last executing test programs: 2m25.623181953s ago: executing program 4 (id=5321): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 2m24.887217047s ago: executing program 4 (id=5323): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfffffffffffffff8}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x0, 0x0, r1}) 2m24.766891686s ago: executing program 4 (id=5324): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m24.689867149s ago: executing program 4 (id=5326): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 2m23.782758102s ago: executing program 4 (id=5338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xe000600) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) file_getattr(r2, 0x0, &(0x7f0000000100), 0x18, 0x1000) 2m22.152226689s ago: executing program 4 (id=5356): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 2m21.54267861s ago: executing program 32 (id=5356): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 4.867271192s ago: executing program 0 (id=6840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x7, 0x0, 0x0, 0x63f1afe60f8b92e9, 0x1}) io_uring_enter(r0, 0x3516, 0xbb44, 0x29, 0x0, 0x4d) 4.29166081s ago: executing program 0 (id=6844): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 3.198599802s ago: executing program 1 (id=6853): r0 = memfd_create(&(0x7f0000000ac0)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0) ftruncate(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040), 0x4) 3.05675846s ago: executing program 5 (id=6854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x60707}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) 2.99845658s ago: executing program 1 (id=6855): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) 2.778616807s ago: executing program 1 (id=6858): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 2.702493961s ago: executing program 5 (id=6859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.64489593s ago: executing program 1 (id=6861): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.474962248s ago: executing program 1 (id=6862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000034c0)=ANY=[@ANYBLOB="000088ca0200030000"], 0xfce) 2.353694684s ago: executing program 5 (id=6864): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c"}, 0x5b) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 2.176838652s ago: executing program 3 (id=6865): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x100, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2.036707702s ago: executing program 5 (id=6867): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc) 1.84646666s ago: executing program 1 (id=6869): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='t') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='@') 1.77214299s ago: executing program 3 (id=6870): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) 1.070452303s ago: executing program 0 (id=6875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000001780)) 1.06245535s ago: executing program 2 (id=6876): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x101, 0x200, 0x4, 0x5}, 'syz1\x00', 0x1c}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_CREATE(r0, 0x5501) 990.111006ms ago: executing program 5 (id=6877): syz_clone(0x8002011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="c8ce", 0x2}], 0x1) ioctl$TIOCSBRK(r0, 0x5427) 795.209359ms ago: executing program 3 (id=6878): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x10000, 0xc, 0xf1, 0x7, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0xdddd1000, 0x10, 0xa, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x4000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x3, 0xfe, 0xd, 0x40, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x1, 0xd, 0x6, 0x3, 0xa, 0x1}, {0x100000, 0x4000, 0x3, 0x1, 0x3, 0x9, 0xd, 0x4, 0x6, 0x4, 0x5, 0x4b}, {0x60000, 0xffff1000, 0xe, 0x0, 0x6, 0x1, 0x21, 0xff, 0x4, 0x90, 0xfb, 0xfc}, {0x6000, 0xfec00000, 0x19, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x8080000, 0x8080000, 0x3, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0x6000, 0x9}, {0xfec00000, 0x4}, 0x40010000, 0x0, 0x8080000, 0x381, 0x3, 0xa400, 0x2, [0x100000003, 0x4, 0x7, 0xc5]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000"], 0xac}, 0x1, 0x0, 0x0, 0x618b37b523276f6c}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) 704.309449ms ago: executing program 0 (id=6879): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x10000, 0x7ffffffe, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x8, 0x2, 0x100004, 0xd, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x19a0, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3c, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x2, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x9, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xf8000000, 0x7, 0x1f, 0x402, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0xa, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x5, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x0, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0xe, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read(r0, 0x0, 0x18) 696.303288ms ago: executing program 2 (id=6880): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xb114c000) unshare(0x22020400) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 659.668674ms ago: executing program 3 (id=6881): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 473.701786ms ago: executing program 5 (id=6882): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000900)={0x9, 0x6, 0xfff, 0x3, r2}, 0x10) 473.49253ms ago: executing program 2 (id=6883): syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 464.923803ms ago: executing program 0 (id=6884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 417.669727ms ago: executing program 3 (id=6885): unshare(0x22060400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000a0000002f4900007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) 367.188117ms ago: executing program 2 (id=6886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @msi={0xf0dd, 0x1, 0xffffffff, 0x815e}}]}) 154.323088ms ago: executing program 3 (id=6887): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) 90.533171ms ago: executing program 2 (id=6888): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19c4", 0x2}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) 33.294536ms ago: executing program 0 (id=6889): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) fcntl$setstatus(r0, 0x4, 0x2400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0xe, 0x8, 0xfffffff1, 0xe, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x1, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x3, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0xfffffff9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x3ae2, 0x3b, 0xda6, 0x5, 0x80, 0x7, 0xfffffffe, 0x202, 0x0, 0xa2, 0xa, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7ffb, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400006, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x7fffffff, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 2 (id=6890): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) kernel console output (not intermixed with test programs): ][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.411149][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.727266][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5424'. [ 476.761459][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5424'. [ 477.193195][ T5832] Bluetooth: hci0: command tx timeout [ 478.403359][ T5918] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 478.522837][ T29] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 478.566004][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 478.593745][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 478.615659][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.663398][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.684103][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.698546][ T29] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 478.710712][ T5918] usb 2-1: config 0 descriptor?? [ 478.726239][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.738009][T18363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.766553][ T29] usb 4-1: config 0 descriptor?? [ 478.791026][ T29] gspca_main: spca508-2.14.0 probing 8086:0110 [ 479.011329][ T29] gspca_spca508: reg_read err -32 [ 479.031757][ T29] gspca_spca508: reg_read err -32 [ 479.062819][ T29] gspca_spca508: reg_read err -32 [ 479.191846][ T5918] plantronics 0003:047F:FFFF.0066: reserved main item tag 0xd [ 479.228888][ T5918] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 479.269510][ T29] gspca_spca508: reg_read err -71 [ 479.293286][ T29] gspca_spca508: reg write: error -71 [ 479.309495][ T29] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 479.335469][ T29] usb 4-1: USB disconnect, device number 73 [ 479.441284][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5463'. [ 479.478518][ T5918] usb 2-1: USB disconnect, device number 71 [ 481.547600][ T30] audit: type=1326 audit(1771647218.145:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.2.5492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e7359c629 code=0x0 [ 482.003425][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 482.178557][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 482.201058][ T5917] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 482.239249][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.289292][ T5917] usb 6-1: Product: syz [ 482.304061][ T5917] usb 6-1: Manufacturer: syz [ 482.308734][ T5917] usb 6-1: SerialNumber: syz [ 482.347773][ T5917] usb 6-1: config 0 descriptor?? [ 482.453867][ T9022] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 482.616872][ T9022] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 482.625265][ T5917] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 482.652816][ T9022] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 482.692387][ T9022] usb 2-1: config 150 has no interface number 0 [ 482.719074][ T9022] usb 2-1: config 150 interface 204 has no altsetting 0 [ 482.749607][ T9022] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 482.802706][ T9022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.824438][ T9022] usb 2-1: Product: syz [ 482.828693][ T9022] usb 2-1: Manufacturer: syz [ 482.840620][ T9022] usb 2-1: SerialNumber: syz [ 483.095970][ T9022] xr_serial 2-1:150.204: skipping garbage [ 483.112803][ T9022] xr_serial 2-1:150.204: xr_serial converter detected [ 483.392931][ T29] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 483.430096][ T5917] usb write operation failed. (-71) [ 483.445584][ T5917] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 483.457265][ T5917] dvbdev: DVB: registering new adapter (Terratec H7) [ 483.465554][ T5917] usb 6-1: media controller created [ 483.472497][ T5917] usb read operation failed. (-71) [ 483.479559][ T5917] usb write operation failed. (-71) [ 483.489693][ T5917] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 483.504246][ T5917] usb 6-1: USB disconnect, device number 2 [ 483.523319][ T5918] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 483.573517][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 483.580641][ T29] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 483.589719][ T29] usb 3-1: config 0 has no interface number 0 [ 483.598974][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 483.608735][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.617602][ T29] usb 3-1: Product: syz [ 483.621922][ T29] usb 3-1: Manufacturer: syz [ 483.626608][ T29] usb 3-1: SerialNumber: syz [ 483.634579][ T29] usb 3-1: config 0 descriptor?? [ 483.687129][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.699011][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.710655][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.725038][ T5918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.735566][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.747378][ T5918] usb 4-1: config 0 descriptor?? [ 483.914399][ T9022] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 483.923245][ T9022] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 483.945193][ T9022] usb 2-1: USB disconnect, device number 72 [ 483.963005][ T9022] xr_serial 2-1:150.204: device disconnected [ 484.060280][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 484.091700][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.148385][T18512] loop8: detected capacity change from 0 to 8 [ 484.158117][T18512] Dev loop8: unable to read RDB block 8 [ 484.164871][T18512] loop8: unable to read partition table [ 484.170923][T18512] loop8: partition table beyond EOD, truncated [ 484.180766][T18512] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 484.232233][ T5918] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 484.457447][ T5918] usb 4-1: USB disconnect, device number 74 [ 484.538662][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 484.564465][ T29] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 484.594385][ T29] usb 3-1: USB disconnect, device number 72 [ 485.168829][T18539] input: syz0 as /devices/virtual/input/input78 [ 485.437128][T18547] input: syz1 as /devices/virtual/input/input79 [ 485.675447][T18557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.902055][T18572] C: renamed from team_slave_0 (while UP) [ 485.940653][T18572] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5539'. [ 486.603464][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 486.763180][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 486.782238][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.782274][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.782314][ T5917] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 486.782337][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.809990][ T5917] usb 6-1: config 0 descriptor?? [ 486.829997][ T5917] hub 6-1:0.0: USB hub found [ 487.037005][ T5917] hub 6-1:0.0: 1 port detected [ 487.133656][ T9038] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 487.242371][ T5917] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 487.250819][T18622] loop2: detected capacity change from 0 to 7 [ 487.259230][ T5917] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 487.267600][T18622] Dev loop2: unable to read RDB block 7 [ 487.275299][T18622] loop2: unable to read partition table [ 487.286282][T18622] loop2: partition table beyond EOD, truncated [ 487.293507][ T5917] usbhid 6-1:0.0: can't add hid device: -71 [ 487.300820][T18622] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 487.311047][ T9038] usb 2-1: Using ep0 maxpacket: 8 [ 487.323773][ T5917] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 487.344448][ T9038] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 487.364156][ T9038] usb 2-1: config 0 has no interface number 0 [ 487.381366][ T9038] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.394218][ T5917] usb 6-1: USB disconnect, device number 3 [ 487.432501][ T9038] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 487.464238][ T9038] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.488958][ T9038] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.506490][ T9038] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 487.517339][ T9038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.543995][ T9038] usb 2-1: config 0 descriptor?? [ 487.568061][ T9038] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 487.870498][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'. [ 487.914203][ T9038] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 488.098280][ T9038] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 488.120901][ T9038] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 488.167964][T18649] syzkaller1: entered promiscuous mode [ 488.175881][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5561'. [ 488.185359][T18649] syzkaller1: entered allmulticast mode [ 488.210580][ T9038] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 488.233168][ T9038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.258439][ T9038] usb 4-1: Product: syz [ 488.263877][ T9038] usb 4-1: Manufacturer: syz [ 488.269759][ T9038] usb 4-1: SerialNumber: syz [ 488.287702][ T9038] usb 4-1: config 0 descriptor?? [ 488.294955][T18633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.303443][T18633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.538994][T18633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.557944][T18633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.114759][ T30] audit: type=1326 audit(1771647225.705:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.5.5570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c1c59c629 code=0x0 [ 489.323216][ T9022] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 489.434486][ T9038] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 489.482149][ T9038] dm9601 4-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, a0:15:61:32:e7:2f [ 489.507194][ T9022] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 489.541838][ T9022] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 489.560226][ T9038] usb 4-1: USB disconnect, device number 75 [ 489.583130][ T9022] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 489.597866][ T9038] dm9601 4-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 489.618942][ T9022] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 489.653242][ T9022] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 489.679419][ T9022] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 489.698131][ T9022] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 489.723313][ T9022] usb 3-1: Product: syz [ 489.735642][ T9022] usb 3-1: Manufacturer: syz [ 489.768377][ T9022] cdc_wdm 3-1:1.0: skipping garbage [ 489.780183][ T9022] cdc_wdm 3-1:1.0: skipping garbage [ 489.812226][ T9022] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 489.828647][ T9022] cdc_wdm 3-1:1.0: Unknown control protocol [ 489.837115][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 489.852081][ T29] usb 2-1: USB disconnect, device number 73 [ 489.920250][ T29] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 490.593377][ T29] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 490.779937][ T29] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 490.791580][ T29] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 490.800230][ T29] usb 4-1: Product: syz [ 490.804751][ T29] usb 4-1: Manufacturer: syz [ 490.809534][ T29] usb 4-1: SerialNumber: syz [ 490.823495][ T29] usb 4-1: config 0 descriptor?? [ 490.835080][ T29] ch341 4-1:0.0: ch341-uart converter detected [ 491.852877][ T29] ch341-uart ttyUSB0: failed to read break control: -71 [ 491.859936][ T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 491.901040][ T29] usb 4-1: USB disconnect, device number 76 [ 491.925048][ T29] ch341 4-1:0.0: device disconnected [ 492.045719][T18773] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.5605'. [ 492.120811][ T796] usb 3-1: USB disconnect, device number 73 [ 492.555083][ T9038] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 492.715846][ T9038] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 492.745873][ T9038] usb 6-1: config 0 has no interface number 0 [ 492.756792][ T9038] usb 6-1: config 0 interface 41 has no altsetting 0 [ 492.769053][ T9038] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 492.781249][ T9038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.790508][ T9038] usb 6-1: Product: syz [ 492.796109][ T9038] usb 6-1: Manufacturer: syz [ 492.800967][ T9038] usb 6-1: SerialNumber: syz [ 492.819275][ T9038] usb 6-1: config 0 descriptor?? [ 493.871434][ T9038] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 493.897291][ T9038] usb 6-1: USB disconnect, device number 4 [ 494.040685][T18825] netlink: 'syz.1.5625': attribute type 15 has an invalid length. [ 494.049422][T18825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5625'. [ 494.354858][ T29] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 494.554476][ T29] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 494.562542][ T29] usb 4-1: config 1 has no interface number 0 [ 494.584899][ T29] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 494.605143][ T29] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 494.607209][T18846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.627228][ T29] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.653368][ T29] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 494.686226][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.695135][ T9038] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 494.702792][ T29] usb 4-1: Product: syz [ 494.702815][ T29] usb 4-1: Manufacturer: syz [ 494.702833][ T29] usb 4-1: SerialNumber: syz [ 494.720048][T18827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 494.940849][ T9038] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 494.959962][ T9038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.970470][T18827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 494.978543][ T9038] usb 6-1: Product: syz [ 494.985134][ T9038] usb 6-1: Manufacturer: syz [ 494.989852][ T9038] usb 6-1: SerialNumber: syz [ 495.022389][ T9038] usb 6-1: config 0 descriptor?? [ 495.077545][ T9038] hub 6-1:0.0: bad descriptor, ignoring hub [ 495.105300][ T9038] hub 6-1:0.0: probe with driver hub failed with error -5 [ 495.224709][ T29] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 495.324654][ T9038] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 495.361786][ T9038] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 495.421982][ T9038] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 495.441432][ T9038] usb 6-1: media controller created [ 495.490758][ T9038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.718494][ T9038] DVB: Unable to find symbol dib7000p_attach() [ 495.741111][ T9038] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 495.888561][ T29] usb 4-1: USB disconnect, device number 77 [ 495.920451][ T29] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 495.983425][ T9038] rc_core: IR keymap rc-dib0700-rc5 not found [ 496.005802][ T9038] Registered IR keymap rc-empty [ 496.017002][ T9038] dvb-usb: could not initialize remote control. [ 496.031420][ T9038] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 496.060707][ T29] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 496.119485][ T9038] usb 6-1: USB disconnect, device number 5 [ 496.355635][ T9038] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 496.843326][ T9038] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 497.033460][ T9038] usb 4-1: Using ep0 maxpacket: 32 [ 497.045936][ T9038] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 497.086306][ T9038] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 497.158779][ T9038] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.205212][ T9038] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 497.256420][ T9038] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 497.274819][ T9038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.305139][ T9038] usb 4-1: Product: syz [ 497.309378][ T9038] usb 4-1: Manufacturer: syz [ 497.339223][ T9038] usb 4-1: SerialNumber: syz [ 497.395118][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 497.410436][ T9038] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input81 [ 497.594103][ T9038] imon:send_packet: packet tx failed (-71) [ 497.616430][ T9038] imon 4-1:155.0: panel buttons/knobs setup failed [ 497.636680][ T9038] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 497.665742][ T9038] (id 0x00) [ 497.796742][ T9038] rc_core: IR keymap rc-imon-pad not found [ 497.819764][ T9038] Registered IR keymap rc-empty [ 497.843327][ T9038] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 497.882586][ T9038] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 497.933910][ T9038] imon:send_packet: packet tx failed (-71) [ 497.977247][ T9038] imon 4-1:155.0: remote input dev register failed [ 497.997978][ T9038] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 498.120558][ T9038] imon 4-1:155.0: unable to initialize intf0, err 0 [ 498.176420][ T9038] imon:imon_probe: failed to initialize context! [ 498.194103][ T9038] imon 4-1:155.0: unable to register, err -19 [ 498.230876][ T9038] usb 4-1: USB disconnect, device number 78 [ 498.469902][T18965] delete_channel: no stack [ 498.498302][T18972] input: syz1 as /devices/virtual/input/input83 [ 498.885632][ T9038] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 499.043361][ T9038] usb 2-1: Using ep0 maxpacket: 16 [ 499.058072][ T9038] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.090828][ T9038] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.125970][ T9038] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 499.149555][ T9038] usb 2-1: config 0 interface 0 has no altsetting 0 [ 499.157615][ T9038] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 499.171109][ T9038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.189107][ T9038] usb 2-1: config 0 descriptor?? [ 499.203192][ T5918] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 499.243054][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 499.316773][ T36] tipc: Subscription rejected, illegal request [ 499.375467][ T5918] usb 4-1: config 0 has no interfaces? [ 499.387770][ T5918] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 499.418626][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.433663][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 499.448291][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.448363][ T5918] usb 4-1: Product: syz [ 499.468996][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 499.484902][ T5918] usb 4-1: Manufacturer: syz [ 499.491840][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.496737][ T5918] usb 4-1: SerialNumber: syz [ 499.515514][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.533395][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.543460][ T5918] usb 4-1: config 0 descriptor?? [ 499.546353][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.782785][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 499.806690][ T29] usbtmc 6-1:16.0: can't read capabilities [ 499.829333][ T796] usb 2-1: USB disconnect, device number 74 [ 499.853394][T19013] netlink: 'syz.0.5691': attribute type 5 has an invalid length. [ 499.868453][ T9038] usb 4-1: USB disconnect, device number 79 [ 500.025881][ T29] usb 6-1: USB disconnect, device number 6 [ 500.715964][ T30] audit: type=1800 audit(1771647237.305:143): pid=19037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5700" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 501.372810][ T29] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 501.424164][ T9038] IPVS: starting estimator thread 0... [ 501.440834][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449879][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.546856][T19061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5712'. [ 501.563380][T19057] IPVS: using max 27 ests per chain, 64800 per kthread [ 501.570504][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 501.585628][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.632197][ T29] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.668685][ T29] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.692112][ T29] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 501.724951][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 501.774563][ T29] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 501.809455][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.843826][ T29] usb 3-1: config 0 descriptor?? [ 501.845994][ T9038] hid_parser_main: 458 callbacks suppressed [ 501.846049][ T9038] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 501.933651][ T9038] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz0 [ 502.313863][ T796] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 502.356492][ T29] hid-thrustmaster 0003:044F:B65D.006A: unknown main item tag 0x0 [ 502.372795][ T29] hid-thrustmaster 0003:044F:B65D.006A: unknown main item tag 0x0 [ 502.391784][ T29] hid-thrustmaster 0003:044F:B65D.006A: item fetching failed at offset 2/5 [ 502.413516][ T29] hid-thrustmaster 0003:044F:B65D.006A: parse failed with error -22 [ 502.421635][ T29] hid-thrustmaster 0003:044F:B65D.006A: probe with driver hid-thrustmaster failed with error -22 [ 502.483001][ T796] usb 6-1: Using ep0 maxpacket: 8 [ 502.490064][ T796] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 502.502110][ T796] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 502.512598][ T796] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.523540][ T796] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.537612][ T796] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 502.547038][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.582117][ T9038] usb 3-1: USB disconnect, device number 74 [ 502.803002][ T796] usb 6-1: usb_control_msg returned -32 [ 502.819332][ T796] usbtmc 6-1:16.0: can't read capabilities [ 503.917947][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5745'. [ 505.090563][ T9038] usb 6-1: USB disconnect, device number 7 [ 505.182790][ T5918] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 505.353646][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 505.364452][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 505.377138][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.388214][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.399943][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 505.411283][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 505.439633][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 505.478498][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.514543][ T5918] usb 2-1: config 0 descriptor?? [ 505.556146][ T5832] Bluetooth: hci5: urb ffff888053b58f00 submission failed (90) [ 505.569196][T19182] Invalid argument reading file caps for ./file0 [ 505.748536][ T9022] usb 2-1: USB disconnect, device number 75 [ 506.003393][ T5918] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 506.173154][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 506.180355][ T5918] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 506.189268][ T5918] usb 3-1: config 2 has no interface number 0 [ 506.196379][ T5918] usb 3-1: config 2 interface 88 has no altsetting 0 [ 506.206693][ T5918] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 506.241753][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.257218][ T5918] usb 3-1: Product: syz [ 506.261532][ T5918] usb 3-1: Manufacturer: syz [ 506.267632][ T5918] usb 3-1: SerialNumber: syz [ 506.282847][ T9022] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 506.441711][ T9022] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 506.464617][ T9022] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 506.491191][ T9022] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 506.525248][ T9022] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 506.551335][ T9022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.571501][ T9022] usb 4-1: Product: syz [ 506.592850][ T9022] usb 4-1: Manufacturer: syz [ 506.597515][ T9022] usb 4-1: SerialNumber: syz [ 506.624761][ T9022] usb 4-1: config 0 descriptor?? [ 506.630787][T19195] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 506.641735][T19195] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 506.672398][ T9022] usb 4-1: ucan: probing device on interface #0 [ 506.751431][T19213] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5778'. [ 507.072878][ T796] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 507.258550][ T796] usb 6-1: Using ep0 maxpacket: 8 [ 507.274704][ T796] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 507.303464][ T796] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.318602][ T9022] ucan 4-1:0.0 can0: registered device [ 507.321702][ T5918] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 507.345054][ T796] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.353182][ T5918] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 