsetting 6 [ 244.475912][T10562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2059'. [ 244.478470][T10200] usb 3-1: digital interface selection failed (-22) [ 244.495588][T10539] dvb-usb: bulk message failed: -22 (3/0) [ 244.501402][T10539] dvb-usb: bulk message failed: -22 (3/0) [ 244.512315][T10200] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 244.522825][T10200] usb 3-1: setting power OFF [ 244.534244][T10200] dvb-usb: bulk message failed: -22 (2/0) [ 244.554309][T10200] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 244.575275][T10200] (NULL device *): no alternate interface [ 244.606758][T10566] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 244.648509][T10200] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 244.675777][T10566] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 244.792067][T10200] usb 3-1: USB disconnect, device number 13 [ 245.204579][T10197] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 245.373354][T10197] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.399851][T10197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.431152][T10197] usb 5-1: config 0 descriptor?? [ 245.448814][T10197] cp210x 5-1:0.0: cp210x converter detected [ 245.576134][T10599] binder: 10598:10599 ioctl c0306201 200000000340 returned -14 [ 245.801053][T10607] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2079'. [ 245.867220][T10197] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 245.903040][T10197] usb 5-1: cp210x converter now attached to ttyUSB0 [ 246.142105][T10197] usb 5-1: USB disconnect, device number 13 [ 246.169764][T10197] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.220980][T10197] cp210x 5-1:0.0: device disconnected [ 246.297036][T10621] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.2086'. [ 246.816066][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'. [ 247.006460][T10651] netlink: 'syz.2.2101': attribute type 11 has an invalid length. [ 247.514884][T10668] tun0: tun_chr_ioctl cmd 1074025676 [ 247.525652][T10668] tun0: owner set to 0 [ 247.680385][T10676] kvm: user requested TSC rate below hardware speed [ 248.037841][T10689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2119'. [ 249.044523][T10200] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.328139][T10200] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.350315][T10200] usb 1-1: config 0 has no interfaces? [ 249.394994][T10200] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.404125][T10200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.471691][T10200] usb 1-1: config 0 descriptor?? [ 249.788279][T10197] usb 1-1: USB disconnect, device number 16 [ 250.927086][T10762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.934957][T10762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.139353][T10762] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.148765][T10762] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.159355][T10762] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.193584][T10762] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.324176][T10762] macvlan2: left promiscuous mode [ 251.358423][T10783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.366100][T10200] syz1: Port: 1 Link DOWN [ 251.963481][T10810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2173'. [ 252.412416][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 252.412442][ T30] audit: type=1804 audit(1752308539.622:152): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2179" name="/" dev="pidfs" ino=10826 res=1 errno=0 [ 253.214711][T10202] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 253.441466][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.473141][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.551097][ T5848] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 253.551211][ T5848] Bluetooth: hci0: adv larger than maximum supported [ 253.552489][T10202] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.559297][ T5848] Bluetooth: hci0: Malformed LE Event: 0x0d [ 253.639376][T10202] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 253.648942][T10202] usb 5-1: can't read