last executing test programs: 2.437552602s ago: executing program 4 (id=20098): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) file_getattr(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f00000006c0), 0x18, 0x1000) 2.295515889s ago: executing program 4 (id=20102): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="b22041a342", 0x5}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000600)="b5cf31", 0x3}], 0x1}}], 0x2, 0x20000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x9417}, 0x8) 2.12125587s ago: executing program 4 (id=20106): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{0x80000000}, {0x80000000}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r2, &(0x7f00000007c0)=[{}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{r3, 0x0, 0x0, [0xc, 0x80000000]}, {r1, r4, 0x1, [0x5, 0x1]}, 0x10000000, [0xfffffffc, 0x3]}) 1.929848195s ago: executing program 4 (id=20110): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') 1.863648271s ago: executing program 0 (id=20111): unshare(0x20000680) creat(&(0x7f0000000000)='./file0\x00', 0x6b) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, @value=r0}, 0x28) 1.792807476s ago: executing program 0 (id=20114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1b0}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.719397412s ago: executing program 0 (id=20116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 1.532142947s ago: executing program 0 (id=20119): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.35967921s ago: executing program 0 (id=20122): r0 = syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x3, 0xc00, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 637.837708ms ago: executing program 2 (id=20140): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 637.712075ms ago: executing program 1 (id=20141): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x27) 617.616979ms ago: executing program 3 (id=20142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0x58000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000100)={0x1}) 578.879906ms ago: executing program 2 (id=20143): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x30, r0, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x14}]}]}, 0x30}}, 0x0) 510.856181ms ago: executing program 1 (id=20144): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x1e, 0x4, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) 510.243741ms ago: executing program 2 (id=20145): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 452.115175ms ago: executing program 3 (id=20146): r0 = socket$inet6(0xa, 0x5, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000180)='e', 0x1, 0x40, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @remote, 0x1}, 0x1c) close(r0) 439.695095ms ago: executing program 4 (id=20147): mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x10010, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {0x4, 0x3}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x24, 0x2) 432.385257ms ago: executing program 1 (id=20148): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x88040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffc, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 376.628509ms ago: executing program 0 (id=20149): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 376.299725ms ago: executing program 2 (id=20150): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, 0x0}) 319.391473ms ago: executing program 3 (id=20151): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x4, 0x80000001, 0x8}, &(0x7f0000000640)=0x10) 293.171052ms ago: executing program 1 (id=20152): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) close(r0) 285.655986ms ago: executing program 4 (id=20153): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200c40, 0x62) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timerfd_gettime(r0, 0x0) 220.198389ms ago: executing program 3 (id=20154): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 212.519765ms ago: executing program 2 (id=20155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f7bc6b270000f3ff0500000008000300", @ANYRES32=r2], 0x24}}, 0x0) 131.826256ms ago: executing program 2 (id=20156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 121.721403ms ago: executing program 3 (id=20157): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{}, {@host=0x10}, 0x400, "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"}, 0x418}) 83.727871ms ago: executing program 1 (id=20158): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x40, 0x6, {}, {0x7, 0x8, 0x0, 0x0, 0x5, 0x8, '|^b!'}, 0x0, 0x1, {0x0}, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x101, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) 158.869µs ago: executing program 3 (id=20159): unshare(0x8000000) r0 = semget(0x3, 0x1, 0x3c4) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x949, 0x3800}, {0x0, 0x2000, 0x800}], 0x2, 0x0) unshare(0x60040000) 0s ago: executing program 1 (id=20160): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x14f68e0624d7cc07) fcntl$getflags(r0, 0x401) kernel console output (not intermixed with test programs): 7 [ 886.600413][ T5952] usb 1-1: config 0 interface 0 has no altsetting 0 [ 886.610680][ T5952] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 886.631048][ T5952] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 886.650535][ T5952] usb 1-1: Product: syz [ 886.660172][ T5952] usb 1-1: Manufacturer: syz [ 886.664869][ T5952] usb 1-1: SerialNumber: syz [ 886.674148][ T5952] usb 1-1: config 0 descriptor?? [ 886.695197][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x2 [ 886.720158][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.728889][ T5952] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 886.738272][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.758910][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.784971][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.803502][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.813378][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.822500][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.830234][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.837242][T12301] cherry 0003:046A:0027.00B0: unknown main item tag 0x0 [ 886.870921][T12301] cherry 0003:046A:0027.00B0: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 886.940274][T12301] usb 2-1: USB disconnect, device number 35 [ 886.995451][T13625] fido_id[13625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 886.997847][ T5963] gspca_sq930x: ucbus_write failed -71 [ 887.032259][ T5963] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 887.081234][T18702] usb 1-1: USB disconnect, device number 34 [ 887.087475][ T5963] usb 4-1: USB disconnect, device number 51 [ 887.110532][T18702] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 887.274813][T13637] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.18729'. [ 888.119907][T18702] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 888.190364][T18690] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 888.270030][T18702] usb 1-1: Using ep0 maxpacket: 32 [ 888.278238][T18702] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 888.288978][T18702] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 888.299913][T18702] usb 1-1: config 0 interface 0 has no altsetting 0 [ 888.321947][T18702] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 888.332368][T18702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.341824][T18702] usb 1-1: Product: syz [ 888.346206][T18702] usb 1-1: Manufacturer: syz [ 888.360606][T18702] usb 1-1: SerialNumber: syz [ 888.371097][T18702] usb 1-1: config 0 descriptor?? [ 888.381527][T18690] usb 4-1: Using ep0 maxpacket: 16 [ 888.393371][T18690] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 888.407039][T18690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 888.422625][T18690] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 888.434294][T18690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.444159][T18690] usb 4-1: Product: syz [ 888.448525][T18690] usb 4-1: Manufacturer: syz [ 888.453766][T18690] usb 4-1: SerialNumber: syz [ 888.465779][T18690] usb 4-1: config 0 descriptor?? [ 888.477905][T18690] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 888.488180][T18690] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 888.789086][T18702] gs_usb 1-1:0.0: Configuring for 159 interfaces [ 888.861282][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18763'. [ 888.871440][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18763'. [ 889.058335][T13718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18768'. [ 889.084166][T18690] em28xx 4-1:0.0: chip ID is em2860 [ 889.205867][T18702] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 889.222472][T18702] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 889.235402][T18702] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 889.257156][T18702] usb 1-1: USB disconnect, device number 35 [ 889.284593][T18690] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 889.310895][T18690] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 889.340521][T18690] em28xx 4-1:0.0: No AC97 audio processor [ 889.360471][T18690] usb 4-1: USB disconnect, device number 52 [ 889.381691][T18690] em28xx 4-1:0.0: Disconnecting em28xx [ 889.394106][T18690] em28xx 4-1:0.0: Freeing device [ 890.134025][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18781'. [ 890.551414][T13760] binder: 13759:13760 ioctl c018620c 200000000000 returned -22 [ 890.714135][T13768] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 891.178137][T13797] @: renamed from vlan0 (while UP) [ 891.490032][T18702] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 891.519697][ T7954] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 891.641010][T18702] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 891.690917][ T7954] usb 3-1: Using ep0 maxpacket: 16 [ 891.706620][T18702] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 891.730571][ T7954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.750676][T18702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.771488][ T7954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.783807][T18702] usb 5-1: Product: syz [ 891.788015][T18702] usb 5-1: Manufacturer: syz [ 891.790659][T13824] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 891.814461][ T7954] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 891.830312][T18702] usb 5-1: SerialNumber: syz [ 891.843587][ T7954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.865586][T13829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 891.877108][ T7954] usb 3-1: config 0 descriptor?? [ 892.105698][T18702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 892.139842][T18702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 892.151475][T18702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 892.164438][T18702] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 892.185738][T18702] usb 5-1: USB disconnect, device number 55 [ 892.316331][ T7954] ntrig 0003:1B96:0008.00B1: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 892.513429][ T7954] ntrig 0003:1B96:0008.00B1: Firmware version: 2.7.31.21.7 (dfb5 afea) [ 892.716359][ T5952] usb 3-1: USB disconnect, device number 58 [ 892.907006][T13864] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18830'. [ 893.878910][T13910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18846'. [ 894.899790][ T5952] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 895.063534][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 895.086242][ T5952] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 895.104048][ T5952] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 895.133289][ T5952] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 895.144187][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.174664][ T5952] usb 4-1: config 0 descriptor?? [ 895.333350][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18883'. [ 895.343525][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18883'. [ 895.617355][ T5952] hid_parser_main: 48 callbacks suppressed [ 895.617378][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.656883][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.668497][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.688080][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.702439][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.720913][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.727920][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.740194][T18690] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 895.760622][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.773550][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.791199][ T5952] lenovo 0003:17EF:6062.00B2: unknown main item tag 0x0 [ 895.813349][ T5952] lenovo 0003:17EF:6062.00B2: hidraw0: USB HID v0.0a Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 895.862083][ T5952] usb 4-1: USB disconnect, device number 53 [ 895.910070][T18690] usb 3-1: Using ep0 maxpacket: 8 [ 895.925910][T18690] usb 3-1: config 0 has no interfaces? [ 895.953193][T18690] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 895.958167][T14008] fido_id[14008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 895.977512][T18690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.993572][T18690] usb 3-1: Product: syz [ 896.005077][T18690] usb 3-1: Manufacturer: syz [ 896.015584][T18690] usb 3-1: SerialNumber: syz [ 896.043144][T18690] usb 3-1: config 0 descriptor?? [ 896.264307][ T7954] usb 3-1: USB disconnect, device number 59 [ 896.523082][T14034] netlink: 'syz.0.18903': attribute type 1 has an invalid length. [ 896.959212][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18916'. [ 897.149091][T14073] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 897.167218][T14074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.371505][T14084] IPv6: NLM_F_CREATE should be specified when creating new route [ 897.851728][T14110] program syz.3.18939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 897.941423][ T7954] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 898.106967][ T7954] usb 2-1: config 0 has no interfaces? [ 898.112689][ T7954] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 898.131139][ T7954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.152206][ T7954] usb 2-1: config 0 descriptor?? [ 898.458891][ T7954] usb 2-1: USB disconnect, device number 36 [ 898.760328][ T5952] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 898.841745][ T5963] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 898.920704][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 898.932237][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 898.953858][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 898.993554][ T5952] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 899.003953][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.011927][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 899.015691][ T5952] usb 5-1: Product: syz [ 899.022248][ T5952] usb 5-1: Manufacturer: syz [ 899.028045][ T5952] usb 5-1: SerialNumber: syz [ 899.035528][ T5963] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 899.040183][ T5952] usb 5-1: config 0 descriptor?? [ 899.062763][ T5963] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 899.085625][ T5952] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 899.091488][ T5963] usb 4-1: config 0 interface 0 has no altsetting 0 [ 899.098688][ T5952] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 899.116734][ T5963] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 899.145383][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.162873][ T5963] usb 4-1: Product: syz [ 899.169869][ T5963] usb 4-1: Manufacturer: syz [ 899.174527][ T5963] usb 4-1: SerialNumber: syz [ 899.238958][T14166] netlink: 182 bytes leftover after parsing attributes in process `syz.2.18966'. [ 899.251231][ T5963] usb 4-1: config 0 descriptor?? [ 899.429843][ T7954] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 899.559908][T12301] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 899.579715][ T7954] usb 1-1: Using ep0 maxpacket: 16 [ 899.586678][ T7954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.598599][ T7954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.609096][ T7954] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 899.618393][ T7954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.629205][ T7954] usb 1-1: config 0 descriptor?? [ 899.676834][ T5963] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 899.698440][ T5952] em28xx 5-1:0.0: chip ID is em28178 [ 899.722004][T12301] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 899.731640][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 899.741301][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.753093][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.761955][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 899.771811][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.783457][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.792234][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 899.803017][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.814502][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.822362][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 899.832129][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.843913][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.852248][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 899.862360][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.873747][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.882506][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 899.883823][ T5963] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 899.891713][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.912215][ T5963] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 899.924934][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 899.937545][T18688] usb 5-1: USB disconnect, device number 56 [ 899.947109][T18688] em28xx 5-1:0.0: Disconnecting em28xx [ 899.960247][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 899.969252][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 899.982939][T18688] em28xx 5-1:0.0: Freeing device [ 899.989249][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 900.001533][T12301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.010910][T12301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.022901][T12301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 900.033436][T12301] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 900.043718][T12301] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 900.049170][ T7954] apple 0003:05AC:024B.00B3: fixing up MacBook JIS keyboard report descriptor [ 900.052663][T12301] usb 3-1: Product: syz [ 900.066155][ T7954] apple 0003:05AC:024B.00B3: unknown global tag 0xe [ 900.066169][T12301] usb 3-1: Manufacturer: syz [ 900.066187][T12301] usb 3-1: SerialNumber: syz [ 900.073429][ T7954] apple 0003:05AC:024B.00B3: item 0 1 1 14 parsing failed [ 900.091528][T12301] usb 3-1: config 0 descriptor?? [ 900.103477][ T7954] apple 0003:05AC:024B.00B3: parse failed [ 900.110639][ T7954] apple 0003:05AC:024B.00B3: probe with driver apple failed with error -22 [ 900.112916][T12301] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 900.140072][ T7954] usb 4-1: USB disconnect, device number 54 [ 900.246735][T18688] usb 1-1: USB disconnect, device number 36 [ 900.368028][ T5952] usb 3-1: USB disconnect, device number 60 [ 900.378026][ T5952] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 900.945601][T14195] xt_hashlimit: size too large, truncated to 1048576 [ 901.558017][T14228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.070222][ T5963] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 902.188729][T14264] random: crng reseeded on system resumption [ 902.249903][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 902.263057][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.278874][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.290106][ T5963] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 902.299472][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.322953][ T5963] usb 1-1: config 0 descriptor?? [ 902.465340][ T7954] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 902.631869][ T7954] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 902.659526][ T7954] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 902.689663][ T7954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 902.706047][ T7954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 902.718282][T14292] sctp: [Deprecated]: syz.2.19026 (pid 14292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.718282][T14292] Use struct sctp_sack_info instead [ 902.718365][ T7954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 902.750570][ T7954] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 902.760626][ T7954] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 902.776019][ T7954] usb 2-1: Product: syz [ 902.783861][ T7954] usb 2-1: Manufacturer: syz [ 902.790706][ T5963] corsair 0003:1B1C:1B02.00B4: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 902.808241][ T7954] cdc_wdm 2-1:1.0: skipping garbage [ 902.820383][ T7954] cdc_wdm 2-1:1.0: skipping garbage [ 902.855597][ T7954] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 902.865515][ T7954] cdc_wdm 2-1:1.0: Unknown control protocol [ 903.036415][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.043098][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.050300][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.056928][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.063762][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.070392][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.077880][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.084519][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.092573][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.099216][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.106464][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.113095][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.121029][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.127670][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.134688][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.141317][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.148566][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.155196][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.163414][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 903.170133][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 903.183897][T18688] usb 2-1: USB disconnect, device number 37 [ 903.190402][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 903.200471][ T5952] usb 1-1: USB disconnect, device number 37 [ 903.221809][ T5963] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 903.391769][ T5963] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 903.408142][ T5963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.428333][ T5963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 903.440281][ T5963] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 903.454536][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19041'. [ 903.455250][ T5963] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 903.473831][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 903.480982][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19041'. [ 903.482800][ T5963] usb 4-1: SerialNumber: syz [ 903.502174][T14303] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 903.659772][ T7954] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 903.726765][ T5963] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 903.757844][ T5963] usb 4-1: USB disconnect, device number 55 [ 903.816512][ T7954] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 903.854262][ T7954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.864816][ T7954] usb 5-1: Product: syz [ 903.872017][ T7954] usb 5-1: Manufacturer: syz [ 903.877956][ T7954] usb 5-1: SerialNumber: syz [ 904.103358][ T7954] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 904.119074][ T7954] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 904.130519][ T7954] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 904.141843][ T7954] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 904.156138][ T7954] usb 5-1: USB disconnect, device number 57 [ 904.319761][ T5963] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 904.481416][ T5963] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 904.489488][ T5963] usb 1-1: config 0 has no interface number 0 [ 904.495864][ T5963] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.507267][ T5963] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.517529][ T5963] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 904.533293][ T5963] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 904.542655][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.560765][ T5963] usb 1-1: config 0 descriptor?? [ 905.061703][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19072'. [ 905.194131][ T5963] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.00B5/input/input146 [ 905.214134][T18702] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 905.233737][ T30] audit: type=1326 audit(1776115957.248:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.1.19074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f7499c819 code=0x0 [ 905.324903][ T5963] uclogic 0003:28BD:0042.00B5: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 905.384450][T18702] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 905.415625][T18702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.424519][ T5963] usb 1-1: USB disconnect, device number 38 [ 905.444535][T18702] usb 3-1: Product: syz [ 905.448741][T18702] usb 3-1: Manufacturer: syz [ 905.454416][T18702] usb 3-1: SerialNumber: syz [ 905.493307][T14402] fido_id[14402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 905.871008][T18702] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 905.884024][T18702] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 905.990300][T18688] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 906.096241][T18702] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 906.126897][T18702] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 906.140227][T18702] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 906.150894][T18688] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 906.164934][T18688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.169935][T18702] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 906.176527][T18688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.195601][T18688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 906.212996][T18702] usb 3-1: USB disconnect, device number 61 [ 906.223412][T18688] usb 4-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 906.235902][T18688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.251807][T18688] usb 4-1: config 0 descriptor?? [ 906.344850][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19085'. [ 906.684544][T18688] wacom 0003:056A:0131.00B6: Unknown device_type for 'HID 056a:0131'. Ignoring. [ 906.919227][T18702] usb 4-1: USB disconnect, device number 56 [ 907.277755][T14478] netlink: 27 bytes leftover after parsing attributes in process `syz.2.19110'. [ 907.700218][T18688] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 907.865935][T18688] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 907.879968][T18688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.898594][T18688] usb 1-1: Product: syz [ 907.909026][T18688] usb 1-1: Manufacturer: syz [ 907.919506][T18688] usb 1-1: SerialNumber: syz [ 907.976895][T14512] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 908.104884][T14520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 908.112195][T14520] IPv6: NLM_F_CREATE should be set when creating new route [ 908.119456][T14520] IPv6: NLM_F_CREATE should be set when creating new route [ 908.208524][T18688] rtl8150 1-1:1.0: couldn't reset the device [ 908.226285][T18688] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 908.273764][T18688] usb 1-1: USB disconnect, device number 39 [ 908.591727][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19141'. [ 908.603310][T14543] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19141'. [ 908.804888][ T30] audit: type=1326 audit(1776115960.808:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.1.19144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f7499c819 code=0x0 [ 908.985287][T14557] tap1: tun_chr_ioctl cmd 1074025677 [ 908.991829][T14557] tap1: linktype set to 6 [ 909.470168][T12301] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 909.640431][T12301] usb 5-1: Using ep0 maxpacket: 16 [ 909.649112][T12301] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 909.670240][T12301] usb 5-1: config 0 has no interface number 0 [ 909.694417][T12301] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 909.711883][T12301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.732359][T12301] usb 5-1: Product: syz [ 909.750181][T12301] usb 5-1: Manufacturer: syz [ 909.760870][T12301] usb 5-1: SerialNumber: syz [ 909.778174][T12301] usb 5-1: config 0 descriptor?? [ 909.812333][T12301] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 910.122351][T14608] usb usb8: usbfs: process 14608 (syz.1.19170) did not claim interface 0 before use [ 910.174143][T18702] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 910.293578][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19172'. [ 910.352473][T18702] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 910.368633][T18702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 910.399677][T18702] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 910.431578][T18702] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 910.440997][T18702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.449194][T18702] usb 4-1: Product: syz [ 910.453620][T18702] usb 4-1: Manufacturer: syz [ 910.458231][T18702] usb 4-1: SerialNumber: syz [ 910.466680][T18702] usb 4-1: config 0 descriptor?? [ 910.478103][T14593] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 910.487019][T14593] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 910.500452][T18702] usb 4-1: ucan: probing device on interface #0 [ 910.736216][T12301] gspca_spca1528: reg_w err -71 [ 910.770363][T12301] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 910.786392][T12301] usb 5-1: USB disconnect, device number 58 [ 911.057426][T14644] netlink: 'syz.0.19186': attribute type 3 has an invalid length. [ 911.066594][T14644] netlink: 788 bytes leftover after parsing attributes in process `syz.0.19186'. [ 911.115531][T18702] ucan 4-1:0.0: probe with driver ucan failed with error -22 [ 911.413199][T12301] usb 4-1: USB disconnect, device number 57 [ 911.675748][T14669] loop5: detected capacity change from 0 to 7 [ 911.690643][ C1] blk_print_req_error: 11 callbacks suppressed [ 911.690663][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.706566][ C1] buffer_io_error: 10 callbacks suppressed [ 911.706585][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 911.723167][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.732850][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 