507.374893][ T5918] asix 3-1:2.88: probe with driver asix failed with error -71 [ 507.383005][ T796] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.403080][ T796] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.416186][ T5918] usb 3-1: USB disconnect, device number 75 [ 507.426948][ T796] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.436527][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.493238][ T9022] ucan 4-1:0.0 can0: firmware string: 3٭(pU6OIO*)iܴUkwb@|y_55ou [ 507.685380][ T796] usb 6-1: usb_control_msg returned -32 [ 507.691028][ T796] usbtmc 6-1:16.0: can't read capabilities [ 507.711356][ T9022] usb 4-1: USB disconnect, device number 80 [ 508.792959][ T5917] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 508.971648][ T5917] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 508.991864][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.011649][ T5917] usb 4-1: config 0 descriptor?? [ 509.441211][ T5917] ath6kl: Failed to read usb control message: -71 [ 509.449051][ T5917] ath6kl: Unable to read the bmi data from the device: -71 [ 509.457903][ T5917] ath6kl: Unable to recv target info: -71 [ 509.474505][ T5917] ath6kl: Failed to init ath6kl core: -71 [ 509.481122][ T5917] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 509.521631][ T5917] usb 4-1: USB disconnect, device number 81 [ 509.552811][ T9022] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 509.717938][ T9022] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 509.742853][ T9022] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 509.775353][ T9022] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.796337][ T9022] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 509.824150][ T9022] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 509.849017][ T9022] usb 2-1: Product: syz [ 509.862814][ T9022] usb 2-1: Manufacturer: syz [ 509.867477][ T9022] usb 2-1: SerialNumber: syz [ 509.879074][ T29] usb 6-1: USB disconnect, device number 8 [ 509.888616][ T9022] usb 2-1: config 0 descriptor?? [ 509.927802][ T9022] usb 2-1: selecting invalid altsetting 0 [ 510.194281][T19306] usb 2-1: cannot submit urb 0, error -90: internal error [ 510.202519][T19306] usb 2-1: cannot submit urb 0, error -90: internal error [ 510.245644][T19306] usb 2-1: cannot submit urb 0, error -90: internal error [ 510.259583][T19306] usb 2-1: cannot submit urb 0, error -90: internal error [ 510.277704][ T29] usb 2-1: USB disconnect, device number 76 [ 510.739274][T19339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5820'. [ 510.749315][T19339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5820'. [ 510.847269][T19341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.962752][ T5917] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 511.014730][T19346] kvm: user requested TSC rate below hardware speed [ 511.115301][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.139726][ T5917] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 511.177955][ T5917] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 511.219978][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.238761][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.255668][ T5917] usb 4-1: Product: syz [ 511.270233][ T5917] usb 4-1: Manufacturer: syz [ 511.280382][ T5917] usb 4-1: SerialNumber: syz [ 512.130551][T19387] overlay: Unknown parameter '\-' [ 512.347380][T19401] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5844'. [ 512.365616][ T5917] cdc_ncm 4-1:1.0: bind() failure [ 512.396335][ T5917] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 512.451527][ T5917] usb 4-1: USB disconnect, device number 82 [ 512.586591][T19410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5848'. [ 513.032884][ T29] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 513.209923][ T9022] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 513.217626][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 513.236095][ T9022] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.254219][ T29] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 513.273832][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.294641][ T29] usb 3-1: config 0 descriptor?? [ 513.313486][ T29] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 514.232829][ T796] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 514.352516][ T29] usb 3-1: USB disconnect, device number 76 [ 514.409846][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.430620][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.442326][ T796] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.456564][ T796] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.487380][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.504266][ T796] usb 6-1: config 0 descriptor?? [ 514.950310][ T796] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 515.174680][ T9022] usb 6-1: USB disconnect, device number 9 [ 515.343298][ T9038] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 515.496332][ T9038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.507743][ T9038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.517787][ T9038] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.530749][ T9038] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.540510][ T9038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.551932][ T9038] usb 3-1: config 0 descriptor?? [ 515.675268][ T9022] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 515.869600][ T9022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.901130][ T9022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.931904][ T9022] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.956913][ T9022] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.988898][ T9022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.030993][ T9038] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 516.035419][ T9022] usb 4-1: config 0 descriptor?? [ 516.572429][ T9022] plantronics 0003:047F:FFFF.006E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 517.277665][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5894'. [ 517.346174][ T9022] usb 4-1: USB disconnect, device number 83 [ 517.743723][ T9038] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 517.895822][ T9038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.935658][ T5917] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 517.952191][ T9038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.965188][ T9038] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 517.976391][ T9038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.995042][ T9038] usb 6-1: config 0 descriptor?? [ 518.122485][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.142031][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.165463][ T5917] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 518.175389][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.189823][ T29] usb 3-1: USB disconnect, device number 77 [ 518.195962][ T5917] usb 2-1: config 0 descriptor?? [ 518.435672][ T9038] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 518.445910][ T9038] cp2112 0003:10C4:EA90.006F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 518.617527][ T5917] hid-steam 0003:28DE:1142.0070: unknown main item tag 0x0 [ 518.627828][ T5917] hid-steam 0003:28DE:1142.0070: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 518.641258][ T9038] cp2112 0003:10C4:EA90.006F: error requesting version [ 518.651157][ T9038] cp2112 0003:10C4:EA90.006F: probe with driver cp2112 failed with error -71 [ 518.653838][ T29] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 518.675695][ T9038] usb 6-1: USB disconnect, device number 10 [ 518.703327][ T5917] hid-steam 0003:28DE:1142.0070: Steam wireless receiver connected [ 518.711747][ T5917] hid-steam 0003:28DE:1142.0070: No HID_FEATURE_REPORT submitted - nothing to read [ 518.730399][ T5917] hid-steam 0003:28DE:1142.0071: unknown main item tag 0x0 [ 518.753474][ T5917] hid-steam 0003:28DE:1142.0071: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 518.836341][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.869282][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 518.895797][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 518.917221][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.930656][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.940096][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.954281][ T29] usb 3-1: config 0 descriptor?? [ 519.008319][ T796] usb 2-1: USB disconnect, device number 77 [ 519.028179][ T796] hid-steam 0003:28DE:1142.0070: Steam wireless receiver disconnected [ 519.381615][ T29] plantronics 0003:047F:FFFF.0072: ignoring exceeding usage max [ 519.401813][ T29] plantronics 0003:047F:FFFF.0072: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 519.553416][ T9038] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 519.650330][T19552] netlink: 'syz.1.5908': attribute type 8 has an invalid length. [ 519.715386][ T9038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.727688][ T9038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.740239][ T9038] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 519.750685][ T9038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.768548][ T9038] usb 6-1: config 0 descriptor?? [ 519.970376][T19558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5911'. [ 519.980629][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5911'. [ 520.210959][ T9038] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 520.226744][ T9038] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 520.239397][ T9038] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0073/input/input84 [ 520.282470][ T9038] cm6533_jd 0003:0D8C:0022.0073: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 520.363049][ T5917] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 520.428778][ T9038] usb 6-1: USB disconnect, device number 11 [ 520.526242][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.539146][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.550093][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.563979][ T5917] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.573751][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.586801][ T5917] usb 2-1: config 0 descriptor?? [ 521.054052][ T5917] plantronics 0003:047F:FFFF.0074: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 521.298053][ T29] usb 2-1: USB disconnect, device number 78 [ 521.536813][ T9038] usb 3-1: USB disconnect, device number 78 [ 521.843264][ T5917] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 522.015754][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 522.050759][ T5917] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 522.076961][ T5917] usb 6-1: config 0 has no interface number 0 [ 522.098648][ T5917] usb 6-1: config 0 interface 12 has no altsetting 0 [ 522.140260][ T5917] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 522.164469][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.172529][ T5917] usb 6-1: Product: syz [ 522.221749][ T5917] usb 6-1: Manufacturer: syz [ 522.232517][ T5917] usb 6-1: SerialNumber: syz [ 522.262557][ T5917] usb 6-1: config 0 descriptor?? [ 523.172117][T19642] netlink: 'syz.2.5946': attribute type 2 has an invalid length. [ 523.192378][T19642] : entered promiscuous mode [ 523.201486][T19642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5946'. [ 523.320993][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5947'. [ 523.345286][ T5917] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 523.371222][ T5917] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 523.400698][ T5917] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 523.450643][ T5917] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 523.515414][ T5917] usb 6-1: USB disconnect, device number 12 [ 523.618836][T19654] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 524.629104][T19699] loop3: detected capacity change from 0 to 7 [ 524.653969][T19699] Dev loop3: unable to read RDB block 7 [ 524.664357][T19699] loop3: unable to read partition table [ 524.672057][T19699] loop3: partition table beyond EOD, truncated [ 524.686096][T19699] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 525.483954][ T9038] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 525.652764][ T9038] usb 4-1: Using ep0 maxpacket: 32 [ 525.661763][ T9038] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 525.682755][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 525.691965][ T9038] usb 4-1: config 0 interface 0 has no altsetting 0 [ 525.712425][ T9038] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 525.740742][ T9038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.765143][ T9038] usb 4-1: config 0 descriptor?? [ 525.856539][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 525.895722][ T29] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 525.910504][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.923006][ T29] usb 6-1: Product: syz [ 525.927312][ T29] usb 6-1: Manufacturer: syz [ 525.932204][ T29] usb 6-1: SerialNumber: syz [ 525.940260][ T29] usb 6-1: config 0 descriptor?? [ 525.949820][ T29] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 525.960466][ T29] usb 6-1: Detected FT-X [ 526.152071][ T29] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 526.363058][ T796] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 526.525644][ T796] usb 3-1: config 0 has no interfaces? [ 526.531717][ T796] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 526.543521][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.557577][ T796] usb 3-1: config 0 descriptor?? [ 526.571145][ T9038] corsair-cpro 0003:1B1C:0C10.0075: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 526.595128][ T29] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 526.762040][ T9038] corsair-cpro 0003:1B1C:0C10.0075: probe with driver corsair-cpro failed with error -61 [ 526.782115][ T29] usb 6-1: USB disconnect, device number 13 [ 526.794546][ T796] usb 3-1: USB disconnect, device number 79 [ 526.838546][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 526.873370][ T29] ftdi_sio 6-1:0.0: device disconnected [ 526.967069][ T9038] usb 4-1: USB disconnect, device number 84 [ 528.312602][ T9026] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 528.513562][ T9026] usb 4-1: Using ep0 maxpacket: 16 [ 528.528548][ T9026] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 528.545203][ T9026] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.562245][ T9026] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.573341][ T9026] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 528.623342][ T9026] usb 4-1: config 7 interface 0 has no altsetting 0 [ 528.643156][ T9026] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 528.682263][ T9026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.943860][ T9038] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 529.029350][T19827] syzkaller1: entered promiscuous mode [ 529.036390][T19827] syzkaller1: entered allmulticast mode [ 529.113621][ T9038] usb 6-1: Using ep0 maxpacket: 8 [ 529.121355][ T9038] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 529.131911][ T9038] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.142501][ T9038] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.155448][ T9038] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.166502][ T9038] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.181674][ T9038] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.195536][ T9038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.198134][ T9026] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0076/input/input86 [ 529.276795][T19829] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6018'. [ 529.287735][T19829] netlink: ct family unspecified [ 529.332525][ T9026] kye 0003:0458:5010.0076: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 529.380153][ T9026] usb 4-1: USB disconnect, device number 85 [ 529.462562][ T9038] usb 6-1: usb_control_msg returned -32 [ 529.487188][T19830] fido_id[19830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 