configurations, error -71 [ 254.334525][ T3413] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.544715][ T3413] usb 3-1: Using ep0 maxpacket: 16 [ 254.578826][ T3413] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.596796][ T3413] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.631577][ T3413] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.644725][ T3413] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 254.684893][ T3413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.720842][ T3413] usb 3-1: config 0 descriptor?? [ 254.727630][T10202] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 254.905039][T10202] usb 5-1: Using ep0 maxpacket: 32 [ 254.926349][T10202] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 254.935375][T10202] usb 5-1: config 0 has no interface number 0 [ 254.941567][T10202] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 254.992552][T10202] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 255.002104][T10912] 9pnet_fd: Insufficient options for proto=fd [ 255.011285][T10202] usb 5-1: New USB device found, idVendor=0582, idProduct=ecd6, bcdDevice=6b.1b [ 255.023449][T10202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.032241][T10202] usb 5-1: Product: syz [ 255.036936][T10202] usb 5-1: Manufacturer: syz [ 255.041568][T10202] usb 5-1: SerialNumber: syz [ 255.051543][T10202] usb 5-1: config 0 descriptor?? [ 255.093120][T10916] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2213'. [ 255.103066][T10916] netem: unknown loss type 0 [ 255.109082][T10916] netem: change failed [ 255.207965][ T3413] hid (null): unknown global tag 0xc [ 255.222063][ T3413] hid (null): report_id 0 is invalid [ 255.227914][ T3413] hid (null): unknown global tag 0xe [ 255.244797][T10221] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 255.328347][T10202] usb 5-1: USB disconnect, device number 15 [ 255.414876][T10221] usb 1-1: Using ep0 maxpacket: 16 [ 255.424182][T10221] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.445100][T10221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.460277][T10197] usb 3-1: USB disconnect, device number 14 [ 255.474494][T10221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.500118][T10221] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 255.510698][T10221] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.526732][T10221] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 255.541466][T10221] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 255.550723][T10221] usb 1-1: Manufacturer: syz [ 255.565270][T10221] usb 1-1: config 0 descriptor?? [ 255.857415][T10221] rc_core: IR keymap rc-hauppauge not found [ 255.867295][T10221] Registered IR keymap rc-empty [ 255.884611][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.924706][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 255.960212][T10221] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 256.005883][T10221] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 256.028173][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.054911][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.114608][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.151491][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.199629][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.223011][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.229733][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.254628][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.284938][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.328307][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.367248][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.404519][T10221] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 256.467576][T10221] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 256.477955][T10221] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 256.495887][T10221] usb 1-1: USB disconnect, device number 17 [ 256.620624][T10956] netlink: 'syz.2.2230': attribute type 14 has an invalid length. [ 257.035209][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 257.255807][ T10] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 