last executing test programs: 5.089666452s ago: executing program 0 (id=6679): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae189b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc00000000000000"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x800008, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) 3.727822639s ago: executing program 0 (id=6690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) read$alg(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0xc, 0x10c, 0x1}, {0xc, 0x0, 0x4}], 0x18}, 0x44080) 3.630246247s ago: executing program 1 (id=6691): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.619351156s ago: executing program 0 (id=6692): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') creat(&(0x7f00000001c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x20000009}) 3.37816537s ago: executing program 0 (id=6696): unshare(0x24020400) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0xb4, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_INET={0xffffffea, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x4}, {0x8, 0x1d, 0x0, 0x0, 0xd}]}}, @AF_INET={0x58, 0x2, 0x0, 0x1, {0x54, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x1ff}, {0x8, 0x13, 0x0, 0x0, 0x5}, {0x8, 0x7, 0x0, 0x0, 0x8}, {0x8, 0x1c, 0x0, 0x0, 0x2}, {0x8, 0xa, 0x0, 0x0, 0x4}, {0x8, 0x12, 0x0, 0x0, 0x10}, {0x8, 0x3, 0x0, 0x0, 0xffffffff}, {0x8, 0xc, 0x0, 0x0, 0x767}, {0x8, 0xa, 0x0, 0x0, 0x8000}, {0x8, 0x14, 0x0, 0x0, 0xfffffffa}]}}]}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0xb4}}, 0x440088c4) fsmount(r0, 0x0, 0x3) fchown(r1, 0x0, 0x0) 3.322876813s ago: executing program 1 (id=6698): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) 3.114431262s ago: executing program 1 (id=6702): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 3.064051693s ago: executing program 0 (id=6703): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1, 0x4, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x3, 0x3, 0x0, 0x80}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r1, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5771b049bdf909cda144b46a10cf11494410f9ab43cf1ecb1a22ba85aa67f7f792529888e2d06df31f9742673d169eb6d8f390b1be76b8e62faafa53dc2fdfafeaa23ee4fa47335472e258b7f112a0dd68b443098c07abc59514f8360361629de0fec584a3279415c638e99eb648a3b2e2cad0fdec3286fd8665cd454cb514663e68877479bfca8b96cc94c5ede83a6cffa9db432d908ef5d16d5afa8a498fad0feb6b0869ea52fdaa60ddb06a0a0b9d870ddf0ed534baf00079f2703dd6c7c79fcd81c9ec47110b70d"], 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x61, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0x98}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r7, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x7c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x68, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x7c}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010) 2.904502697s ago: executing program 3 (id=6706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.751268705s ago: executing program 4 (id=6709): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES64=r0], 0x1c}}, 0x0) 2.749798168s ago: executing program 3 (id=6710): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x48040) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2.627921829s ago: executing program 4 (id=6711): openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0x3, 0x8, 0x0, @rand_addr=0x64010120, @broadcast}}}, 0x22) 2.607249575s ago: executing program 3 (id=6712): syz_open_dev$vim2m(&(0x7f0000000000), 0xffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000007c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 2.478743054s ago: executing program 3 (id=6713): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x23c}}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x2}) 2.402956207s ago: executing program 2 (id=6714): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x80207450, &(0x7f0000000080)=0xffffffff) 2.396225579s ago: executing program 4 (id=6715): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x40585414, &(0x7f0000000000)) 2.389570715s ago: executing program 3 (id=6716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) recvmsg$can_j1939(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1}, 0x2000) 2.284505693s ago: executing program 2 (id=6717): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) 2.267698173s ago: executing program 3 (id=6718): r0 = syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0xfffffff7, 0xa02) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r6, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x7, 0x9, 0x0, 0x6, 0x2e9e}, &(0x7f0000000000)=0x98) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0), 0x2000000}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x6a040000) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000200), 0x0) 2.26720407s ago: executing program 4 (id=6719): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28031, 0xffffffffffffffff, 0x1f15d000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup(r1) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000340)) 1.963948622s ago: executing program 2 (id=6720): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.506975749s ago: executing program 1 (id=6721): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x2, 0x40000101, 0x0) 1.136602904s ago: executing program 2 (id=6722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) 1.079940215s ago: executing program 4 (id=6723): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/6, 0x6}, {0x0}], 0x2}}], 0x1, 0x600000a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) 928.534653ms ago: executing program 2 (id=6724): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 619.086278ms ago: executing program 1 (id=6725): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e1d}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 545.387169ms ago: executing program 1 (id=6726): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae189b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x192}}, 0x20}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x800008, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) 411.169381ms ago: executing program 2 (id=6727): r0 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) 89.057622ms ago: executing program 4 (id=6728): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x10) r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000001e40)={0x2020}, 0x4) 0s ago: executing program 0 (id=6729): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 9331][ T5935] usb 4-1: USB disconnect, device number 10 [ 2793.511735][ T2276] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5782'. [ 2793.982179][ T2292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2794.016584][ T2292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2794.314010][ T2302] netlink: 'syz.4.5791': attribute type 2 has an invalid length. [ 2795.024086][ T5935] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2795.137888][ T2311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5796'. [ 2795.198023][ T5935] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2795.221732][ T5935] usb 4-1: config 0 has no interface number 0 [ 2795.286198][ T5935] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2795.296837][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2795.367932][ T5935] usb 4-1: Product: syz [ 2795.379584][ T5935] usb 4-1: Manufacturer: syz [ 2795.405036][ T5935] usb 4-1: SerialNumber: syz [ 2795.431858][ T5935] usb 4-1: config 0 descriptor?? [ 2795.607671][ T2317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5797'. [ 2795.655666][ T5935] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2795.837037][ T2319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'. [ 2796.111087][ T5935] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2796.166317][ T5935] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2796.186635][ T5935] usb 4-1: media controller created [ 2796.237866][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2796.384442][ T5935] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2796.384752][ T6003] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2796.572136][ T6003] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 2796.590130][ T6003] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 2796.610231][ T6003] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2796.634338][ T6003] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2796.660618][ T6003] usb 5-1: config 0 has no interface number 0 [ 2796.690653][ T6003] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2796.713208][ T6003] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2796.724734][ T5935] usb 4-1: USB disconnect, device number 11 [ 2796.797611][ T6003] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2796.840096][ T6003] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2796.884947][ T6003] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2796.917898][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2796.959711][ T6003] usb 5-1: config 0 descriptor?? [ 2796.976081][ T6003] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2797.206232][ T5935] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2797.231242][ T6003] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 2797.256473][ T6003] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2797.267386][ T6003] usb 5-1: MIDIStreaming interface descriptor not found [ 2797.384033][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 2797.406901][ T5935] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2797.416351][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2797.425233][ T5935] usb 4-1: Product: syz [ 2797.429595][ T5935] usb 4-1: Manufacturer: syz [ 2797.440860][ T5935] usb 4-1: SerialNumber: syz [ 2797.482032][ T6003] usb 5-1: USB disconnect, device number 7 [ 2797.488568][ T5935] usb 4-1: config 0 descriptor?? [ 2797.547860][ T5935] gspca_main: se401-2.14.0 probing 047d:5003 [ 2797.822226][ T2334] tap0: tun_chr_ioctl cmd 1074025677 [ 2797.828253][ T2334] tap0: linktype set to 0 [ 2797.896732][ T5935] gspca_se401: ExtraFeatures: 18 [ 2798.508680][ T5935] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input164 [ 2798.580323][ T5935] usb 4-1: USB disconnect, device number 12 [ 2798.737313][ T2352] netlink: 'syz.4.5810': attribute type 2 has an invalid length. [ 2800.036129][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2800.104082][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2800.184953][ T6003] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2800.346253][ T6003] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2800.373390][ T6003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2800.391397][ T6003] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2800.392370][ T2386] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 2800.411137][ T5935] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2800.425061][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2800.439424][ T6003] usb 5-1: SerialNumber: syz [ 2800.584979][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 2800.707806][ T5935] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 2800.720968][ T6003] usb 5-1: 0:2 : does not exist [ 2800.857424][ T56] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2800.883619][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2800.891904][ T56] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2800.908308][ T5935] usb 3-1: Product: syz [ 2800.908764][ T6003] usb 5-1: USB disconnect, device number 8 [ 2800.925778][ T56] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2800.940887][ T5935] usb 3-1: Manufacturer: syz [ 2800.949626][ T5935] usb 3-1: SerialNumber: syz [ 2800.997161][T32202] udevd[32202]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2801.024859][ T56] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2801.056428][ T5935] usb 3-1: config 0 descriptor?? [ 2801.078224][ T5935] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 2801.280986][ T5935] gspca_sn9c2028: read1 error -32 [ 2801.336713][ T5935] gspca_sn9c2028: read1 error -32 [ 2801.567688][ T5935] usb 3-1: USB disconnect, device number 4 [ 2801.642042][ T2409] binfmt_misc: register: failed to install interpreter file ./file0 [ 2802.114285][ T6003] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2802.125648][ T2426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2802.137295][ T2426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2802.275690][ T6003] usb 5-1: Using ep0 maxpacket: 16 [ 2802.285259][ T6003] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2802.295383][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.303384][ T6003] usb 5-1: Product: syz [ 2802.308375][ T6003] usb 5-1: Manufacturer: syz [ 2802.313069][ T6003] usb 5-1: SerialNumber: syz [ 2802.322639][ T6003] usb 5-1: config 0 descriptor?? [ 2802.332556][ T6003] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2802.342147][ T6003] usb 5-1: Detected FT232H [ 2802.453939][T20087] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2802.623745][T20087] usb 3-1: Using ep0 maxpacket: 8 [ 2802.639287][T20087] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2802.654919][T20087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2802.678299][T20087] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2802.714808][T20087] pvrusb2: ********** [ 2802.723959][T20087] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2802.804742][T20087] pvrusb2: Important functionality might not be entirely working. [ 2802.858511][ T6003] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2802.861221][T20087] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2802.878835][T20087] pvrusb2: ********** [ 2802.899041][ T2346] pvrusb2: Invalid write control endpoint [ 2802.976711][ T6003] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 2803.044991][ T6003] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2803.491073][ T5926] usb 3-1: USB disconnect, device number 5 [ 2803.524637][ T6003] usb 5-1: USB disconnect, device number 9 [ 2803.545088][ T6003] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2803.578357][ T6003] ftdi_sio 5-1:0.0: device disconnected [ 2803.626148][ T2346] pvrusb2: Invalid write control endpoint [ 2803.658085][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2803.717199][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2803.733662][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2803.776439][ T2346] pvrusb2: Device being rendered inoperable [ 2803.792980][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2803.816279][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2803.850926][ T2346] pvrusb2: Attached sub-driver cx25840 [ 2803.858371][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2803.884061][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2804.229430][ T2460] delete_channel: no stack [ 2805.325702][ T2485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2805.369607][ T2485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2805.834777][ T5926] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2805.994219][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 2806.009593][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2806.042801][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2806.106381][ T5926] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 2806.122473][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2806.506543][ T5926] usb 3-1: config 0 descriptor?? [ 2807.016015][ T5926] ntrig 0003:1B96:0008.0054: bogus close delimiter [ 2807.022551][ T5926] ntrig 0003:1B96:0008.0054: item 0 2 2 10 parsing failed [ 2807.040163][ T5926] ntrig 0003:1B96:0008.0054: parse failed [ 2807.064721][ T5926] ntrig 0003:1B96:0008.0054: probe with driver ntrig failed with error -22 [ 2807.192853][ T5926] usb 3-1: USB disconnect, device number 6 [ 2808.575412][ T2519] netlink: 'syz.2.5861': attribute type 7 has an invalid length. [ 2808.583190][ T2519] netlink: 'syz.2.5861': attribute type 8 has an invalid length. [ 2809.673817][ T5935] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2809.833805][T20087] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2809.841497][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 2809.850709][ T5935] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2809.860865][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2809.869092][ T5935] usb 4-1: Product: syz [ 2809.873272][ T5935] usb 4-1: Manufacturer: syz [ 2809.879523][ T5935] usb 4-1: SerialNumber: syz [ 2809.886575][ T5935] usb 4-1: config 0 descriptor?? [ 2810.013766][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2810.023274][T20087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2810.034888][T20087] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2810.044482][T20087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2810.056728][T20087] usb 5-1: config 0 descriptor?? [ 2810.183900][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 2810.193231][ T5872] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2810.202627][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2810.210920][ T5872] usb 2-1: Product: syz [ 2810.215308][ T5872] usb 2-1: Manufacturer: syz [ 2810.219952][ T5872] usb 2-1: SerialNumber: syz [ 2810.227586][ T5872] usb 2-1: config 0 descriptor?? [ 2810.235818][ T5872] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2810.245060][ T5872] usb 2-1: Detected FT232H [ 2810.271017][T20087] usbhid 5-1:0.0: can't add hid device: -71 [ 2810.277323][T20087] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2810.289000][T20087] usb 5-1: USB disconnect, device number 10 [ 2810.301267][ T5935] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2810.313154][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2810.328686][ T5935] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2810.337549][ T5935] usb 4-1: media controller created [ 2810.367478][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2810.452140][ T2570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'. [ 2810.501743][ T5935] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2810.511157][ T5935] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2810.732417][ T5872] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2810.759760][ T5872] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 2810.885006][T20087] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2810.898905][ T5872] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2810.904907][ T5926] usb 4-1: USB disconnect, device number 13 [ 2810.917726][ T5872] usb 2-1: USB disconnect, device number 3 [ 2810.941031][ T5872] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2810.956229][ T5872] ftdi_sio 2-1:0.0: device disconnected [ 2810.986677][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2811.154893][T20087] usb 5-1: Using ep0 maxpacket: 16 [ 2811.547002][T20087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2811.560992][T20087] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2811.576179][T20087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2811.658147][T20087] usb 5-1: config 0 descriptor?? [ 2812.024850][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2812.090458][ T2598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5885'. [ 2812.119018][T20087] kye 0003:0458:5016.0055: control desc unexpectedly large [ 2812.168590][T20087] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0055/input/input165 [ 2812.196049][ T5926] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2812.205739][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2812.333006][ T5926] usb 3-1: config 0 descriptor?? [ 2812.351492][ T5926] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2812.416765][T20087] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0055/input/input166 [ 2812.555911][T20087] kye 0003:0458:5016.0055: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 2812.810852][ T5926] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 2813.009789][ T5926] gspca_cpia1: usb_control_msg 01, error -32 [ 2813.018814][ T2604] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2813.038083][ T5926] gspca_cpia1: usb_control_msg 01, error -71 [ 2813.332225][ T779] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2813.349561][ T779] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2813.365679][ T5926] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 2813.366608][T20087] usb 5-1: USB disconnect, device number 11 [ 2813.379569][ T779] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2813.396599][ T5926] usb 3-1: USB disconnect, device number 7 [ 2813.418095][ T779] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2815.764814][ T6003] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2815.925189][ T6003] usb 3-1: Using ep0 maxpacket: 16 [ 2815.932369][ T6003] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2816.065924][ T6003] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2816.073462][ T6003] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2816.085166][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2816.529551][ T6003] usb 3-1: config 0 descriptor?? [ 2817.044981][ T6003] nzxt-smart2 0003:1E71:2009.0056: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 2817.401267][ T6003] usb 3-1: USB disconnect, device number 8 [ 2817.439069][ T2679] fido_id[2679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2818.050950][ T2699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5910'. [ 2818.221604][ T982] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2818.436520][ T982] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2818.446783][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2818.462751][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2818.482367][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2818.502788][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2818.511016][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2818.550223][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2818.702144][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2818.733679][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2818.742155][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2818.774595][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2818.813610][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2818.846424][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2818.866211][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2818.935321][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2818.945678][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2818.954797][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2818.996231][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2819.235853][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2819.245471][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2819.268390][ T2721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2819.283663][T20087] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2819.297827][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2819.316271][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2819.331376][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2819.344014][ T2721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2819.356916][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2819.393185][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2819.435700][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2819.449957][T20087] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2819.504753][T20087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2819.534604][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2819.557736][T20087] usb 3-1: Product: syz [ 2819.566223][T20087] usb 3-1: Manufacturer: syz [ 2819.571723][ T982] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2819.593873][ T982] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2819.602427][T20087] usb 3-1: SerialNumber: syz [ 2819.617420][T20087] usb 3-1: config 0 descriptor?? [ 2819.622617][ T982] usb 2-1: Product: syz [ 2819.628315][ T982] usb 2-1: Manufacturer: syz [ 2819.640595][T20087] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 009 [ 2819.650734][ T982] usb 2-1: SerialNumber: syz [ 2819.659724][ T982] usb 2-1: config 0 descriptor?? [ 2819.685389][ T982] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2819.956997][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 2819.957501][ T5926] usb 2-1: USB disconnect, device number 4 [ 2819.995164][ T5926] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2820.034703][T20087] (null): failure reading functionality [ 2820.048935][T20087] i2c i2c-2: connected i2c-tiny-usb device [ 2820.252844][ T5926] usb 3-1: USB disconnect, device number 9 [ 2820.515032][ T2729] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5919'. [ 2821.570493][T20087] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2821.793719][T20087] usb 5-1: Using ep0 maxpacket: 16 [ 2821.802625][T20087] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2821.812268][T20087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2821.821040][T20087] usb 5-1: Product: syz [ 2821.843102][T20087] usb 5-1: Manufacturer: syz [ 2821.861410][T20087] usb 5-1: SerialNumber: syz [ 2821.903235][T20087] usb 5-1: config 0 descriptor?? [ 2821.917022][T20087] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2821.925867][T20087] usb 5-1: Detected FT232H [ 2823.191016][T20087] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2823.198594][T20087] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 2823.214676][T20087] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2823.233509][T20087] usb 5-1: USB disconnect, device number 12 [ 2823.270184][T20087] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2823.320911][T20087] ftdi_sio 5-1:0.0: device disconnected [ 2823.433236][ T6003] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2823.599759][ T6003] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2823.617884][ T6003] usb 4-1: config 0 has no interface number 0 [ 2823.629600][ T6003] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2823.639427][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2823.658244][ T6003] usb 4-1: Product: syz [ 2823.662429][ T6003] usb 4-1: Manufacturer: syz [ 2823.669200][ T6003] usb 4-1: SerialNumber: syz [ 2823.689041][ T6003] usb 4-1: config 0 descriptor?? [ 2823.922660][ T6003] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2823.988785][ T6003] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2824.004490][ T6003] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2824.012787][ T6003] usb 4-1: media controller created [ 2824.088525][ T6003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2824.161019][T26464] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2824.181340][T26464] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2824.213487][T26464] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2824.235116][ T6003] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2824.245241][T26464] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2824.341255][ T6003] usb 4-1: USB disconnect, device number 14 [ 2824.532789][ T2808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5942'. [ 2827.034787][ T6003] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2827.164743][ T5926] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 2827.190098][ T6003] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2827.199831][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2827.232954][ T6003] usb 4-1: Product: syz [ 2827.254541][ T6003] usb 4-1: Manufacturer: syz [ 2827.265309][ T6003] usb 4-1: SerialNumber: syz [ 2827.326486][ T5926] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2827.346320][ T6003] usb 4-1: config 0 descriptor?? [ 2827.351423][ T5926] usb 5-1: config 0 has no interface number 0 [ 2827.376733][ T6003] ch341 4-1:0.0: ch341-uart converter detected [ 2827.388666][ T5926] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2827.433986][ T5926] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2827.480442][ T5926] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2827.534767][ T5926] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2827.547781][ T5926] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2827.598906][ T5926] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2827.618420][ T5926] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2827.628722][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2827.641757][ T5926] usb 5-1: config 0 descriptor?? [ 2827.649056][ T2834] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2827.658986][ T2834] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2827.689579][ T5926] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2827.957873][ T5926] usb 5-1: USB disconnect, device number 13 [ 2827.969569][ T5926] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2828.110345][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5958'. [ 2828.198531][ T6003] usb 4-1: failed to send control message: -71 [ 2828.211783][ T6003] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2828.224449][ T982] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2828.261447][ T6003] usb 4-1: USB disconnect, device number 15 [ 2828.273018][ T6003] ch341 4-1:0.0: device disconnected [ 2828.394364][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 2828.403953][ T982] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2828.414612][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2828.429180][ T982] usb 2-1: config 0 descriptor?? [ 2828.443268][ T982] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2829.193743][T20087] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2829.373932][T20087] usb 3-1: Using ep0 maxpacket: 16 [ 2829.433625][ T982] gspca_vc032x: reg_w err -71 [ 2829.438185][T26464] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2829.438589][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.452140][T26464] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2829.454036][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.470111][T26464] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2829.472067][T20087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2829.480778][T26464] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2829.513954][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.524050][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.529409][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.934049][T20087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2829.944067][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.950981][T20087] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2829.964043][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.969710][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2829.976433][T20087] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2829.986037][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.001954][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.008085][T20087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2830.016419][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.026792][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.032821][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.043136][T20087] usb 3-1: config 0 descriptor?? [ 2830.071991][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.082168][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.101911][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.126829][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.154639][ T982] gspca_vc032x: I2c Bus Busy Wait 00 [ 2830.171249][ T982] gspca_vc032x: Unknown sensor... [ 2830.185726][ T982] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2830.246640][ T982] usb 2-1: USB disconnect, device number 5 [ 2830.487145][T20087] shield 0003:0955:7214.0057: unknown main item tag 0x0 [ 2830.495897][T20087] shield 0003:0955:7214.0057: item fetching failed at offset 2/5 [ 2830.511370][T20087] shield 0003:0955:7214.0057: Parse failed [ 2830.522713][T20087] shield 0003:0955:7214.0057: probe with driver shield failed with error -22 [ 2830.770351][T20087] usb 3-1: USB disconnect, device number 10 [ 2830.786346][ T982] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2830.943750][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 2830.951234][ T982] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2830.984820][ T982] usb 2-1: config 179 has no interface number 0 [ 2831.000440][ T982] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2831.018075][ T982] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2831.032095][ T982] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2831.046298][ T982] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2831.058542][ T982] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2831.081566][ T982] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2831.097953][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2831.137812][ T2899] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2831.171427][ T2901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2831.201219][ T2901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2831.394478][ T982] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input167 [ 2831.587730][ T982] usb 2-1: USB disconnect, device number 6 [ 2831.593845][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2831.593905][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2832.575398][ T2908] netlink: 'syz.2.5970': attribute type 7 has an invalid length. [ 2832.632040][ T2908] netlink: 'syz.2.5970': attribute type 8 has an invalid length. [ 2832.672013][ T2921] netlink: 428 bytes leftover after parsing attributes in process `syz.4.5973'. [ 2832.774781][ T6003] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2832.819751][ T2921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5973'. [ 2832.934282][ T6003] usb 2-1: Using ep0 maxpacket: 32 [ 2832.941347][ T6003] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2832.950098][ T6003] usb 2-1: config 0 has no interface number 0 [ 2832.980605][ T6003] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2833.032362][ T6003] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2833.045641][ T6003] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2833.055511][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2833.078611][ T6003] usb 2-1: config 0 descriptor?? [ 2833.579903][ T2936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5977'. [ 2833.850219][ T6003] uclogic 0003:28BD:0094.0058: pen parameters not found [ 2833.871947][ T6003] uclogic 0003:28BD:0094.0058: interface is invalid, ignoring [ 2833.995285][ T6003] usb 2-1: USB disconnect, device number 7 [ 2836.375565][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.381936][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.021071][ T3005] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6003'. [ 2837.130360][ T3007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6002'. [ 2837.143080][ T3007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2837.688822][ T3020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6006'. [ 2837.836087][T20087] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2837.996255][T20087] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2838.038440][T20087] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2838.076412][T20087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2838.200943][T20087] usb 4-1: config 0 descriptor?? [ 2838.236082][T20087] pwc: Askey VC010 type 2 USB webcam detected. [ 2838.555087][ T6003] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2838.638608][T20087] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2838.718676][ T6003] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2838.734696][ T6003] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2838.782358][ T6003] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2838.808027][ T6003] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2838.839140][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2838.862647][ T6003] usb 3-1: config 0 descriptor?? [ 2838.867935][T20087] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2838.869964][T20087] pwc: recv_control_msg error -71 req 04 val 1000 [ 2838.889349][T20087] pwc: recv_control_msg error -71 req 04 val 1300 [ 2838.901586][T20087] pwc: recv_control_msg error -71 req 04 val 1400 [ 2838.910074][T20087] pwc: recv_control_msg error -71 req 02 val 2000 [ 2838.919566][T20087] pwc: recv_control_msg error -71 req 02 val 2100 [ 2838.927543][T20087] pwc: recv_control_msg error -71 req 04 val 1500 [ 2838.937799][T20087] pwc: recv_control_msg error -71 req 02 val 2500 [ 2838.952799][T20087] pwc: recv_control_msg error -71 req 02 val 2400 [ 2838.968824][T20087] pwc: recv_control_msg error -71 req 02 val 2600 [ 2838.977674][T20087] pwc: recv_control_msg error -71 req 02 val 2900 [ 2838.984434][ T982] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2838.995767][T20087] pwc: recv_control_msg error -71 req 02 val 2800 [ 2839.003083][T20087] pwc: recv_control_msg error -71 req 04 val 1100 [ 2839.011365][T20087] pwc: recv_control_msg error -71 req 04 val 1200 [ 2839.023918][T20087] pwc: Registered as video103. [ 2839.048250][T20087] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input168 [ 2839.086526][T20087] usb 4-1: USB disconnect, device number 16 [ 2839.166651][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 2839.188309][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2839.199934][ T982] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2839.218681][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2839.239263][ T982] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2839.257256][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2839.276189][ T982] usb 5-1: config 0 descriptor?? [ 2839.371249][ T6003] kye 0003:0458:501A.0059: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2839.452660][ T6003] kye 0003:0458:501A.0059: hidraw0: USB HID v0.05 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 2839.506583][ T6003] kye 0003:0458:501A.0059: tablet-enabling feature report not found [ 2839.530711][ T6003] kye 0003:0458:501A.0059: tablet enabling failed [ 2839.573211][ T6003] usb 3-1: USB disconnect, device number 11 [ 2839.711006][ T3055] fido_id[3055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2839.741746][ T982] cougar 0003:060B:500A.005A: unexpected long global item [ 2839.762835][ T982] cougar 0003:060B:500A.005A: parse failed [ 2839.787274][ T982] cougar 0003:060B:500A.005A: probe with driver cougar failed with error -22 [ 2839.905729][ T982] usb 5-1: USB disconnect, device number 14 [ 2840.694770][ T6003] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2840.848107][ T6003] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2840.892758][ T6003] usb 4-1: config 6 has an invalid interface number: 158 but max is 0 [ 2840.913337][ T6003] usb 4-1: config 6 has no interface number 0 [ 2840.920805][ T6003] usb 4-1: config 6 interface 158 has no altsetting 0 [ 2840.971915][ T6003] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 2840.982756][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2840.996141][ T6003] usb 4-1: Product: syz [ 2841.000346][ T6003] usb 4-1: Manufacturer: syz [ 2841.028420][ T6003] usb 4-1: SerialNumber: syz [ 2841.103980][T20087] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2841.254127][T20087] usb 5-1: Using ep0 maxpacket: 16 [ 2841.261961][T20087] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2841.285618][T20087] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2841.298135][T20087] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2841.309969][T20087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2841.322049][T20087] usb 5-1: Product: syz [ 2841.327210][T20087] usb 5-1: Manufacturer: syz [ 2841.332219][T20087] usb 5-1: SerialNumber: syz [ 2841.554815][ T5926] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2841.574835][T27322] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2841.714294][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 2841.722780][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2841.738027][T27322] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2841.747926][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2841.760488][T27322] usb 3-1: config 0 has no interface number 0 [ 2841.771927][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2841.785294][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2841.786202][T20087] usb 5-1: 0:2 : does not exist [ 2841.798401][T27322] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2841.811427][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2841.825768][T27322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2841.835891][T27322] usb 3-1: Product: syz [ 2841.840358][T27322] usb 3-1: Manufacturer: syz [ 2841.848186][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2841.859162][ T5926] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2841.868275][T27322] usb 3-1: SerialNumber: syz [ 2841.877551][T27322] usb 3-1: config 0 descriptor?? [ 2841.882619][ T5926] usb 2-1: Manufacturer: syz [ 2841.895635][ T5926] usb 2-1: config 0 descriptor?? [ 2842.060560][ T6003] rtsx_usb 4-1:6.158: probe with driver rtsx_usb failed with error -71 [ 2842.082330][ T6003] usb 4-1: USB disconnect, device number 17 [ 2842.097800][T27322] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2842.127840][T27322] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2842.141305][T27322] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2842.151649][T27322] usb 3-1: media controller created [ 2842.191721][T27322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2842.211522][T20087] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2842.224880][ T5926] rc_core: IR keymap rc-hauppauge not found [ 2842.231089][ T5926] Registered IR keymap rc-empty [ 2842.239687][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.260100][T20087] usb 5-1: USB disconnect, device number 15 [ 2842.265122][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.290046][T32202] udevd[32202]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2842.308693][T27322] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2842.320041][ T5926] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2842.370300][ T5926] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input169 [ 2842.405987][T27322] usb 3-1: USB disconnect, device number 12 [ 2842.427355][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.456615][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.505875][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.524416][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.545229][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.564810][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.585127][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.605382][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.626475][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.654468][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2842.677197][ T5926] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2842.687129][ T5926] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2842.706314][ T5926] usb 2-1: USB disconnect, device number 8 [ 2842.873720][T20087] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2843.024017][T20087] usb 4-1: Using ep0 maxpacket: 16 [ 2843.040538][T20087] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2843.057332][T20087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2843.072335][T20087] usb 4-1: Product: syz [ 2843.082384][T20087] usb 4-1: Manufacturer: syz [ 2843.092815][T20087] usb 4-1: SerialNumber: syz [ 2843.108527][T20087] usb 4-1: config 0 descriptor?? [ 2843.123486][T20087] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2843.606880][ T3121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2843.626033][ T3121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2843.943958][T20087] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 2843.979352][T20087] usb 4-1: USB disconnect, device number 18 [ 2844.073666][ T982] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2844.276717][ T982] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2844.293389][ T982] usb 2-1: config 0 has no interface number 0 [ 2844.317855][ T982] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2844.445743][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2844.505279][ T982] usb 2-1: Product: syz [ 2844.515994][ T982] usb 2-1: Manufacturer: syz [ 2844.532567][ T982] usb 2-1: SerialNumber: syz [ 2844.552991][ T982] usb 2-1: config 0 descriptor?? [ 2844.808201][ T982] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2844.839016][ T982] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2844.929270][ T982] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2844.937687][ T3154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6061'. [ 2844.947921][ T982] usb 2-1: media controller created [ 2845.012934][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2845.136452][ T982] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 2845.275951][ T982] usb 2-1: USB disconnect, device number 9 [ 2846.002206][ T3178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6068'. [ 2851.396323][ T982] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2852.085926][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 2852.150531][ T982] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 2852.274290][ T982] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 2852.287118][ T982] usb 4-1: config 0 has no interface number 0 [ 2852.293238][ T982] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2852.704987][ T982] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2853.218710][ T982] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2853.233931][ T982] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2853.243337][ T982] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 2853.267853][ T3298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2853.278930][ T982] usb 4-1: Product: syz [ 2853.287273][ T3298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2853.381581][ T982] usb 4-1: Manufacturer: syz [ 2853.408111][ T982] usb 4-1: config 0 descriptor?? [ 2853.416449][ T3277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2853.857419][ T3301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2854.032936][ T982] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input170 [ 2854.254439][ T982] usb 4-1: USB disconnect, device number 19 [ 2854.260446][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2854.348347][ T3313] netem: invalid attributes len -3 [ 2854.367531][ T3313] netem: change failed [ 2854.475362][T27322] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2854.634889][T27322] usb 5-1: Using ep0 maxpacket: 16 [ 2854.651063][T27322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2854.663815][ T5935] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2854.664776][T27322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2854.682329][T27322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2854.702981][T27322] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2854.714569][T27322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2854.730254][T27322] usb 5-1: config 0 descriptor?? [ 2854.824140][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 2854.838516][ T5935] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2854.883741][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2854.891815][ T5935] usb 2-1: Product: syz [ 2854.921563][ T5935] usb 2-1: Manufacturer: syz [ 2854.943650][ T5935] usb 2-1: SerialNumber: syz [ 2854.966869][ T5935] usb 2-1: config 0 descriptor?? [ 2855.005030][ T5935] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2855.013115][ T5935] usb 2-1: setting power ON [ 2855.098176][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 2855.576563][T27322] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 2855.625566][T27322] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 2855.644331][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2855.652661][T27322] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 2855.664870][ T5935] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2855.675752][ T5935] usb 2-1: media controller created [ 2855.699756][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2855.721551][ T5935] usb 2-1: selecting invalid altsetting 6 [ 2855.727533][ T5935] usb 2-1: digital interface selection failed (-22) [ 2855.734381][ T5935] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2855.855072][T27322] microsoft 0003:045E:07DA.005B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2855.865344][ T5935] usb 2-1: setting power OFF [ 2855.871925][T27322] microsoft 0003:045E:07DA.005B: no inputs found [ 2855.900344][T27322] microsoft 0003:045E:07DA.005B: could not initialize ff, continuing anyway [ 2855.929893][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 2855.949746][ T5935] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2855.955046][T27322] usb 5-1: USB disconnect, device number 16 [ 2856.013693][ T5935] (NULL device *): no alternate interface [ 