529.494696][ T9038] usbtmc 6-1:16.0: can't read capabilities [ 529.842859][ T796] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 529.893284][ T9038] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 530.003050][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 530.013244][ T796] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 530.022100][ T796] usb 3-1: config 0 has no interface number 0 [ 530.030420][ T796] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 530.042928][ T796] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 530.052168][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.054704][ T9038] usb 2-1: Using ep0 maxpacket: 32 [ 530.063545][ T796] usb 3-1: Product: syz [ 530.069550][ T796] usb 3-1: Manufacturer: syz [ 530.074731][ T9038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.074764][ T9038] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.074802][ T9038] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 530.074827][ T9038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.088472][ T9038] usb 2-1: config 0 descriptor?? [ 530.129859][ T796] usb 3-1: SerialNumber: syz [ 530.137411][ T796] usb 3-1: config 0 descriptor?? [ 530.143533][T19834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.365724][T19834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 530.535344][ T9038] ft260 0003:0403:6030.0077: unknown main item tag 0x0 [ 530.542423][ T9038] ft260 0003:0403:6030.0077: unknown main item tag 0x0 [ 530.730917][ T9038] ft260 0003:0403:6030.0077: chip code: 6424 8183 [ 531.139996][ T9026] usb 2-1: USB disconnect, device number 79 [ 531.183505][ T796] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 531.205393][ T796] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 531.389531][ T796] asix 3-1:0.191 eth5: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 78:c6:06:b7:cb:4a [ 531.407274][ T796] usb 3-1: USB disconnect, device number 80 [ 531.424333][ T796] asix 3-1:0.191 eth5: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 531.482740][ T9038] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 531.654390][ T9038] usb 4-1: Using ep0 maxpacket: 8 [ 531.686923][ T9038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.725812][ T9038] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 531.758878][ T9038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.788410][ T5917] usb 6-1: USB disconnect, device number 14 [ 531.804710][ T9038] usb 4-1: config 0 descriptor?? [ 532.251694][ T9038] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 532.457963][T19876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6037'. [ 532.459577][ T5918] usb 4-1: USB disconnect, device number 86 [ 532.871297][T19890] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6045'. [ 533.228762][T19909] input: syz0 as /devices/virtual/input/input88 [ 533.423274][ T5918] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 533.588268][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.610331][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.634515][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.672385][ T5918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.700145][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.721094][ T5918] usb 4-1: config 0 descriptor?? [ 534.182406][ T5918] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 534.428633][ T5918] usb 4-1: USB disconnect, device number 87 [ 535.672947][ T796] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 535.821200][T19984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.855219][ T796] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 535.864245][ T796] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 535.875692][ T796] usb 6-1: config 8 has no interface number 0 [ 535.881922][ T796] usb 6-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 535.903371][ T796] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid wMaxPacketSize 0 [ 535.916851][ T796] usb 6-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.930148][ T796] usb 6-1: config 8 interface 177 has no altsetting 0 [ 535.937182][ T796] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 535.948837][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.175034][ T796] usb 6-1: string descriptor 0 read error: -71 [ 536.196490][ T796] ir_toy 6-1:8.177: required endpoints not found [ 536.216445][ T796] usb 6-1: USB disconnect, device number 15 [ 536.534089][ T29] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 536.689065][T20009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.723486][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 536.736473][ T29] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 536.755611][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.782900][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.818837][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.885426][ T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.927035][ T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.963909][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.198795][ T29] usb 2-1: usb_control_msg returned -32 [ 537.205883][ T29] usbtmc 2-1:16.0: can't read capabilities [ 537.564992][T20043] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 537.576518][ T9026] usb 2-1: USB disconnect, device number 80 [ 537.612911][ T29] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 537.781636][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.809892][ T29] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 537.844365][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.868320][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.887221][ T29] usb 3-1: Product: syz [ 537.891442][ T29] usb 3-1: Manufacturer: syz [ 537.896628][ T29] usb 3-1: SerialNumber: syz [ 537.910905][ T29] cdc_mbim 3-1:1.0: skipping garbage [ 538.119795][T20038] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 538.569630][T20070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.702401][ T30] audit: type=1326 audit(1771647275.295:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.1.6121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f941959c629 code=0x0 [ 538.745899][T20038] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 538.754254][ T29] cdc_mbim 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 538.761812][ T29] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 538.965409][ T29] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 538.975483][ T29] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 538.992367][ T29] wwan wwan0: port wwan0mbim0 attached [ 539.006656][ T29] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 46:d1:ff:a0:2a:6c [ 539.026833][ T29] usb 3-1: USB disconnect, device number 81 [ 539.034559][ T29] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 539.086239][ T29] wwan wwan0: port wwan0mbim0 disconnected [ 539.833976][ T29] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 540.006440][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 540.053618][ T29] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 540.081910][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.113844][ T29] usb 4-1: config 0 descriptor?? [ 540.129716][T20086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 540.575432][ T30] audit: type=1326 audit(1771647277.175:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.6141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c1c59c629 code=0x0 [ 540.581409][ T29] elan 0003:04F3:0755.0079: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 540.946340][T20135] netlink: 'syz.1.6144': attribute type 1 has an invalid length. [ 541.022384][T20135] bond1: entered promiscuous mode [ 541.028346][T20135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.084589][T20140] bond1: (slave bridge1): making interface the new active one [ 541.114980][T20140] bridge1: entered promiscuous mode [ 541.122449][T20140] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 541.473215][ T29] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 541.642817][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 541.650061][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.665353][ T29] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 541.677707][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.691608][ T29] usb 3-1: config 0 descriptor?? [ 541.913485][ T29] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 542.122101][ T9038] usb 3-1: USB disconnect, device number 82 [ 542.453600][ T5918] usb 4-1: USB disconnect, device number 88 [ 542.961837][T20186] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6168'. [ 542.982859][ T9026] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 543.034754][T20188] loop4: detected capacity change from 0 to 7 [ 543.063537][T20188] Dev loop4: unable to read RDB block 7 [ 543.069177][T20188] loop4: unable to read partition table [ 543.101884][T20188] loop4: partition table beyond EOD, truncated [ 543.116996][T20188] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 543.135887][ T9026] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.168030][ T9026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.212895][ T9026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.244040][ T9026] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.287864][ T9026] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.306990][ T9026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.347061][ T9026] usb 3-1: config 0 descriptor?? [ 543.768237][ T9026] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0 [ 543.784335][ T9026] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0 [ 543.816218][ T9026] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0 [ 543.846041][ T9026] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0 [ 543.874587][ T9026] plantronics 0003:047F:FFFF.007A: unknown main item tag 0x0 [ 543.904444][ T9026] plantronics 0003:047F:FFFF.007A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 544.064752][ T9026] usb 3-1: USB disconnect, device number 83 [ 544.358864][T20229] netlink: 'syz.3.6188': attribute type 1 has an invalid length. [ 544.373130][T20229] netlink: 'syz.3.6188': attribute type 2 has an invalid length. [ 544.979014][T20254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6198'. [ 544.988361][T20254] netlink: 'syz.1.6198': attribute type 7 has an invalid length. [ 544.997295][T20254] netlink: 'syz.1.6198': attribute type 8 has an invalid length. [ 545.006775][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6198'. [ 545.042535][T20254] gretap0: entered promiscuous mode [ 545.082456][T20254] gretap0: left promiscuous mode [ 547.004459][T20316] input: syz0 as /devices/virtual/input/input91 [ 547.487265][T20334] sock: sock_set_timeout: `syz.3.6232' (pid 20334) tries to set negative timeout [ 548.019389][T20354] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6242'. [ 548.204746][ T5917] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 548.370808][ T5917] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 548.384360][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.423257][ T5917] usb 3-1: Product: syz [ 548.427529][ T5917] usb 3-1: Manufacturer: syz [ 548.435563][T20372] cifs: Unknown parameter 'fd' [ 548.448816][ T5917] usb 3-1: SerialNumber: syz [ 548.462561][T20370] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 548.888783][ T9026] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 548.917057][ T9026] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 549.104949][ T5917] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:6f:f4:d8:d0:ec [ 549.137377][ T5917] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 550.067613][T20416] kernel read not supported for file /net_prio.prioidx (pid: 20416 comm: syz.5.6262) [ 550.096912][ T30] audit: type=1800 audit(1771647286.695:146): pid=20416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6262" name="net_prio.prioidx" dev="mqueue" ino=83637 res=0 errno=0 [ 550.176155][ C1] usb 3-1: Rx status -71 [ 550.177311][ T9038] usb 3-1: USB disconnect, device number 84 [ 550.180585][ C1] usb 3-1: eth5: intr status -71 [ 550.199950][ T5487] usb 3-1: device reset failed [ 551.146088][ T5917] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 551.314835][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 551.328905][ T5917] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 551.350511][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.370971][ T5917] usb 3-1: Product: syz [ 551.382931][ T5917] usb 3-1: Manufacturer: syz [ 551.391828][ T5917] usb 3-1: SerialNumber: syz [ 551.414348][ T5917] usb 3-1: config 0 descriptor?? [ 551.430423][ T5917] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 551.451306][ T5917] usb 3-1: Detected FT232H [ 551.635172][ T5917] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 551.782950][ T796] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 551.887093][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6280'. [ 551.952764][ T796] usb 6-1: Using ep0 maxpacket: 16 [ 551.972211][ T796] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 551.990517][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.007638][ T796] usb 6-1: Product: syz [ 552.012019][ T796] usb 6-1: Manufacturer: syz [ 552.017964][ T796] usb 6-1: SerialNumber: syz [ 552.038037][ T796] usb 6-1: config 0 descriptor?? [ 552.091451][ T5917] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 552.275653][ T5917] usb 3-1: USB disconnect, device number 85 [ 552.307731][ T5917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 552.326017][ T5917] ftdi_sio 3-1:0.0: device disconnected [ 552.465453][ T796] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 552.486678][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 552.513706][ T796] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 552.521694][ T796] usb 6-1: media controller created [ 552.544479][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.976991][T20500] netlink: 'syz.1.6290': attribute type 1 has an invalid length. [ 553.095984][T20500] bond2: entered promiscuous mode [ 553.113442][T20500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.148985][ T796] zl10353_read_register: readreg error (reg=127, ret==0) [ 553.156532][T20462] dtv5100: wlen = f4, aborting. [ 553.194103][ T796] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 553.202072][ T796] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 553.231917][T20508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.319173][ T796] usb 6-1: USB disconnect, device number 16 [ 553.386907][T20502] bond2: (slave veth3): making interface the new active one [ 553.456760][T20502] veth3: entered promiscuous mode [ 553.475717][T20502] bond2: (slave veth3): Enslaving as an active interface with an up link [ 553.511660][ T796] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 553.731969][T20522] ip6tnl2: entered allmulticast mode [ 554.132780][ T9026] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 554.282982][ T9026] usb 6-1: Using ep0 maxpacket: 32 [ 554.290760][ T9026] usb 6-1: config 0 interface 0 has no altsetting 0 [ 554.300565][ T9026] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 554.309779][ T9026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.318086][ T9026] usb 6-1: Product: syz [ 554.322284][ T9026] usb 6-1: Manufacturer: syz [ 554.326959][ T9026] usb 6-1: SerialNumber: syz [ 554.336390][ T9026] usb 6-1: config 0 descriptor?? [ 554.749281][ T9026] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 555.153057][ T9026] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 555.179576][ T9026] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 555.293329][T20547] sctp: [Deprecated]: syz.1.6311 (pid 20547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.293329][T20547] Use struct sctp_sack_info instead [ 555.359904][T20549] input: syz0 as /devices/virtual/input/input92 [ 555.389306][ T9026] usb 6-1: USB disconnect, device number 17 [ 555.703402][ T5918] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 555.875300][ T5918] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 