257.281460][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.303270][ T10] usb 5-1: config 0 descriptor?? [ 257.378917][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 257.759416][T11026] netem: incorrect ge model size [ 257.764994][T11026] netem: change failed [ 257.778542][T11025] program syz.2.2243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.809152][ T10] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 258.011546][ T10] gspca_cpia1: usb_control_msg 01, error -32 [ 258.034870][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 258.051877][ T10] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 258.078865][ T10] usb 5-1: USB disconnect, device number 16 [ 258.404281][T11047] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2254'. [ 258.510194][ T3413] kernel write not supported for file /input/mice (pid: 3413 comm: kworker/1:2) [ 260.124944][T11103] 9pnet_fd: Insufficient options for proto=fd [ 260.294708][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 260.474495][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 260.481807][ T10] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 260.501406][ T10] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 260.530039][ T10] usb 2-1: config 0 has no interface number 0 [ 260.549709][ T10] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.577462][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 260.597586][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.619261][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 260.650325][ T10] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 260.671789][ T10] usb 2-1: Product: syz [ 260.690514][ T10] usb 2-1: config 0 descriptor?? [ 260.707841][T11099] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.871498][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2290'. [ 261.402828][ T10] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input20 [ 261.505081][ T3413] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 261.693099][ T3413] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.714177][T10197] usb 2-1: USB disconnect, device number 17 [ 261.714278][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 261.730086][ T3413] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.751251][ T3413] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.762927][ T3413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.783782][ T3413] usb 3-1: SerialNumber: syz [ 261.913525][T11165] netlink: 'syz.0.2307': attribute type 1 has an invalid length. [ 261.931891][T11165] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2307'. [ 262.013727][ T3413] usb 3-1: 0:2 : does not exist [ 262.056214][ T3413] usb 3-1: USB disconnect, device number 15 [ 262.212475][T11177] bridge0: left promiscuous mode [ 262.218376][T11177] bridge0: entered allmulticast mode [ 262.363072][T11181] vlan2: entered promiscuous mode [ 262.369138][T11181] bond0: entered promiscuous mode [ 262.374305][T11181] bond_slave_0: entered promiscuous mode [ 262.401996][T11181] bond_slave_1: entered promiscuous mode [ 262.409590][T11181] vlan2: entered allmulticast mode [ 262.416318][T11181] bond0: entered allmulticast mode [ 262.421645][T11181] bond_slave_0: entered allmulticast mode [ 262.427924][T11181] bond_slave_1: entered allmulticast mode [ 263.119788][T11215] syz.4.2331 (11215): /proc/11213/oom_adj is deprecated, please use /proc/11213/oom_score_adj instead. [ 263.537987][T11230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2338'. [ 264.310646][T11263] 9pnet_fd: p9_fd_create_unix (11263): problem connecting socket: ./file0: -111 [ 264.345376][T11266] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 264.615171][T10197] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 264.775002][T10197] usb 3-1: Using ep0 maxpacket: 32 [ 264.810194][T10197] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.820249][T10197] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 264.838292][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 264.844766][T10197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.864061][T10197] usb 