911.741170][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.751078][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 911.759399][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.769088][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 911.778985][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.788673][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 911.821657][T14670] loop5: detected capacity change from 7 to 0 [ 911.821816][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.837438][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 911.845972][T26884] ldm_validate_partition_table(): Disk read failed. [ 911.852709][T26884] Dev loop5: unable to read RDB block 0 [ 911.858546][T26884] loop5: unable to read partition table [ 911.864851][T26884] loop5: partition table beyond EOD, truncated [ 912.554284][T14708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.888424][T14715] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.19216'. [ 913.331026][T14730] netlink: 52 bytes leftover after parsing attributes in process `syz.4.19223'. [ 913.751381][T12301] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 913.774708][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19232'. [ 913.910509][T12301] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 913.921218][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.400889][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.420577][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 914.444287][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.460594][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.494103][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 914.511274][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.530572][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.560097][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 914.567978][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.591138][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.620133][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 914.640703][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.670740][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.690139][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 914.700968][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.720102][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.727506][T14778] GUP no longer grows the stack in syz.2.19246 (14778): 200000004000-200000005000 (200000001000) [ 914.750310][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 914.758512][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.767546][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.2.19246 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.767579][T14778] Tainted: [L]=SOFTLOCKUP [ 914.767587][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 914.767599][T14778] Call Trace: [ 914.767608][T14778] [ 914.767616][T14778] dump_stack_lvl+0xe8/0x150 [ 914.767650][T14778] __get_user_pages+0x2453/0x29d0 [ 914.767682][T14778] ? __lock_acquire+0x6b5/0x2cf0 [ 914.767724][T14778] ? __gup_longterm_locked+0xc4e/0x1630 [ 914.767763][T14778] ? down_read_killable+0x1bb/0x340 [ 914.767791][T14778] __gup_longterm_locked+0xdcf/0x1630 [ 914.767844][T14778] gup_fast_fallback+0x1d82/0x22e0 [ 914.767905][T14778] ? __pfx_gup_fast_fallback+0x10/0x10 [ 914.767937][T14778] ? is_valid_gup_args+0x11f/0x200 [ 914.767968][T14778] ? get_user_pages_fast+0x4d/0xb0 [ 914.767999][T14778] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 914.768032][T14778] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 914.768060][T14778] iov_iter_get_pages2+0x5e/0xa0 [ 914.768088][T14778] __se_sys_vmsplice+0x7b3/0x1490 [ 914.768127][T14778] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 914.768152][T14778] ? __pfx_futex_wake+0x10/0x10 [ 914.768231][T14778] do_syscall_64+0x14d/0xf80 [ 914.768256][T14778] ? trace_irq_disable+0x3b/0x150 [ 914.768273][T14778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.768293][T14778] ? clear_bhb_loop+0x40/0x90 [ 914.768318][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.768339][T14778] RIP: 0033:0x7fb59299c819 [ 914.768359][T14778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.768375][T14778] RSP: 002b:00007fb590bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 914.768396][T14778] RAX: ffffffffffffffda RBX: 00007fb592c15fa0 RCX: 00007fb59299c819 [ 914.768411][T14778] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 914.768424][T14778] RBP: 00007fb592a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 914.768437][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.768449][T14778] R13: 00007fb592c16038 R14: 00007fb592c15fa0 R15: 00007fb592d3fa48 [ 914.768478][T14778] [ 915.000955][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 915.063109][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 915.083004][T12301] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 915.100275][T12301] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 915.120731][T12301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 915.140549][T12301] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 915.150849][T12301] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 915.180750][T12301] usb 5-1: Product: syz [ 915.184965][T12301] usb 5-1: Manufacturer: syz [ 915.210196][T12301] usb 5-1: SerialNumber: syz [ 915.217498][T12301] usb 5-1: config 0 descriptor?? [ 915.238580][T12301] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 915.247117][ T5952] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 915.411109][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 915.423636][ T5952] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 915.470469][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.488792][ T5952] usb 2-1: Product: syz [ 915.501274][ T5952] usb 2-1: Manufacturer: syz [ 915.505930][ T5952] usb 2-1: SerialNumber: syz [ 915.542020][ T5952] usb 2-1: config 0 descriptor?? [ 915.617482][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 915.626771][T12301] usb 5-1: USB disconnect, device number 59 [ 915.636147][T12301] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 915.793887][ T5952] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 915.911300][ T30] audit: type=1326 audit(1776115967.928:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 915.950966][ T30] audit: type=1326 audit(1776115967.948:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.021050][ T30] audit: type=1326 audit(1776115967.948:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.051682][ T30] audit: type=1326 audit(1776115967.948:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.076298][ T30] audit: type=1326 audit(1776115967.948:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.105942][ T30] audit: type=1326 audit(1776115967.958:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.132525][ T30] audit: type=1326 audit(1776115967.958:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.156043][ T30] audit: type=1326 audit(1776115967.958:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.179286][ T30] audit: type=1326 audit(1776115967.958:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.219864][ T30] audit: type=1326 audit(1776115967.958:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14811 comm="syz.0.19262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 916.252710][T18688] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 916.425853][T18688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.440237][ T5952] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 916.460234][T18688] usb 4-1: config 0 has no interfaces? [ 916.468370][T18688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.493442][T18688] usb 4-1: config 0 has no interfaces? [ 916.509542][T18688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.527078][T18688] usb 4-1: config 0 has no interfaces? [ 916.558942][T18688] usb 4-1: string descriptor 0 read error: -22 [ 916.576419][T18688] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 916.595921][T18688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.626692][T18688] usb 4-1: config 0 descriptor?? [ 916.815282][ T5952] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 916.830217][ T5952] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 916.948126][ T5963] usb 4-1: USB disconnect, device number 58 [ 917.019495][ T5952] usb 2-1: USB disconnect, device number 38 [ 917.404923][T14880] bond0: option miimon: invalid value (18446744071562133503) [ 917.413847][T14880] bond0: option miimon: allowed values 0 - 2147483647 [ 917.519979][ T5963] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 917.703395][ T5963] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 917.727311][ T5963] usb 3-1: config 0 interface 0 has no altsetting 0 [ 917.743759][ T5963] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 917.764639][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 917.785646][ T5963] usb 3-1: Product: syz [ 917.790181][ T5963] usb 3-1: Manufacturer: syz [ 917.794789][ T5963] usb 3-1: SerialNumber: syz [ 917.830722][ T5963] usb 3-1: config 0 descriptor?? [ 917.836795][T14872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 917.884385][ T5963] usb 3-1: selecting invalid altsetting 0 [ 918.130027][ T5963] usb 3-1: USB disconnect, device number 62 [ 918.407857][T14921] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19312'. [ 918.950086][ T5952] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 919.113100][ T5952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.124222][ T5952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.140636][ T5952] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 919.149765][ T7954] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 919.159140][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 919.170555][ T5952] usb 4-1: SerialNumber: syz [ 919.301782][ T7954] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 919.310760][ T7954] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 919.321179][ T7954] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 919.332631][ T7954] usb 3-1: config 220 has no interface number 2 [ 919.339726][ T7954] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 919.349878][ T7954] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 919.362009][ T7954] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 919.375486][ T7954] usb 3-1: config 220 interface 0 has no altsetting 0 [ 919.382363][ T7954] usb 3-1: config 220 interface 76 has no altsetting 0 [ 919.389406][ T7954] usb 3-1: config 220 interface 1 has no altsetting 0 [ 919.398621][ T7954] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 919.403137][ T5952] usb 4-1: 0:2 : does not exist [ 919.408950][ T7954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.420778][ T7954] usb 3-1: Product: syz [ 919.425026][ T7954] usb 3-1: Manufacturer: syz [ 919.429877][ T7954] usb 3-1: SerialNumber: syz [ 919.456048][ T5952] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 919.513064][ T5952] usb 4-1: USB disconnect, device number 59 [ 919.596349][T26884] udevd[26884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.655096][ T7954] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 919.666346][ T7954] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 919.675392][ T7954] uvcvideo 3-1:220.0: No valid video chain found. [ 919.685131][ T7954] usb 3-1: selecting invalid altsetting 0 [ 919.709403][ T7954] usb 3-1: selecting invalid altsetting 0 [ 919.716148][ T7954] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 919.732011][ T7954] usb 3-1: USB disconnect, device number 63 [ 920.070180][ T5963] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 920.241067][ T5963] usb 5-1: config 0 has an invalid interface number: 22 but max is 0 [ 920.259985][ T5963] usb 5-1: config 0 has no interface number 0 [ 920.266184][ T5963] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.284231][ T5963] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.304935][ T5963] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 920.324166][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.340120][ T5963] usb 5-1: config 0 descriptor?? [ 920.760640][ T5963] elo 0003:04E7:0030.00B7: item fetching failed at offset 6/7 [ 920.768864][ T5963] elo 0003:04E7:0030.00B7: parse failed [ 920.782988][ T5963] elo 0003:04E7:0030.00B7: probe with driver elo failed with error -22 [ 920.860271][ T5952] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 920.967360][T18688] usb 5-1: USB disconnect, device number 60 [ 921.011015][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 921.021618][ T5952] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.040832][ T5952] usb 1-1: config 0 has no interface number 0 [ 921.046982][ T5952] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.075154][ T5952] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.104688][ T5952] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 921.114973][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.126683][ T5952] usb 1-1: config 0 descriptor?? [ 921.380284][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 921.380303][ T30] audit: type=1326 audit(1776115973.388:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.425750][ T30] audit: type=1326 audit(1776115973.398:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.461653][ T30] audit: type=1326 audit(1776115973.398:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.485599][T15041] sg_write: process 8215 (syz.1.19364) changed security contexts after opening file descriptor, this is not allowed. [ 921.486414][ T30] audit: type=1326 audit(1776115973.398:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.523760][ T30] audit: type=1326 audit(1776115973.398:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.555299][ T30] audit: type=1326 audit(1776115973.398:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.605433][ T30] audit: type=1326 audit(1776115973.398:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.633620][ T30] audit: type=1326 audit(1776115973.398:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.658894][ T30] audit: type=1326 audit(1776115973.398:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.683339][ T30] audit: type=1326 audit(1776115973.398:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.3.19363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7ffc0000 [ 921.715124][T15047] netlink: 'syz.3.19368': attribute type 25 has an invalid length. [ 921.729081][T15047] netlink: 'syz.3.19368': attribute type 28 has an invalid length. [ 921.750911][ T5952] uclogic 0003:28BD:0094.00B8: pen parameters not found [ 921.758340][ T5952] uclogic 0003:28BD:0094.00B8: interface is invalid, ignoring [ 921.981956][ T5952] usb 1-1: USB disconnect, device number 40 [ 922.149700][T18702] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 922.311681][T18702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.323102][T18702] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 922.348483][T18702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.372305][T18702] usb 5-1: config 0 descriptor?? [ 922.402168][T18702] pwc: Askey VC010 type 2 USB webcam detected. [ 922.785081][T18702] pwc: recv_control_msg error -32 req 02 val 2b00 [ 923.001427][T18702] pwc: recv_control_msg error -71 req 02 val 2c00 [ 923.016815][T18702] pwc: recv_control_msg error -71 req 04 val 1000 [ 923.032318][T18702] pwc: recv_control_msg error -71 req 04 val 1300 [ 923.050231][T18702] pwc: recv_control_msg error -71 req 04 val 1400 [ 923.064385][T18702] pwc: recv_control_msg error -71 req 02 val 2000 [ 923.083888][T18702] pwc: recv_control_msg error -71 req 02 val 2100 [ 923.100386][T18702] pwc: recv_control_msg error -71 req 04 val 1500 [ 923.107716][T18702] pwc: recv_control_msg error -71 req 02 val 2500 [ 923.115859][T18702] pwc: recv_control_msg error -71 req 02 val 2400 [ 923.124328][T18702] pwc: recv_control_msg error -71 req 02 val 2600 [ 923.131765][T18702] pwc: recv_control_msg error -71 req 02 val 2900 [ 923.138849][T18702] pwc: recv_control_msg error -71 req 02 val 2800 [ 923.146673][T18702] pwc: recv_control_msg error -71 req 04 val 1100 [ 923.153996][T18702] pwc: recv_control_msg error -71 req 04 val 1200 [ 923.164945][T18702] pwc: Registered as video103. [ 923.180172][T18702] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input152 [ 923.247259][T18702] usb 5-1: USB disconnect, device number 61 [ 923.469292][T15112] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19399'. [ 924.139437][T15149] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 924.180020][T15149] syzkaller1: linktype set to 804 [ 924.800527][ T5952] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 924.961720][ T5952] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 924.971450][ T5952] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 924.979869][ T5952] usb 1-1: config 0 has no interface number 0 [ 924.989081][ T5952] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 925.000701][ T5952] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 925.011362][ T5952] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 925.021632][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.064284][ T5952] usb 1-1: config 0 descriptor?? [ 925.200458][T18690] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 925.360263][T18690] usb 2-1: Using ep0 maxpacket: 32 [ 925.370994][T18690] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 925.389824][T18690] usb 2-1: config 0 has no interface number 0 [ 925.400342][T18690] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 925.409515][T18690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.413392][T15205] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19440'. [ 925.427298][T18690] usb 2-1: Product: syz [ 925.427344][T18690] usb 2-1: Manufacturer: syz [ 925.427359][T18690] usb 2-1: SerialNumber: syz [ 925.441955][T18690] usb 2-1: config 0 descriptor?? [ 925.453396][T18690] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 925.657153][T18690] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 925.675381][T18690] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 925.693894][ T5952] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input153 [ 925.733038][T15218] input input154: cannot allocate more than FF_MAX_EFFECTS effects [ 925.766680][ T5952] input: failed to attach handler kbd to device input153, error: -5 [ 925.917928][ T5952] usb 1-1: USB disconnect, device number 41 [ 926.043080][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19450'. [ 926.086013][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 926.086374][ T7954] usb 2-1: USB disconnect, device number 39 [ 926.109759][ T7954] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 926.126643][ T7954] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 926.143335][ T7954] quatech2 2-1:0.51: device disconnected [ 927.119867][T18690] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 927.179903][T18702] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 927.302141][T18690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.313775][T18690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.327348][T18690] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 927.329704][T18702] usb 2-1: Using ep0 maxpacket: 16 [ 927.337461][T18690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.352435][T18702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.357949][T18690] usb 4-1: config 0 descriptor?? [ 927.366563][T18702] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.379555][T18702] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 927.410259][T18702] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.419539][T18702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.427747][T18702] usb 2-1: SerialNumber: syz [ 927.441363][T18702] hub 2-1:1.0: bad descriptor, ignoring hub [ 927.452803][T18702] hub 2-1:1.0: probe with driver hub failed with error -5 [ 927.461503][T18702] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 927.750700][ T5952] usb 2-1: USB disconnect, device number 40 [ 927.824187][T18690] hid_parser_main: 26 callbacks suppressed [ 927.824208][T18690] cp2112 0003:10C4:EA90.00B9: unknown main item tag 0x0 [ 927.840742][T18690] cp2112 0003:10C4:EA90.00B9: unknown main item tag 0x0 [ 927.847741][T18690] cp2112 0003:10C4:EA90.00B9: unknown main item tag 0x0 [ 927.856656][T18690] cp2112 0003:10C4:EA90.00B9: unknown main item tag 0x0 [ 927.865370][T18690] cp2112 0003:10C4:EA90.00B9: unknown main item tag 0x0 [ 927.873327][T18690] cp2112 0003:10C4:EA90.00B9: unknown main item tag 0x0 [ 927.882894][T18690] cp2112 0003:10C4:EA90.00B9: unknown main item tag 0x0 [ 927.900656][T18690] cp2112 0003:10C4:EA90.00B9: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 928.021512][T18690] cp2112 0003:10C4:EA90.00B9: Part Number: 0x00 Device Version: 0x00 [ 928.234771][T18690] cp2112 0003:10C4:EA90.00B9: error requesting SMBus config [ 928.273202][T18690] cp2112 0003:10C4:EA90.00B9: probe with driver cp2112 failed with error -71 [ 928.305163][T18690] usb 4-1: USB disconnect, device number 60 [ 929.185403][T15363] netlink: 27 bytes leftover after parsing attributes in process `syz.3.19515'. [ 929.506829][T15387] loop6: detected capacity change from 0 to 7 [ 929.513564][T18690] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 929.520509][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.530752][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.540792][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.550521][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.565458][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.575156][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.590566][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.600227][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.608568][ T7954] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 929.616707][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.626367][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.634858][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.644798][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.656351][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.666118][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.674693][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.684352][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.692770][T15387] ldm_validate_partition_table(): Disk read failed. [ 929.705993][T18690] usb 2-1: Using ep0 maxpacket: 16 [ 929.712396][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.722313][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.723790][T18690] usb 2-1: config 0 has no interfaces? [ 929.730811][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 929.730841][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.732672][T15387] Dev loop6: unable to read RDB block 0 [ 929.750645][T18690] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 929.756619][T15387] loop6: unable to read partition table [ 929.770051][T18690] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 929.775272][T15387] loop6: partition table beyond EOD, truncated [ 929.801026][T18690] usb 2-1: Manufacturer: syz [ 929.812199][T15387] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 929.817731][T18690] usb 2-1: config 0 descriptor?? [ 929.835212][ T7954] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 929.855145][ T7954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.890826][ T7954] usb 3-1: config 0 descriptor?? [ 929.912269][ T7954] cp210x 3-1:0.0: cp210x converter detected [ 929.931680][T15399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.241345][T18690] usb 2-1: USB disconnect, device number 41 [ 930.526641][ T7954] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 930.549714][ T7954] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 930.563006][ T7954] usb 3-1: cp210x converter now attached to ttyUSB0 [ 930.583240][ T7954] usb 3-1: USB disconnect, device number 64 [ 930.603792][ T7954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 930.626714][ T7954] cp210x 3-1:0.0: device disconnected [ 930.689810][ T5963] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 930.740372][T18690] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 930.852305][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 930.863736][ T5963] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 930.873339][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19548'. [ 930.873792][ T5963] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 930.901044][T18690] usb 4-1: Using ep0 maxpacket: 16 [ 930.908473][T18690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.912456][T15436] macvlan0: entered allmulticast mode [ 930.924988][ T5963] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 930.935633][T18690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.945455][ T5963] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 930.957041][T15436] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 930.958463][T18690] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 930.964903][ T5963] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.964950][ T5963] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 930.964995][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.010152][T18690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.018169][T18690] usb 4-1: Product: syz [ 931.022987][T18690] usb 4-1: Manufacturer: syz [ 931.028500][T18690] usb 4-1: SerialNumber: syz [ 931.207922][ T5963] usb 1-1: GET_CAPABILITIES returned 0 [ 931.213825][ T5963] usbtmc 1-1:16.0: can't read capabilities [ 931.272779][T18690] usb 4-1: 0:2 : does not exist [ 931.287661][T18690] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 931.354644][T18690] usb 4-1: USB disconnect, device number 61 [ 931.403779][T26884] udevd[26884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.419908][ T7954] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 931.426762][T18702] usb 1-1: USB disconnect, device number 42 [ 931.494747][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.504971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.547395][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19559'. [ 931.556685][ T5963] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 931.580941][ T7954] usb 2-1: Using ep0 maxpacket: 16 [ 931.587861][ T7954] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 931.598209][ T7954] usb 2-1: config 0 has no interface number 0 [ 931.604680][ T7954] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.617178][ T7954] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.627813][ T7954] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 931.637526][ T7954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.650275][ T7954] usb 2-1: config 0 descriptor?? [ 931.711700][ T5963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.722224][ T5963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.732709][ T5963] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 931.741866][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 931.750014][ T5963] usb 3-1: SerialNumber: syz [ 931.840151][ T5952] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 931.974839][ T5963] usb 3-1: 0:2 : does not exist [ 932.001003][ T5952] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 932.009060][ T5952] usb 5-1: config 0 has no interface number 0 [ 932.040875][ T5952] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 932.069677][ T5952] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 932.072245][ T5963] usb 3-1: USB disconnect, device number 65 [ 932.104368][ T5952] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 932.131102][T15470] netlink: 'syz.0.19564': attribute type 8 has an invalid length. [ 932.137666][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.155898][T15470] sch_fq: defrate 0 ignored. [ 932.163699][ T5952] usb 5-1: config 0 descriptor?? [ 932.170384][T15462] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 932.201572][ T5952] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 932.291126][ T7954] uclogic 0003:28BD:0071.00BA: pen parameters not found [ 932.308898][ T7954] uclogic 0003:28BD:0071.00BA: interface is invalid, ignoring [ 932.430127][ T5963] usb 5-1: USB disconnect, device number 62 [ 932.506878][ T5952] usb 2-1: USB disconnect, device number 42 [ 932.647840][T15483] netlink: 'syz.2.19570': attribute type 4 has an invalid length. [ 932.971036][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19580'. [ 933.070297][T18690] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 933.272137][T18690] usb 4-1: Using ep0 maxpacket: 8 [ 933.283078][T18690] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 933.301539][T18690] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 933.319991][T18690] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 933.363711][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19590'. [ 933.371451][T18690] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 933.408273][T18690] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.422585][T18690] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 933.432523][T18690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.667506][T18690] usb 4-1: GET_CAPABILITIES returned 0 [ 933.684258][T18690] usbtmc 4-1:16.0: can't read capabilities [ 933.830165][T12301] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 933.884105][T18690] usb 4-1: USB disconnect, device number 62 [ 933.980444][T12301] usb 3-1: Using ep0 maxpacket: 16 [ 933.988761][T12301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.002929][T12301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 934.015661][T12301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 934.026110][T12301] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 934.036220][T12301] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.051499][T12301] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 934.060995][T12301] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 934.069006][T12301] usb 3-1: Manufacturer: syz [ 934.078435][T12301] usb 3-1: config 0 descriptor?? [ 934.360310][T12301] rc_core: IR keymap rc-hauppauge not found [ 934.366430][T12301] Registered IR keymap rc-empty [ 934.372806][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.400344][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.441721][T12301] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 934.463904][T12301] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input156 [ 934.472133][ T5963] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 934.487593][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.510388][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.530561][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.551050][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.580931][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.610421][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.639829][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 934.648632][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.661637][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.678971][ T5963] usb 1-1: config 0 has no interfaces? [ 934.690108][ T5963] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 934.700587][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.700697][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.718424][ T5963] usb 1-1: config 0 descriptor?? [ 