2856.092792][ T3335] fido_id[3335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2856.318335][ T5935] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2856.403928][ T5935] usb 2-1: USB disconnect, device number 10 [ 2856.425099][T32202] udevd[32202]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory [ 2856.460920][T32202] udevd[32202]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 2856.744488][ T5935] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2856.901749][ T3367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2856.912955][ T3367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2856.946956][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 2856.969609][ T5935] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2856.987630][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2856.995806][ T5935] usb 2-1: Product: syz [ 2857.004352][ T5935] usb 2-1: Manufacturer: syz [ 2857.012408][ T5935] usb 2-1: SerialNumber: syz [ 2857.025751][ T5935] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2857.034650][ T5935] r8152-cfgselector 2-1: config 0 descriptor?? [ 2857.074483][T27322] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2857.229796][T27322] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2857.241244][T27322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.277816][T27322] usb 3-1: Product: syz [ 2857.290401][T27322] usb 3-1: Manufacturer: syz [ 2857.322576][T27322] usb 3-1: SerialNumber: syz [ 2857.356383][T27322] usb 3-1: config 0 descriptor?? [ 2857.585793][ T3372] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6142'. [ 2857.596846][ T3372] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6142'. [ 2857.602734][ T5935] usb 3-1: USB disconnect, device number 13 [ 2857.705321][T20087] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 2857.933905][ T30] audit: type=1326 audit(1755008938.833:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2857.973115][ T30] audit: type=1326 audit(1755008938.833:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2858.017879][ T30] audit: type=1326 audit(1755008938.833:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2858.041589][ T30] audit: type=1326 audit(1755008938.833:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2858.064496][ T30] audit: type=1326 audit(1755008938.843:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2858.087363][ T30] audit: type=1326 audit(1755008938.843:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2858.127110][ T30] audit: type=1326 audit(1755008938.843:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2858.151809][ T30] audit: type=1326 audit(1755008938.843:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2858.199553][ T30] audit: type=1326 audit(1755008938.843:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3383 comm="syz.4.6148" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2859.053689][ T5935] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 2859.089923][ T3423] netlink: 'syz.0.6160': attribute type 9 has an invalid length. [ 2859.334095][ T5935] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 2859.344320][ T5935] usb 5-1: config 0 has no interface number 0 [ 2859.385744][ T5935] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 2859.398552][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2859.473791][ T5935] usb 5-1: Product: syz [ 2859.497578][ T5935] usb 5-1: Manufacturer: syz [ 2859.590625][ T5935] usb 5-1: SerialNumber: syz [ 2859.790300][ T5935] usb 5-1: config 0 descriptor?? [ 2860.014632][ T5935] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 2860.084956][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2860.106370][ T5935] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 2860.134754][ T5935] usb 5-1: media controller created [ 2860.158749][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2860.357602][ T5935] DVB: Unable to find symbol dib7000p_attach() [ 2860.376912][ T5935] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 2860.410272][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2860.450815][ T5935] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 2860.480439][ T5935] usb 5-1: media controller created [ 2860.505174][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2860.638722][ T5935] dib0700: the master dib7090 has to be initialized first [ 2860.688227][ T5935] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 2860.883682][ T5935] rc_core: IR keymap rc-dib0700-rc5 not found [ 2860.913606][ T5935] Registered IR keymap rc-empty [ 2860.931631][ T5935] dvb-usb: could not initialize remote control. [ 2860.965159][ T5935] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 2861.007983][ T5935] usb 5-1: USB disconnect, device number 17 [ 2861.142041][ T5935] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 2861.493755][ T5935] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2861.529879][ T3465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6172'. [ 2861.654594][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 2861.662314][ T5935] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2861.674444][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2861.706995][ T5935] usb 5-1: config 0 descriptor?? [ 2861.739737][ T30] audit: type=1326 audit(1755008942.643:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3466 comm="syz.3.6173" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16539 code=0x0 [ 2861.970408][ T5935] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2862.006826][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2862.096243][ T5935] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2862.120920][ T5935] usb 5-1: media controller created [ 2862.142276][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2862.181778][ T5935] az6027: usb out operation failed. (-71) [ 2862.202180][ T5935] az6027: usb out operation failed. (-71) [ 2862.222515][ T5935] stb0899_attach: Driver disabled by Kconfig [ 2862.241701][ T5935] az6027: no front-end attached [ 2862.241701][ T5935] [ 2862.266288][ T5935] az6027: usb out operation failed. (-71) [ 2862.279426][ T5935] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2862.297516][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input173 [ 2862.340266][ T5935] dvb-usb: schedule remote query interval to 400 msecs. [ 2862.456681][ T5935] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2862.486167][ T5935] usb 5-1: USB disconnect, device number 18 [ 2862.598466][ T5935] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2862.964630][T27322] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2863.316604][T27322] usb 3-1: Using ep0 maxpacket: 16 [ 2863.330355][T27322] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2863.340311][T27322] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2863.357303][T27322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2863.386914][T27322] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2863.413351][T27322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.455422][T27322] usb 3-1: Product: syz [ 2863.463488][T27322] usb 3-1: Manufacturer: syz [ 2863.530653][T27322] usb 3-1: SerialNumber: syz [ 2864.274590][T27322] usb 3-1: 0:2 : does not exist [ 2864.578669][T27322] usb 3-1: USB disconnect, device number 14 [ 2864.653396][T32202] udevd[32202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2865.071700][ T3514] netlink: 'syz.3.6188': attribute type 1 has an invalid length. [ 2866.289823][ T3542] tap0: tun_chr_ioctl cmd 2147767521 [ 2866.686415][ T3548] input: syz1 as /devices/virtual/input/input174 [ 2867.370038][ T3559] C: renamed from team_slave_0 [ 2867.436886][ T3559] netlink: 'syz.2.6203': attribute type 4 has an invalid length. [ 2867.476831][ T3559] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6203'. [ 2867.488571][ T3559] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2867.770713][ T3567] netlink: 'syz.4.6204': attribute type 7 has an invalid length. [ 2867.867055][ T3567] netlink: 'syz.4.6204': attribute type 8 has an invalid length. [ 2868.173680][ T982] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2868.333648][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 2868.345866][ T982] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2868.360398][ T982] usb 3-1: config 0 has no interface number 0 [ 2868.409026][ T982] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2868.473250][ T982] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2868.496621][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.564491][ T982] usb 3-1: Product: syz [ 2868.573441][ T982] usb 3-1: Manufacturer: syz [ 2868.579427][ T982] usb 3-1: SerialNumber: syz [ 2868.599811][ T982] usb 3-1: config 0 descriptor?? [ 2868.613071][ T982] f81534 3-1:0.12: required endpoints missing [ 2868.897911][ T6003] usb 3-1: USB disconnect, device number 15 [ 2869.120677][ T3577] tap0: tun_chr_ioctl cmd 1074025677 [ 2869.129516][ T3577] tap0: linktype set to 804 [ 2869.358342][ T3587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.377124][ T3587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2871.334744][ T6003] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 2871.507931][ T6003] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 2871.527413][ T6003] usb 5-1: config 4 has no interface number 0 [ 2871.554437][ T6003] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2871.604742][ T6003] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 2871.648077][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2871.683920][ T6003] usb 5-1: Product: syz [ 2871.688504][ T6003] usb 5-1: Manufacturer: syz [ 2871.694567][ T6003] usb 5-1: SerialNumber: syz [ 2872.148411][ T6003] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 2872.301647][ T6003] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2872.321777][ T6003] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 2872.349557][ T6003] usb 5-1: media controller created [ 2872.376349][ T6003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2872.721252][ T6003] DVB: Unable to find symbol dib7000p_attach() [ 2872.784702][ T6003] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 2872.934757][ T6003] rc_core: IR keymap rc-dib0700-rc5 not found [ 2872.940987][ T6003] Registered IR keymap rc-empty [ 2872.954835][ T6003] dvb-usb: could not initialize remote control. [ 2873.071039][ T6003] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 2873.417084][ T6003] dib0700: There's no endpoint for remote controller [ 2873.588112][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6239'. [ 2873.854744][ T5935] usb 5-1: USB disconnect, device number 19 [ 2873.899979][ T5935] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 2874.409542][ T3687] input: syz1 as /devices/virtual/input/input176 [ 2874.544733][ T5935] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2874.703741][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 2874.712597][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2874.727050][ T5935] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 2874.738291][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2874.752259][ T5935] usb 3-1: config 0 descriptor?? [ 2875.318113][ T5935] pantherlord 0003:0E8F:0003.005C: unknown main item tag 0x0 [ 2875.342263][ T5935] pantherlord 0003:0E8F:0003.005C: unknown main item tag 0x0 [ 2875.367024][ T5935] pantherlord 0003:0E8F:0003.005C: report_id 0 is invalid [ 2875.388647][ T5935] pantherlord 0003:0E8F:0003.005C: item 0 1 1 8 parsing failed [ 2875.425920][ T5935] pantherlord 0003:0E8F:0003.005C: parse failed [ 2875.432366][ T5935] pantherlord 0003:0E8F:0003.005C: probe with driver pantherlord failed with error -22 [ 2875.509642][ T5935] usb 3-1: USB disconnect, device number 16 [ 2875.584700][ T6003] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2876.017091][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2876.056462][ T6003] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2876.100843][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2876.271335][ T6003] usb 4-1: config 0 descriptor?? [ 2876.543697][ T5935] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2876.574706][ T6003] usbhid 4-1:0.0: can't add hid device: -71 [ 2876.580744][ T6003] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2876.614935][ T6003] usb 4-1: USB disconnect, device number 20 [ 2876.738654][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2876.782623][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2876.833488][ T5935] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2876.851557][ T3720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2876.865706][ T3720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2876.873201][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2876.900032][ T5935] usb 3-1: config 0 descriptor?? [ 2877.122642][ T6003] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2877.295115][ T6003] usb 4-1: Using ep0 maxpacket: 16 [ 2877.302801][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2877.316419][ T6003] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2877.331785][ T5935] sony 0003:054C:024B.005D: unexpected long global item [ 2877.339648][ T5935] sony 0003:054C:024B.005D: parse failed [ 2877.348913][ T5935] sony 0003:054C:024B.005D: probe with driver sony failed with error -22 [ 2877.526408][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.536679][ T5935] usb 3-1: USB disconnect, device number 17 [ 2877.584550][ T6003] usb 4-1: config 0 descriptor?? [ 2877.630930][ T3724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6262'. [ 2878.039141][ T6003] kye 0003:0458:5016.005E: control desc unexpectedly large [ 2878.107562][ T6003] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.005E/input/input177 [ 2878.235137][ T6003] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.005E/input/input178 [ 2878.345737][ T3743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2878.365801][ T6003] kye 0003:0458:5016.005E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 2878.407026][ T3743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2878.703790][ T5935] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2878.865751][ T5935] usb 2-1: config 0 has no interfaces? [ 2878.872348][ T5935] usb 2-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 2878.882448][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2878.892002][ T6003] usb 4-1: USB disconnect, device number 21 [ 2878.900059][ T5935] usb 2-1: config 0 descriptor?? [ 2879.116147][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.128231][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2879.148436][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.158949][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2879.170835][ T5935] usb 2-1: USB disconnect, device number 12 [ 2879.736578][ T5935] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 2879.930617][T20087] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2879.942109][ T5935] usb 2-1: config index 0 descriptor too short (expected 72, got 36) [ 2879.951598][ T5935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2879.970325][ T5935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2879.988122][ T5935] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2880.441882][T20087] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2880.668120][T20087] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2880.701754][T20087] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2880.816609][ T5935] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 2880.843102][T20087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.862236][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.893680][ T5935] usb 2-1: Product: syz [ 2880.911003][ T5935] usb 2-1: Manufacturer: syz [ 2880.918686][ T5935] usb 2-1: SerialNumber: syz [ 2881.125803][T20087] usb 5-1: usb_control_msg returned -32 [ 2881.143505][T20087] usbtmc 5-1:16.0: can't read capabilities [ 2881.279234][ T5935] usb 2-1: USB disconnect, device number 13 [ 2881.550988][ T3798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2881.561943][ T3798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2881.943642][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6289'. [ 2882.425123][ T3827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2882.437251][ T3827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2882.656567][ T5935] usb 5-1: USB disconnect, device number 20 [ 2883.092387][ T3845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2883.181927][ T3845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2883.542892][ T3851] macsec2: entered promiscuous mode [ 2883.571899][ T3851] macsec2: entered allmulticast mode [ 2883.687234][ T3851] dummy0: entered allmulticast mode [ 2883.752910][ T3851] dummy0: left allmulticast mode [ 2884.355074][ T3868] tmpfs: Unknown parameter '^ÔÝ+ŠÁ*áOi²” ŒD‰#î£ã•"Ð%%¸°œ·¿ Ä|YxV.NöÒ‰jn_RŸ½äñ÷¿ïúØ:‚PÅä¶÷ˆçÒÃs.ºKÔ³ñ•ú¥Ç]xá°µ¢eJæ¢èX{¥¤Ý½­J(/öR‰nÓ…?g…"58Pv!m \ú½Ò" ˲®Öèº k²oͳhîþÀßD¾Þ›&Â{‚T–ŒZá”ú/ì&ÿ' [ 2884.504526][ T3870] cgroup: fork rejected by pids controller in /syz3 [ 2884.766854][ T3876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6312'. [ 2884.833649][T20087] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 2885.047274][T20087] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2885.066460][T20087] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2885.177354][T20087] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2885.203119][T20087] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2885.233521][T20087] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2885.282983][T20087] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2885.340548][T20087] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2885.359998][T20087] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2885.386735][T20087] usb 3-1: Product: syz [ 2885.414629][T20087] usb 3-1: Manufacturer: syz [ 2885.448527][T20087] usb 3-1: SerialNumber: syz [ 2885.518389][T20087] usb 3-1: config 0 descriptor?? [ 2885.535467][ T3877] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2885.552346][T20087] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2885.608287][T20087] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2885.785824][T20087] usb 3-1: USB disconnect, device number 18 [ 2885.793268][T20087] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2885.927560][T16808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2885.979460][T16808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2886.138405][T16808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2886.164852][T16808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2886.398160][T16808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2886.455392][T16808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2886.638425][T16808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2886.745526][T16808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 2887.369342][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6325'. [ 2887.737845][ T1426] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2887.750347][ T1426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2887.764953][ T1426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2887.776369][ T1426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2887.803730][ T1426] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2887.813876][T20087] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2887.858983][T16344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2887.877527][T16344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2887.889707][T16344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2887.902708][T16344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2887.925846][T16344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2887.971545][T20087] usb 2-1: Using ep0 maxpacket: 32 [ 2887.989281][T20087] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2888.048868][T20087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.117154][T20087] usb 2-1: config 0 descriptor?? [ 2888.179251][T20087] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2888.297178][ T3917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2888.342878][ T3917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2888.453715][ T982] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2888.743786][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 2889.267382][ T982] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2889.276787][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.293725][ T982] usb 5-1: Product: syz [ 2889.305973][ T982] usb 5-1: Manufacturer: syz [ 2889.321025][ T982] usb 5-1: SerialNumber: syz [ 2889.345302][ T982] usb 5-1: config 0 descriptor?? [ 2889.372908][ T3933] sctp: [Deprecated]: syz.0.6331 (pid 3933) Use of int in max_burst socket option. [ 2889.372908][ T3933] Use struct sctp_assoc_value instead [ 2889.375835][ T982] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2889.518767][T20087] gspca_sq930x: ucbus_write failed -71 [ 2889.526781][T20087] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 2889.564473][T20087] usb 2-1: USB disconnect, device number 14 [ 2889.971919][T16344] Bluetooth: hci1: command tx timeout [ 2890.149046][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6332'. [ 2890.182688][ T982] gspca_sq930x: ucbus_write failed -71 [ 2890.493652][ T982] gspca_sq930x: Sensor ov9630 not yet treated [ 2890.499910][ T982] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 2890.602453][ T982] usb 5-1: USB disconnect, device number 21 [ 2891.194507][ T982] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2891.383842][ T982] usb 5-1: Using ep0 maxpacket: 32 [ 2891.395638][ T982] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2891.407750][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2891.418402][ T982] usb 5-1: Product: syz [ 2891.427917][ T982] usb 5-1: Manufacturer: syz [ 2891.441741][ T982] usb 5-1: SerialNumber: syz [ 2891.469918][ T982] usb 5-1: config 0 descriptor?? [ 2891.486657][ T982] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2891.645583][T16808] dvmrp0 (unregistering): left allmulticast mode [ 2892.043912][T16344] Bluetooth: hci1: command tx timeout [ 2892.167529][T16808] bond1 (unregistering): Released all slaves [ 2892.428016][T16808] bond0 (unregistering): Released all slaves [ 2892.492659][ T982] gspca_ov534_9: reg_w failed -71 [ 2892.558279][T16808] : left promiscuous mode [ 2892.679845][T16808] tipc: Disabling bearer [ 2892.689689][T16808] tipc: Disabling bearer [ 2892.701250][T16808] tipc: Left network mode [ 2892.834000][ T982] gspca_ov534_9: Unknown sensor 0000 [ 2892.834093][ T982] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2892.847852][ T3911] chnl_net:caif_netlink_parms(): no params data found [ 2892.875403][ T982] usb 5-1: USB disconnect, device number 22 [ 2893.249906][ T5935] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2893.275543][ T3911] bridge0: port 1(bridge_slave_0) entered blocking state [ 2893.309244][ T3911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2893.337789][ T3911] bridge_slave_0: entered allmulticast mode [ 2893.366659][ T3911] bridge_slave_0: entered promiscuous mode [ 2893.394881][ T3911] bridge0: port 2(bridge_slave_1) entered blocking state [ 2893.402141][ T3911] bridge0: port 2(bridge_slave_1) entered disabled state [ 2893.426386][ T3911] bridge_slave_1: entered allmulticast mode [ 2893.434216][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 2893.441582][ T3911] bridge_slave_1: entered promiscuous mode [ 2893.461715][ T5935] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 2893.478185][ T5935] usb 2-1: config 8 has no interface number 0 [ 2893.509727][ T5935] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 2893.532076][ T5935] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2893.554128][ T5935] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 2893.585767][ T5935] usb 2-1: config 8 interface 39 has no altsetting 0 [ 2893.614546][ T5935] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2893.630985][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2893.656030][ T3911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2893.673720][ T5935] usb 2-1: Product: syz [ 2893.678726][ T5935] usb 2-1: Manufacturer: syz [ 2893.703875][ T5935] usb 2-1: SerialNumber: syz [ 2893.756921][ T3911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2893.958161][ T3911] team0: Port device team_slave_0 added [ 2894.037986][ T3911] team0: Port device team_slave_1 added [ 2894.124499][T16344] Bluetooth: hci1: command tx timeout [ 2894.232476][ T3911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2894.243712][ T3911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2894.322466][ T3911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2894.357844][ T5935] ipheth 2-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 2894.402140][ T3911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2894.409325][ T3911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2894.455701][ T3911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2894.457645][ T4005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6346'. [ 2894.489769][ T5935] ipheth 2-1:8.39: Apple iPhone USB Ethernet device attached [ 2894.580951][ T30] audit: type=1326 audit(1755008975.473:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2894.654838][ T5935] usb 2-1: USB disconnect, device number 15 [ 2894.753933][ T30] audit: type=1326 audit(1755008975.473:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2894.804183][ T30] audit: type=1326 audit(1755008975.473:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2894.873651][ T30] audit: type=1326 audit(1755008975.543:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2894.900091][ T30] audit: type=1326 audit(1755008975.543:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2895.035206][ T30] audit: type=1326 audit(1755008975.543:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2895.058126][ T30] audit: type=1326 audit(1755008975.543:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2895.066396][ T4013] netlink: 'syz.0.6345': attribute type 2 has an invalid length. [ 2895.102056][ T30] audit: type=1326 audit(1755008975.543:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2895.142406][ T30] audit: type=1326 audit(1755008975.543:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2895.192875][ T5935] ipheth 2-1:8.39: Apple iPhone USB Ethernet now disconnected [ 2895.245812][ T3911] hsr_slave_0: entered promiscuous mode [ 2895.364801][ T3911] hsr_slave_1: entered promiscuous mode [ 2895.370678][ T30] audit: type=1326 audit(1755008975.543:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4008 comm="syz.4.6347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 2895.634508][ T5935] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2895.837297][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2895.848617][ T5935] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2895.902013][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2895.978720][ T5935] usb 2-1: config 0 descriptor?? [ 2896.070408][T16808] veth1_macvtap: left promiscuous mode [ 2896.088357][T16808] veth0_macvtap: left promiscuous mode [ 2896.208425][T16344] Bluetooth: hci1: command tx timeout [ 2896.238131][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 2896.252378][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2896.310879][ T5935] usb 2-1: USB disconnect, device number 16 [ 2896.574440][T16808] pimreg (unregistering): left allmulticast mode [ 2896.637783][T16808] pim6reg (unregistering): left allmulticast mode [ 2896.803731][ T5935] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2896.977476][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 2897.002061][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2897.013756][ T5935] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2897.022908][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2897.038284][ T5935] usb 2-1: config 0 descriptor?? [ 2897.054637][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6352'. [ 2897.462327][ T5935] kye 0003:0458:5016.005F: control desc unexpectedly large [ 2897.491570][ T5935] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.005F/input/input180 [ 2897.600587][ T5935] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.005F/input/input181 [ 2897.702454][ T5935] kye 0003:0458:5016.005F: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 2897.827017][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.833457][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.260133][ T5935] usb 2-1: USB disconnect, device number 17 [ 2899.053232][T16808] IPVS: stop unused estimator thread 0... [ 2899.075490][T27322] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2899.254154][T27322] usb 3-1: Using ep0 maxpacket: 32 [ 2899.270009][T27322] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2899.307694][T27322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2899.346565][T27322] usb 3-1: config 0 descriptor?? [ 2899.657647][T27322] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2899.702844][T27322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2899.702936][ T30] kauditd_printk_skb: 953 callbacks suppressed [ 2899.702950][ T30] audit: type=1326 audit(1755008980.603:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 2899.810117][T27322] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2899.832732][T27322] usb 3-1: media controller created [ 2899.885741][ T30] audit: type=1326 audit(1755008980.603:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2899.919368][T27322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2900.012983][ T30] audit: type=1326 audit(1755008980.643:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 2900.134664][T27322] az6027: usb out operation failed. (-71) [ 2900.164224][T27322] az6027: usb out operation failed. (-71) [ 2900.169992][T27322] stb0899_attach: Driver disabled by Kconfig [ 2900.186937][ T30] audit: type=1326 audit(1755008980.643:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2900.227574][T27322] az6027: no front-end attached [ 2900.227574][T27322] [ 2900.243352][ T30] audit: type=1326 audit(1755008980.643:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 2900.284186][T27322] az6027: usb out operation failed. (-71) [ 2900.292633][T27322] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2900.306396][T27322] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input182 [ 2900.324168][ T30] audit: type=1326 audit(1755008980.643:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2900.372169][ T30] audit: type=1326 audit(1755008980.643:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 2900.396219][T27322] dvb-usb: schedule remote query interval to 400 msecs. [ 2900.403208][T27322] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2900.475594][T27322] usb 3-1: USB disconnect, device number 19 [ 2900.496442][ T3911] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2900.513068][ T30] audit: type=1326 audit(1755008980.643:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2900.602672][ T3911] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2900.610143][ T30] audit: type=1326 audit(1755008980.643:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000 [ 2900.669264][T27322] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2900.690334][ T3911] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2900.729718][ T30] audit: type=1326 audit(1755008980.653:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4069 comm="syz.1.6358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2900.786099][ T3911] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2901.076229][ T3911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2901.183440][ T3911] 8021q: adding VLAN 0 to HW filter on device team0 [ 2901.234397][T16808] bridge0: port 1(bridge_slave_0) entered blocking state [ 2901.241531][T16808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2901.271537][T16808] bridge0: port 2(bridge_slave_1) entered blocking state [ 2901.278721][T16808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2902.143982][T27322] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2902.183048][ T3911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2902.214419][ T5926] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2902.310682][ T3911] veth0_vlan: entered promiscuous mode [ 2902.317765][T27322] usb 2-1: Using ep0 maxpacket: 8 [ 2902.329499][T27322] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2902.339860][T27322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2902.357995][T27322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2902.378502][ T5926] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2902.389031][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.414537][T27322] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2902.447496][ T5926] usb 5-1: config 0 descriptor?? [ 2902.464375][T27322] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2902.479990][ T5926] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2902.493779][T27322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.557875][ T3911] veth1_vlan: entered promiscuous mode [ 2902.748332][T27322] usb 2-1: GET_CAPABILITIES returned 0 [ 2902.758132][ T3911] veth0_macvtap: entered promiscuous mode [ 2902.768693][T27322] usbtmc 2-1:16.0: can't read capabilities [ 2902.816892][ T3911] veth1_macvtap: entered promiscuous mode [ 2902.869983][ T5926] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 2902.954028][ T3911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2902.983516][ T3911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2903.057665][T26464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.075749][ T982] usb 2-1: USB disconnect, device number 18 [ 2903.081974][T26464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.171106][T26464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.200538][T26464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.445840][T25243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2903.474106][T25243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2903.498848][ T5926] gspca_cpia1: usb_control_msg 05, error -71 [ 2903.514935][ T5926] cpia1 5-1:0.0: unexpected systemstate: 00 [ 2903.555083][ T5926] usb 5-1: USB disconnect, device number 23 [ 2903.647067][T26464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2903.666230][T26464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2904.193688][ T3375] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 2904.370050][ T3375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2904.400976][ T3375] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2904.454136][ T3375] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2904.477709][ T3375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2904.507487][ T3375] usb 4-1: config 0 descriptor?? [ 2904.538562][ T3375] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2904.561478][ T3375] dvb-usb: bulk message failed: -22 (3/0) [ 2904.587487][ T3375] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2904.629551][ T3375] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2904.683844][ T3375] usb 4-1: media controller created [ 2904.721240][ T3375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2904.782774][ T3375] dvb-usb: bulk message failed: -22 (6/0) [ 2904.831758][ T3375] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2904.876898][ T3375] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input183 [ 2904.944527][ T3375] dvb-usb: schedule remote query interval to 150 msecs. [ 2904.973743][ T3375] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2905.135241][ T3375] dvb-usb: bulk message failed: -22 (1/0) [ 2905.373869][ T3375] dvb-usb: error while querying for an remote control event. [ 2905.438974][ T4165] netlink: 'syz.1.6374': attribute type 7 has an invalid length. [ 2905.506470][ T4165] netlink: 'syz.1.6374': attribute type 8 has an invalid length. [ 2905.533736][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 2905.549516][ T5935] dvb-usb: error while querying for an remote control event. [ 2905.733677][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 2905.739592][ T5935] dvb-usb: error while querying for an remote control event. [ 2905.903745][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 2905.909672][ T5935] dvb-usb: error while querying for an remote control event. [ 2905.924004][ T6003] usb 4-1: USB disconnect, device number 22 [ 2906.264918][ T6003] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2907.361652][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6388'. [ 2909.335614][ T5935] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2909.506448][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2909.538872][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2909.594624][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2909.673381][ T5935] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2909.718104][ T4255] syzkaller1: entered promiscuous mode [ 2909.728112][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2909.738202][ T4255] syzkaller1: entered allmulticast mode [ 2909.804456][ T5935] usb 2-1: config 0 descriptor?? [ 2910.321147][ T5935] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2910.576961][ T5935] usb 2-1: USB disconnect, device number 19 [ 2910.673493][ T4275] hsr0: entered promiscuous mode [ 2910.696139][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'. [ 2910.768357][ T4275] hsr_slave_0: left promiscuous mode [ 2910.804556][ T4275] hsr_slave_1: left promiscuous mode [ 2910.913424][ T4275] hsr0 (unregistering): left promiscuous mode [ 2910.922341][ T4287] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2912.602349][ T4349] syzkaller1: entered promiscuous mode [ 2912.616828][ T4349] syzkaller1: entered allmulticast mode [ 2913.513117][ T4372] loop6: detected capacity change from 0 to 63 [ 2913.596386][ T4372] buffer_io_error: 9 callbacks suppressed [ 2913.596405][ T4372] Buffer I/O error on dev loop6, logical block 0, async page read [ 2913.647028][ T4372] Buffer I/O error on dev loop6, logical block 1, async page read [ 2913.693333][ T4373] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 2913.734224][ T4374] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 2913.761644][ T4373] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 2913.781094][ T4373] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 2913.896752][ T4374] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 2913.923854][ T4374] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 2913.938117][ T4374] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 2913.962295][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2913.975605][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2913.991293][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2914.001317][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2914.512241][ T4390] loop6: detected capacity change from 0 to 63 [ 2914.552199][T32268] Buffer I/O error on dev loop6, logical block 0, async page read [ 2914.775810][ T3375] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2914.937056][ T3375] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2914.973747][ T3375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2914.986577][ T3375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2915.008227][ T3375] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2915.033685][ T3375] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2915.042765][ T3375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2915.076753][ T3375] usb 4-1: config 0 descriptor?? [ 2915.251122][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6457'. [ 2915.294186][ T6003] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2915.366104][ T4420] sctp: [Deprecated]: syz.2.6459 (pid 4420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2915.366104][ T4420] Use struct sctp_sack_info instead [ 2915.466315][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 2915.476360][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2915.485311][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2915.504456][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2915.506704][ T3375] plantronics 0003:047F:FFFF.0061: ignoring exceeding usage max [ 2915.538646][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2915.560942][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2915.623997][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6460'. [ 2915.654115][ T3375] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2915.655308][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2915.655359][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2915.655385][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2915.655410][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2915.655436][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2915.660091][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2916.208944][ T4436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6464'. [ 2916.245412][ T4436] netlink: 'syz.1.6464': attribute type 7 has an invalid length. [ 2916.265801][ T4437] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2916.272949][ T4436] netlink: 'syz.1.6464': attribute type 8 has an invalid length. [ 2916.310551][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2916.315311][ T4436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6464'. [ 2916.322924][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2916.378311][ T4436] erspan0: entered promiscuous mode [ 2916.486756][ T4436] erspan0: left promiscuous mode [ 2917.001196][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2917.014333][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2917.029190][ T6003] usb 5-1: string descriptor 0 read error: -22 [ 2917.036537][ T6003] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2917.046525][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2917.083131][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6468'. [ 2917.117163][ T6003] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2917.129722][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6469'. [ 2917.164362][ T4447] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 2917.214108][ T5935] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2917.466981][ T5935] usb 5-1: USB disconnect, device number 24 [ 2917.685535][ T4467] veth0_to_hsr: entered allmulticast mode [ 2917.692342][ T4467] veth0_to_hsr: left allmulticast mode [ 2917.704480][T25243] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2917.736329][T20087] usb 4-1: USB disconnect, device number 23 [ 2918.213884][T20087] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2918.263330][ T30] kauditd_printk_skb: 494 callbacks suppressed [ 2918.263343][ T30] audit: type=1326 audit(1755008999.163:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.3.6488" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 2918.764131][T25243] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2918.773257][T25243] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2919.439652][T20087] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2919.854293][T27322] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2920.012014][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6500'. [ 2920.027059][T27322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2920.044391][T27322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2920.071530][T27322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2920.088967][ T4518] ipvlan2: entered promiscuous mode [ 2920.118955][T27322] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2920.134147][T27322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2920.185323][T27322] usb 3-1: config 0 descriptor?? [ 2920.362460][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6505'. [ 2920.650176][T27322] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2920.696889][ T6003] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2920.985430][T27322] usb 3-1: USB disconnect, device number 20 [ 2921.178687][ T4540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6509'. [ 2921.187949][ T4540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6509'. [ 2921.363689][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6510'. [ 2922.431719][ T4569] netlink: 'syz.4.6520': attribute type 1 has an invalid length. [ 2922.763868][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2923.022786][ T4586] raw-gadget.1 gadget.0: failed to queue suspend event [ 2923.773952][ T6003] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2923.926222][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2923.937878][ T6003] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2923.949001][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2923.960699][ T6003] usb 4-1: config 0 descriptor?? [ 2924.172989][ T6003] usbhid 4-1:0.0: can't add hid device: -71 [ 2924.179918][ T6003] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2924.191709][ T6003] usb 4-1: USB disconnect, device number 24 [ 2924.624814][ T3375] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2924.783707][ T3375] usb 4-1: Using ep0 maxpacket: 16 [ 2924.795571][ T3375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2924.827260][ T3375] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2924.840531][ T3375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2924.861391][ T3375] usb 4-1: config 0 descriptor?? [ 2925.299506][ T3375] kye 0003:0458:5016.0063: control desc unexpectedly large [ 2925.322050][ T3375] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0063/input/input185 [ 2925.424875][ T3375] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0063/input/input186 [ 2925.509547][ T3375] kye 0003:0458:5016.0063: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 2926.053464][ T4618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6530'. [ 2926.149729][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6542'. [ 2926.173110][ T6003] usb 4-1: USB disconnect, device number 25 [ 2926.334213][T27322] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2926.486678][T27322] usb 2-1: Using ep0 maxpacket: 16 [ 2926.494917][T27322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2926.528744][T27322] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2926.552342][T27322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2926.588644][T27322] usb 2-1: config 0 descriptor?? [ 2927.050207][T27322] mcp2221 0003:04D8:00DD.0064: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2927.284083][ T3375] usb 2-1: USB disconnect, device number 21 [ 2927.314031][ T5935] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2927.475546][ T5935] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 2927.487963][ T5935] usb 3-1: config 0 has no interface number 0 [ 2927.494890][ T5935] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2927.512703][ T5935] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2927.526888][ T5935] usb 3-1: config 0 interface 255 has no altsetting 0 [ 2927.533777][ T5935] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2927.543147][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2927.554018][ T5935] usb 3-1: config 0 descriptor?? [ 2927.562440][ T5935] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 2927.703806][ T5872] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2927.766096][ T5935] usb 3-1: USB disconnect, device number 21 [ 2927.905951][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2927.919196][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2927.931888][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2927.952459][ T5872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2927.985274][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2928.038339][ T5872] usb 4-1: config 0 descriptor?? [ 2928.324238][ T6003] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2928.484177][ T6003] usb 2-1: Using ep0 maxpacket: 8 [ 2928.495917][ T5872] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2928.520435][ T6003] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2928.549569][ T6003] usb 2-1: config 4 interface 0 has no altsetting 0 [ 2928.574806][ T6003] usb 2-1: string descriptor 0 read error: -22 [ 2928.590807][ T6003] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2928.618482][ T6003] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2928.637294][ T6003] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2928.659383][ T6003] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2928.681512][ T6003] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2928.705832][ T6003] usb 2-1: media controller created [ 2928.725879][ T5935] usb 4-1: USB disconnect, device number 26 [ 2928.757304][ T6003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2928.839748][ T6003] zl10353_read_register: readreg error (reg=127, ret==0) [ 2928.855511][ T5872] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2928.885471][ T6003] usb 2-1: USB disconnect, device number 22 [ 2929.025787][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2929.037023][ T5872] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2929.046744][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2929.067421][ T5872] usb 3-1: config 0 