3-1: Product: syz [ 264.874080][T10197] usb 3-1: Manufacturer: syz [ 264.878951][T10197] usb 3-1: SerialNumber: syz [ 264.890412][T10197] usb 3-1: config 0 descriptor?? [ 265.316274][T10197] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 265.464047][T11315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2379'. [ 265.735124][T10197] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 265.765181][T10197] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 265.780357][T10197] usb 3-1: USB disconnect, device number 16 [ 265.885166][ T3413] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 266.057504][ T3413] usb 1-1: Using ep0 maxpacket: 8 [ 266.074927][ T3413] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 266.093735][ T3413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.115839][ T3413] pvrusb2: Hardware description: Terratec Grabster AV400 [ 266.122969][ T3413] pvrusb2: ********** [ 266.135086][ T3413] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 266.150875][ T3413] pvrusb2: Important functionality might not be entirely working. [ 266.169762][ T3413] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 266.189951][ T3413] pvrusb2: ********** [ 266.332401][ T2343] pvrusb2: Invalid write control endpoint [ 266.502094][ T2343] pvrusb2: Invalid write control endpoint [ 266.524699][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 266.538791][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 266.564491][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 266.589257][ T2343] pvrusb2: Device being rendered inoperable [ 266.608793][T10202] usb 1-1: USB disconnect, device number 18 [ 266.621526][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 266.639012][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 266.655712][ T2343] pvrusb2: Attached sub-driver cx25840 [ 266.663205][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 266.683677][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 266.754478][T10221] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 266.914561][T10221] usb 2-1: Using ep0 maxpacket: 16 [ 266.929961][T10221] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 266.948301][T10221] usb 2-1: config 0 has no interface number 0 [ 266.971141][T10221] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.997378][T10221] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.010150][T10221] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 267.021061][T10221] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 267.044539][T10221] usb 2-1: Product: syz [ 267.054768][T10221] usb 2-1: SerialNumber: syz [ 267.069893][T11365] netlink: 'syz.3.2402': attribute type 12 has an invalid length. [ 267.084182][T11365] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2402'. [ 267.085386][T10221] usb 2-1: config 0 descriptor?? [ 267.119539][T10221] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 267.139201][T10221] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input21 [ 267.361591][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'. [ 267.434983][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 267.452594][T11376] netlink: 822 bytes leftover after parsing attributes in process `syz.3.2407'. [ 267.664125][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 267.686905][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.695905][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.703586][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.711850][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.720485][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.728274][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.736221][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.744198][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.752311][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.760251][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 267.800815][ T3413] usb 2-1: USB disconnect, device number 18 [ 267.800895][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 267.886075][ T3413] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 268.584458][T11411] team_slave_0: entered promiscuous mode [ 268.591226][T11411] team_slave_1: entered promiscuous mode [ 268.674505][T10221] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 268.839100][T10221] usb 5-1: Using ep0 maxpacket: 16 [ 268.863554][T10221] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.886529][T10221] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.898382][T10221] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 268.914376][T10221] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.924123][T10221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.932366][T10221] usb 5-1: SerialNumber: syz [ 268.969286][T10221] hub 5-1:1.0: bad descriptor, ignoring hub [ 268.981805][T10221] hub 5-1:1.0: probe with driver hub failed with error -5 [ 268.991742][T10221] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 269.315106][ T5874] usb 5-1: USB disconnect, device number 17 [ 269.336312][T11433] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 269.433663][T11439] syz.2.2437 uses obsolete (PF_INET,SOCK_PACKET) [ 269.821312][T11453] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 269.862369][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 270.166444][T11471] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 270.360827][T11477] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2455'. [ 270.515094][T10221] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 270.597669][T11484] sp0: Synchronizing with TNC [ 270.644521][T10951] [ 270.646908][T10951] ===================================================== [ 270.653916][T10951] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 270.661583][T10951] 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 Not tainted [ 270.669089][T10951] ----------------------------------------------------- [ 270.676056][T10951] kworker/u8:22/10951 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 270.684066][T10951] ffffffff8ece0af8 (disc_data_lock){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 [ 270.693759][T10951] [ 270.693759][T10951] and this task is already holding: [ 270.701162][T10951] ffffffff99dcaff8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 270.710529][T10951] which would create a new lock dependency: [ 270.716543][T10951] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 270.724325][T10951] [ 270.724325][T10951] but this new dependency connects a HARDIRQ-irq-safe lock: [ 270.733812][T10951] (&port_lock_key){-.-.}-{3:3} [ 270.733844][T10951] [ 270.733844][T10951] ... which became HARDIRQ-irq-safe at: [ 270.746636][T10951] lock_acquire+0x120/0x360 [ 270.751249][T10951] _raw_spin_lock_irqsave+0xa7/0xf0 [ 270.756546][T10951] serial8250_handle_irq+0x6b/0xbb0 [ 270.761926][T10951] serial8250_default_handle_irq+0xbf/0x1b0 [ 270.768019][T10951] serial8250_interrupt+0xa2/0x1d0 [ 270.773504][T10951] __handle_irq_event_percpu+0x28c/0x980 [ 270.779256][T10951] handle_irq_event+0x8b/0x1e0 [ 270.784423][T10951] handle_edge_irq+0x267/0x9c0 [ 270.789362][T10951] __common_interrupt+0x140/0x250 [ 270.794605][T10951] common_interrupt+0xb6/0xe0 [ 270.799420][T10951] asm_common_interrupt+0x26/0x40 [ 270.804728][T10951] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 270.810585][T10951] uart_port_unlock_deref+0x111/0x2f0 [ 270.816168][T10951] uart_write+0xe8/0x130 [ 270.820505][T10951] n_tty_write+0xd35/0x11d0 [ 270.825111][T10951] file_tty_write+0x500/0x990 [ 270.829883][T10951] vfs_write+0x548/0xa90 [ 270.834219][T10951] ksys_write+0x145/0x250 [ 270.838644][T10951] do_syscall_64+0xfa/0x3b0 [ 270.843234][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.849220][T10951] [ 270.849220][T10951] to a HARDIRQ-irq-unsafe lock: [ 270.856354][T10951] (disc_data_lock){.+.