555.884501][ T5918] usb 2-1: config 0 has no interface number 0 [ 555.890698][ T5918] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 555.903448][ T5918] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 555.923255][ T5918] usb 2-1: config 0 interface 255 has no altsetting 0 [ 555.930106][ T5918] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 555.956552][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.968354][ T5918] usb 2-1: config 0 descriptor?? [ 555.976718][ T5918] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 556.184660][ T796] usb 2-1: USB disconnect, device number 81 [ 556.282857][ T9026] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 556.434810][ T9026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.446204][ T9026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.456707][ T9026] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.476741][ T9026] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.486540][ T9026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.512870][ T9026] usb 6-1: config 0 descriptor?? [ 556.946287][ T9026] plantronics 0003:047F:FFFF.007C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 557.153281][ T5917] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 557.236320][ T5918] usb 6-1: USB disconnect, device number 18 [ 557.343399][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 557.366186][ T5917] usb 2-1: config 0 has no interfaces? [ 557.377496][ T5917] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 557.388574][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.423351][ T5917] usb 2-1: config 0 descriptor?? [ 558.143305][ T5917] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 558.313663][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 558.336817][ T5917] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 558.352773][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.387402][ T5917] usb 3-1: config 0 descriptor?? [ 558.416019][ T5917] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 559.415905][ T5917] gspca_sonixj: reg_w1 err -71 [ 559.457188][ T5917] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 559.489746][ T5917] usb 3-1: USB disconnect, device number 86 [ 559.940557][ T9026] usb 2-1: USB disconnect, device number 82 [ 560.373470][ T5917] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 560.553537][ T9038] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 560.581003][ T5917] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 560.603302][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.611494][ T5917] usb 3-1: Product: syz [ 560.620330][ T5917] usb 3-1: Manufacturer: syz [ 560.626301][ T5917] usb 3-1: SerialNumber: syz [ 560.635521][ T5917] usb 3-1: config 0 descriptor?? [ 560.673678][ T5918] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 560.745302][ T9038] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.773920][ T9038] usb 6-1: config 1 has no interface number 0 [ 560.780136][ T9038] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.808999][ T9038] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 560.819711][ T9038] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.834713][ T9038] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 560.847170][ T9038] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.859730][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 560.871027][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.886789][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 560.896788][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.905581][ T9038] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.918778][ T9038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.933107][ T5918] usb 2-1: config 0 descriptor?? [ 560.940029][ T9038] usb 6-1: Product: syz [ 560.950883][ T9038] usb 6-1: Manufacturer: syz [ 560.957909][ T9038] usb 6-1: SerialNumber: syz [ 561.206868][T20679] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 561.374743][ T5918] mcp2221 0003:04D8:00DD.007D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 561.678435][ T5917] usb 3-1: Firmware version (0.0) predates our first public release. [ 561.706737][ T5917] usb 3-1: Please update to version 0.2 or newer [ 561.767238][ T796] usb 2-1: USB disconnect, device number 83 [ 561.817277][ T5917] usb 3-1: USB disconnect, device number 87 [ 561.852222][T20679] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 561.883925][ T9038] cdc_ncm 6-1:1.1: bind() failure [ 562.085315][ T9026] usb 6-1: USB disconnect, device number 19 [ 562.663608][ T5917] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 562.867385][ T5917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.880626][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.887746][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.910243][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.927577][ T5917] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 562.937894][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 562.946993][ T5917] usb 3-1: SerialNumber: syz [ 562.973628][ T5918] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 563.145899][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.173887][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.196087][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.219322][ T5917] usb 3-1: 0:2 : does not exist [ 563.232366][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.310021][ T5917] usb 3-1: USB disconnect, device number 88 [ 563.368868][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.467547][ T5918] usb 6-1: GET_CAPABILITIES returned 0 [ 563.474990][ T5918] usbtmc 6-1:16.0: can't read capabilities [ 563.687506][ T5917] usb 6-1: USB disconnect, device number 20 [ 564.433085][ T796] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 564.622611][ T796] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 564.653863][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.688703][ T796] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 564.718251][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.737100][ T796] usb 3-1: Product: syz [ 564.741333][ T796] usb 3-1: Manufacturer: syz [ 564.769692][ T796] usb 3-1: SerialNumber: syz [ 564.821829][ T796] usb 3-1: config 0 descriptor?? [ 564.893301][ T796] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 564.899663][ T796] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 565.106060][ T796] usb 3-1: USB disconnect, device number 89 [ 565.163473][ T5917] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 565.329238][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.366095][ T5917] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 565.400628][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.463887][ T5917] usb 2-1: config 0 descriptor?? [ 565.501649][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 565.898656][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 565.920016][ T5917] pwc: recv_control_msg error -32 req 02 val 2700 [ 566.148002][ T5917] pwc: recv_control_msg error -71 req 04 val 1000 [ 566.184083][ T5917] pwc: recv_control_msg error -71 req 04 val 1300 [ 566.203235][ T5917] pwc: recv_control_msg error -71 req 04 val 1400 [ 566.245738][ T5917] pwc: recv_control_msg error -71 req 02 val 2000 [ 566.283308][ T5917] pwc: recv_control_msg error -71 req 02 val 2100 [ 566.305829][ T5917] pwc: recv_control_msg error -71 req 04 val 1500 [ 566.336597][ T5917] pwc: recv_control_msg error -71 req 02 val 2500 [ 566.356016][ T5917] pwc: recv_control_msg error -71 req 02 val 2400 [ 566.377329][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 566.393776][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 566.430845][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 566.471385][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 566.516648][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 566.525265][T20823] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6429'. [ 566.557365][ T5917] pwc: Registered as video103. [ 566.589124][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input93 [ 566.674033][ T5917] usb 2-1: USB disconnect, device number 84 [ 566.883383][ T9038] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 567.063378][ T9038] usb 6-1: Using ep0 maxpacket: 8 [ 567.088173][ T9038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.113504][ T9038] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 567.139375][ T9038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.181169][ T9038] usb 6-1: config 0 descriptor?? [ 567.204231][ T9038] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 567.408685][ T5918] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 567.438567][ T5918] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 568.227655][ T9038] gspca_vc032x: reg_r err -71 [ 568.254980][ T9038] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 568.278646][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6447'. [ 568.288177][T20862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6447'. [ 568.299053][ T9038] usb 6-1: USB disconnect, device number 21 [ 568.803231][ T796] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 568.976177][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 568.987158][ T796] usb 3-1: not running at top speed; connect to a high speed hub [ 568.997300][ T796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.008491][ T796] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.021571][ T796] usb 3-1: string descriptor 0 read error: -22 [ 569.028817][ T796] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.038206][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.065130][ T796] usb 3-1: 0:2 : does not exist [ 569.073062][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 569.246269][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.263432][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 569.276194][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 569.286178][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.299353][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.312688][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.333920][ T29] usb 6-1: config 0 descriptor?? [ 569.761276][ T29] plantronics 0003:047F:FFFF.007F: ignoring exceeding usage max [ 569.815998][ T29] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 570.139482][ T796] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 570.167155][ T796] usb 3-1: Warning! Unlikely big volume range (=4294967295), cval->res is probably wrong. [ 570.179416][ T796] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -24635/13664/-25425 [ 570.208602][ T796] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 570.246058][ T796] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 570.312508][ T796] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 570.388380][ T796] usb 3-1: USB disconnect, device number 90 [ 571.393703][ T5917] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 571.555873][ T5917] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 571.565759][ T5917] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 571.577541][ T5917] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 571.593843][ T5917] usb 4-1: config 150 has no interface number 0 [ 571.600179][ T5917] usb 4-1: config 150 interface 204 has no altsetting 0 [ 571.613056][ T29] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 571.632142][ T5917] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 571.662207][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.672141][ T5917] usb 4-1: Product: syz [ 571.678976][ T5917] usb 4-1: Manufacturer: syz [ 571.686578][ T5917] usb 4-1: SerialNumber: syz [ 571.783710][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 571.791583][ T29] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 571.805780][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 571.813053][ T29] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 571.822834][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.835538][ T29] usb 2-1: config 0 descriptor?? [ 571.845991][ T9038] usb 6-1: USB disconnect, device number 22 [ 571.953868][ T5917] usb 4-1: USB disconnect, device number 89 [ 572.279678][ T29] corsair-cpro 0003:1B1C:0C10.0080: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 572.638252][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6499'. [ 572.684248][ T29] corsair-cpro 0003:1B1C:0C10.0080: probe with driver corsair-cpro failed with error -71 [ 572.725159][ T29] usb 2-1: USB disconnect, device number 85 [ 573.330518][ T30] audit: type=1326 audit(1771647309.925:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21002 comm="syz.1.6508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f941959c629 code=0x0 [ 573.649494][T21008] netlink: 'syz.3.6510': attribute type 2 has an invalid length. [ 573.663250][ T9038] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 573.833723][ T9038] usb 3-1: Using ep0 maxpacket: 16 [ 573.845128][ T9038] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 573.876006][ T9038] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.902234][ T9038] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.926216][ T9038] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 573.952036][ T9038] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 574.007193][ T9038] usb 3-1: config 0 has no interface number 0 [ 574.026659][ T9038] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 574.055526][ T9038] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 574.099630][ T9038] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 574.128002][ T9038] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.190939][ T9038] usb 3-1: config 0 interface 125 has no altsetting 0 [ 574.244979][ T9038] usb 3-1: config 0 interface 125 has no altsetting 2 [ 574.290078][ T9038] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 574.339576][ T9038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.363296][ T9038] usb 3-1: Product: syz [ 574.367540][ T9038] usb 3-1: Manufacturer: syz [ 574.372213][ T9038] usb 3-1: SerialNumber: syz [ 574.395031][T21023] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6517'. [ 574.429178][ T9038] usb 3-1: config 0 descriptor?? [ 574.471172][ T9038] usb 3-1: selecting invalid altsetting 2 [ 575.535936][ T9038] usb 3-1: USB disconnect, device number 91 [ 575.941760][T21066] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6530'. [ 576.153237][T21072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.463522][T21081] syzkaller1: entered promiscuous mode [ 576.480455][T21081] syzkaller1: entered allmulticast mode [ 576.488133][T21083] netlink: 340 bytes leftover after parsing attributes in process `syz.3.6538'. [ 576.671710][T21089] syz_tun: entered allmulticast mode [ 576.684743][T21086] syz_tun: left allmulticast mode [ 576.892879][ T29] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 577.055292][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.066681][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.076954][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.090204][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.099568][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.111960][ T29] usb 2-1: config 0 descriptor?? [ 577.553280][ T29] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 577.813938][ T9038] usb 2-1: USB disconnect, device number 86 [ 578.263328][ T9038] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 578.433498][ T9038] usb 6-1: Using ep0 maxpacket: 16 [ 578.446111][ T9038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.474181][ T9038] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 578.499636][ T9038] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 578.549846][ T9038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.606274][ T9038] usb 6-1: config 0 descriptor?? [ 578.730854][T21130] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6557'. [ 579.118442][ T9038] nintendo 0003:057E:2019.0082: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 579.484626][ T9038] nintendo 0003:057E:2019.0082: Failed