934.735875][T15567] cifs: Unknown parameter '0' [ 934.752963][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.791278][T12301] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.824631][T12301] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 934.855170][T12301] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 934.894986][T12301] usb 3-1: USB disconnect, device number 66 [ 934.958187][ T5963] usb 1-1: USB disconnect, device number 43 [ 935.173399][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19617'. [ 935.330038][ T7954] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 935.500054][ T7954] usb 4-1: Using ep0 maxpacket: 8 [ 935.507044][ T7954] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 935.517723][ T7954] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 935.527580][ T7954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.582469][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19626'. [ 935.609992][ T7954] usb 4-1: Product: syz [ 935.618410][ T7954] usb 4-1: Manufacturer: syz [ 935.626727][ T7954] usb 4-1: SerialNumber: syz [ 935.629187][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19626'. [ 935.642340][ T7954] usb 4-1: config 0 descriptor?? [ 935.654063][ T7954] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 935.680847][ T7954] usb 4-1: setting power ON [ 935.685535][ T7954] dvb-usb: bulk message failed: -22 (2/0) [ 935.710588][ T7954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 935.730969][ T7954] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 935.739528][ T7954] usb 4-1: media controller created [ 935.773929][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 935.773945][ T30] audit: type=1326 audit(1776115987.788:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 935.775977][ T7954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 935.795256][ T30] audit: type=1326 audit(1776115987.788:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 935.873661][T15583] dvb-usb: bulk message failed: -22 (3/0) [ 935.879427][T15583] cxusb: i2c rd: len=147 is too big! [ 935.879427][T15583] [ 935.920323][ T30] audit: type=1326 audit(1776115987.788:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 935.944850][T15583] dvb-usb: bulk message failed: -22 (5/0) [ 935.953813][ T7954] usb 4-1: selecting invalid altsetting 6 [ 935.969908][ T7954] usb 4-1: digital interface selection failed (-22) [ 935.978850][ T30] audit: type=1326 audit(1776115987.798:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 935.986766][ T7954] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 936.015517][ T7954] usb 4-1: setting power OFF [ 936.021370][ T7954] dvb-usb: bulk message failed: -22 (2/0) [ 936.058013][ T7954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 936.071359][ T7954] (NULL device *): no alternate interface [ 936.088738][ T30] audit: type=1326 audit(1776115987.798:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 936.121756][ T30] audit: type=1326 audit(1776115987.798:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 936.170088][ T30] audit: type=1326 audit(1776115987.798:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 936.171132][ T7954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 936.229438][ T30] audit: type=1326 audit(1776115987.798:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 936.248218][ T7954] usb 4-1: USB disconnect, device number 63 [ 936.313064][ T30] audit: type=1326 audit(1776115987.798:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 936.420391][ T30] audit: type=1326 audit(1776115987.798:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15612 comm="syz.1.19628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7499c819 code=0x7ffc0000 [ 936.616943][T15641] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19641'. [ 936.753004][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19642'. [ 936.831180][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 936.991076][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 937.002344][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.015756][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 937.025012][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.035119][ T9] usb 3-1: config 0 descriptor?? [ 937.080775][T18690] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 937.140251][T12301] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 937.241405][T18690] usb 1-1: Using ep0 maxpacket: 8 [ 937.248666][T18690] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 937.259554][T18690] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 937.269446][T18690] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 937.281170][T18690] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.294929][T18690] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 937.305733][T18690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.315893][T12301] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 937.333235][T12301] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 937.344770][T12301] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 937.357786][T12301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.370863][T15655] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 937.386901][T12301] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 937.454723][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.485909][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.500733][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.513027][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.523206][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.537100][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.545355][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.552599][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.560328][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.561788][T18690] usb 1-1: GET_CAPABILITIES returned 0 [ 937.567543][ T9] kovaplus 0003:1E7D:2D50.00BB: unknown main item tag 0x0 [ 937.574489][T18690] usbtmc 1-1:16.0: can't read capabilities [ 937.587734][ T9] kovaplus 0003:1E7D:2D50.00BB: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 937.661357][ T7954] usb 4-1: USB disconnect, device number 64 [ 937.705219][ T9] kovaplus 0003:1E7D:2D50.00BB: couldn't init struct kovaplus_device [ 937.744556][ T9] kovaplus 0003:1E7D:2D50.00BB: couldn't install mouse [ 937.774579][ T9] kovaplus 0003:1E7D:2D50.00BB: probe with driver kovaplus failed with error -71 [ 937.796418][T18690] usb 1-1: USB disconnect, device number 44 [ 937.803325][ T9] usb 3-1: USB disconnect, device number 67 [ 938.401890][T15701] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 938.439917][T15701] CPU: 0 UID: 0 PID: 15701 Comm: syz.2.19668 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.439950][T15701] Tainted: [L]=SOFTLOCKUP [ 938.439958][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 938.439971][T15701] Call Trace: [ 938.439979][T15701] [ 938.439988][T15701] dump_stack_lvl+0xe8/0x150 [ 938.440024][T15701] sysfs_warn_dup+0x8e/0xa0 [ 938.440055][T15701] sysfs_do_create_link_sd+0xc0/0x110 [ 938.440087][T15701] device_add_class_symlinks+0x1cf/0x240 [ 938.440121][T15701] device_add+0x475/0xb70 [ 938.440153][T15701] wiphy_register+0x1d73/0x2d50 [ 938.440192][T15701] ? __pfx_wiphy_register+0x10/0x10 [ 938.440214][T15701] ? __pfx_netdev_run_todo+0x10/0x10 [ 938.440242][T15701] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 938.440266][T15701] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 938.440298][T15701] ieee80211_register_hw+0x3562/0x4200 [ 938.440331][T15701] ? ieee80211_register_hw+0x1471/0x4200 [ 938.440360][T15701] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 938.440396][T15701] ? __hrtimer_setup+0x181/0x200 [ 938.440422][T15701] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 938.440447][T15701] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 938.440505][T15701] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 938.440532][T15701] ? kstrndup+0xbf/0x160 [ 938.440564][T15701] hwsim_new_radio_nl+0xf35/0x1bd0 [ 938.440613][T15701] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 938.440651][T15701] ? rcu_is_watching+0x15/0xb0 [ 938.440677][T15701] ? trace_kmalloc+0x2a/0x110 [ 938.440704][T15701] ? __nla_parse+0x40/0x60 [ 938.440732][T15701] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 938.440770][T15701] genl_family_rcv_msg_doit+0x22a/0x330 [ 938.440806][T15701] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 938.440847][T15701] ? bpf_lsm_capable+0x9/0x20 [ 938.440883][T15701] ? security_capable+0x7e/0x2c0 [ 938.440921][T15701] genl_rcv_msg+0x61c/0x7a0 [ 938.440955][T15701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 938.440983][T15701] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 938.441012][T15701] ? __lock_acquire+0x6b5/0x2cf0 [ 938.441047][T15701] netlink_rcv_skb+0x232/0x4b0 [ 938.441072][T15701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 938.441101][T15701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 938.441141][T15701] ? down_read+0x272/0x2e0 [ 938.441159][T15701] ? genl_rcv+0xd/0x40 [ 938.441188][T15701] genl_rcv+0x28/0x40 [ 938.441213][T15701] netlink_unicast+0x80f/0x9b0 [ 938.441244][T15701] ? __pfx_netlink_unicast+0x10/0x10 [ 938.441266][T15701] ? netlink_sendmsg+0x650/0xb40 [ 938.441288][T15701] ? skb_put+0x11b/0x210 [ 938.441318][T15701] netlink_sendmsg+0x813/0xb40 [ 938.441352][T15701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.441379][T15701] ? aa_sock_msg_perm+0xf1/0x1b0 [ 938.441402][T15701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 938.441428][T15701] ____sys_sendmsg+0x972/0x9f0 [ 938.441466][T15701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.441503][T15701] ? import_iovec+0x73/0xa0 [ 938.441533][T15701] ___sys_sendmsg+0x2a5/0x360 [ 938.441566][T15701] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.441601][T15701] ? futex_wake+0x4ac/0x580 [ 938.441656][T15701] ? __fget_files+0x2a/0x420 [ 938.441673][T15701] ? __fget_files+0x3a0/0x420 [ 938.441702][T15701] __x64_sys_sendmsg+0x1bd/0x2a0 [ 938.441733][T15701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.441771][T15701] ? rcu_is_watching+0x15/0xb0 [ 938.441812][T15701] do_syscall_64+0x14d/0xf80 [ 938.441838][T15701] ? trace_irq_disable+0x3b/0x150 [ 938.441856][T15701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.441884][T15701] ? clear_bhb_loop+0x40/0x90 [ 938.441909][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.441930][T15701] RIP: 0033:0x7fb59299c819 [ 938.441949][T15701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.441967][T15701] RSP: 002b:00007fb590bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.441990][T15701] RAX: ffffffffffffffda RBX: 00007fb592c15fa0 RCX: 00007fb59299c819 [ 938.442006][T15701] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 938.442019][T15701] RBP: 00007fb592a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 938.442031][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.442043][T15701] R13: 00007fb592c16038 R14: 00007fb592c15fa0 R15: 00007fb592d3fa48 [ 938.442077][T15701] [ 938.932857][T15712] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 938.943787][T15712] CPU: 1 UID: 0 PID: 15712 Comm: syz.2.19668 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.943818][T15712] Tainted: [L]=SOFTLOCKUP [ 938.943826][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 938.943838][T15712] Call Trace: [ 938.943847][T15712] [ 938.943856][T15712] dump_stack_lvl+0xe8/0x150 [ 938.943890][T15712] sysfs_warn_dup+0x8e/0xa0 [ 938.943922][T15712] sysfs_do_create_link_sd+0xc0/0x110 [ 938.943963][T15712] device_add_class_symlinks+0x1cf/0x240 [ 938.943998][T15712] device_add+0x475/0xb70 [ 938.944032][T15712] wiphy_register+0x1d73/0x2d50 [ 938.944073][T15712] ? __pfx_wiphy_register+0x10/0x10 [ 938.944097][T15712] ? __pfx_netdev_run_todo+0x10/0x10 [ 938.944127][T15712] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 938.944155][T15712] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 938.944191][T15712] ieee80211_register_hw+0x3562/0x4200 [ 938.944220][T15712] ? ieee80211_register_hw+0x1471/0x4200 [ 938.944251][T15712] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 938.944288][T15712] ? __hrtimer_setup+0x181/0x200 [ 938.944315][T15712] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 938.944341][T15712] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 938.944400][T15712] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 938.944428][T15712] ? kstrndup+0xbf/0x160 [ 938.944465][T15712] hwsim_new_radio_nl+0xf35/0x1bd0 [ 938.944517][T15712] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 938.944554][T15712] ? rcu_is_watching+0x15/0xb0 [ 938.944582][T15712] ? trace_kmalloc+0x2a/0x110 [ 938.944610][T15712] ? __nla_parse+0x40/0x60 [ 938.944638][T15712] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 938.944677][T15712] genl_family_rcv_msg_doit+0x22a/0x330 [ 938.944714][T15712] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 938.944757][T15712] ? bpf_lsm_capable+0x9/0x20 [ 938.944784][T15712] ? security_capable+0x7e/0x2c0 [ 938.944821][T15712] genl_rcv_msg+0x61c/0x7a0 [ 938.944856][T15712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 938.944884][T15712] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 938.944913][T15712] ? __lock_acquire+0x6b5/0x2cf0 [ 938.944958][T15712] netlink_rcv_skb+0x232/0x4b0 [ 938.944983][T15712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 938.945015][T15712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 938.945058][T15712] ? down_read+0x272/0x2e0 [ 938.945078][T15712] ? genl_rcv+0xd/0x40 [ 938.945107][T15712] genl_rcv+0x28/0x40 [ 938.945133][T15712] netlink_unicast+0x80f/0x9b0 [ 938.945164][T15712] ? __pfx_netlink_unicast+0x10/0x10 [ 938.945188][T15712] ? netlink_sendmsg+0x650/0xb40 [ 938.945210][T15712] ? skb_put+0x11b/0x210 [ 938.945240][T15712] netlink_sendmsg+0x813/0xb40 [ 938.945274][T15712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.945303][T15712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 938.945326][T15712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 938.945352][T15712] ____sys_sendmsg+0x972/0x9f0 [ 938.945390][T15712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.945428][T15712] ? import_iovec+0x73/0xa0 [ 938.945458][T15712] ___sys_sendmsg+0x2a5/0x360 [ 938.945492][T15712] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.945528][T15712] ? futex_wake+0x4ac/0x580 [ 938.945580][T15712] ? __fget_files+0x2a/0x420 [ 938.945604][T15712] ? __fget_files+0x3a0/0x420 [ 938.945631][T15712] __x64_sys_sendmsg+0x1bd/0x2a0 [ 938.945662][T15712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.945700][T15712] ? rcu_is_watching+0x15/0xb0 [ 938.945742][T15712] do_syscall_64+0x14d/0xf80 [ 938.945771][T15712] ? trace_irq_disable+0x3b/0x150 [ 938.945789][T15712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.945810][T15712] ? clear_bhb_loop+0x40/0x90 [ 938.945835][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.945856][T15712] RIP: 0033:0x7fb59299c819 [ 938.945875][T15712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.945894][T15712] RSP: 002b:00007fb590bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.945915][T15712] RAX: ffffffffffffffda RBX: 00007fb592c16090 RCX: 00007fb59299c819 [ 938.945931][T15712] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 938.945944][T15712] RBP: 00007fb592a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 938.945963][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.945975][T15712] R13: 00007fb592c16128 R14: 00007fb592c16090 R15: 00007fb592d3fa48 [ 938.946009][T15712] [ 939.760281][T12301] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 939.883965][T15745] netlink: 116 bytes leftover after parsing attributes in process `syz.3.19687'. [ 939.913934][T12301] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 939.939913][T12301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.949328][T12301] usb 2-1: Product: syz [ 939.970230][T12301] usb 2-1: Manufacturer: syz [ 939.974867][T12301] usb 2-1: SerialNumber: syz [ 939.991327][T12301] usb 2-1: config 0 descriptor?? [ 940.216194][T12301] usb 2-1: ignoring: probably an ADSL modem [ 940.340305][ T5952] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 940.522121][ T5952] usb 4-1: config 0 has no interfaces? [ 940.528051][ T5952] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 940.537644][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.550173][ T5952] usb 4-1: config 0 descriptor?? [ 940.617574][T12301] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 940.775358][T12301] usb 4-1: USB disconnect, device number 65 [ 940.825800][ T5952] usb 2-1: USB disconnect, device number 43 [ 941.034028][T15773] input: syz0 as /devices/virtual/input/input157 [ 941.999707][ T7954] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 942.173660][ T7954] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 942.184459][ T7954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.195296][ T7954] usb 1-1: Product: syz [ 942.199541][ T7954] usb 1-1: Manufacturer: syz [ 942.215288][ T7954] usb 1-1: SerialNumber: syz [ 942.247795][ T7954] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 942.277167][T18702] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 943.068020][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.092607][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.273556][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19745'. [ 943.320040][T18702] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 943.327095][T18702] ath9k_htc: Failed to initialize the device [ 943.382967][T18702] usb 1-1: ath9k_htc: USB layer deinitialized [ 943.404681][ T9] usb 1-1: USB disconnect, device number 45 [ 943.849788][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 943.882085][T15920] kvm: apic: phys broadcast and lowest prio [ 943.920721][ T5952] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 944.003180][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 944.012773][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.023022][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.034577][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.042540][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.052026][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.063324][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.071396][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.081198][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.092478][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.100476][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.102378][ T5952] usb 4-1: unable to get BOS descriptor or descriptor too short [ 944.110767][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.121137][ T5952] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 944.134789][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.139481][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.153588][ T5952] usb 4-1: Product: syz [ 944.157768][ T5952] usb 4-1: Manufacturer: syz [ 944.162987][ T5952] usb 4-1: SerialNumber: syz [ 944.171081][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.185445][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.196814][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.223055][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.237803][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.255995][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.264229][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.273644][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.284932][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.293609][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 944.304379][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 944.315665][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.324539][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 944.333924][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 944.342904][ T9] usb 3-1: Product: syz [ 944.347194][ T9] usb 3-1: Manufacturer: syz [ 944.352744][ T9] usb 3-1: SerialNumber: syz [ 944.360695][ T9] usb 3-1: config 0 descriptor?? [ 944.372188][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 944.725596][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 944.733128][T18702] usb 3-1: USB disconnect, device number 68 [ 944.742498][T18702] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 944.867081][T15950] netlink: 112 bytes leftover after parsing attributes in process `syz.4.19779'. [ 944.991246][ T5952] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 945.062582][ T5952] usb 4-1: USB disconnect, device number 66 [ 945.138310][ T1708] udevd[1708]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.329791][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 945.480079][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 945.487205][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 945.499099][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 945.511396][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.519828][ T9] usb 1-1: Product: syz [ 945.524212][ T9] usb 1-1: Manufacturer: syz [ 945.528926][ T9] usb 1-1: SerialNumber: syz [ 945.540563][ T9] usb 1-1: config 0 descriptor?? [ 945.561278][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 945.571916][ T9] usb 1-1: Detected FT232R [ 945.760398][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 945.977736][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 946.130615][T12301] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 946.169847][ T5952] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 946.187380][ T9] usb 1-1: USB disconnect, device number 46 [ 946.208599][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 946.220322][ T9] ftdi_sio 1-1:0.0: device disconnected [ 946.280602][T12301] usb 5-1: Using ep0 maxpacket: 32 [ 946.288302][T12301] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 946.297499][T12301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.307585][T12301] usb 5-1: config 0 descriptor?? [ 946.341429][ T5952] usb 2-1: config 253 has an invalid interface number: 183 but max is 0 [ 946.350791][ T5952] usb 2-1: config 253 has no interface number 0 [ 946.357096][ T5952] usb 2-1: config 253 interface 183 has no altsetting 0 [ 946.366991][ T5952] usb 2-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=80.f8 [ 946.376244][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.384771][ T5952] usb 2-1: Product: syz [ 946.389446][ T5952] usb 2-1: Manufacturer: syz [ 946.394185][ T5952] usb 2-1: SerialNumber: syz [ 946.409774][T18690] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 946.437828][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 946.437844][ T30] audit: type=1326 audit(1776115998.448:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.3.19785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9d9c819 code=0x7fc00000 [ 946.517187][T12301] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 946.531394][T12301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 946.560894][T12301] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 946.568107][T12301] usb 5-1: media controller created [ 946.581904][T12301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.592646][T18690] usb 3-1: Using ep0 maxpacket: 8 [ 946.600310][T18690] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 946.623485][T18690] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 946.648890][T18690] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 946.659096][T18690] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.672742][T18690] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 946.694376][T18690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.932382][T18690] usb 3-1: GET_CAPABILITIES returned 0 [ 946.950254][T18690] usbtmc 3-1:16.0: can't read capabilities [ 947.030850][ T5952] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 947.049381][ T5952] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 947.060595][ T5952] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 947.068654][ T5952] usb 2-1: media controller created [ 947.076091][ T30] audit: type=1326 audit(1776115999.088:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.0.19807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 947.104434][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 947.114211][ T30] audit: type=1326 audit(1776115999.088:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.0.19807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 947.142351][ T30] audit: type=1326 audit(1776115999.108:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.0.19807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f06d2b9c819 code=0x7ffc0000 [ 947.156698][T15990] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 947.167413][T12301] az6027: usb out operation failed. (-71) [ 947.182012][T12301] stb0899_attach: Driver disabled by Kconfig [ 947.189464][T12301] az6027: no front-end attached [ 947.189464][T12301] [ 947.197828][ T30] audit: type=1326 audit(1776115999.118:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16012 comm="syz.0.19807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06d2b9c819 code=0x0 [ 947.217950][ T7954] usb 3-1: USB disconnect, device number 69 [ 947.221047][ T5952] DVB: Unable to find symbol dib7000p_attach() [ 947.232813][T12301] az6027: usb out operation failed. (-71) [ 947.238565][T12301] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 947.255084][ T5952] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 947.271533][T12301] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input158 [ 947.302431][T12301] dvb-usb: schedule remote query interval to 400 msecs. [ 947.312299][T12301] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 947.340223][T12301] usb 5-1: USB disconnect, device number 63 [ 947.369857][ T5952] rc_core: IR keymap rc-dib0700-rc5 not found [ 947.375969][ T5952] Registered IR keymap rc-empty [ 947.389407][ T5952] dvb-usb: could not initialize remote control. [ 947.401388][ T5952] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 947.418036][T12301] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 947.437855][ T5952] usb 2-1: USB disconnect, device number 44 [ 947.471039][ T5952] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 948.113422][T16050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19823'. [ 948.125373][T16050] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19823'. [ 948.659458][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19836'. [ 948.679697][ T7954] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 948.731250][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 948.758345][T16086] netlink: 'syz.4.19838': attribute type 2 has an invalid length. [ 948.779819][T16086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19838'. [ 948.830264][ T7954] usb 4-1: Using ep0 maxpacket: 8 [ 948.844934][ T7954] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 948.855846][ T7954] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 948.879747][ T7954] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 948.890201][ T7954] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.903864][ T7954] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 948.909680][ T5952] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 948.914554][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 948.931615][ T7954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.939810][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 948.967930][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 948.984451][ T9] usb 2-1: config 220 has no interface number 2 [ 948.991176][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 949.004609][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 949.011479][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 949.018589][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 949.030903][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 949.049710][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.068157][ T9] usb 2-1: Product: syz [ 949.078129][ T9] usb 2-1: Manufacturer: syz [ 949.086620][ T9] usb 2-1: SerialNumber: syz [ 949.121342][ T5952] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 949.159897][ T5952] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 949.162849][ T7954] usb 4-1: GET_CAPABILITIES returned 0 [ 949.184209][ T5952] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 949.189874][ T7954] usbtmc 4-1:16.0: can't read capabilities [ 949.199748][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.217357][ T5952] usb 3-1: Product: syz [ 949.250119][ T5952] usb 3-1: Manufacturer: syz [ 949.266170][ T5952] usb 3-1: SerialNumber: syz [ 949.287009][ T5952] usb 3-1: config 0 descriptor?? [ 949.298457][ T5952] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 949.323200][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 949.339705][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 949.356491][ T9] usb 2-1: selecting invalid altsetting 0 [ 949.408399][ T9] usb 2-1: selecting invalid altsetting 0 [ 949.417584][ T7954] usb 4-1: USB disconnect, device number 67 [ 949.435390][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 949.464439][ T9] usb 2-1: USB disconnect, device number 45 [ 949.517274][T16096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19842'. [ 949.597680][T16102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19845'. [ 949.617310][T16102] ip6gre2: entered promiscuous mode [ 949.623397][T16102] ip6gre2: entered allmulticast mode [ 949.978010][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19854'. [ 950.120510][ T5952] usb 3-1: USB disconnect, device number 70 [ 950.151087][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 950.176535][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 950.185754][T18690] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 950.234739][T16133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19859'. [ 950.589966][ T5952] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 950.919960][ T5952] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 950.989869][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 951.180116][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 951.187163][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.219664][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 951.249696][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.259408][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 951.287543][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.340358][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.355039][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 951.369637][ T9] usb 1-1: Manufacturer: syz [ 951.395673][ T9] usb 1-1: config 0 descriptor?? [ 951.720082][ T9] rc_core: IR keymap rc-hauppauge not found [ 951.736236][ T9] Registered IR keymap rc-empty [ 951.750012][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 951.781701][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 951.820812][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 951.832604][ T5963] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 951.859406][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input160 [ 951.885947][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 951.909901][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 951.931772][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 951.956409][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 951.980506][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.000022][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.009098][ T5963] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 952.019231][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.027895][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.047325][ T5963] usb 4-1: config 0 descriptor?? [ 952.059789][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.070382][ T5963] pwc: Samsung MPC-C10 USB webcam detected. [ 952.099743][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.129855][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.152805][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 952.183818][ T9] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 952.200148][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 952.222404][ T9] usb 1-1: USB disconnect, device number 47 [ 952.271249][ T5963] pwc: send_video_command error -71 [ 952.276497][ T5963] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 952.302909][ T5963] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 952.328057][ T5963] usb 4-1: USB disconnect, device number 68 [ 952.549751][T18690] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 952.699663][T18690] usb 2-1: Using ep0 maxpacket: 32 [ 952.706741][T18690] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 952.729748][ T5952] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 952.734085][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19892'. [ 952.737946][T18690] usb 2-1: config 0 has no interface number 0 [ 952.750439][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19892'. [ 952.770493][T16209] netlink: 'syz.2.19892': attribute type 15 has an invalid length. [ 952.782566][T16209] netlink: 'syz.2.19892': attribute type 18 has an invalid length. [ 952.791876][T18690] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 952.801946][T18690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.815099][T18690] usb 2-1: Product: syz [ 952.819290][T18690] usb 2-1: Manufacturer: syz [ 952.826486][T18690] usb 2-1: SerialNumber: syz [ 952.834923][T18690] usb 2-1: config 0 descriptor?? [ 952.850293][ T5963] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 952.852938][T18690] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 952.932247][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 952.942696][ T5952] usb 5-1: config 0 has no interfaces? [ 952.951515][ T5952] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 952.961509][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.972468][ T5952] usb 5-1: Product: syz [ 952.977713][ T5952] usb 5-1: Manufacturer: syz [ 952.983289][ T5952] usb 5-1: SerialNumber: syz [ 953.004536][ T5952] usb 5-1: config 0 descriptor?? [ 953.012066][ T5963] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 953.041938][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.066273][ T5963] usb 4-1: config 0 descriptor?? [ 953.083465][T18690] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 953.084305][ T5963] pwc: Samsung MPC-C10 USB webcam detected. [ 953.122352][T18690] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 953.231987][T18690] usb 5-1: USB disconnect, device number 64 [ 953.486766][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 953.498004][T18690] usb 2-1: USB disconnect, device number 46 [ 953.508196][ T5963] pwc: recv_control_msg error -71 req 02 val 2b00 [ 953.516766][T18690] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 953.527369][ T5963] pwc: recv_control_msg error -71 req 02 val 2700 [ 953.546415][T18690] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 953.564912][T18690] quatech2 2-1:0.51: device disconnected [ 953.567599][ T5963] pwc: recv_control_msg error -71 req 04 val 1700 [ 953.578827][ T5963] pwc: recv_control_msg error -71 req 02 val 2c00 [ 953.598114][ T5963] pwc: recv_control_msg error -71 req 04 val 1000 [ 953.605419][ T5963] pwc: recv_control_msg error -71 req 04 val 1300 [ 953.620788][ T5963] pwc: recv_control_msg error -71 req 04 val 1400 [ 953.631622][ T5963] pwc: recv_control_msg error -71 req 02 val 2000 [ 953.640296][ T5963] pwc: recv_control_msg error -71 req 02 val 2100 [ 953.641858][T16231] loop5: detected capacity change from 0 to 7 [ 953.647187][ T5963] pwc: recv_control_msg error -71 req 02 val 2200 [ 953.656594][T26884] Dev loop5: unable to read RDB block 7 [ 953.660283][ T5963] pwc: recv_control_msg error -71 req 06 val 0600 [ 953.666326][T26884] loop5: AHDI p1 [ 953.675945][T26884] loop5: partition table partially beyond EOD, truncated [ 953.676810][ T5963] pwc: recv_control_msg error -71 req 04 val 1500 [ 953.690407][ T5963] pwc: recv_control_msg error -71 req 02 val 2500 [ 953.697339][ T5963] pwc: recv_control_msg error -71 req 02 val 2400 [ 953.712496][T16231] Dev loop5: unable to read RDB block 7 [ 953.718285][T16231] loop5: AHDI p1 [ 953.723472][T16231] loop5: partition table partially beyond EOD, truncated [ 953.726530][ T5963] pwc: recv_control_msg error -71 req 02 val 2600 [ 953.740057][ T5963] pwc: recv_control_msg error -71 req 02 val 2900 [ 953.750404][ T5963] pwc: recv_control_msg error -71 req 02 val 2800 [ 953.757431][ T5963] pwc: recv_control_msg error -71 req 04 val 1100 [ 953.782870][ T5963] pwc: recv_control_msg error -71 req 04 val 1200 [ 953.796374][ T5963] pwc: Registered as video103. [ 953.819036][ T5963] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input161 [ 954.024406][ T5963] usb 4-1: USB disconnect, device number 69 [ 954.148601][T16243] Failed to get privilege flags for destination (handle=0x2:0x400) [ 954.284712][T16246] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 954.331623][T16249] netlink: 'syz.0.19910': attribute type 12 has an invalid length. [ 954.359776][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 954.569718][T12301] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 954.750267][T12301] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 954.767500][T12301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.790834][T12301] usb 5-1: config 0 descriptor?? [ 954.819172][T12301] cp210x 5-1:0.0: cp210x converter detected [ 955.090333][T18690] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 955.158833][T16295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19931'. [ 955.189216][T16295] ipvlan2: entered allmulticast mode [ 955.196668][T16295] syz_tun: entered allmulticast mode [ 955.208567][T12301] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 955.240286][T18690] usb 3-1: Using ep0 maxpacket: 32 [ 955.263306][T18690] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 955.274258][T18690] usb 3-1: config 0 has no interface number 0 [ 955.283783][T18690] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.295955][T18690] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.306665][T18690] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 955.316166][T18690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.332711][T18690] usb 3-1: config 0 descriptor?? [ 955.425854][T12301] usb 5-1: cp210x converter now attached to ttyUSB0 [ 955.519219][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19937'. [ 955.546370][T16311] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 955.570332][T16311] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 955.589886][ T5963] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 955.622059][T12301] usb 5-1: USB disconnect, device number 65 [ 955.637417][T12301] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 955.654308][T12301] cp210x 5-1:0.0: device disconnected [ 955.751704][ T5963] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 955.773503][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.796235][ T5963] usb 1-1: config 0 descriptor?? [ 955.809286][ T5963] cp210x 1-1:0.0: cp210x converter detected [ 955.951904][T18690] uclogic 0003:28BD:0094.00BC: pen parameters not found [ 955.964341][T18690] uclogic 0003:28BD:0094.00BC: interface is invalid, ignoring [ 955.977125][T18690] usb 3-1: USB disconnect, device number 71 [ 956.040350][T18688] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 956.196448][T16323] program syz.4.19942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 956.208555][T18688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 956.218211][ T5963] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 956.231271][T18688] usb 4-1: not running at top speed; connect to a high speed hub [ 956.239547][ T5963] usb 1-1: cp210x converter now attached to ttyUSB0 [ 956.243994][T18688] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 956.267704][T18688] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 956.288295][T18688] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.300719][T18688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.308969][T18688] usb 4-1: Product: syz [ 956.313770][T18688] usb 4-1: Manufacturer: syz [ 956.319265][T18688] usb 4-1: SerialNumber: syz [ 956.430585][ T5963] usb 1-1: USB disconnect, device number 48 [ 956.444799][ T5963] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 956.466034][ T5963] cp210x 1-1:0.0: device disconnected [ 956.555557][T18688] usb 4-1: 1:1 : unsupported format bits 0x80 [ 956.571533][T18688] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 956.641710][T18688] usb 4-1: USB disconnect, device number 70 [ 956.713902][T26884] udevd[26884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.490125][ T5963] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 957.645286][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.679759][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.718809][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 957.750132][ T5963] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 957.769556][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.783396][T16386] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19969'. [ 957.796005][ T5963] usb 2-1: config 0 descriptor?? [ 957.891787][T16390] sctp: [Deprecated]: syz.3.19972 (pid 16390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.891787][T16390] Use struct sctp_sack_info instead [ 957.990968][T16396] tipc: Enabling of bearer rejected, failed to enable media [ 958.011050][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19976'. [ 958.124156][T16404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19979'. [ 958.184232][T16404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19979'. [ 958.226329][ T5963] hid_parser_main: 222 callbacks suppressed [ 958.226353][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.269874][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.277393][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.318128][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.339440][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.364668][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.375488][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.389677][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.397270][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.417497][ T5963] plantronics 0003:047F:FFFF.00BD: unknown main item tag 0x0 [ 958.462263][ T5963] plantronics 0003:047F:FFFF.00BD: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 958.496815][ T5963] usb 2-1: USB disconnect, device number 47 [ 958.597925][T16419] fido_id[16419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 958.667911][T16424] erspan0: entered promiscuous mode [ 958.972235][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19996'. [ 958.996488][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19996'. [ 959.773922][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20015'. [ 959.849963][T18688] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 960.009706][T18688] usb 4-1: Using ep0 maxpacket: 32 [ 960.020235][T18688] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 960.033139][T18688] usb 4-1: config 0 has no interface number 0 [ 960.047211][T18688] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 960.058962][T18688] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 960.071781][T18688] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 960.082329][T18688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.093006][T18688] usb 4-1: Product: syz [ 960.097900][T18688] usb 4-1: Manufacturer: syz [ 960.106016][T18688] usb 4-1: SerialNumber: syz [ 960.116234][T18688] usb 4-1: config 0 descriptor?? [ 960.535563][T18688] radio-si470x 4-1:0.35: DeviceID=0x8249 ChipID=0x5d00 [ 960.736433][T18688] radio-si470x 4-1:0.35: software version 130, hardware version 73 [ 960.938218][T18688] radio-si470x 4-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 960.963031][T18688] radio-si470x 4-1:0.35: submitting int urb failed (-90) [ 960.980061][T18688] radio-si470x 4-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 960.988817][T18688] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -22 [ 961.050213][ T5952] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 961.092505][T18688] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 961.111505][T18688] usb 4-1: USB disconnect, device number 71 [ 961.211631][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 961.230504][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 961.254196][ T5952] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 961.271812][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.300773][ T5952] usb 1-1: config 0 descriptor?? [ 961.731388][ T5952] saitek 0003:06A3:0621.00BE: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0 [ 961.926052][ T5952] usb 1-1: USB disconnect, device number 49 [ 962.114368][T16588] tmpfs: Unknown parameter 'fd' [ 962.839770][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 964.181550][ T5952] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 964.344164][ T5952] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 964.363475][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.376149][ T5952] usb 5-1: Product: syz [ 964.380694][ T5952] usb 5-1: Manufacturer: syz [ 964.385477][ T5952] usb 5-1: SerialNumber: syz [ 964.395791][ T5952] usb 5-1: config 0 descriptor?? [ 964.649679][ T5952] usb 5-1: USB disconnect, device number 66 [ 964.941434][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20131'. [ 965.639420][T16787] pimreg: entered allmulticast mode [ 965.663936][T16787] pimreg: left allmulticast mode [ 965.680906][T16791] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 965.688273][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20155'. [ 965.690162][T16791] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 965.978715][T16806] [ 965.981090][T16806] ===================================================== [ 965.988029][T16806] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 965.995581][T16806] syzkaller #0 Tainted: G L [ 966.001711][T16806] ----------------------------------------------------- [ 966.008652][T16806] syz.1.20160/16806 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 966.016467][T16806] ffff8880259e05a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 966.025118][T16806] [ 966.025118][T16806] and this task is already holding: [ 966.032498][T16806] ffff88804da0ee88 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 966.041298][T16806] which would create a new lock dependency: [ 966.047170][T16806] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 966.054745][T16806] [ 966.054745][T16806] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 966.064181][T16806] (&client->buffer_lock){..-.}-{3:3} [ 966.064209][T16806] [ 966.064209][T16806] ... which became SOFTIRQ-irq-safe at: [ 966.077263][T16806] lock_acquire+0xf0/0x2e0 [ 966.081769][T16806] _raw_spin_lock+0x2e/0x40 [ 966.086356][T16806] evdev_pass_values+0xb9/0xbd0 [ 966.091377][T16806] evdev_events+0x1e6/0x340 [ 966.095972][T16806] input_pass_values+0x288/0x890 [ 966.100998][T16806] input_event_dispose+0x330/0x6b0 [ 966.106201][T16806] input_event+0x89/0xe0 [ 966.110538][T16806] xpad360_process_packet+0x641/0xdd0 [ 966.115996][T16806] xpad_irq_in+0x14e/0x25e0 [ 966.120585][T16806] __usb_hcd_giveback_urb+0x376/0x540 [ 966.126035][T16806] dummy_timer+0xbbd/0x4650 [ 966.130619][T16806] __hrtimer_run_queues+0x53a/0xcc0 [ 966.135899][T16806] hrtimer_run_softirq+0x182/0x5a0 [ 966.141190][T16806] handle_softirqs+0x22a/0x870 [ 966.146038][T16806] __irq_exit_rcu+0x5f/0x150 [ 966.150717][T16806] irq_exit_rcu+0x9/0x30 [ 966.155067][T16806] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 966.160822][T16806] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 966.166894][T16806] console_flush_all+0x801/0xb20 [ 966.172001][T16806] console_unlock+0xd1/0x1c0 [ 966.176678][T16806] vprintk_emit+0x485/0x560 [ 966.181269][T16806] dev_vprintk_emit+0x355/0x420 [ 966.186207][T16806] dev_printk_emit+0xee/0x140 [ 966.190963][T16806] _dev_warn+0x11e/0x180 [ 966.195296][T16806] xpad_start_input+0x2ba/0x310 [ 966.200231][T16806] input_open_device+0x1f8/0x3b0 [ 966.205252][T16806] evdev_open+0x4b1/0x5b0 [ 966.209658][T16806] chrdev_open+0x4cd/0x5e0 [ 966.214163][T16806] do_dentry_open+0x785/0x14e0 [ 966.219029][T16806] vfs_open+0x3b/0x340 [ 966.223202][T16806] path_openat+0x2e08/0x3860 [ 966.227880][T16806] do_file_open+0x23e/0x4a0 [ 966.232472][T16806] do_sys_openat2+0x113/0x200 [ 966.237273][T16806] __x64_sys_openat+0x138/0x170 [ 966.242216][T16806] do_syscall_64+0x14d/0xf80 [ 966.246898][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.252880][T16806] [ 966.252880][T16806] to a SOFTIRQ-irq-unsafe lock: [ 966.259895][T16806] (tasklist_lock){.+.+}-{3:3} [ 966.259924][T16806] [ 966.259924][T16806] ... which became SOFTIRQ-irq-unsafe at: [ 966.272644][T16806] ... [ 966.272653][T16806] lock_acquire+0xf0/0x2e0 [ 966.279720][T16806] _raw_read_lock+0x36/0x50 [ 966.284326][T16806] __do_wait+0xde/0x740 [ 966.288558][T16806] do_wait+0x1e7/0x540 [ 966.292711][T16806] kernel_wait+0xd6/0x1c0 [ 966.297129][T16806] call_usermodehelper_exec_work+0xbe/0x230 [ 966.303098][T16806] process_scheduled_works+0xb6e/0x18c0 [ 966.308812][T16806] worker_thread+0xa53/0xfc0 [ 966.313486][T16806] kthread+0x388/0x470 [ 966.317632][T16806] ret_from_fork+0x51e/0xb90 [ 966.322303][T16806] ret_from_fork_asm+0x1a/0x30 [ 966.327150][T16806] [ 966.327150][T16806] other info that might help us debug this: [ 966.327150][T16806] [ 966.337362][T16806] Chain exists of: [ 966.337362][T16806] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 966.337362][T16806] [ 966.350566][T16806] Possible interrupt unsafe locking scenario: [ 966.350566][T16806] [ 966.358870][T16806] CPU0 CPU1 [ 966.364236][T16806] ---- ---- [ 966.369591][T16806] lock(tasklist_lock); [ 966.373834][T16806] local_irq_disable(); [ 966.380574][T16806] lock(&client->buffer_lock); [ 966.387940][T16806] lock(&new->fa_lock); [ 966.394778][T16806] [ 966.398213][T16806] lock(&client->buffer_lock); [ 966.403236][T16806] [ 966.403236][T16806] *** DEADLOCK *** [ 966.403236][T16806] [ 966.411377][T16806] 4 locks held by syz.1.20160/16806: [ 966.416657][T16806] #0: ffffffff8e9012b0 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4de/0x1e80 [ 966.425798][T16806] #1: ffff888033a03bc8 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4e8/0x1e80 [ 966.435284][T16806] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 966.444430][T16806] #3: ffff88804da0ee88 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 966.453558][T16806] [ 966.453558][T16806] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 966.463951][T16806] -> (&client->buffer_lock){..-.}-{3:3} { [ 966.469788][T16806] IN-SOFTIRQ-W at: [ 966.473853][T16806] lock_acquire+0xf0/0x2e0 [ 966.480121][T16806] _raw_spin_lock+0x2e/0x40 [ 966.486481][T16806] evdev_pass_values+0xb9/0xbd0 [ 966.493151][T16806] evdev_events+0x1e6/0x340 [ 966.499468][T16806] input_pass_values+0x288/0x890 [ 966.506222][T16806] input_event_dispose+0x330/0x6b0 [ 966.513153][T16806] input_event+0x89/0xe0 [ 966.519212][T16806] xpad360_process_packet+0x641/0xdd0 [ 966.526407][T16806] xpad_irq_in+0x14e/0x25e0 [ 966.532738][T16806] __usb_hcd_giveback_urb+0x376/0x540 [ 966.539931][T16806] dummy_timer+0xbbd/0x4650 [ 966.546260][T16806] __hrtimer_run_queues+0x53a/0xcc0 [ 966.553300][T16806] hrtimer_run_softirq+0x182/0x5a0 [ 966.560235][T16806] handle_softirqs+0x22a/0x870 [ 966.566820][T16806] __irq_exit_rcu+0x5f/0x150 [ 966.573235][T16806] irq_exit_rcu+0x9/0x30 [ 966.579308][T16806] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 966.586862][T16806] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 966.594755][T16806] console_flush_all+0x801/0xb20 [ 966.601518][T16806] console_unlock+0xd1/0x1c0 [ 966.607932][T16806] vprintk_emit+0x485/0x560 [ 966.614252][T16806] dev_vprintk_emit+0x355/0x420 [ 966.621017][T16806] dev_printk_emit+0xee/0x140 [ 966.627568][T16806] _dev_warn+0x11e/0x180 [ 966.633630][T16806] xpad_start_input+0x2ba/0x310 [ 966.640429][T16806] input_open_device+0x1f8/0x3b0 [ 966.647384][T16806] evdev_open+0x4b1/0x5b0 [ 966.653727][T16806] chrdev_open+0x4cd/0x5e0 [ 966.659973][T16806] do_dentry_open+0x785/0x14e0 [ 966.666574][T16806] vfs_open+0x3b/0x340 [ 966.672486][T16806] path_openat+0x2e08/0x3860 [ 966.678905][T16806] do_file_open+0x23e/0x4a0 [ 966.685230][T16806] do_sys_openat2+0x113/0x200 [ 966.691732][T16806] __x64_sys_openat+0x138/0x170 [ 966.698406][T16806] do_syscall_64+0x14d/0xf80 [ 966.705001][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.712707][T16806] INITIAL USE at: [ 966.716692][T16806] lock_acquire+0xf0/0x2e0 [ 966.722946][T16806] _raw_spin_lock_irqsave+0x40/0x60 [ 966.729899][T16806] evdev_ioctl_handler+0x1a49/0x1fe0 [ 966.737077][T16806] __se_sys_ioctl+0xfc/0x170 [ 966.743410][T16806] do_syscall_64+0x14d/0xf80 [ 966.749839][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.757480][T16806] } [ 966.760150][T16806] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 966.768441][T16806] -> (&new->fa_lock){....}-{3:3} { [ 966.773649][T16806] INITIAL USE at: [ 966.777534][T16806] lock_acquire+0xf0/0x2e0 [ 966.783683][T16806] _raw_write_lock_irq+0x3d/0x50 [ 966.790191][T16806] fasync_remove_entry+0xf1/0x1c0 [ 966.796788][T16806] __fput+0x8a5/0xa70 [ 966.802346][T16806] task_work_run+0x1d9/0x270 [ 966.808492][T16806] exit_to_user_mode_loop+0xed/0x480 [ 966.815344][T16806] do_syscall_64+0x32d/0xf80 [ 966.821597][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.829074][T16806] INITIAL READ USE at: [ 966.833529][T16806] lock_acquire+0xf0/0x2e0 [ 966.839949][T16806] _raw_read_lock_irqsave+0x48/0x60 [ 966.847151][T16806] kill_fasync+0x199/0x4d0 [ 966.853652][T16806] pipe_release+0x1b2/0x330 [ 966.860151][T16806] __fput+0x44f/0xa70 [ 966.866221][T16806] fput_close_sync+0x11f/0x240 [ 966.872982][T16806] __x64_sys_close+0x7e/0x110 [ 966.879654][T16806] do_syscall_64+0x14d/0xf80 [ 966.886259][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.894146][T16806] } [ 966.896633][T16806] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 966.905301][T16806] ... acquired at: [ 966.909090][T16806] _raw_read_lock_irqsave+0x48/0x60 [ 966.914468][T16806] kill_fasync+0x199/0x4d0 [ 966.919050][T16806] evdev_pass_values+0x627/0xbd0 [ 966.924154][T16806] evdev_events+0x1e6/0x340 [ 966.928829][T16806] input_pass_values+0x288/0x890 [ 966.933940][T16806] input_event_dispose+0x330/0x6b0 [ 966.939232][T16806] input_inject_event+0x1dd/0x340 [ 966.944423][T16806] evdev_write+0x325/0x4c0 [ 966.949027][T16806] vfs_write+0x29a/0xb90 [ 966.953435][T16806] ksys_write+0x150/0x270 [ 966.958026][T16806] do_syscall_64+0x14d/0xf80 [ 966.962801][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.968854][T16806] [ 966.971167][T16806] [ 966.971167][T16806] the dependencies between the lock to be acquired [ 966.971176][T16806] and SOFTIRQ-irq-unsafe lock: [ 966.984664][T16806] -> (tasklist_lock){.+.+}-{3:3} { [ 966.989876][T16806] HARDIRQ-ON-R at: [ 966.994017][T16806] lock_acquire+0xf0/0x2e0 [ 967.000251][T16806] _raw_read_lock+0x36/0x50 [ 967.006569][T16806] __do_wait+0xde/0x740 [ 967.012546][T16806] do_wait+0x1e7/0x540 [ 967.018514][T16806] kernel_wait+0xd6/0x1c0 [ 967.024668][T16806] call_usermodehelper_exec_work+0xbe/0x230 [ 967.032380][T16806] process_scheduled_works+0xb6e/0x18c0 [ 967.039750][T16806] worker_thread+0xa53/0xfc0 [ 967.046243][T16806] kthread+0x388/0x470 [ 967.052298][T16806] ret_from_fork+0x51e/0xb90 [ 967.058725][T16806] ret_from_fork_asm+0x1a/0x30 [ 967.065393][T16806] SOFTIRQ-ON-R at: [ 967.069447][T16806] lock_acquire+0xf0/0x2e0 [ 967.075716][T16806] _raw_read_lock+0x36/0x50 [ 967.082124][T16806] __do_wait+0xde/0x740 [ 967.088183][T16806] do_wait+0x1e7/0x540 [ 967.094062][T16806] kernel_wait+0xd6/0x1c0 [ 967.100200][T16806] call_usermodehelper_exec_work+0xbe/0x230 [ 967.107905][T16806] process_scheduled_works+0xb6e/0x18c0 [ 967.115269][T16806] worker_thread+0xa53/0xfc0 [ 967.121683][T16806] kthread+0x388/0x470 [ 967.127567][T16806] ret_from_fork+0x51e/0xb90 [ 967.134200][T16806] ret_from_fork_asm+0x1a/0x30 [ 967.140786][T16806] INITIAL USE at: [ 967.144752][T16806] lock_acquire+0xf0/0x2e0 [ 967.150931][T16806] _raw_write_lock_irq+0x3d/0x50 [ 967.157604][T16806] copy_process+0x247a/0x3cd0 [ 967.164015][T16806] kernel_clone+0x248/0x8e0 [ 967.170247][T16806] user_mode_thread+0x110/0x180 [ 967.176838][T16806] rest_init+0x23/0x300 [ 967.182823][T16806] start_kernel+0x385/0x3d0 [ 967.189119][T16806] x86_64_start_reservations+0x24/0x30 [ 967.196346][T16806] x86_64_start_kernel+0x143/0x1c0 [ 967.203206][T16806] common_startup_64+0x13e/0x147 [ 967.209884][T16806] INITIAL READ USE at: [ 967.214287][T16806] lock_acquire+0xf0/0x2e0 [ 967.220867][T16806] _raw_read_lock+0x36/0x50 [ 967.227541][T16806] __do_wait+0xde/0x740 [ 967.233858][T16806] do_wait+0x1e7/0x540 [ 967.240089][T16806] kernel_wait+0xd6/0x1c0 [ 967.246577][T16806] call_usermodehelper_exec_work+0xbe/0x230 [ 967.254808][T16806] process_scheduled_works+0xb6e/0x18c0 [ 967.262519][T16806] worker_thread+0xa53/0xfc0 [ 967.269280][T16806] kthread+0x388/0x470 [ 967.275503][T16806] ret_from_fork+0x51e/0xb90 [ 967.282258][T16806] ret_from_fork_asm+0x1a/0x30 [ 967.289200][T16806] } [ 967.291777][T16806] ... key at: [] tasklist_lock+0x18/0x40 [ 967.299728][T16806] ... acquired at: [ 967.303714][T16806] _raw_read_lock+0x36/0x50 [ 967.308503][T16806] send_sigio+0x101/0x370 [ 967.313002][T16806] dnotify_handle_event+0x169/0x440 [ 967.318464][T16806] fsnotify+0x1831/0x1ae0 [ 967.322959][T16806] path_openat+0x15c2/0x3860 [ 967.327712][T16806] do_file_open+0x23e/0x4a0 [ 967.332382][T16806] do_sys_openat2+0x113/0x200 [ 967.337243][T16806] __x64_sys_open+0x11e/0x150 [ 967.342106][T16806] do_syscall_64+0x14d/0xf80 [ 967.346865][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.353009][T16806] [ 967.355348][T16806] -> (&f_owner->lock){....}-{3:3} { [ 967.360595][T16806] INITIAL USE at: [ 967.364498][T16806] lock_acquire+0xf0/0x2e0 [ 967.370484][T16806] _raw_write_lock_irq+0x3d/0x50 [ 967.377162][T16806] __f_setown+0x67/0x370 [ 967.382962][T16806] do_fcntl+0x171c/0x1a20 [ 967.388853][T16806] __se_sys_fcntl+0xc8/0x150 [ 967.395004][T16806] do_syscall_64+0x14d/0xf80 [ 967.401159][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.408618][T16806] INITIAL READ USE at: [ 967.412964][T16806] lock_acquire+0xf0/0x2e0 [ 967.419384][T16806] _raw_read_lock_irqsave+0x48/0x60 [ 967.426666][T16806] send_sigio+0x38/0x370 [ 967.432910][T16806] dnotify_handle_event+0x169/0x440 [ 967.440107][T16806] fsnotify+0x1831/0x1ae0 [ 967.446427][T16806] fsnotify_create+0x121/0x180 [ 967.453174][T16806] vfs_create+0x300/0x460 [ 967.459485][T16806] filename_mknodat+0x3e8/0x660 [ 967.466324][T16806] __se_sys_mknod+0x3a/0x150 [ 967.472909][T16806] do_syscall_64+0x14d/0xf80 [ 967.479490][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.487368][T16806] } [ 967.489863][T16806] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 967.498723][T16806] ... acquired at: [ 967.502536][T16806] _raw_read_lock_irqsave+0x48/0x60 [ 967.507929][T16806] send_sigio+0x38/0x370 [ 967.512350][T16806] kill_fasync+0x24d/0x4d0 [ 967.516933][T16806] lease_break_callback+0x26/0x30 [ 967.522147][T16806] __break_lease+0x81c/0x1e80 [ 967.527017][T16806] do_dentry_open+0x1010/0x14e0 [ 967.532059][T16806] vfs_open+0x3b/0x340 [ 967.536302][T16806] path_openat+0x2e08/0x3860 [ 967.541148][T16806] do_file_open+0x23e/0x4a0 [ 967.545821][T16806] do_sys_openat2+0x113/0x200 [ 967.550685][T16806] __x64_sys_openat+0x138/0x170 [ 967.555706][T16806] do_syscall_64+0x14d/0xf80 [ 967.560480][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.566580][T16806] [ 967.568896][T16806] [ 967.568896][T16806] stack backtrace: [ 967.574778][T16806] CPU: 1 UID: 0 PID: 16806 Comm: syz.1.20160 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.574804][T16806] Tainted: [L]=SOFTLOCKUP [ 967.574811][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 967.574821][T16806] Call Trace: [ 967.574830][T16806] [ 967.574838][T16806] dump_stack_lvl+0xe8/0x150 [ 967.574863][T16806] __lock_acquire+0x2a94/0x2cf0 [ 967.574895][T16806] lock_acquire+0xf0/0x2e0 [ 967.574914][T16806] ? send_sigio+0x38/0x370 [ 967.574932][T16806] ? lock_acquire+0xf0/0x2e0 [ 967.574951][T16806] _raw_read_lock_irqsave+0x48/0x60 [ 967.574973][T16806] ? send_sigio+0x38/0x370 [ 967.574989][T16806] send_sigio+0x38/0x370 [ 967.575007][T16806] kill_fasync+0x24d/0x4d0 [ 967.575024][T16806] ? kill_fasync+0x53/0x4d0 [ 967.575041][T16806] lease_break_callback+0x26/0x30 [ 967.575061][T16806] __break_lease+0x81c/0x1e80 [ 967.575082][T16806] ? __pfx___break_lease+0x10/0x10 [ 967.575098][T16806] ? __pfx_apparmor_file_open+0x10/0x10 [ 967.575120][T16806] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 967.575140][T16806] do_dentry_open+0x1010/0x14e0 [ 967.575167][T16806] vfs_open+0x3b/0x340 [ 967.575187][T16806] ? path_openat+0x2df0/0x3860 [ 967.575205][T16806] path_openat+0x2e08/0x3860 [ 967.575226][T16806] ? __pfx_stack_trace_save+0x10/0x10 [ 967.575244][T16806] ? stack_depot_save_flags+0x33/0x810 [ 967.575264][T16806] ? __pfx_path_openat+0x10/0x10 [ 967.575279][T16806] ? __x64_sys_openat+0x138/0x170 [ 967.575301][T16806] ? do_syscall_64+0x14d/0xf80 [ 967.575324][T16806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.575343][T16806] ? __lock_acquire+0x6b5/0x2cf0 [ 967.575364][T16806] do_file_open+0x23e/0x4a0 [ 967.575382][T16806] ? __pfx_do_file_open+0x10/0x10 [ 967.575405][T16806] ? _raw_spin_unlock+0x28/0x50 [ 967.575425][T16806] ? alloc_fd+0x64b/0x6c0 [ 967.575449][T16806] do_sys_openat2+0x113/0x200 [ 967.575471][T16806] ? __se_sys_futex+0x3a8/0x450 [ 967.575491][T16806] ? __pfx_do_sys_openat2+0x10/0x10 [ 967.575515][T16806] ? rcu_is_watching+0x15/0xb0 [ 967.575538][T16806] __x64_sys_openat+0x138/0x170 [ 967.575562][T16806] do_syscall_64+0x14d/0xf80 [ 967.575584][T16806] ? trace_irq_disable+0x3b/0x150 [ 967.575598][T16806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.575614][T16806] ? clear_bhb_loop+0x40/0x90 [ 967.575632][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.575649][T16806] RIP: 0033:0x7f9f7499c819 [ 967.575663][T16806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.575679][T16806] RSP: 002b:00007f9f757ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 967.575698][T16806] RAX: ffffffffffffffda RBX: 00007f9f74c15fa0 RCX: 00007f9f7499c819 [ 967.575710][T16806] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 967.575722][T16806] RBP: 00007f9f74a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 967.575733][T16806] R10: 14f68e0624d7cc07 R11: 0000000000000246 R12: 0000000000000000 [ 967.575744][T16806] R13: 00007f9f74c16038 R14: 00007f9f74c15fa0 R15: 00007f9f74d3fa48 [ 967.575761][T16806]