+}-{3:3} [ 270.856390][T10951] [ 270.856390][T10951] ... which became HARDIRQ-irq-unsafe at: [ 270.869583][T10951] ... [ 270.869602][T10951] lock_acquire+0x120/0x360 [ 270.876828][T10951] _raw_read_lock+0x36/0x50 [ 270.881497][T10951] sixpack_receive_buf+0x5c/0x1450 [ 270.886783][T10951] tiocsti+0x23c/0x2c0 [ 270.890994][T10951] tty_ioctl+0x626/0xde0 [ 270.895348][T10951] __se_sys_ioctl+0xf9/0x170 [ 270.900050][T10951] do_syscall_64+0xfa/0x3b0 [ 270.904737][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.910824][T10951] [ 270.910824][T10951] other info that might help us debug this: [ 270.910824][T10951] [ 270.921157][T10951] Possible interrupt unsafe locking scenario: [ 270.921157][T10951] [ 270.929564][T10951] CPU0 CPU1 [ 270.934946][T10951] ---- ---- [ 270.940344][T10951] lock(disc_data_lock); [ 270.944973][T10951] local_irq_disable(); [ 270.951860][T10951] lock(&port_lock_key); [ 270.958765][T10951] lock(disc_data_lock); [ 270.965723][T10951] [ 270.969187][T10951] lock(&port_lock_key); [ 270.973786][T10951] [ 270.973786][T10951] *** DEADLOCK *** [ 270.973786][T10951] [ 270.981952][T10951] 6 locks held by kworker/u8:22/10951: [ 270.987423][T10951] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 270.999122][T10951] #1: ffffc90003bffbc0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 271.010896][T10951] #2: ffff888024970ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x720 [ 271.020104][T10951] #3: ffff88806bb500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 271.029572][T10951] #4: ffffffff99dcaff8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 271.039467][T10951] #5: ffff88806bb500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 271.048935][T10951] [ 271.048935][T10951] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 271.059467][T10951] -> (&port_lock_key){-.-.}-{3:3} { [ 271.064728][T10951] IN-HARDIRQ-W at: [ 271.068825][T10951] lock_acquire+0x120/0x360 [ 271.075003][T10951] _raw_spin_lock_irqsave+0xa7/0xf0 [ 271.082070][T10951] serial8250_handle_irq+0x6b/0xbb0 [ 271.088989][T10951] serial8250_default_handle_irq+0xbf/0x1b0 [ 271.096694][T10951] serial8250_interrupt+0xa2/0x1d0 [ 271.103602][T10951] __handle_irq_event_percpu+0x28c/0x980 [ 271.110946][T10951] handle_irq_event+0x8b/0x1e0 [ 271.117404][T10951] handle_edge_irq+0x267/0x9c0 [ 271.123833][T10951] __common_interrupt+0x140/0x250 [ 271.130519][T10951] common_interrupt+0xb6/0xe0 [ 271.136919][T10951] asm_common_interrupt+0x26/0x40 [ 271.143649][T10951] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 271.151109][T10951] uart_port_unlock_deref+0x111/0x2f0 [ 271.158164][T10951] uart_write+0xe8/0x130 [ 271.164095][T10951] n_tty_write+0xd35/0x11d0 [ 271.170367][T10951] file_tty_write+0x500/0x990 [ 271.176814][T10951] vfs_write+0x548/0xa90 [ 271.182906][T10951] ksys_write+0x145/0x250 [ 271.188985][T10951] do_syscall_64+0xfa/0x3b0 [ 271.195167][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.202925][T10951] IN-SOFTIRQ-W at: [ 271.207262][T10951] lock_acquire+0x120/0x360 [ 271.213440][T10951] _raw_spin_lock_irqsave+0xa7/0xf0 [ 271.220776][T10951] serial8250_handle_irq+0x6b/0xbb0 [ 271.227858][T10951] serial8250_default_handle_irq+0xbf/0x1b0 [ 271.235908][T10951] serial8250_interrupt+0xa2/0x1d0 [ 271.242883][T10951] __handle_irq_event_percpu+0x28c/0x980 [ 271.250522][T10951] handle_irq_event+0x8b/0x1e0 [ 271.257156][T10951] handle_edge_irq+0x267/0x9c0 [ 271.263593][T10951] __common_interrupt+0x140/0x250 [ 271.270320][T10951] common_interrupt+0x5e/0xe0 [ 271.276697][T10951] asm_common_interrupt+0x26/0x40 [ 271.283533][T10951] kernel_text_address+0x28/0xe0 [ 271.290156][T10951] __kernel_text_address+0xd/0x40 [ 271.296856][T10951] unwind_get_return_address+0x4d/0x90 [ 271.303996][T10951] arch_stack_walk+0xfc/0x150 [ 271.310371][T10951] stack_trace_save+0x9c/0xe0 [ 271.316739][T10951] kasan_save_track+0x3e/0x80 [ 271.323105][T10951] kasan_save_free_info+0x46/0x50 [ 271.329799][T10951] __kasan_slab_free+0x62/0x70 [ 271.336409][T10951] kfree+0x18e/0x440 [ 271.341990][T10951] slab_free_after_rcu_debug+0x60/0x2a0 [ 271.349221][T10951] rcu_core+0xca8/0x1710 [ 271.355126][T10951] handle_softirqs+0x283/0x870 [ 271.361548][T10951] __irq_exit_rcu+0xca/0x1f0 [ 271.367794][T10951] irq_exit_rcu+0x9/0x30 [ 271.374129][T10951] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 271.381427][T10951] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.389094][T10951] pv_native_safe_halt+0x13/0x20 [ 271.395822][T10951] default_idle+0x13/0x20 [ 271.401852][T10951] default_idle_call+0x74/0xb0 [ 271.408417][T10951] do_idle+0x1e8/0x510 [ 271.414164][T10951] cpu_startup_entry+0x44/0x60 [ 271.420607][T10951] rest_init+0x2de/0x300 [ 271.426535][T10951] start_kernel+0x47d/0x500 [ 271.432730][T10951] x86_64_start_reservations+0x24/0x30 [ 271.439852][T10951] x86_64_start_kernel+0x143/0x1c0 [ 271.446655][T10951] common_startup_64+0x13e/0x147 [ 271.453270][T10951] INITIAL USE at: [ 271.457191][T10951] lock_acquire+0x120/0x360 [ 271.463305][T10951] _raw_spin_lock_irqsave+0xa7/0xf0 [ 271.470109][T10951] serial8250_do_set_termios+0x4bb/0x1c20 [ 271.477434][T10951] uart_set_options+0x3c2/0x5b0 [ 271.483899][T10951] serial8250_console_setup+0x2f4/0x3c0 [ 271.491430][T10951] univ8250_console_setup+0x43a/0x540 [ 271.498487][T10951] try_enable_preferred_console+0x4e4/0x650 [ 271.506167][T10951] register_console+0x551/0xf90 [ 271.512887][T10951] univ8250_console_init+0x52/0x90 [ 271.519619][T10951] console_init+0x1a1/0x670 [ 271.525943][T10951] start_kernel+0x2cc/0x500 [ 271.532162][T10951] x86_64_start_reservations+0x24/0x30 [ 271.539233][T10951] x86_64_start_kernel+0x143/0x1c0 [ 271.546027][T10951] common_startup_64+0x13e/0x147 [ 271.552547][T10951] } [ 271.555158][T10951] ... key at: [] port_lock_key+0x0/0x20 [ 271.562849][T10951] [ 271.562849][T10951] the dependencies between the lock to be acquired [ 271.562865][T10951] and HARDIRQ-irq-unsafe lock: [ 271.576431][T10951] -> (disc_data_lock){.+.+}-{3:3} { [ 271.581664][T10951] HARDIRQ-ON-R at: [ 271.585680][T10951] lock_acquire+0x120/0x360 [ 271.592151][T10951] _raw_read_lock+0x36/0x50 [ 271.598772][T10951] sixpack_receive_buf+0x5c/0x1450 [ 271.605584][T10951] tiocsti+0x23c/0x2c0 [ 271.611345][T10951] tty_ioctl+0x626/0xde0 [ 271.617357][T10951] __se_sys_ioctl+0xf9/0x170 [ 271.623704][T10951] do_syscall_64+0xfa/0x3b0 [ 271.629931][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.637764][T10951] SOFTIRQ-ON-R at: [ 271.641758][T10951] lock_acquire+0x120/0x360 [ 271.647944][T10951] _raw_read_lock+0x36/0x50 [ 271.654215][T10951] sixpack_receive_buf+0x5c/0x1450 [ 271.661072][T10951] tiocsti+0x23c/0x2c0 [ 271.666988][T10951] tty_ioctl+0x626/0xde0 [ 271.672971][T10951] __se_sys_ioctl+0xf9/0x170 [ 271.679368][T10951] do_syscall_64+0xfa/0x3b0 [ 271.685571][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.693580][T10951] INITIAL USE at: [ 271.697836][T10951] lock_acquire+0x120/0x360 [ 271.704033][T10951] _raw_write_lock_irq+0xa2/0xf0 [ 271.710856][T10951] sixpack_close+0x2c/0x280 [ 271.717026][T10951] tty_ldisc_kill+0xa3/0x1a0 [ 271.723189][T10951] tty_ldisc_release+0x1a4/0x200 [ 271.729733][T10951] tty_release_struct+0x2a/0xd0 [ 271.736219][T10951] tty_release+0xcb0/0x1640 [ 271.742514][T10951] __fput+0x44c/0xa70 [ 271.748123][T10951] task_work_run+0x1d4/0x260 [ 271.754400][T10951] exit_to_user_mode_loop+0xec/0x110 [ 271.761426][T10951] do_syscall_64+0x2bd/0x3b0 [ 271.767855][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.775493][T10951] INITIAL READ USE at: [ 271.779837][T10951] lock_acquire+0x120/0x360 [ 271.786380][T10951] _raw_read_lock+0x36/0x50 [ 271.793121][T10951] sixpack_receive_buf+0x5c/0x1450 [ 271.800442][T10951] tiocsti+0x23c/0x2c0 [ 271.806532][T10951] tty_ioctl+0x626/0xde0 [ 271.812887][T10951] __se_sys_ioctl+0xf9/0x170 [ 271.819489][T10951] do_syscall_64+0xfa/0x3b0 [ 271.826032][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.833961][T10951] } [ 271.836473][T10951] ... key at: [] disc_data_lock+0x18/0x100 [ 271.844411][T10951] ... acquired at: [ 271.848282][T10951] lock_acquire+0x120/0x360 [ 271.853012][T10951] _raw_read_lock+0x36/0x50 [ 271.857808][T10951] sixpack_write_wakeup+0x30/0x480 [ 271.863225][T10951] tty_wakeup+0xbb/0x100 [ 271.867758][T10951] tty_port_default_wakeup+0xa2/0xf0 [ 271.873763][T10951] serial8250_tx_chars+0x72e/0x970 [ 271.879189][T10951] __start_tx+0x33b/0x480 [ 271.883705][T10951] __uart_start+0x23f/0x440 [ 271.888385][T10951] uart_write+0xdc/0x130 [ 271.892805][T10951] sixpack_receive_buf+0x444/0x1450 [ 271.898217][T10951] tty_ldisc_receive_buf+0x116/0x160 [ 271.903713][T10951] tty_port_default_receive_buf+0x6e/0xa0 [ 271.909719][T10951] flush_to_ldisc+0x24a/0x720 [ 271.914763][T10951] process_scheduled_works+0xade/0x17b0 [ 271.920518][T10951] worker_thread+0x8a0/0xda0 [ 271.925431][T10951] kthread+0x711/0x8a0 [ 271.929894][T10951] ret_from_fork+0x3fc/0x770 [ 271.934723][T10951] ret_from_fork_asm+0x1a/0x30 [ 271.939760][T10951] [ 271.942161][T10951] [ 271.942161][T10951] stack backtrace: [ 271.948094][T10951] CPU: 0 UID: 0 PID: 10951 Comm: kworker/u8:22 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 271.948119][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.948130][T10951] Workqueue: events_unbound flush_to_ldisc [ 271.948155][T10951] Call Trace: [ 271.948165][T10951] [ 271.948172][T10951] dump_stack_lvl+0x189/0x250 [ 271.948192][T10951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.948208][T10951] ? __pfx__printk+0x10/0x10 [ 271.948230][T10951] validate_chain+0x1f05/0x2140 [ 271.948256][T10951] __lock_acquire+0xab9/0xd20 [ 271.948271][T10951] ? sixpack_write_wakeup+0x30/0x480 [ 271.948288][T10951] lock_acquire+0x120/0x360 [ 271.948300][T10951] ? sixpack_write_wakeup+0x30/0x480 [ 271.948317][T10951] ? ldsem_down_read_trylock+0x137/0x1a0 [ 271.948337][T10951] ? tty_ldisc_ref+0x1c/0x90 [ 271.948352][T10951] _raw_read_lock+0x36/0x50 [ 271.948372][T10951] ? sixpack_write_wakeup+0x30/0x480 [ 271.948387][T10951] sixpack_write_wakeup+0x30/0x480 [ 271.948405][T10951] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 271.948421][T10951] tty_wakeup+0xbb/0x100 [ 271.948435][T10951] tty_port_default_wakeup+0xa2/0xf0 [ 271.948453][T10951] serial8250_tx_chars+0x72e/0x970 [ 271.948475][T10951] __start_tx+0x33b/0x480 [ 271.948491][T10951] __uart_start+0x23f/0x440 [ 271.948507][T10951] uart_write+0xdc/0x130 [ 271.948522][T10951] sixpack_receive_buf+0x444/0x1450 [ 271.948547][T10951] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 271.948564][T10951] tty_ldisc_receive_buf+0x116/0x160 [ 271.948582][T10951] tty_port_default_receive_buf+0x6e/0xa0 [ 271.948601][T10951] flush_to_ldisc+0x24a/0x720 [ 271.948619][T10951] ? process_scheduled_works+0x9ef/0x17b0 [ 271.948634][T10951] process_scheduled_works+0xade/0x17b0 [ 271.948658][T10951] ? __pfx_process_scheduled_works+0x10/0x10 [ 271.948677][T10951] worker_thread+0x8a0/0xda0 [ 271.948701][T10951] kthread+0x711/0x8a0 [ 271.948721][T10951] ? __pfx_worker_thread+0x10/0x10 [ 271.948735][T10951] ? __pfx_kthread+0x10/0x10 [ 271.948753][T10951] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.948771][T10951] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.948791][T10951] ? __pfx_kthread+0x10/0x10 [ 271.948816][T10951] ret_from_fork+0x3fc/0x770 [ 271.948831][T10951] ? __pfx_ret_from_fork+0x10/0x10 [ 271.948846][T10951] ? __switch_to_asm+0x39/0x70 [ 271.948862][T10951] ? __switch_to_asm+0x33/0x70 [ 271.948877][T10951] ? __pfx_kthread+0x10/0x10 [ 271.948895][T10951] ret_from_fork_asm+0x1a/0x30 [ 271.948917][T10951] [ 272.264419][T10221] usb 5-1: Using ep0 maxpacket: 32 [ 272.271059][T10221] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.281323][T10221] usb 5-1: config 0 has no interface number 0 [ 272.289822][T10221] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 272.299283][T10221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.307990][T10221] usb 5-1: Product: syz [ 272.312291][T10221] usb 5-1: Manufacturer: syz [ 272.316975][T10221] usb 5-1: SerialNumber: syz [ 272.323095][T10221] usb 5-1: config 0 descriptor?? [ 272.330078][T10221] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 272.339088][T10221] usb 5-1: selecting invalid altsetting 1 [ 272.345152][T10221] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 272.353508][T10221] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 272.364641][T10221] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 272.372931][T10221] usb 5-1: media controller created [ 272.384589][T10221] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.505598][T10221] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 273.512792][T10221] zl10353_read_register: readreg error (reg=127, ret==-110) [ 273.520532][T10221] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 273.541146][T10221] usb 5-1: USB disconnect, device number 18