to get joycon info; ret=-71 [ 579.491287][T21145] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.6563'. [ 579.504880][ T9038] nintendo 0003:057E:2019.0082: Failed to retrieve controller info; ret=-71 [ 579.519322][ T9038] nintendo 0003:057E:2019.0082: Failed to initialize controller; ret=-71 [ 579.557781][ T9038] nintendo 0003:057E:2019.0082: probe - fail = -71 [ 579.584261][ T9038] nintendo 0003:057E:2019.0082: probe with driver nintendo failed with error -71 [ 579.626190][ T9038] usb 6-1: USB disconnect, device number 23 [ 579.693836][T21151] veth1_to_bond: entered allmulticast mode [ 579.750598][T21150] veth1_to_bond: left allmulticast mode [ 580.906475][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6586'. [ 582.134683][T21236] cgroup: fork rejected by pids controller in /syz2 [ 582.193740][ T5917] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 582.353321][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 582.361044][ T5917] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 582.376892][ T5917] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 582.389740][ T5917] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.402526][ T5917] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 582.427840][ T5917] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 582.438881][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.463413][ T5917] usb 6-1: Product: syz [ 582.467669][ T5917] usb 6-1: Manufacturer: syz [ 582.480949][ T5917] usb 6-1: SerialNumber: syz [ 582.508874][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 582.526118][ T5917] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input95 [ 582.554076][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 582.715617][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 582.735140][ T5917] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 582.757260][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 582.778015][ T5917] (id 0x00) [ 582.785376][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.800440][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 582.824103][ T9038] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 582.835257][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.868855][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.905635][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 582.918201][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.945963][ T5917] rc_core: IR keymap rc-imon-pad not found [ 582.957650][ T5917] Registered IR keymap rc-empty [ 582.976953][ T5917] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 582.997914][ T5917] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 583.010847][ T9038] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.025108][ T9038] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 583.037930][ T9038] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 583.057281][ T5917] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 583.072197][ T9038] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.086417][ T5917] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input96 [ 583.097766][ T9038] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 583.106668][ T9038] usb 4-1: Product: syz [ 583.110944][ T9038] usb 4-1: Manufacturer: syz [ 583.120945][ T5917] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:24> initialized [ 583.129652][ T9038] usb 4-1: SerialNumber: syz [ 583.155135][ T9038] cdc_mbim 4-1:1.0: skipping garbage [ 583.214422][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 583.220053][ T10] usbtmc 2-1:16.0: can't read capabilities [ 583.258857][ T5917] usb 6-1: USB disconnect, device number 24 [ 583.359068][T22000] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 583.438126][ T9026] usb 2-1: USB disconnect, device number 87 [ 583.990028][T22000] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 583.998444][T22152] cgroup: fork rejected by pids controller in /syz5 [ 584.261373][ T9038] cdc_mbim 4-1:1.0: failed to get mac address [ 584.284135][ T9038] cdc_mbim 4-1:1.0: bind() failure [ 584.303712][ T9038] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 584.324845][ T9038] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 584.345148][ T9038] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 584.408293][ T9038] usb 4-1: USB disconnect, device number 90 [ 585.031814][T23325] input: syz1 as /devices/virtual/input/input97 [ 585.253276][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 585.433278][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 585.445057][ T10] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 585.459664][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.484101][ T10] usb 3-1: config 0 descriptor?? [ 585.508136][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 585.613009][ T9026] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 585.794913][ T9026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.825286][ T9026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.849066][ T9026] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.891577][ T9026] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.929509][ T9026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.958723][ T9026] usb 2-1: config 0 descriptor?? [ 586.164276][T23353] netlink: 'syz.5.6644': attribute type 1 has an invalid length. [ 586.172102][T23353] netlink: 'syz.5.6644': attribute type 2 has an invalid length. [ 586.197724][T23353] netlink: 'syz.5.6644': attribute type 1 has an invalid length. [ 586.206760][T23353] netlink: 'syz.5.6644': attribute type 2 has an invalid length. [ 586.219077][ T5917] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 586.405763][ T5917] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 586.432489][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.445882][ T9026] plantronics 0003:047F:FFFF.0083: reserved main item tag 0xd [ 586.477984][ T5917] usb 4-1: config 0 descriptor?? [ 586.509753][ T9026] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 586.545936][ T5917] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 586.559254][ T10] gspca_vc032x: reg_w err -71 [ 586.574440][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.584825][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.590210][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.623433][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.629654][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.653206][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.658567][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.695199][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.700608][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.707208][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.712565][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.719932][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.736793][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.742173][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.749204][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.756333][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.757809][ T9026] usb 2-1: USB disconnect, device number 88 [ 586.761969][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.797950][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 586.808450][ T10] gspca_vc032x: Unknown sensor... [ 586.815305][ T10] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 586.841052][T23359] fido_id[23359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 586.864054][ T10] usb 3-1: USB disconnect, device number 92 [ 587.391362][ T5917] gspca_cpia1: usb_control_msg 02, error -71 [ 587.405652][ T5917] gspca_cpia1: usb_control_msg 05, error -71 [ 587.414858][ T5917] gspca_cpia1: usb_control_msg 04, error -71 [ 587.421243][ T5917] cpia1 4-1:0.0: probe with driver cpia1 failed with error -71 [ 587.432188][T23372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.441843][ T5917] usb 4-1: USB disconnect, device number 91 [ 587.465086][T23372] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.509036][T23372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.543940][ T796] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 587.587682][T23375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.720892][ T796] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 587.754939][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.791932][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.840213][ T796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 587.894793][ T796] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 587.922807][ T796] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 587.930973][ T796] usb 3-1: Manufacturer: syz [ 587.964802][ T796] usb 3-1: config 0 descriptor?? [ 588.244695][T23402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 588.258573][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6664'. [ 588.296421][T23401] bridge_slave_1: left allmulticast mode [ 588.302133][T23401] bridge_slave_1: left promiscuous mode [ 588.319046][T23401] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.361781][T23401] bridge_slave_0: left allmulticast mode [ 588.372440][T23401] bridge_slave_0: left promiscuous mode [ 588.379476][T23401] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.399464][ T796] appleir 0003:05AC:8243.0084: item fetching failed at offset 0/1 [ 588.425781][ T796] appleir 0003:05AC:8243.0084: parse failed [ 588.438763][ T796] appleir 0003:05AC:8243.0084: probe with driver appleir failed with error -22 [ 589.243324][ T29] usb 3-1: USB disconnect, device number 93 [ 589.742584][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6695'. [ 589.759771][T23468] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6695'. [ 589.780445][T23466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.815018][T23468] geneve2: entered promiscuous mode [ 589.820428][T23468] geneve2: entered allmulticast mode [ 589.933148][T23471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.949903][ T10] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 590.066755][T23480] loop3: detected capacity change from 0 to 7 [ 590.080879][T23480] Dev loop3: unable to read RDB block 7 [ 590.089703][T23480] loop3: unable to read partition table [ 590.097534][T23480] loop3: partition table beyond EOD, truncated [ 590.105294][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.106924][T23480] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 590.145463][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.171576][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.187961][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.206662][ T10] usb 4-1: Product: syz [ 590.219434][ T10] usb 4-1: Manufacturer: syz [ 590.230882][ T10] usb 4-1: SerialNumber: syz [ 590.476609][ T10] usb 4-1: 0:2 : does not exist [ 590.488866][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 590.585825][ T10] usb 4-1: USB disconnect, device number 92 [ 590.657998][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.761505][ T30] audit: type=1326 audit(1771647327.355:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23500 comm="syz.2.6709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e7359c629 code=0x0 [ 591.033773][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.046088][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.065442][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.075610][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.342937][ T29] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 591.375775][T23511] netlink: 'syz.1.6712': attribute type 1 has an invalid length. [ 591.385198][T23511] netlink: 'syz.1.6712': attribute type 2 has an invalid length. [ 591.397520][T23511] netlink: 'syz.1.6712': attribute type 1 has an invalid length. [ 591.406508][T23511] netlink: 'syz.1.6712': attribute type 2 has an invalid length. [ 591.502864][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 591.509949][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.521328][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 591.532167][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 591.545821][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 591.557198][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.570584][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.585555][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.808505][ T29] usb 4-1: GET_CAPABILITIES returned 0 [ 591.818590][ T29] usbtmc 4-1:16.0: can't read capabilities [ 592.015413][ T29] usb 4-1: USB disconnect, device number 93 [ 592.157533][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.730611][T23545] netlink: 'syz.2.6725': attribute type 5 has an invalid length. [ 592.955435][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.965025][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.980891][ T9038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.991899][T23507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.001464][ T9038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.058116][ T9038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.197319][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.304403][ T9038] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 593.508703][ T9038] usb 3-1: Using ep0 maxpacket: 32 [ 593.522036][ T9038] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 593.531133][ T9038] usb 3-1: config 0 has no interface number 0 [ 593.537996][ T9038] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 593.557413][ T9038] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 593.567699][ T9038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.576746][ T9038] usb 3-1: Product: syz [ 593.581102][ T9038] usb 3-1: Manufacturer: syz [ 593.587842][ T9038] usb 3-1: SerialNumber: syz [ 593.609306][ T9038] usb 3-1: config 0 descriptor?? [ 593.624816][ T9038] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 593.635622][ T9038] em28xx 3-1:0.132: Video interface 132 found: isoc [ 593.852092][T23577] netlink: 'syz.3.6739': attribute type 11 has an invalid length. [ 594.030556][ T9038] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 594.121060][ T9038] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 594.145121][ T9038] em28xx 3-1:0.132: board has no eeprom [ 594.213199][ T9038] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 594.221981][ T9038] em28xx 3-1:0.132: analog set to isoc mode. [ 594.233147][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.247621][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 594.269653][ T9038] usb 3-1: USB disconnect, device number 94 [ 594.289366][ T9038] em28xx 3-1:0.132: Disconnecting em28xx [ 594.595645][T23594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6746'. [ 594.646026][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 594.664329][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 594.688014][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 594.734840][ T10] usb 3-1: Decoder not found [ 594.739764][ T10] em28xx 3-1:0.132: failed to create media graph [ 594.774267][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 594.788564][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 594.814714][ T9038] em28xx 3-1:0.132: Closing input extension [ 594.857635][ T9038] em28xx 3-1:0.132: Freeing device [ 594.867997][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6748'. [ 594.917741][T23600] bridge_slave_1: left allmulticast mode [ 594.942759][T23600] bridge_slave_1: left promiscuous mode [ 594.968840][T23600] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.009983][T23600] bridge_slave_0: left promiscuous mode [ 595.049434][T23600] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.280070][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.293329][ T9038] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 595.465277][ T9038] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 595.477447][ T9038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.492765][ T9038] usb 2-1: config 0 descriptor?? [ 595.514444][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.663302][ T5917] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 595.672834][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 595.743262][ T9038] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 595.885398][ T5917] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 595.906384][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.919079][ T5917] usb 3-1: config 0 descriptor?? [ 595.929434][ T5917] cp210x 3-1:0.0: cp210x converter detected [ 595.939115][ T9038] [drm:udl_init] *ERROR* Selecting channel failed [ 595.971681][ T9038] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 595.979977][ T9038] [drm] Initialized udl on minor 2 [ 595.988478][ T9038] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 596.000188][ T9038] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 596.009175][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 596.031704][ T9038] usb 2-1: USB disconnect, device number 89 [ 596.059020][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 596.355786][ T5917] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 596.403687][ T5917] usb 3-1: cp210x converter now attached to ttyUSB0 [ 596.572458][ T5917] usb 3-1: USB disconnect, device number 95 [ 596.599787][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 596.655429][ T5917] cp210x 3-1:0.0: device disconnected [ 596.989071][T23645] binder: 23644:23645 ioctl 4018620d 0 returned -22 [ 597.198746][T23649] sctp: [Deprecated]: syz.1.6770 (pid 23649) Use of int in maxseg socket option. [ 597.198746][T23649] Use struct sctp_assoc_value instead [ 597.465943][T23657] macvtap1: entered promiscuous mode [ 597.491350][T23657] macvtap1: entered allmulticast mode [ 597.516364][T23657] dummy0: entered promiscuous mode [ 597.540055][T23657] dummy0: entered allmulticast mode [ 597.571659][T23657] team0: Device macvtap1 failed to register rx_handler [ 597.611730][T23657] dummy0: left allmulticast mode [ 597.640648][T23657] dummy0: left promiscuous mode [ 597.693179][ T9026] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 597.845289][T23668] netlink: 182 bytes leftover after parsing attributes in process `syz.3.6779'. [ 597.896820][ T9026] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 597.938708][ T9026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.980361][ T9026] usb 3-1: config 0 descriptor?? [ 598.073935][ T58] net_ratelimit: 10 callbacks suppressed [ 598.073958][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.089529][T23507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.099245][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.173456][ T9038] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 598.190645][ T9026] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 598.343413][ T9038] usb 2-1: Using ep0 maxpacket: 32 [ 598.350725][ T9038] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.365042][ T9038] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.376800][ T9038] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 598.404360][ T9026] [drm:udl_init] *ERROR* Selecting channel failed [ 598.411034][ T9038] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 598.431493][ T9038] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.457373][ T9038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.484792][ T9026] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 598.491541][ T9026] [drm] Initialized udl on minor 2 [ 598.500749][ T9038] usb 2-1: Product: syz [ 598.515342][ T9038] usb 2-1: Manufacturer: syz [ 598.526409][ T9038] usb 2-1: SerialNumber: syz [ 598.527202][ T9026] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 598.552843][ T9026] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 598.568684][T23507] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 598.578966][ T9026] usb 3-1: USB disconnect, device number 96 [ 598.593609][T23507] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 598.881034][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.642300][ T9038] cdc_ncm 2-1:1.0: bind() failure [ 599.661203][ T9038] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 599.673405][ T9038] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 599.684771][ T9038] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 599.700736][ T9038] usb 2-1: USB disconnect, device number 90 [ 599.843352][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 599.912993][ T9022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.949546][T23713] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6797'. [ 600.003324][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 600.011471][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 600.029461][ T10] usb 4-1: config 0 has no interface number 0 [ 600.037430][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.054692][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 600.065006][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 600.076368][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.085990][ T10] usb 4-1: Product: syz [ 600.090286][ T10] usb 4-1: Manufacturer: syz [ 600.103275][ T10] usb 4-1: SerialNumber: syz [ 600.131107][ T10] usb 4-1: config 0 descriptor?? [ 600.294016][T23721] Dev loop7: unable to read RDB block 5 [ 600.300055][T23721] loop7: unable to read partition table [ 600.307450][T23721] loop7: partition table beyond EOD, truncated [ 600.316489][T23721] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 600.672958][ T9022] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 600.763498][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 600.771900][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input99 [ 600.834921][ T9022] usb 2-1: Using ep0 maxpacket: 32 [ 600.844761][ T9026] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 600.859586][ T9022] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 600.870130][ T9022] usb 2-1: config 0 has no interface number 0 [ 600.877915][ T9022] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 600.891029][ T9022] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 600.904841][ T9022] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 600.914423][ T9022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.922500][ T9022] usb 2-1: Product: syz [ 600.927327][ T9022] usb 2-1: Manufacturer: syz [ 600.932005][ T9022] usb 2-1: SerialNumber: syz [ 600.939343][ T9022] usb 2-1: config 0 descriptor?? [ 600.949284][ T9022] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 600.956372][T23507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.976521][T23507] usb 4-1: USB disconnect, device number 94 [ 601.002588][T23507] appletouch 4-1:0.85: input: appletouch disconnected [ 601.042882][ T9026] usb 3-1: Using ep0 maxpacket: 32 [ 601.050058][ T9026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.061243][ T9026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.071884][ T9026] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 601.081263][ T9026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.095222][ T9026] usb 3-1: config 0 descriptor?? [ 601.113480][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.553635][ T9026] savu 0003:1E7D:2D5A.0085: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 601.771245][ T9022] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input100 [ 601.814990][ T9026] usb 3-1: USB disconnect, device number 97 [ 601.894721][T23744] bridge_slave_0: entered promiscuous mode [ 601.996643][ T9022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.018188][ T10] usb 2-1: USB disconnect, device number 91 [ 602.077884][ T30] audit: type=1326 audit(1771647338.675:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c1c59c629 code=0x0 [ 602.131716][ T30] audit: type=1326 audit(1771647338.725:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1c59c629 code=0x7ffc0000 [ 602.167880][ T30] audit: type=1326 audit(1771647338.725:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1c59c629 code=0x7ffc0000 [ 602.196682][ T30] audit: type=1326 audit(1771647338.725:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c1c55cece code=0x7ffc0000 [ 602.220017][ T30] audit: type=1326 audit(1771647338.765:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c1c55cece code=0x7ffc0000 [ 602.256807][ T30] audit: type=1326 audit(1771647338.765:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c1c55cece code=0x7ffc0000 [ 602.280170][ T30] audit: type=1326 audit(1771647338.765:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c1c55cece code=0x7ffc0000 [ 602.305121][ T30] audit: type=1326 audit(1771647338.795:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c1c55cece code=0x7ffc0000 [ 602.329349][ T30] audit: type=1326 audit(1771647338.825:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c1c55cece code=0x7ffc0000 [ 602.354316][ T30] audit: type=1326 audit(1771647338.855:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23746 comm="syz.5.6812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c1c55cece code=0x7ffc0000 [ 602.922883][ T9022] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 603.034909][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.075645][ T9022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.099070][ T9022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.117632][ T9022] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 603.147381][ T9022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.191884][ T9022] usb 2-1: config 0 descriptor?? [ 603.463890][ T9038] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 603.631688][ T9038] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 603.654636][ T9022] hid-steam 0003:28DE:1142.0086: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 603.691716][ T9038] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 603.715778][ T9038] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 603.739165][ T9038] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 603.753316][ T9022] hid-steam 0003:28DE:1142.0086: Steam wireless receiver connected [ 603.770999][ T9038] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.784660][ T9038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.793434][ T9038] usb 6-1: Product: syz [ 603.798123][ T9038] usb 6-1: Manufacturer: syz [ 603.809343][ T9038] usb 6-1: SerialNumber: syz [ 603.829188][ T9022] hid-steam 0003:28DE:1142.0087: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 603.851173][T16734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.860112][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.869671][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.906126][T23776] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 603.959444][ T9038] cdc_mbim 6-1:1.0: skipping garbage [ 604.073224][ T9022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.087857][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6834'. [ 604.179287][T23795] bond1: Invalid ad_actor_system MAC address. [ 604.186202][T23795] bond1: option ad_actor_system: invalid value (6543) [ 604.214540][T23795] bond1 (unregistering): Released all slaves [ 604.228282][T23776] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 604.292878][T23776] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 604.832862][ T796] usb 2-1: reset high-speed USB device number 92 using dummy_hcd [ 604.963144][T23776] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 604.971244][T23776] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 605.013520][ T9038] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 605.038897][ T9038] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 605.109202][ T9038] wwan wwan0: port wwan0mbim0 attached [ 605.118294][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.128268][ T9026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.168471][ T9038] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, ee:f6:14:52:ec:63 [ 605.285760][ T9026] usb 6-1: USB disconnect, device number 25 [ 605.309413][ T9026] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 605.469634][ T9026] wwan wwan0: port wwan0mbim0 disconnected [ 605.655105][ T9022] usb 2-1: USB disconnect, device number 92 [ 605.700114][ T9022] hid-steam 0003:28DE:1142.0086: Steam wireless receiver disconnected [ 606.153523][ T9022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.836720][T23858] Invalid argument reading file caps for ./file0 [ 606.874312][ T9038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.970117][T23863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.002113][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6856'. [ 607.062483][T23868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.644594][T23897] loop8: detected capacity change from 0 to 7 [ 607.669715][T23897] Dev loop8: unable to read RDB block 7 [ 607.715581][T23897] loop8: unable to read partition table [ 607.748505][T23897] loop8: partition table beyond EOD, truncated [ 607.782804][T23897] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 608.343284][ T9026] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 608.503168][ T9026] usb 2-1: Using ep0 maxpacket: 32 [ 608.514434][ T9026] usb 2-1: config 0 interface 0 has no altsetting 0 [ 608.524310][ T9026] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 608.534585][ T9026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.561975][ T9026] usb 2-1: config 0 descriptor?? [ 608.969945][T23929] input: syz1 as /devices/virtual/input/input101 [ 609.004716][T23929] input: failed to attach handler leds to device input101, error: -6 [ 609.060739][ T9026] corsair-psu 0003:1B1C:1C09.0088: hidraw0: USB HID v0.03 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 609.289601][T23937] input: syz1 as /devices/virtual/input/input102 [ 609.559292][T23948] bridge1: entered promiscuous mode [ 609.575614][T23948] bridge1: entered allmulticast mode [ 609.592296][T23948] team0: Port device bridge1 added [ 609.602057][ T9026] corsair-psu 0003:1B1C:1C09.0088: unable to initialize device (-71) [ 609.634048][T23952] bridge0: port 4(team0) entered blocking state [ 609.649280][ T9026] corsair-psu 0003:1B1C:1C09.0088: probe with driver corsair-psu failed with error -71 [ 609.663672][T23952] bridge0: port 4(team0) entered disabled state [ 609.671018][T23952] team0: entered allmulticast mode [ 609.682239][T23952] team_slave_0: entered allmulticast mode [ 609.708789][ T9026] usb 2-1: USB disconnect, device number 93 [ 609.715353][T23952] team_slave_1: entered allmulticast mode [ 609.762140][T23952] team0: entered promiscuous mode [ 609.786513][T23952] team_slave_0: entered promiscuous mode [ 609.799198][T23952] team_slave_1: entered promiscuous mode [ 609.892075][T23959] [ 609.894464][T23959] ===================================================== [ 609.901467][T23959] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 609.908983][T23959] syzkaller #0 Tainted: G L [ 609.915009][T23959] ----------------------------------------------------- [ 609.921978][T23959] syz.0.6889/23959 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 609.929775][T23959] ffff88805533cf30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 609.938533][T23959] [ 609.938533][T23959] and this task is already holding: [ 609.945956][T23959] ffff88802bb32230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 609.955662][T23959] which would create a new lock dependency: [ 609.961569][T23959] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 609.969553][T23959] [ 609.969553][T23959] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 609.979021][T23959] (&dev->event_lock#2){..-.}-{3:3} [ 609.979056][T23959] [ 609.979056][T23959] ... which became SOFTIRQ-irq-safe at: [ 609.992082][T23959] lock_acquire+0xf0/0x2e0 [ 609.996628][T23959] _raw_spin_lock_irqsave+0x40/0x60 [ 610.001939][T23959] input_repeat_key+0x33/0x680 [ 610.006824][T23959] call_timer_fn+0x192/0x640 [ 610.011525][T23959] __run_timer_base+0x652/0x8b0 [ 610.016480][T23959] run_timer_softirq+0xb7/0x170 [ 610.021445][T23959] handle_softirqs+0x22a/0x870 [ 610.026315][T23959] __irq_exit_rcu+0x5f/0x150 [ 610.031013][T23959] irq_exit_rcu+0x9/0x30 [ 610.035361][T23959] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 610.041109][T23959] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.047213][T23959] rcu_is_watching+0x70/0xb0 [ 610.051907][T23959] rcu_read_lock_held+0x15/0x50 [ 610.056960][T23959] mas_start+0x1e9/0x560 [ 610.061332][T23959] mas_walk+0x8b/0x2e0 [ 610.065512][T23959] lock_vma_under_rcu+0x1bd/0x500 [ 610.070637][T23959] do_user_addr_fault+0x2d8/0x1340 [ 610.075853][T23959] exc_page_fault+0x6a/0xc0 [ 610.080475][T23959] asm_exc_page_fault+0x26/0x30 [ 610.085429][T23959] [ 610.085429][T23959] to a SOFTIRQ-irq-unsafe lock: [ 610.092455][T23959] (tasklist_lock){.