descriptor?? [ 2929.106662][ T4685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2929.116960][ T4685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2929.284590][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 2929.291073][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2929.301628][ T5872] usb 3-1: USB disconnect, device number 22 [ 2929.744223][T27322] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2929.905607][T27322] usb 3-1: Using ep0 maxpacket: 16 [ 2929.927589][T27322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2930.045816][T27322] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2930.214198][T27322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.302222][T27322] usb 3-1: config 0 descriptor?? [ 2930.443782][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2930.489008][ T4707] syzkaller1: entered promiscuous mode [ 2930.522293][ T4707] syzkaller1: entered allmulticast mode [ 2930.739357][ T4711] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6577'. [ 2930.960195][T27322] kye 0003:0458:5016.0066: control desc unexpectedly large [ 2930.984808][T27322] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0066/input/input187 [ 2931.042747][T27322] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0066/input/input188 [ 2931.123973][ T5926] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 2931.162338][T27322] kye 0003:0458:5016.0066: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 2931.549019][ T5926] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2931.560585][ T5926] usb 5-1: config 0 has no interface number 0 [ 2931.870086][ T5926] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2931.946430][ T5926] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2931.994248][ T5926] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2932.035930][ T5926] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2932.066948][ T5926] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2932.079890][ T4730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6562'. [ 2932.110100][ T5926] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2932.146505][ T5926] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2932.193283][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.218934][ T1742] usb 3-1: USB disconnect, device number 23 [ 2932.278961][ T5926] usb 5-1: config 0 descriptor?? [ 2932.340001][ T4713] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2932.385258][ T4713] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2932.406310][ T5926] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2932.786592][ T1742] usb 5-1: USB disconnect, device number 25 [ 2932.787744][ T30] audit: type=1800 audit(1755009013.683:7633): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6578" name="file1" dev="tmpfs" ino=6819 res=0 errno=0 [ 2932.906002][ T1742] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2933.074165][ T4755] input: syz1 as /devices/virtual/input/input189 [ 2934.480383][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'. [ 2935.392963][ T30] audit: type=1326 audit(1755009016.293:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.447512][ T30] audit: type=1326 audit(1755009016.293:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.471344][ T30] audit: type=1326 audit(1755009016.323:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.500583][ T30] audit: type=1326 audit(1755009016.323:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.524634][ T30] audit: type=1326 audit(1755009016.323:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.550243][ T30] audit: type=1326 audit(1755009016.333:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.577899][ T30] audit: type=1326 audit(1755009016.333:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.615207][ T3375] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2935.634349][ T30] audit: type=1326 audit(1755009016.333:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.659566][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2935.669619][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2935.680812][ T30] audit: type=1326 audit(1755009016.333:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4791 comm="syz.1.6601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc4539 code=0x7ffc0000 [ 2935.786875][ T3375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2935.798866][ T3375] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2935.810249][ T3375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2935.827966][ T3375] usb 5-1: config 0 descriptor?? [ 2936.051157][ T3375] usbhid 5-1:0.0: can't add hid device: -71 [ 2936.059921][ T3375] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2936.090384][ T3375] usb 5-1: USB disconnect, device number 26 [ 2936.603974][ T3375] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2936.962439][ T3375] usb 5-1: Using ep0 maxpacket: 16 [ 2936.975063][ T3375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2936.987862][ T3375] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2937.070463][ T3375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.085315][ T3375] usb 5-1: config 0 descriptor?? [ 2937.510833][ T3375] kye 0003:0458:5016.0067: control desc unexpectedly large [ 2937.567912][ T3375] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0067/input/input190 [ 2937.698523][ T3375] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0067/input/input191 [ 2937.822774][ T3375] kye 0003:0458:5016.0067: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 2937.846518][ T4828] syzkaller1: entered promiscuous mode [ 2937.880893][ T4828] syzkaller1: entered allmulticast mode [ 2937.914172][ T5935] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2938.100690][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 2938.108300][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2938.120852][ T5935] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2938.130552][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2938.183370][ T5935] usb 2-1: config 0 descriptor?? [ 2938.387741][ T4834] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6600'. [ 2938.412356][ T5935] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 2938.434651][ T5926] usb 5-1: USB disconnect, device number 27 [ 2938.616118][ T1742] usb 2-1: USB disconnect, device number 23 [ 2938.776326][ T4863] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2940.329103][ T4905] netlink: 'syz.2.6638': attribute type 7 has an invalid length. [ 2940.447275][ T4905] netlink: 'syz.2.6638': attribute type 8 has an invalid length. [ 2941.037078][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 2941.037097][ T30] audit: type=1804 audit(1755009021.943:7864): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6642" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=140600 res=1 errno=0 [ 2941.410382][ T4927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6644'. [ 2941.793755][ T5935] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2941.954081][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 2941.961709][ T5935] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2941.972539][ T5935] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2941.998059][ T5935] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2942.127154][ T5935] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2942.150671][ T5935] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2942.210128][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.514583][ T5935] usb 4-1: GET_CAPABILITIES returned 0 [ 2942.527909][ T5935] usbtmc 4-1:16.0: can't read capabilities [ 2942.677755][ T4942] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 2942.772384][ T5935] usb 4-1: USB disconnect, device number 27 [ 2942.852040][ T4944] netlink: 'syz.0.6650': attribute type 16 has an invalid length. [ 2942.877073][ T4944] netlink: 'syz.0.6650': attribute type 3 has an invalid length. [ 2942.915851][ T4944] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.6650'. [ 2943.118909][ T4957] vxcan0: tx drop: invalid da for name 0x0000000080000001 [ 2943.532888][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6659'. [ 2943.734312][ T5926] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2943.837640][ T4990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2943.849649][ T4990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2943.874395][ T1742] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2943.894835][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 2943.901952][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2943.912047][ T5926] usb 5-1: config 4 interface 0 has no altsetting 0 [ 2943.922422][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 2943.930659][ T5926] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2943.967754][ T5926] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2943.988234][ T4994] netlink: 'syz.1.6667': attribute type 7 has an invalid length. [ 2943.996427][ T4994] netlink: 'syz.1.6667': attribute type 8 has an invalid length. [ 2944.024194][ T1742] usb 4-1: Using ep0 maxpacket: 8 [ 2944.040150][ T1742] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2944.060319][ T1742] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2944.078050][ T5926] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2944.105897][ T5926] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2944.120552][ T1742] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2944.137090][ T5926] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2944.150100][ T1742] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2944.160519][ T5926] usb 5-1: media controller created [ 2944.253261][ T1742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2944.270167][ T1742] usb 4-1: Product: syz [ 2944.285697][ T1742] usb 4-1: Manufacturer: syz [ 2944.296483][ T1742] usb 4-1: SerialNumber: syz [ 2944.306696][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2944.321493][ T4982] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2944.439149][ T4996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2944.465899][ T4996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2944.536137][ T1742] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 2944.639001][ T5935] usb 5-1: USB disconnect, device number 28 [ 2944.740774][ C1] usblp0: nonzero read bulk status received: -71 [ 2944.749720][ T4982] usblp0: error -71 reading from printer [ 2944.758680][ C1] usblp0: nonzero read bulk status received: -71 [ 2944.768030][ T5872] usb 4-1: USB disconnect, device number 28 [ 2944.777942][ T5872] usblp0: removed [ 2945.089247][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6673'. [ 2945.100845][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6673'. [ 2945.111954][ T5002] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6673'. [ 2945.122595][ T5002] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6673'. [ 2945.606837][ T5023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6679'. [ 2945.803802][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2946.196725][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6687'. [ 2947.662178][ T5088] netlink: 'syz.0.6703': attribute type 7 has an invalid length. [ 2947.711217][ T5088] netlink: 'syz.0.6703': attribute type 8 has an invalid length. [ 2947.866413][ T5100] syzkaller1: entered promiscuous mode [ 2947.879998][ T5100] syzkaller1: entered allmulticast mode [ 2948.227440][ T3375] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 2948.262001][ T3375] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2950.429443][ T5150] [ 2950.431820][ T5150] ===================================================== [ 2950.438742][ T5150] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2950.446204][ T5150] 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 Not tainted [ 2950.453321][ T5150] ----------------------------------------------------- [ 2950.460237][ T5150] syz.0.6729/5150 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2950.467908][ T5150] ffff88805995b8a0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2950.476607][ T5150] [ 2950.476607][ T5150] and this task is already holding: [ 2950.483957][ T5150] ffff888024235028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2950.493694][ T5150] which would create a new lock dependency: [ 2950.499564][ T5150] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2950.507651][ T5150] [ 2950.507651][ T5150] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2950.517082][ T5150] (&dev->event_lock#2){..-.}-{3:3} [ 2950.517113][ T5150] [ 2950.517113][ T5150] ... which became SOFTIRQ-irq-safe at: [ 2950.529980][ T5150] lock_acquire+0x120/0x360 [ 2950.534573][ T5150] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2950.539875][ T5150] input_event+0x76/0xe0 [ 2950.544208][ T5150] hidinput_report_event+0xa1/0x100 [ 2950.549488][ T5150] hid_report_raw_event+0x148b/0x16d0 [ 2950.554941][ T5150] hid_input_report+0x43e/0x520 [ 2950.559881][ T5150] hid_irq_in+0x47e/0x6d0 [ 2950.564372][ T5150] __usb_hcd_giveback_urb+0x41a/0x690 [ 2950.570175][ T5150] dummy_timer+0x862/0x4550 [ 2950.574762][ T5150] __hrtimer_run_queues+0x52c/0xc60 [ 2950.580032][ T5150] hrtimer_run_softirq+0x187/0x2b0 [ 2950.585215][ T5150] handle_softirqs+0x283/0x870 [ 2950.590048][ T5150] __irq_exit_rcu+0xca/0x1f0 [ 2950.594798][ T5150] irq_exit_rcu+0x9/0x30 [ 2950.599115][ T5150] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2950.604831][ T5150] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2950.610883][ T5150] finish_task_switch+0x26b/0x950 [ 2950.615991][ T5150] __schedule+0x17a0/0x4cc0 [ 2950.620570][ T5150] preempt_schedule_common+0x83/0xd0 [ 2950.625935][ T5150] preempt_schedule+0xae/0xc0 [ 2950.630686][ T5150] preempt_schedule_thunk+0x16/0x30 [ 2950.635963][ T5150] _raw_spin_unlock_irq+0x45/0x50 [ 2950.641105][ T5150] usb_hcd_submit_urb+0x152f/0x1aa0 [ 2950.646380][ T5150] usb_start_wait_urb+0x114/0x4c0 [ 2950.651479][ T5150] usb_control_msg+0x232/0x3e0 [ 2950.656322][ T5150] hub_ext_port_status+0x116/0x820 [ 2950.661506][ T5150] hub_event+0x770/0x4a20 [ 2950.665924][ T5150] process_scheduled_works+0xade/0x17b0 [ 2950.671571][ T5150] worker_thread+0x8a0/0xda0 [ 2950.676249][ T5150] kthread+0x70e/0x8a0 [ 2950.680398][ T5150] ret_from_fork+0x3f9/0x770 [ 2950.685066][ T5150] ret_from_fork_asm+0x1a/0x30 [ 2950.689908][ T5150] [ 2950.689908][ T5150] to a SOFTIRQ-irq-unsafe lock: [ 2950.696995][ T5150] (tasklist_lock){.+.+}-{3:3} [ 2950.697022][ T5150] [ 2950.697022][ T5150] ... which became SOFTIRQ-irq-unsafe at: [ 2950.709654][ T5150] ... [ 2950.709662][ T5150] lock_acquire+0x120/0x360 [ 2950.716815][ T5150] _raw_read_lock+0x36/0x50 [ 2950.721396][ T5150] __do_wait+0xde/0x740 [ 2950.725631][ T5150] do_wait+0x1f8/0x520 [ 2950.729776][ T5150] kernel_wait+0xab/0x170 [ 2950.734180][ T5150] call_usermodehelper_exec_work+0xbe/0x230 [ 2950.740155][ T5150] process_scheduled_works+0xade/0x17b0 [ 2950.745777][ T5150] worker_thread+0x8a0/0xda0 [ 2950.750439][ T5150] kthread+0x70e/0x8a0 [ 2950.754582][ T5150] ret_from_fork+0x3f9/0x770 [ 2950.759245][ T5150] ret_from_fork_asm+0x1a/0x30 [ 2950.764109][ T5150] [ 2950.764109][ T5150] other info that might help us debug this: [ 2950.764109][ T5150] [ 2950.774363][ T5150] Chain exists of: [ 2950.774363][ T5150] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2950.774363][ T5150] [ 2950.787921][ T5150] Possible interrupt unsafe locking scenario: [ 2950.787921][ T5150] [ 2950.796317][ T5150] CPU0 CPU1 [ 2950.801759][ T5150] ---- ---- [ 2950.807110][ T5150] lock(tasklist_lock); [ 2950.811339][ T5150] local_irq_disable(); [ 2950.818080][ T5150] lock(&dev->event_lock#2); [ 2950.825282][ T5150] lock(&client->buffer_lock); [ 2950.832643][ T5150] [ 2950.836082][ T5150] lock(&dev->event_lock#2); [ 2950.840924][ T5150] [ 2950.840924][ T5150] *** DEADLOCK *** [ 2950.840924][ T5150] [ 2950.849059][ T5150] 7 locks held by syz.0.6729/5150: [ 2950.854157][ T5150] #0: ffff888146f79118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2950.863470][ T5150] #1: ffff888020f80230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2950.873560][ T5150] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2950.883233][ T5150] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2950.892885][ T5150] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2950.902054][ T5150] #5: ffff888024235028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2950.912221][ T5150] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2950.921261][ T5150] [ 2950.921261][ T5150] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2950.931735][ T5150] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2950.937391][ T5150] IN-SOFTIRQ-W at: [ 2950.941444][ T5150] lock_acquire+0x120/0x360 [ 2950.947767][ T5150] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2950.954780][ T5150] input_event+0x76/0xe0 [ 2950.960833][ T5150] hidinput_report_event+0xa1/0x100 [ 2950.967840][ T5150] hid_report_raw_event+0x148b/0x16d0 [ 2950.975031][ T5150] hid_input_report+0x43e/0x520 [ 2950.981703][ T5150] hid_irq_in+0x47e/0x6d0 [ 2950.987847][ T5150] __usb_hcd_giveback_urb+0x41a/0x690 [ 2950.995039][ T5150] dummy_timer+0x862/0x4550 [ 2951.001535][ T5150] __hrtimer_run_queues+0x52c/0xc60 [ 2951.008628][ T5150] hrtimer_run_softirq+0x187/0x2b0 [ 2951.015548][ T5150] handle_softirqs+0x283/0x870 [ 2951.022130][ T5150] __irq_exit_rcu+0xca/0x1f0 [ 2951.028530][ T5150] irq_exit_rcu+0x9/0x30 [ 2951.034617][ T5150] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2951.042062][ T5150] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2951.049947][ T5150] finish_task_switch+0x26b/0x950 [ 2951.056807][ T5150] __schedule+0x17a0/0x4cc0 [ 2951.063143][ T5150] preempt_schedule_common+0x83/0xd0 [ 2951.070261][ T5150] preempt_schedule+0xae/0xc0 [ 2951.076759][ T5150] preempt_schedule_thunk+0x16/0x30 [ 2951.083777][ T5150] _raw_spin_unlock_irq+0x45/0x50 [ 2951.090614][ T5150] usb_hcd_submit_urb+0x152f/0x1aa0 [ 2951.097626][ T5150] usb_start_wait_urb+0x114/0x4c0 [ 2951.104457][ T5150] usb_control_msg+0x232/0x3e0 [ 2951.111039][ T5150] hub_ext_port_status+0x116/0x820 [ 2951.117974][ T5150] hub_event+0x770/0x4a20 [ 2951.124134][ T5150] process_scheduled_works+0xade/0x17b0 [ 2951.131488][ T5150] worker_thread+0x8a0/0xda0 [ 2951.137883][ T5150] kthread+0x70e/0x8a0 [ 2951.143760][ T5150] ret_from_fork+0x3f9/0x770 [ 2951.150193][ T5150] ret_from_fork_asm+0x1a/0x30 [ 2951.156772][ T5150] INITIAL USE at: [ 2951.160736][ T5150] lock_acquire+0x120/0x360 [ 2951.166983][ T5150] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2951.173908][ T5150] input_inject_event+0xa5/0x340 [ 2951.180569][ T5150] kbd_led_trigger_activate+0xbc/0x100 [ 2951.187759][ T5150] led_trigger_set+0x52a/0x950 [ 2951.194265][ T5150] led_trigger_set_default+0x260/0x2a0 [ 2951.201451][ T5150] led_classdev_register_ext+0x73d/0x930 [ 2951.208813][ T5150] input_leds_connect+0x517/0x790 [ 2951.215575][ T5150] input_register_device+0xd00/0x1140 [ 2951.222696][ T5150] atkbd_connect+0x72e/0xa00 [ 2951.229026][ T5150] serio_driver_probe+0x7f/0xd0 [ 2951.235634][ T5150] really_probe+0x26d/0x9e0 [ 2951.241867][ T5150] __driver_probe_device+0x18c/0x2f0 [ 2951.248877][ T5150] driver_probe_device+0x4f/0x430 [ 2951.255628][ T5150] __driver_attach+0x452/0x700 [ 2951.262113][ T5150] bus_for_each_dev+0x233/0x2b0 [ 2951.268685][ T5150] serio_handle_event+0x1f9/0x8d0 [ 2951.275436][ T5150] process_scheduled_works+0xade/0x17b0 [ 2951.282704][ T5150] worker_thread+0x8a0/0xda0 [ 2951.289041][ T5150] kthread+0x70e/0x8a0 [ 2951.294842][ T5150] ret_from_fork+0x3f9/0x770 [ 2951.301161][ T5150] ret_from_fork_asm+0x1a/0x30 [ 2951.307693][ T5150] } [ 2951.310275][ T5150] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2951.319374][ T5150] -> (&client->buffer_lock){....}-{3:3} { [ 2951.325112][ T5150] INITIAL USE at: [ 2951.328991][ T5150] lock_acquire+0x120/0x360 [ 2951.335047][ T5150] _raw_spin_lock+0x2e/0x40 [ 2951.341103][ T5150] evdev_pass_values+0xb9/0xbd0 [ 2951.347503][ T5150] evdev_events+0x1aa/0x340 [ 2951.353573][ T5150] input_pass_values+0x1bf/0x890 [ 2951.360062][ T5150] input_event_dispose+0x330/0x6b0 [ 2951.366739][ T5150] input_inject_event+0x1dd/0x340 [ 2951.373331][ T5150] evdev_write+0x2fc/0x480 [ 2951.379333][ T5150] vfs_write+0x27b/0xb30 [ 2951.385221][ T5150] ksys_write+0x145/0x250 [ 2951.391108][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2951.397774][ T5150] do_fast_syscall_32+0x34/0x80 [ 2951.404202][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2951.412084][ T5150] } [ 2951.414566][ T5150] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 2951.422971][ T5150] ... acquired at: [ 2951.426753][ T5150] lock_acquire+0x120/0x360 [ 2951.431436][ T5150] _raw_spin_lock+0x2e/0x40 [ 2951.436097][ T5150] evdev_pass_values+0xb9/0xbd0 [ 2951.441113][ T5150] evdev_events+0x1aa/0x340 [ 2951.445811][ T5150] input_pass_values+0x1bf/0x890 [ 2951.451102][ T5150] input_event_dispose+0x330/0x6b0 [ 2951.456392][ T5150] input_inject_event+0x1dd/0x340 [ 2951.461674][ T5150] evdev_write+0x2fc/0x480 [ 2951.466275][ T5150] vfs_write+0x27b/0xb30 [ 2951.470704][ T5150] ksys_write+0x145/0x250 [ 2951.475198][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2951.480473][ T5150] do_fast_syscall_32+0x34/0x80 [ 2951.485486][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2951.491976][ T5150] [ 2951.494286][ T5150] [ 2951.494286][ T5150] the dependencies between the lock to be acquired [ 2951.494295][ T5150] and SOFTIRQ-irq-unsafe lock: [ 2951.507773][ T5150] -> (tasklist_lock){.+.+}-{3:3} { [ 2951.513060][ T5150] HARDIRQ-ON-R at: [ 2951.517195][ T5150] lock_acquire+0x120/0x360 [ 2951.523690][ T5150] _raw_read_lock+0x36/0x50 [ 2951.530181][ T5150] __do_wait+0xde/0x740 [ 2951.536323][ T5150] do_wait+0x1f8/0x520 [ 2951.542392][ T5150] kernel_wait+0xab/0x170 [ 2951.548708][ T5150] call_usermodehelper_exec_work+0xbe/0x230 [ 2951.556593][ T5150] process_scheduled_works+0xade/0x17b0 [ 2951.564122][ T5150] worker_thread+0x8a0/0xda0 [ 2951.570698][ T5150] kthread+0x70e/0x8a0 [ 2951.576751][ T5150] ret_from_fork+0x3f9/0x770 [ 2951.583322][ T5150] ret_from_fork_asm+0x1a/0x30 [ 2951.590076][ T5150] SOFTIRQ-ON-R at: [ 2951.594215][ T5150] lock_acquire+0x120/0x360 [ 2951.600792][ T5150] _raw_read_lock+0x36/0x50 [ 2951.607278][ T5150] __do_wait+0xde/0x740 [ 2951.613419][ T5150] do_wait+0x1f8/0x520 [ 2951.619476][ T5150] kernel_wait+0xab/0x170 [ 2951.625894][ T5150] call_usermodehelper_exec_work+0xbe/0x230 [ 2951.633775][ T5150] process_scheduled_works+0xade/0x17b0 [ 2951.641308][ T5150] worker_thread+0x8a0/0xda0 [ 2951.647927][ T5150] kthread+0x70e/0x8a0 [ 2951.653983][ T5150] ret_from_fork+0x3f9/0x770 [ 2951.660572][ T5150] ret_from_fork_asm+0x1a/0x30 [ 2951.667347][ T5150] INITIAL USE at: [ 2951.671411][ T5150] lock_acquire+0x120/0x360 [ 2951.677822][ T5150] _raw_write_lock_irq+0xa2/0xf0 [ 2951.684657][ T5150] copy_process+0x224f/0x3c00 [ 2951.691230][ T5150] kernel_clone+0x21e/0x840 [ 2951.697634][ T5150] user_mode_thread+0xdd/0x140 [ 2951.704296][ T5150] rest_init+0x23/0x300 [ 2951.710345][ T5150] start_kernel+0x3a9/0x410 [ 2951.716835][ T5150] x86_64_start_reservations+0x24/0x30 [ 2951.724266][ T5150] x86_64_start_kernel+0x143/0x1c0 [ 2951.731286][ T5150] common_startup_64+0x13e/0x147 [ 2951.738125][ T5150] INITIAL READ USE at: [ 2951.742609][ T5150] lock_acquire+0x120/0x360 [ 2951.749448][ T5150] _raw_read_lock+0x36/0x50 [ 2951.756286][ T5150] __do_wait+0xde/0x740 [ 2951.762865][ T5150] do_wait+0x1f8/0x520 [ 2951.769274][ T5150] kernel_wait+0xab/0x170 [ 2951.775967][ T5150] call_usermodehelper_exec_work+0xbe/0x230 [ 2951.784196][ T5150] process_scheduled_works+0xade/0x17b0 [ 2951.792157][ T5150] worker_thread+0x8a0/0xda0 [ 2951.799135][ T5150] kthread+0x70e/0x8a0 [ 2951.805538][ T5150] ret_from_fork+0x3f9/0x770 [ 2951.812456][ T5150] ret_from_fork_asm+0x1a/0x30 [ 2951.819554][ T5150] } [ 2951.822226][ T5150] ... key at: [] tasklist_lock+0x18/0x40 [ 2951.830105][ T5150] ... acquired at: [ 2951.834066][ T5150] lock_acquire+0x120/0x360 [ 2951.838732][ T5150] _raw_read_lock+0x36/0x50 [ 2951.843397][ T5150] send_sigurg+0x12b/0x420 [ 2951.847974][ T5150] sk_send_sigurg+0x6c/0x2e0 [ 2951.852750][ T5150] queue_oob+0x420/0x4f0 [ 2951.857155][ T5150] unix_stream_sendmsg+0xc3f/0xdf0 [ 2951.862433][ T5150] __sock_sendmsg+0x21c/0x270 [ 2951.867283][ T5150] ____sys_sendmsg+0x52d/0x830 [ 2951.872378][ T5150] ___sys_sendmsg+0x21f/0x2a0 [ 2951.877218][ T5150] __sys_sendmmsg+0x28e/0x430 [ 2951.882049][ T5150] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2951.887763][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2951.893066][ T5150] do_fast_syscall_32+0x34/0x80 [ 2951.898103][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2951.904603][ T5150] [ 2951.906917][ T5150] -> (&f_owner->lock){....}-{3:3} { [ 2951.912206][ T5150] INITIAL USE at: [ 2951.916171][ T5150] lock_acquire+0x120/0x360 [ 2951.922408][ T5150] _raw_write_lock_irq+0xa2/0xf0 [ 2951.929209][ T5150] __f_setown+0x67/0x370 [ 2951.935175][ T5150] generic_setlease+0xd60/0x1240 [ 2951.941841][ T5150] fcntl_setlease+0x3a2/0x4c0 [ 2951.948241][ T5150] do_fcntl+0x6a9/0x1910 [ 2951.954204][ T5150] do_compat_fcntl64+0x477/0x720 [ 2951.960879][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2951.967720][ T5150] do_fast_syscall_32+0x34/0x80 [ 2951.974295][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2951.982352][ T5150] INITIAL READ USE at: [ 2951.986752][ T5150] lock_acquire+0x120/0x360 [ 2951.993418][ T5150] _raw_read_lock_irqsave+0xaf/0x100 [ 2952.000949][ T5150] send_sigio+0x38/0x370 [ 2952.007357][ T5150] kill_fasync+0x24d/0x4d0 [ 2952.013939][ T5150] lease_break_callback+0x26/0x30 [ 2952.021133][ T5150] __break_lease+0x6a2/0x1620 [ 2952.027972][ T5150] do_dentry_open+0x8b7/0x13f0 [ 2952.034903][ T5150] vfs_open+0x3b/0x340 [ 2952.041149][ T5150] path_openat+0x2ee5/0x3830 [ 2952.047907][ T5150] do_filp_open+0x1fa/0x410 [ 2952.054659][ T5150] do_sys_openat2+0x121/0x1c0 [ 2952.061507][ T5150] __ia32_compat_sys_openat+0x131/0x160 [ 2952.069245][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2952.076571][ T5150] do_fast_syscall_32+0x34/0x80 [ 2952.083595][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2952.092083][ T5150] } [ 2952.094655][ T5150] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2952.103626][ T5150] ... acquired at: [ 2952.107507][ T5150] lock_acquire+0x120/0x360 [ 2952.112186][ T5150] _raw_read_lock_irqsave+0xaf/0x100 [ 2952.117630][ T5150] send_sigio+0x38/0x370 [ 2952.122055][ T5150] kill_fasync+0x24d/0x4d0 [ 2952.126631][ T5150] lease_break_callback+0x26/0x30 [ 2952.131815][ T5150] __break_lease+0x6a2/0x1620 [ 2952.136663][ T5150] do_dentry_open+0x8b7/0x13f0 [ 2952.141622][ T5150] vfs_open+0x3b/0x340 [ 2952.145855][ T5150] path_openat+0x2ee5/0x3830 [ 2952.150649][ T5150] do_filp_open+0x1fa/0x410 [ 2952.155314][ T5150] do_sys_openat2+0x121/0x1c0 [ 2952.160151][ T5150] __ia32_compat_sys_openat+0x131/0x160 [ 2952.165859][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2952.171140][ T5150] do_fast_syscall_32+0x34/0x80 [ 2952.176151][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2952.182636][ T5150] [ 2952.184943][ T5150] -> (&new->fa_lock){....}-{3:3} { [ 2952.190058][ T5150] INITIAL USE at: [ 2952.193935][ T5150] lock_acquire+0x120/0x360 [ 2952.200079][ T5150] _raw_write_lock_irq+0xa2/0xf0 [ 2952.206573][ T5150] fasync_remove_entry+0xf1/0x1c0 [ 2952.213154][ T5150] lease_modify+0x1ca/0x3c0 [ 2952.219208][ T5150] locks_remove_file+0x4bf/0xea0 [ 2952.225695][ T5150] __fput+0x3ab/0xa70 [ 2952.231223][ T5150] task_work_run+0x1d4/0x260 [ 2952.237362][ T5150] do_exit+0x6b5/0x2300 [ 2952.243071][ T5150] do_group_exit+0x21c/0x2d0 [ 2952.249210][ T5150] get_signal+0x1286/0x1340 [ 2952.255260][ T5150] arch_do_signal_or_restart+0x9a/0x750 [ 2952.262361][ T5150] exit_to_user_mode_loop+0x75/0x110 [ 2952.269213][ T5150] __do_fast_syscall_32+0x1f4/0x2b0 [ 2952.276061][ T5150] do_fast_syscall_32+0x34/0x80 [ 2952.282466][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2952.290343][ T5150] INITIAL READ USE at: [ 2952.294659][ T5150] lock_acquire+0x120/0x360 [ 2952.301156][ T5150] _raw_read_lock_irqsave+0xaf/0x100 [ 2952.308427][ T5150] kill_fasync+0x199/0x4d0 [ 2952.315003][ T5150] sock_wake_async+0x137/0x160 [ 2952.321757][ T5150] sk_wake_async+0x184/0x280 [ 2952.328515][ T5150] mptcp_destroy_common+0x152/0x320 [ 2952.335707][ T5150] mptcp_disconnect+0x23d/0x700 [ 2952.342553][ T5150] inet_shutdown+0x1c1/0x390 [ 2952.349135][ T5150] __ia32_sys_shutdown+0x13c/0x1a0 [ 2952.356236][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2952.363470][ T5150] do_fast_syscall_32+0x34/0x80 [ 2952.370308][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2952.378645][ T5150] } [ 2952.381127][ T5150] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2952.389795][ T5150] ... acquired at: [ 2952.393612][ T5150] lock_acquire+0x120/0x360 [ 2952.398281][ T5150] _raw_read_lock_irqsave+0xaf/0x100 [ 2952.403729][ T5150] kill_fasync+0x199/0x4d0 [ 2952.408569][ T5150] evdev_pass_values+0x627/0xbd0 [ 2952.413757][ T5150] evdev_events+0x1e6/0x340 [ 2952.418422][ T5150] input_pass_values+0x285/0x890 [ 2952.423609][ T5150] input_event_dispose+0x330/0x6b0 [ 2952.428904][ T5150] input_inject_event+0x1dd/0x340 [ 2952.434097][ T5150] evdev_write+0x2fc/0x480 [ 2952.438674][ T5150] vfs_write+0x27b/0xb30 [ 2952.443076][ T5150] ksys_write+0x145/0x250 [ 2952.447566][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2952.452841][ T5150] do_fast_syscall_32+0x34/0x80 [ 2952.457979][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2952.464558][ T5150] [ 2952.466865][ T5150] [ 2952.466865][ T5150] stack backtrace: [ 2952.472774][ T5150] CPU: 1 UID: 0 PID: 5150 Comm: syz.0.6729 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 2952.472793][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2952.472809][ T5150] Call Trace: [ 2952.472817][ T5150] [ 2952.472825][ T5150] dump_stack_lvl+0x189/0x250 [ 2952.472845][ T5150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2952.472861][ T5150] ? __pfx__printk+0x10/0x10 [ 2952.472893][ T5150] validate_chain+0x1f05/0x2140 [ 2952.472915][ T5150] __lock_acquire+0xab9/0xd20 [ 2952.472937][ T5150] ? kill_fasync+0x199/0x4d0 [ 2952.472952][ T5150] lock_acquire+0x120/0x360 [ 2952.472971][ T5150] ? kill_fasync+0x199/0x4d0 [ 2952.472990][ T5150] _raw_read_lock_irqsave+0xaf/0x100 [ 2952.473008][ T5150] ? kill_fasync+0x199/0x4d0 [ 2952.473023][ T5150] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2952.473040][ T5150] ? do_raw_spin_lock+0x121/0x290 [ 2952.473066][ T5150] kill_fasync+0x199/0x4d0 [ 2952.473081][ T5150] ? kill_fasync+0x53/0x4d0 [ 2952.473097][ T5150] evdev_pass_values+0x627/0xbd0 [ 2952.473119][ T5150] ? evdev_pass_values+0x5a1/0xbd0 [ 2952.473140][ T5150] evdev_events+0x1e6/0x340 [ 2952.473158][ T5150] ? evdev_events+0x79/0x340 [ 2952.473176][ T5150] ? input_pass_values+0x8d/0x890 [ 2952.473195][ T5150] input_pass_values+0x285/0x890 [ 2952.473215][ T5150] ? input_handle_event+0x70c/0xf30 [ 2952.473231][ T5150] input_event_dispose+0x330/0x6b0 [ 2952.473248][ T5150] input_inject_event+0x1dd/0x340 [ 2952.473264][ T5150] ? input_inject_event+0xb6/0x340 [ 2952.473280][ T5150] evdev_write+0x2fc/0x480 [ 2952.473302][ T5150] ? __pfx_evdev_write+0x10/0x10 [ 2952.473322][ T5150] ? bpf_lsm_file_permission+0x9/0x20 [ 2952.473339][ T5150] ? security_file_permission+0x75/0x290 [ 2952.473357][ T5150] ? rw_verify_area+0x255/0x4d0 [ 2952.473374][ T5150] ? __lock_acquire+0xab9/0xd20 [ 2952.473393][ T5150] ? __pfx_evdev_write+0x10/0x10 [ 2952.473412][ T5150] vfs_write+0x27b/0xb30 [ 2952.473432][ T5150] ? __pfx_vfs_write+0x10/0x10 [ 2952.473450][ T5150] ? __fget_files+0x2a/0x420 [ 2952.473463][ T5150] ? __fget_files+0x2a/0x420 [ 2952.473474][ T5150] ? __fget_files+0x3a0/0x420 [ 2952.473486][ T5150] ? __fget_files+0x2a/0x420 [ 2952.473500][ T5150] ksys_write+0x145/0x250 [ 2952.473518][ T5150] ? __pfx_ksys_write+0x10/0x10 [ 2952.473538][ T5150] ? lockdep_hardirqs_on+0x9c/0x150 [ 2952.473560][ T5150] __do_fast_syscall_32+0xb6/0x2b0 [ 2952.473584][ T5150] ? lockdep_hardirqs_on+0x9c/0x150 [ 2952.473603][ T5150] do_fast_syscall_32+0x34/0x80 [ 2952.473623][ T5150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2952.473645][ T5150] RIP: 0023:0xf70ae539 [ 2952.473662][ T5150] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2952.473675][ T5150] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2952.473692][ T5150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 2952.473703][ T5150] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 2952.473712][ T5150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2952.473721][ T5150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2952.473729][ T5150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2952.473743][ T5150] [ 2959.245688][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.252070][ T1304] ieee802154 phy1 wpan1: encryption failed: -22