+.+}-{3:3} [ 610.092481][T23959] [ 610.092481][T23959] ... which became SOFTIRQ-irq-unsafe at: [ 610.105126][T23959] ... [ 610.105134][T23959] lock_acquire+0xf0/0x2e0 [ 610.112289][T23959] _raw_read_lock+0x36/0x50 [ 610.116910][T23959] __do_wait+0xde/0x740 [ 610.121254][T23959] do_wait+0x1e7/0x540 [ 610.125441][T23959] kernel_wait+0xd6/0x1c0 [ 610.129874][T23959] call_usermodehelper_exec_work+0xbe/0x230 [ 610.135877][T23959] process_scheduled_works+0xb02/0x1830 [ 610.141530][T23959] worker_thread+0xa50/0xfc0 [ 610.146259][T23959] kthread+0x388/0x470 [ 610.150436][T23959] ret_from_fork+0x51e/0xb90 [ 610.155146][T23959] ret_from_fork_asm+0x1a/0x30 [ 610.160027][T23959] [ 610.160027][T23959] other info that might help us debug this: [ 610.160027][T23959] [ 610.170291][T23959] Chain exists of: [ 610.170291][T23959] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 610.170291][T23959] [ 610.183266][T23959] Possible interrupt unsafe locking scenario: [ 610.183266][T23959] [ 610.191632][T23959] CPU0 CPU1 [ 610.197016][T23959] ---- ---- [ 610.202397][T23959] lock(tasklist_lock); [ 610.206661][T23959] local_irq_disable(); [ 610.213434][T23959] lock(&dev->event_lock#2); [ 610.220676][T23959] lock(&new->fa_lock); [ 610.227459][T23959] [ 610.230933][T23959] lock(&dev->event_lock#2); [ 610.235822][T23959] [ 610.235822][T23959] *** DEADLOCK *** [ 610.235822][T23959] [ 610.243998][T23959] 6 locks held by syz.0.6889/23959: [ 610.249204][T23959] #0: ffff88802bc7c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 610.258376][T23959] #1: ffff88802bb32230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 610.268503][T23959] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 610.278211][T23959] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 610.287829][T23959] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 610.297957][T23959] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 610.307032][T23959] [ 610.307032][T23959] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 610.317448][T23959] -> (&dev->event_lock#2){..-.}-{3:3} { [ 610.323071][T23959] IN-SOFTIRQ-W at: [ 610.327107][T23959] lock_acquire+0xf0/0x2e0 [ 610.333206][T23959] _raw_spin_lock_irqsave+0x40/0x60 [ 610.340092][T23959] input_repeat_key+0x33/0x680 [ 610.346520][T23959] call_timer_fn+0x192/0x640 [ 610.352888][T23959] __run_timer_base+0x652/0x8b0 [ 610.359496][T23959] run_timer_softirq+0xb7/0x170 [ 610.366021][T23959] handle_softirqs+0x22a/0x870 [ 610.372473][T23959] __irq_exit_rcu+0x5f/0x150 [ 610.378750][T23959] irq_exit_rcu+0x9/0x30 [ 610.384667][T23959] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 610.391985][T23959] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.399644][T23959] rcu_is_watching+0x70/0xb0 [ 610.405919][T23959] rcu_read_lock_held+0x15/0x50 [ 610.412447][T23959] mas_start+0x1e9/0x560 [ 610.418361][T23959] mas_walk+0x8b/0x2e0 [ 610.424109][T23959] lock_vma_under_rcu+0x1bd/0x500 [ 610.430827][T23959] do_user_addr_fault+0x2d8/0x1340 [ 610.437625][T23959] exc_page_fault+0x6a/0xc0 [ 610.443816][T23959] asm_exc_page_fault+0x26/0x30 [ 610.450372][T23959] INITIAL USE at: [ 610.454289][T23959] lock_acquire+0xf0/0x2e0 [ 610.460325][T23959] _raw_spin_lock_irqsave+0x40/0x60 [ 610.467113][T23959] input_inject_event+0xa5/0x340 [ 610.473644][T23959] kbd_led_trigger_activate+0xbc/0x100 [ 610.480695][T23959] led_trigger_set+0x535/0x960 [ 610.487049][T23959] led_trigger_set_default+0x260/0x2a0 [ 610.494107][T23959] led_classdev_register_ext+0x787/0x9c0 [ 610.501331][T23959] input_leds_connect+0x517/0x790 [ 610.507939][T23959] input_register_device+0xd00/0x1160 [ 610.514908][T23959] atkbd_connect+0x731/0xa50 [ 610.521093][T23959] serio_driver_probe+0x82/0xd0 [ 610.527530][T23959] really_probe+0x267/0xaf0 [ 610.533625][T23959] __driver_probe_device+0x18c/0x320 [ 610.540504][T23959] driver_probe_device+0x4f/0x240 [ 610.547114][T23959] __driver_attach+0x3e7/0x710 [ 610.553547][T23959] bus_for_each_dev+0x23b/0x2c0 [ 610.560080][T23959] serio_handle_event+0x20a/0xdd0 [ 610.566691][T23959] process_scheduled_works+0xb02/0x1830 [ 610.573826][T23959] worker_thread+0xa50/0xfc0 [ 610.580016][T23959] kthread+0x388/0x470 [ 610.585662][T23959] ret_from_fork+0x51e/0xb90 [ 610.591839][T23959] ret_from_fork_asm+0x1a/0x30 [ 610.598200][T23959] } [ 610.600720][T23959] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 610.609774][T23959] [ 610.609774][T23959] the dependencies between the lock to be acquired [ 610.609784][T23959] and SOFTIRQ-irq-unsafe lock: [ 610.623352][T23959] -> (tasklist_lock){.+.+}-{3:3} { [ 610.628713][T23959] HARDIRQ-ON-R at: [ 610.632889][T23959] lock_acquire+0xf0/0x2e0 [ 610.639353][T23959] _raw_read_lock+0x36/0x50 [ 610.645868][T23959] __do_wait+0xde/0x740 [ 610.652044][T23959] do_wait+0x1e7/0x540 [ 610.658219][T23959] kernel_wait+0xd6/0x1c0 [ 610.664563][T23959] call_usermodehelper_exec_work+0xbe/0x230 [ 610.672470][T23959] process_scheduled_works+0xb02/0x1830 [ 610.680030][T23959] worker_thread+0xa50/0xfc0 [ 610.686645][T23959] kthread+0x388/0x470 [ 610.692745][T23959] ret_from_fork+0x51e/0xb90 [ 610.699357][T23959] ret_from_fork_asm+0x1a/0x30 [ 610.706136][T23959] SOFTIRQ-ON-R at: [ 610.710309][T23959] lock_acquire+0xf0/0x2e0 [ 610.716744][T23959] _raw_read_lock+0x36/0x50 [ 610.723269][T23959] __do_wait+0xde/0x740 [ 610.729448][T23959] do_wait+0x1e7/0x540 [ 610.735532][T23959] kernel_wait+0xd6/0x1c0 [ 610.741978][T23959] call_usermodehelper_exec_work+0xbe/0x230 [ 610.749895][T23959] process_scheduled_works+0xb02/0x1830 [ 610.757468][T23959] worker_thread+0xa50/0xfc0 [ 610.764088][T23959] kthread+0x388/0x470 [ 610.770169][T23959] ret_from_fork+0x51e/0xb90 [ 610.776778][T23959] ret_from_fork_asm+0x1a/0x30 [ 610.783567][T23959] INITIAL USE at: [ 610.787661][T23959] lock_acquire+0xf0/0x2e0 [ 610.794097][T23959] _raw_write_lock_irq+0x3d/0x50 [ 610.800980][T23959] copy_process+0x247a/0x3cf0 [ 610.807594][T23959] kernel_clone+0x248/0x8e0 [ 610.814039][T23959] user_mode_thread+0x110/0x180 [ 610.820830][T23959] rest_init+0x23/0x300 [ 610.826921][T23959] start_kernel+0x385/0x3d0 [ 610.833365][T23959] x86_64_start_reservations+0x24/0x30 [ 610.840762][T23959] x86_64_start_kernel+0x143/0x1c0 [ 610.847799][T23959] common_startup_64+0x13e/0x147 [ 610.854665][T23959] INITIAL READ USE at: [ 610.859185][T23959] lock_acquire+0xf0/0x2e0 [ 610.865963][T23959] _raw_read_lock+0x36/0x50 [ 610.872835][T23959] __do_wait+0xde/0x740 [ 610.879363][T23959] do_wait+0x1e7/0x540 [ 610.885808][T23959] kernel_wait+0xd6/0x1c0 [ 610.892497][T23959] call_usermodehelper_exec_work+0xbe/0x230 [ 610.900762][T23959] process_scheduled_works+0xb02/0x1830 [ 610.908688][T23959] worker_thread+0xa50/0xfc0 [ 610.915655][T23959] kthread+0x388/0x470 [ 610.922096][T23959] ret_from_fork+0x51e/0xb90 [ 610.929053][T23959] ret_from_fork_asm+0x1a/0x30 [ 610.936194][T23959] } [ 610.938885][T23959] ... key at: [] tasklist_lock+0x18/0x40 [ 610.946814][T23959] ... acquired at: [ 610.950808][T23959] _raw_read_lock+0x36/0x50 [ 610.955504][T23959] send_sigio+0x101/0x370 [ 610.960041][T23959] kill_fasync+0x24d/0x4d0 [ 610.964673][T23959] sock_wake_async+0x137/0x160 [ 610.969628][T23959] sock_def_readable+0x3c1/0x580 [ 610.974757][T23959] unix_stream_sendmsg+0x8a3/0xe80 [ 610.980068][T23959] ____sys_sendmsg+0xa68/0xad0 [ 610.985061][T23959] ___sys_sendmsg+0x2a5/0x360 [ 610.989937][T23959] __x64_sys_sendmsg+0x1bd/0x2a0 [ 610.995077][T23959] do_syscall_64+0x14d/0xf80 [ 610.999863][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.005950][T23959] [ 611.008283][T23959] -> (&f_owner->lock){....}-{3:3} { [ 611.013606][T23959] INITIAL USE at: [ 611.017612][T23959] lock_acquire+0xf0/0x2e0 [ 611.023876][T23959] _raw_write_lock_irq+0x3d/0x50 [ 611.030619][T23959] __f_setown+0x67/0x370 [ 611.036617][T23959] fcntl_dirnotify+0x3f9/0x6a0 [ 611.043136][T23959] do_fcntl+0x77e/0x1a20 [ 611.049145][T23959] __se_sys_fcntl+0xc8/0x150 [ 611.055487][T23959] do_syscall_64+0x14d/0xf80 [ 611.061840][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.069483][T23959] INITIAL READ USE at: [ 611.074008][T23959] lock_acquire+0xf0/0x2e0 [ 611.080631][T23959] _raw_read_lock_irqsave+0x48/0x60 [ 611.088024][T23959] send_sigio+0x38/0x370 [ 611.094493][T23959] kill_fasync+0x24d/0x4d0 [ 611.101095][T23959] sock_wake_async+0x137/0x160 [ 611.108064][T23959] sock_def_readable+0x3c1/0x580 [ 611.115195][T23959] unix_stream_sendmsg+0x8a3/0xe80 [ 611.122503][T23959] ____sys_sendmsg+0xa68/0xad0 [ 611.129460][T23959] ___sys_sendmsg+0x2a5/0x360 [ 611.136349][T23959] __x64_sys_sendmsg+0x1bd/0x2a0 [ 611.143487][T23959] do_syscall_64+0x14d/0xf80 [ 611.150289][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.158374][T23959] } [ 611.160988][T23959] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 611.169984][T23959] ... acquired at: [ 611.173889][T23959] _raw_read_lock_irqsave+0x48/0x60 [ 611.179306][T23959] send_sigio+0x38/0x370 [ 611.183740][T23959] kill_fasync+0x24d/0x4d0 [ 611.188351][T23959] sock_wake_async+0x137/0x160 [ 611.193317][T23959] sock_def_readable+0x3c1/0x580 [ 611.198480][T23959] unix_stream_sendmsg+0x8a3/0xe80 [ 611.203799][T23959] ____sys_sendmsg+0xa68/0xad0 [ 611.208767][T23959] ___sys_sendmsg+0x2a5/0x360 [ 611.213643][T23959] __x64_sys_sendmsg+0x1bd/0x2a0 [ 611.218801][T23959] do_syscall_64+0x14d/0xf80 [ 611.223605][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.229702][T23959] [ 611.232051][T23959] -> (&new->fa_lock){....}-{3:3} { [ 611.237201][T23959] INITIAL USE at: [ 611.241113][T23959] lock_acquire+0xf0/0x2e0 [ 611.247117][T23959] _raw_write_lock_irq+0x3d/0x50 [ 611.253654][T23959] fasync_remove_entry+0xf1/0x1c0 [ 611.260268][T23959] sock_fasync+0x85/0xf0 [ 611.266100][T23959] __fput+0x8a5/0xa70 [ 611.271675][T23959] task_work_run+0x1d9/0x270 [ 611.277846][T23959] exit_to_user_mode_loop+0xed/0x480 [ 611.285239][T23959] do_syscall_64+0x32d/0xf80 [ 611.291417][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.298888][T23959] INITIAL READ USE at: [ 611.303239][T23959] lock_acquire+0xf0/0x2e0 [ 611.309686][T23959] _raw_read_lock_irqsave+0x48/0x60 [ 611.316908][T23959] kill_fasync+0x199/0x4d0 [ 611.323351][T23959] sock_wake_async+0x137/0x160 [ 611.330149][T23959] sock_def_readable+0x3c1/0x580 [ 611.337100][T23959] unix_stream_sendmsg+0x8a3/0xe80 [ 611.344233][T23959] ____sys_sendmsg+0xa68/0xad0 [ 611.351021][T23959] ___sys_sendmsg+0x2a5/0x360 [ 611.357721][T23959] __x64_sys_sendmsg+0x1bd/0x2a0 [ 611.364678][T23959] do_syscall_64+0x14d/0xf80 [ 611.371293][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.379198][T23959] } [ 611.381709][T23959] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 611.390414][T23959] ... acquired at: [ 611.394239][T23959] _raw_read_lock_irqsave+0x48/0x60 [ 611.399647][T23959] kill_fasync+0x199/0x4d0 [ 611.404256][T23959] mousedev_notify_readers+0x6f1/0xc00 [ 611.409920][T23959] mousedev_event+0x602/0x1320 [ 611.414885][T23959] input_handle_events_default+0xd4/0x1a0 [ 611.420815][T23959] input_pass_values+0x288/0x890 [ 611.425945][T23959] input_event_dispose+0x330/0x6b0 [ 611.431255][T23959] input_inject_event+0x1dd/0x340 [ 611.436482][T23959] evdev_write+0x325/0x4c0 [ 611.441098][T23959] vfs_write+0x29a/0xb90 [ 611.445551][T23959] ksys_write+0x150/0x270 [ 611.450089][T23959] do_syscall_64+0x14d/0xf80 [ 611.454898][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.461013][T23959] [ 611.463391][T23959] [ 611.463391][T23959] stack backtrace: [ 611.469335][T23959] CPU: 1 UID: 0 PID: 23959 Comm: syz.0.6889 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.469362][T23959] Tainted: [L]=SOFTLOCKUP [ 611.469369][T23959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.469384][T23959] Call Trace: [ 611.469393][T23959] [ 611.469401][T23959] dump_stack_lvl+0xe8/0x150 [ 611.469428][T23959] __lock_acquire+0x2a94/0x2cf0 [ 611.469460][T23959] lock_acquire+0xf0/0x2e0 [ 611.469479][T23959] ? kill_fasync+0x199/0x4d0 [ 611.469500][T23959] _raw_read_lock_irqsave+0x48/0x60 [ 611.469524][T23959] ? kill_fasync+0x199/0x4d0 [ 611.469558][T23959] kill_fasync+0x199/0x4d0 [ 611.469574][T23959] ? kill_fasync+0x53/0x4d0 [ 611.469592][T23959] mousedev_notify_readers+0x6f1/0xc00 [ 611.469616][T23959] ? mousedev_notify_readers+0x2c/0xc00 [ 611.469636][T23959] mousedev_event+0x602/0x1320 [ 611.469653][T23959] ? lock_acquire+0xf0/0x2e0 [ 611.469675][T23959] input_handle_events_default+0xd4/0x1a0 [ 611.469699][T23959] ? input_pass_values+0x8d/0x890 [ 611.469717][T23959] input_pass_values+0x288/0x890 [ 611.469738][T23959] ? input_handle_event+0x70c/0xf30 [ 611.469765][T23959] input_event_dispose+0x330/0x6b0 [ 611.469792][T23959] input_inject_event+0x1dd/0x340 [ 611.469819][T23959] ? input_inject_event+0xb6/0x340 [ 611.469852][T23959] evdev_write+0x325/0x4c0 [ 611.469875][T23959] ? __pfx_evdev_write+0x10/0x10 [ 611.469895][T23959] ? bpf_lsm_file_permission+0x9/0x20 [ 611.469916][T23959] ? security_file_permission+0x75/0x260 [ 611.469945][T23959] ? rw_verify_area+0x255/0x4d0 [ 611.469961][T23959] ? __pfx_evdev_write+0x10/0x10 [ 611.469982][T23959] vfs_write+0x29a/0xb90 [ 611.470001][T23959] ? __pfx_vfs_write+0x10/0x10 [ 611.470017][T23959] ? __fget_files+0x2a/0x420 [ 611.470043][T23959] ? __fget_files+0x2a/0x420 [ 611.470066][T23959] ? __fget_files+0x3a0/0x420 [ 611.470088][T23959] ? __fget_files+0x2a/0x420 [ 611.470114][T23959] ksys_write+0x150/0x270 [ 611.470132][T23959] ? __pfx_ksys_write+0x10/0x10 [ 611.470152][T23959] do_syscall_64+0x14d/0xf80 [ 611.470178][T23959] ? trace_irq_disable+0x3b/0x150 [ 611.470203][T23959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.470220][T23959] ? clear_bhb_loop+0x40/0x90 [ 611.470240][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.470260][T23959] RIP: 0033:0x7f1f91b9c629 [ 611.470278][T23959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.470294][T23959] RSP: 002b:00007f1f92b1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.470314][T23959] RAX: ffffffffffffffda RBX: 00007f1f91e15fa0 RCX: 00007f1f91b9c629 [ 611.470327][T23959] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 611.470338][T23959] RBP: 00007f1f91c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 611.470349][T23959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.470360][T23959] R13: 00007f1f91e16038 R14: 00007f1f91e15fa0 R15: 00007f1f91f3fa48 [ 611.470379][T23959] [ 611.804114][T23961] loop3: detected capacity change from 0 to 7 [ 611.814063][T23961] Dev loop3: unable to read RDB block 7 [ 611.820116][T23961] loop3: AHDI p3 p4 [ 611.824102][T23961] loop3: partition table partially beyond EOD, truncated [ 611.831341][T23961] loop3: p3 start 1702000233 is beyond EOD, truncated [ 611.893607][ T9038] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 612.053221][ T9038] usb 4-1: Using ep0 maxpacket: 8 [ 612.059765][ T9038] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 612.071075][ T9038] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 612.080699][ T9038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.089634][ T9038] usb 4-1: Product: syz [ 612.095073][ T9038] usb 4-1: Manufacturer: syz [ 612.099705][ T9038] usb 4-1: SerialNumber: syz [ 612.107306][ T9038] usb 4-1: config 0 descriptor?? [ 612.115617][ T9038] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 612.921734][ T9038] gspca_zc3xx: reg_w_i err -71 [ 613.513290][ T9038] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 613.519665][ T9038] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 613.530256][ T9038] usb 4-1: USB disconnect, device number 95 [ 614.714232][ T9038] net_ratelimit: 2 callbacks suppressed [ 614.714249][ T9038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog