last executing test programs: 7.168349417s ago: executing program 3 (id=8642): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 7.092956516s ago: executing program 3 (id=8644): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1ff) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x40}) 6.88459158s ago: executing program 3 (id=8648): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000f40)={"a431e83d", 0xf90, 0xff, 0x40, 0x64c5, 0x3, "75e227897c270662fd23c8f565aa0a", 'R-4x', "007ea926", "dcd83b6b", ["aca1b6ce79501f3229a4302c", "79a8da7d3c31997bd201d1d6", "30f8d1207cfddd2f22f11d68", "aaf23a42fafc6cdd3ba14cd0"]}) 6.828752492s ago: executing program 3 (id=8649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r1, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 6.666583477s ago: executing program 3 (id=8652): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 6.215020457s ago: executing program 2 (id=8656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @random="99a1b29f890c", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x4, {[@md5sig={0x13, 0x12, "4fcc1cd04725da68432fc33751d50969"}]}}}}}}}, 0x0) 6.01820855s ago: executing program 2 (id=8658): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x7ffffbfe, 0x1f00, 0xa, 0x1ff, 0x1}) 5.927001729s ago: executing program 3 (id=8659): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0xc64d217283b885fd}, 0x0) 5.671973334s ago: executing program 4 (id=8661): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000140)={0x0, 0x0, 0x200}) 5.510018345s ago: executing program 2 (id=8664): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000040001}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000b00)='\f', 0x1) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 5.431964349s ago: executing program 4 (id=8665): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 3.079766712s ago: executing program 2 (id=8672): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='gretap\x00', &(0x7f00000001c0)='gretap\x00', 0x0) 2.167062327s ago: executing program 4 (id=8677): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000480)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f0000000900)=""/62, 0x3e}, 0x9}], 0x1, 0x40010000, 0x0) 2.132844816s ago: executing program 4 (id=8679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x1, 0x100, 0xffffff42}) 1.975058489s ago: executing program 1 (id=8680): syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000008}) close(0x3) 1.786126667s ago: executing program 1 (id=8682): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000000840)=""/215, 0xd7}], 0x2}, 0x8}], 0x1, 0x10041, 0x0) 1.705833032s ago: executing program 1 (id=8684): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x14324, 0x1}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 1.455247582s ago: executing program 1 (id=8685): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/231, 0xe7}, 0x9}], 0x1, 0x12141, 0x0) 1.322424683s ago: executing program 1 (id=8687): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 988.124641ms ago: executing program 2 (id=8690): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 731.80685ms ago: executing program 0 (id=8691): mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x6, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 731.315939ms ago: executing program 2 (id=8692): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 646.23007ms ago: executing program 0 (id=8693): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r2, 0xce, 0x3, 0x7ffffffc, 0x0, 0xfffffffe, 0x0, 0xb, 0x200420, 0x7ff}) 596.917834ms ago: executing program 0 (id=8694): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 390.84883ms ago: executing program 0 (id=8695): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) 337.141288ms ago: executing program 1 (id=8696): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r0, 0x1, 0xc7, &(0x7f0000000080)=""/199) 247.231798ms ago: executing program 4 (id=8697): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000800)={0x0, 0x0, r2, r3, 0x6, 0x8, 0x0, 0x8, {0x0, 0xe, 0x7fff, 0x5, 0x5, 0xee87, 0x5, 0x2, 0x6, 0x2, 0x5, 0xe, 0x8, 0x3ff, "0f1977589889e2313a21b5583287bb5f3ef59a065657012197cd0118c629dfa5"}}) 219.19095ms ago: executing program 0 (id=8698): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1, 0x3, 0x81}, {0xfffa, 0xb1, 0xe}]}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 114.991784ms ago: executing program 4 (id=8699): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "80b07d73e4bf172c22db3523b45553a71b1bfa5dfb7ab577f6a3a44a3350931c", 0x3, 0x2, 0x9, 0x9}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) 0s ago: executing program 0 (id=8700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00', @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) kernel console output (not intermixed with test programs): USB1 [ 590.689775][T21627] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7108'. [ 590.809654][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 590.811039][ T5890] usb 3-1: USB disconnect, device number 70 [ 590.842263][ T5890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 590.898914][ T5890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 590.932212][ T5890] quatech2 3-1:0.51: device disconnected [ 591.675126][T21667] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7126'. [ 591.826169][ T5890] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 592.003699][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.026407][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 592.045031][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.075981][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 592.100856][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'. [ 592.111112][T21679] netlink: 'syz.3.7131': attribute type 9 has an invalid length. [ 592.123160][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 592.135046][ T5890] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 592.161148][ T5890] usb 3-1: Manufacturer: syz [ 592.204301][ T5890] usb 3-1: config 0 descriptor?? [ 592.218898][T21679] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 592.241492][T21679] macvlan3: entered allmulticast mode [ 592.273691][T21679] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 592.419316][T21691] pimreg: entered allmulticast mode [ 592.487224][T21690] pimreg: left allmulticast mode [ 592.495241][T21696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7139'. [ 592.577721][ T5890] rc_core: IR keymap rc-hauppauge not found [ 592.597750][ T5890] Registered IR keymap rc-empty [ 592.602809][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.646146][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.690937][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 592.746246][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input65 [ 592.793064][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.826324][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.876241][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.906138][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.926154][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.956619][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 592.980704][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.016292][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.050955][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.096121][ T5890] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.138996][ T5890] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 593.167402][ T5890] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 593.209494][ T5890] usb 3-1: USB disconnect, device number 71 [ 593.213790][T21724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7154'. [ 593.356014][ T5887] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 593.516134][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 593.528529][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.558198][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.585384][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 593.596949][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.616826][ T5887] usb 2-1: config 0 descriptor?? [ 593.629720][ T5887] hub 2-1:0.0: USB hub found [ 593.832588][ T5887] hub 2-1:0.0: 1 port detected [ 594.037741][ T5888] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 594.053735][T21757] netlink: 'syz.4.7167': attribute type 29 has an invalid length. [ 594.207535][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 594.216261][ T5888] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 594.228462][T21764] netlink: 'syz.4.7171': attribute type 1 has an invalid length. [ 594.236725][ T5888] usb 3-1: config 0 has no interface number 0 [ 594.250702][ T5887] usb 2-1: USB disconnect, device number 61 [ 594.260702][ T5888] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 594.276061][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.285568][ T5888] usb 3-1: Product: syz [ 594.291425][ T5888] usb 3-1: Manufacturer: syz [ 594.301795][ T5888] usb 3-1: SerialNumber: syz [ 594.323850][ T5888] usb 3-1: config 0 descriptor?? [ 594.408103][T21770] sock: sock_set_timeout: `syz.3.7173' (pid 21770) tries to set negative timeout [ 594.570623][ T5888] kaweth 3-1:0.235: Firmware present in device. [ 594.669386][T21780] xt_hashlimit: size too large, truncated to 1048576 [ 594.744530][T21781] xt_HMARK: proto mask must be zero with L3 mode [ 594.761430][ T5888] kaweth 3-1:0.235: Statistics collection: 0 [ 594.786140][ T5888] kaweth 3-1:0.235: Multicast filter limit: 0 [ 594.799736][ T5888] kaweth 3-1:0.235: MTU: 0 [ 594.804320][ T5888] kaweth 3-1:0.235: Read MAC address 00:00:00:00:00:00 [ 595.172258][ T5888] kaweth 3-1:0.235: Error setting SOFS wait [ 595.184886][ T5888] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 595.206955][ T5888] usb 3-1: USB disconnect, device number 72 [ 595.326326][ T5889] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 595.486107][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 595.502308][ T5889] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 595.514367][ T5889] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 595.534483][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 595.556035][ T5889] usb 2-1: config 1 has no interface number 0 [ 595.564554][ T5889] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 595.585773][ T5889] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 595.606500][ T5889] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 595.615777][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.647711][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 595.844159][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 596.048820][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7196'. [ 596.276347][ T5941] usb 2-1: USB disconnect, device number 62 [ 596.300278][ T5941] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 596.516106][ T5888] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 596.676276][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 596.684604][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.712462][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.729392][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.743891][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.761091][ T5888] usb 5-1: Product: syz [ 596.765435][ T5888] usb 5-1: Manufacturer: syz [ 596.782517][ T5888] usb 5-1: SerialNumber: syz [ 597.013046][ T5888] usb 5-1: 0:2 : does not exist [ 597.055768][ T5888] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 597.101221][T21848] netlink: 692 bytes leftover after parsing attributes in process `syz.2.7209'. [ 597.122144][ T5888] usb 5-1: USB disconnect, device number 83 [ 597.338255][T20297] udevd[20297]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.787512][T21864] bridge_slave_0: entered promiscuous mode [ 598.730790][T21902] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7234'. [ 599.696344][ T5890] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 599.801819][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7248'. [ 599.842113][T21935] 8021q: adding VLAN 0 to HW filter on device team1 [ 599.877955][ T5890] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 599.895045][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.917724][ T5890] usb 3-1: config 0 descriptor?? [ 599.931958][ T5890] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 599.946651][ T5888] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 600.118505][ T5888] usb 5-1: config 2 has an invalid interface number: 83 but max is 0 [ 600.138636][ T5888] usb 5-1: config 2 has an invalid interface number: 5 but max is 0 [ 600.156661][ T5888] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 600.186096][ T5888] usb 5-1: config 2 has no interface number 0 [ 600.192274][ T5888] usb 5-1: config 2 has no interface number 1 [ 600.206067][ T5888] usb 5-1: too many endpoints for config 2 interface 5 altsetting 6: 249, using maximum allowed: 30 [ 600.226042][ T5888] usb 5-1: config 2 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 249 [ 600.256008][ T5888] usb 5-1: config 2 interface 5 has no altsetting 0 [ 600.262990][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=00c2, bcdDevice=e1.35 [ 600.273979][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.340822][ T5890] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 600.498309][ T5888] usb 5-1: string descriptor 0 read error: -71 [ 600.522709][ T5888] usb 5-1: USB disconnect, device number 84 [ 600.743354][ T5890] gspca_cpia1: usb_control_msg 02, error -71 [ 600.755444][ T5890] gspca_cpia1: usb_control_msg 05, error -71 [ 600.761703][ T5890] cpia1 3-1:0.0: unexpected systemstate: 00 [ 600.774877][ T5890] usb 3-1: USB disconnect, device number 73 [ 602.230789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 602.239522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 602.266579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 602.497616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 602.515414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 602.590855][T22015] kernel read not supported for file /eth0 (pid: 22015 comm: syz.1.7286) [ 602.656805][ T30] audit: type=1800 audit(1744154448.114:8176): pid=22015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7286" name="eth0" dev="mqueue" ino=22646 res=0 errno=0 [ 602.869220][T22023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 602.996280][ T5890] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 603.093222][T22034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7295'. [ 603.158905][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.175975][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.208868][ T5890] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 603.218301][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.255712][ T5890] usb 5-1: Product: syz [ 603.260272][ T5890] usb 5-1: Manufacturer: syz [ 603.275970][ T5890] usb 5-1: SerialNumber: syz [ 603.411424][T22046] loop5: detected capacity change from 0 to 1239 [ 603.485114][T22048] loop5: detected capacity change from 1239 to 2159 [ 603.501192][ T5890] usb 5-1: 0:2 : does not exist [ 603.541034][ T5890] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 603.583729][T20231] buffer_io_error: 7 callbacks suppressed [ 603.583749][T20231] Buffer I/O error on dev loop5, logical block 269, async page read [ 603.604597][ T5890] usb 5-1: USB disconnect, device number 85 [ 604.139376][T20297] udevd[20297]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.867261][T22068] input: syz0 as /devices/virtual/input/input66 [ 605.389859][T22084] syzkaller1: entered promiscuous mode [ 605.409300][T22084] syzkaller1: entered allmulticast mode [ 606.466124][ T5941] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 606.660316][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.686495][ T5941] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 606.736224][ T5941] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 606.758411][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.781571][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.805531][ T5941] usb 2-1: Product: syz [ 606.822268][ T5941] usb 2-1: Manufacturer: syz [ 606.832417][ T5941] usb 2-1: SerialNumber: syz [ 606.946189][ T5891] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 607.116022][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 607.148779][ T5941] usb 2-1: cannot find UAC_HEADER [ 607.156205][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.173048][ T5941] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 607.186113][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.213785][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.234076][ T5941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.256769][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 607.266778][ T5941] usb 2-1: MIDIStreaming interface descriptor not found [ 607.289598][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.346406][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 607.355525][ T5891] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 607.376469][ T5941] usb 2-1: USB disconnect, device number 63 [ 607.407865][ T5891] usb 5-1: Manufacturer: syz [ 607.460887][ T5891] usb 5-1: config 0 descriptor?? [ 607.496872][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 607.506483][ T5890] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 607.520007][ T5890] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 607.719321][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7339'. [ 607.734584][T20802] udevd[20802]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.820603][ T5891] rc_core: IR keymap rc-hauppauge not found [ 607.859090][ T5891] Registered IR keymap rc-empty [ 607.864217][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 607.936165][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 607.967164][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 608.007576][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67 [ 608.041155][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.106070][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.154652][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.197314][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.220936][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.267930][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.307985][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.356128][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.391484][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.427841][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 608.474242][ T5891] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 608.510589][ T5891] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 608.560164][ T5891] usb 5-1: USB disconnect, device number 86 [ 608.754655][T22201] input: syz1 as /devices/virtual/input/input68 [ 609.586120][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 609.595976][ T5890] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 609.602127][ T5890] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 609.683046][T22242] bond_slave_1: entered promiscuous mode [ 609.743103][T22242] bond_slave_1: left promiscuous mode [ 610.006911][ T5887] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 610.256795][ T5887] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 610.276009][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.284067][ T5887] usb 2-1: Product: syz [ 610.305755][ T5887] usb 2-1: Manufacturer: syz [ 610.330926][ T5887] usb 2-1: SerialNumber: syz [ 610.357254][ T5887] usb 2-1: config 0 descriptor?? [ 610.389669][ T5887] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 610.630980][T22249] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 610.713321][ T5887] gspca_sunplus: reg_r err -71 [ 610.734921][ T5887] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 610.785893][ T5887] usb 2-1: USB disconnect, device number 64 [ 611.007857][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7373'. [ 611.148247][T22289] tipc: Cannot configure node identity twice [ 611.216238][T22287] netlink: 'syz.3.7373': attribute type 7 has an invalid length. [ 611.234901][T22287] netlink: 'syz.3.7373': attribute type 8 has an invalid length. [ 611.287629][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7373'. [ 611.658495][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 611.682604][ T5890] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 611.696980][ T5890] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 612.962549][ T5891] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 613.118137][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.134168][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.176194][ T5891] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 613.191427][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.207885][ T5891] usb 2-1: config 0 descriptor?? [ 613.736164][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 613.747778][ T5890] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 613.770912][ T5890] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 613.880205][ T5891] usb 2-1: string descriptor 0 read error: -22 [ 613.981176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 614.036163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 614.044535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 614.091564][ T5891] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0052/input/input69 [ 614.161448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 614.170860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 614.205832][ T5891] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0052/input/input70 [ 614.302624][ T5891] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0052/input/input71 [ 614.395251][ T5891] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0052/input/input72 [ 614.452381][ T5891] uclogic 0003:256C:006D.0052: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 614.502134][ T5891] usb 2-1: USB disconnect, device number 65 [ 614.686434][ T53] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 614.724985][T22382] loop8: detected capacity change from 0 to 7 [ 614.733550][T22382] Dev loop8: unable to read RDB block 7 [ 614.747301][T22382] loop8: AHDI p1 p3 p4 [ 614.751625][T22382] loop8: partition table partially beyond EOD, truncated [ 614.774163][T22382] loop8: p1 start 975770946 is beyond EOD, truncated [ 614.796305][T22382] loop8: p3 start 6514546 is beyond EOD, truncated [ 614.871556][ T53] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.903493][ T53] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.956771][ T53] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 615.004943][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.017412][ T53] usb 3-1: Product: syz [ 615.021636][ T53] usb 3-1: Manufacturer: syz [ 615.076008][ T53] usb 3-1: SerialNumber: syz [ 615.109058][ T53] usb 3-1: config 0 descriptor?? [ 615.326151][ T5887] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 615.347791][ T53] usb 3-1: USB disconnect, device number 74 [ 615.466082][ T5891] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 615.506151][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 615.540099][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.574736][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.619563][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 615.638161][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 615.652771][ T5887] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 615.666867][ T5891] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 615.675211][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.685374][ T5887] usb 4-1: config 0 descriptor?? [ 615.719453][ T5891] usb 2-1: config 0 has no interface number 0 [ 615.732968][ T5891] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 615.755697][ T5891] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 615.793908][ T5891] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 615.825795][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.848809][ T5891] usb 2-1: Product: syz [ 615.853038][ T5891] usb 2-1: Manufacturer: syz [ 615.876262][ T5891] usb 2-1: SerialNumber: syz [ 615.889511][ T5891] usb 2-1: config 0 descriptor?? [ 615.905682][T22391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 615.917056][T22391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 616.121383][ T5887] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0053/input/input73 [ 616.164879][T22391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 616.173118][T22391] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 616.229765][ T5887] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0053/input/input74 [ 616.286647][ T5887] kye 0003:0458:5011.0053: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 616.310757][ T5890] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 616.346307][ T5887] usb 4-1: USB disconnect, device number 63 [ 616.498515][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.532778][T22402] input: syz0 as /devices/virtual/input/input75 [ 616.541157][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 616.562948][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 616.588354][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.617424][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.638303][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.662050][ T5890] usb 3-1: config 0 descriptor?? [ 616.681732][T22400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.808351][ T5891] asix 2-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x80 [ 617.098692][ T5891] usb 2-1: USB disconnect, device number 66 [ 617.158820][ T5890] plantronics 0003:047F:FFFF.0054: reserved main item tag 0xd [ 617.191958][ T5890] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 617.218191][ T5890] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 617.284599][ T5890] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 617.302533][ T5890] hid-generic 0000:0000:0000.0055: hidraw1: HID v0.00 Device [syz1] on syz0 [ 617.388901][T22414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7414'. [ 617.402670][T22414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7414'. [ 617.415701][T22414] bond0: option arp_validate: invalid value (1196027405) [ 617.430627][ T5891] usb 3-1: USB disconnect, device number 75 [ 617.536086][ T53] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 617.541841][T22416] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7415'. [ 617.689475][ T53] usb 4-1: config 0 has no interfaces? [ 617.716547][ T53] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 617.725679][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.755994][ T53] usb 4-1: Product: syz [ 617.760218][ T53] usb 4-1: Manufacturer: syz [ 617.764850][ T53] usb 4-1: SerialNumber: syz [ 617.790207][ T53] usb 4-1: config 0 descriptor?? [ 618.024882][ T5891] usb 4-1: USB disconnect, device number 64 [ 618.406141][ T5890] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 618.583059][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.604683][ T5890] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 618.630449][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.665674][ T5890] usb 2-1: config 0 descriptor?? [ 618.919277][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 618.926346][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 618.956710][ T5890] usb 2-1: USB disconnect, device number 67 [ 619.466065][ T5890] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 619.629526][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 619.654727][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.667862][ T5890] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 619.677532][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.689690][ T5890] usb 2-1: config 0 descriptor?? [ 619.838589][T22479] syz_tun: entered allmulticast mode [ 619.874280][T22479] dvmrp8: entered allmulticast mode [ 619.892869][T22479] syz_tun: left allmulticast mode [ 619.906588][ T5890] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 619.916197][T22479] dvmrp8: left allmulticast mode [ 619.935767][ T5890] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input77 [ 620.360244][T22483] netlink: 277 bytes leftover after parsing attributes in process `syz.0.7445'. [ 620.372385][ C0] powermate: config urb returned -71 [ 620.380539][ C0] powermate: config urb returned -71 [ 620.386106][ C0] powermate: config urb returned -71 [ 620.391625][ C0] powermate: config urb returned -71 [ 620.406215][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 620.415817][T17827] usb 2-1: USB disconnect, device number 68 [ 621.591035][T22520] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7462'. [ 621.856082][T17827] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 622.049814][T17827] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 622.082910][T17827] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 622.125193][T17827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 622.182050][T17827] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 622.266046][T17827] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 622.364272][T17827] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 622.482554][T17827] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 622.596493][T17827] usb 5-1: Product: syz [ 622.610918][T17827] usb 5-1: Manufacturer: syz [ 622.690811][T17827] cdc_wdm 5-1:1.0: skipping garbage [ 622.701266][T17827] cdc_wdm 5-1:1.0: skipping garbage [ 622.711034][T17827] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 622.717089][T17827] cdc_wdm 5-1:1.0: Unknown control protocol [ 622.970196][ C1] wdm_int_callback: 42 callbacks suppressed [ 622.970223][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 622.971162][T17827] usb 5-1: USB disconnect, device number 87 [ 622.976165][ C1] wdm_int_callback: 42 callbacks suppressed [ 622.976186][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 622.976206][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 624.014963][T22603] kernel read not supported for file /rmdF¼ì (pid: 22603 comm: syz.2.7481) [ 624.041765][ T30] audit: type=1800 audit(1744154469.494:8177): pid=22603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7481" name=726D64461716BCEC dev="mqueue" ino=87735 res=0 errno=0 [ 624.260248][T22606] input: syz0 as /devices/virtual/input/input78 [ 624.302272][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.311858][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.438415][T22614] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 624.606142][ T53] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 624.655889][T22623] loop5: detected capacity change from 0 to 1 [ 624.798372][ T53] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.816495][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 624.846010][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.846091][ T53] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.846140][ T53] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.881684][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.906807][ T53] usb 4-1: config 0 descriptor?? [ 624.917017][T22610] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 625.366250][ T53] plantronics 0003:047F:FFFF.0056: reserved main item tag 0xd [ 625.375835][ T53] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 625.389447][ T53] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 625.637973][ T53] usb 4-1: USB disconnect, device number 65 [ 626.496121][T17827] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 626.658737][T17827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.669733][T17827] usb 3-1: config 0 interface 0 has no altsetting 0 [ 626.701783][T17827] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 626.717715][T17827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.735037][T17827] usb 3-1: config 0 descriptor?? [ 626.964818][ T53] usb 3-1: USB disconnect, device number 76 [ 627.134593][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7516'. [ 632.372572][T22732] syz.0.7534 (22732): drop_caches: 3 [ 632.438568][ T53] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 632.608261][ T53] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.615260][ T53] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 632.645959][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.667726][ T53] usb 3-1: config 0 descriptor?? [ 632.936190][ T5889] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 633.116084][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 633.118217][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.118245][ T5889] usb 4-1: config 0 has no interfaces? [ 633.120998][ T5889] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 633.121031][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.121055][ T5889] usb 4-1: Product: syz [ 633.121096][ T5889] usb 4-1: Manufacturer: syz [ 633.121114][ T5889] usb 4-1: SerialNumber: syz [ 633.124708][ T5889] usb 4-1: config 0 descriptor?? [ 633.341644][T22836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.352618][T22836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.390114][ T5889] usb 4-1: USB disconnect, device number 66 [ 633.693161][ T53] video4linux radio48: keene_cmd_set failed (-71) [ 633.700780][ T53] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 633.733676][ T53] usb 3-1: USB disconnect, device number 77 [ 633.779430][T22873] sctp: [Deprecated]: syz.0.7594 (pid 22873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.779430][T22873] Use struct sctp_sack_info instead [ 634.776038][ T53] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 634.959391][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 634.989876][ T53] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 635.006001][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 635.041198][ T53] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.056022][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.074270][ T53] usb 3-1: Product: syz [ 635.078663][ T53] usb 3-1: Manufacturer: syz [ 635.084387][ T53] usb 3-1: SerialNumber: syz [ 635.114061][ T53] usb 3-1: config 0 descriptor?? [ 635.134388][ T53] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 635.166558][ T53] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 635.738161][T22947] input: syz0 as /devices/virtual/input/input81 [ 635.761172][ T53] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 635.772746][ T53] em28xx 3-1:0.0: Config register raw data: 0x41 [ 635.866173][ T5887] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 635.996951][ T5890] usb 3-1: USB disconnect, device number 78 [ 636.004952][ T5890] em28xx 3-1:0.0: Disconnecting em28xx [ 636.029888][ T5890] em28xx 3-1:0.0: Freeing device [ 636.056863][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 636.077623][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.115627][ T5887] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 636.132105][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.154031][ T5887] usb 4-1: config 0 descriptor?? [ 636.298412][T22960] loop8: detected capacity change from 0 to 1 [ 636.308809][T22960] Dev loop8: unable to read RDB block 1 [ 636.324646][T22960] loop8: unable to read partition table [ 636.345691][T22960] loop8: partition table beyond EOD, truncated [ 636.362992][T22960] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 636.379716][ T5887] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 636.624468][ T53] usb 4-1: USB disconnect, device number 67 [ 636.927995][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7638'. [ 637.376359][T22991] batadv_slave_1: entered promiscuous mode [ 637.422162][T22989] batadv_slave_1: left promiscuous mode [ 638.026437][ T5889] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 638.196807][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7651'. [ 638.255205][T23007] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.264851][T23007] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.274224][T23007] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.283606][T23007] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.299914][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.311289][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.340638][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.350565][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.388380][T23007] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.397942][T23007] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.407050][T23007] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.416057][T23007] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.582222][ T5889] usb 5-1: usb_control_msg returned -32 [ 638.587979][ T5889] usbtmc 5-1:16.0: can't read capabilities [ 638.844814][ T30] audit: type=1326 audit(1744154484.284:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3d8d169 code=0x7ffc0000 [ 638.913764][ T30] audit: type=1326 audit(1744154484.284:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3d8d169 code=0x7ffc0000 [ 639.013006][ T30] audit: type=1326 audit(1744154484.294:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2ef3d8d169 code=0x7ffc0000 [ 639.111160][ T30] audit: type=1326 audit(1744154484.294:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef3d8d169 code=0x7ffc0000 [ 639.152607][ T5887] usb 5-1: USB disconnect, device number 88 [ 639.196052][ T30] audit: type=1326 audit(1744154484.294:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2ef3d8d169 code=0x7ffc0000 [ 639.318922][ T30] audit: type=1326 audit(1744154484.294:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef3d29359 code=0x7ffc0000 [ 639.417617][ T30] audit: type=1326 audit(1744154484.294:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef3d29359 code=0x7ffc0000 [ 639.494412][ T30] audit: type=1326 audit(1744154484.294:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef3d29359 code=0x7ffc0000 [ 639.538198][ T30] audit: type=1326 audit(1744154484.294:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef3d29359 code=0x7ffc0000 [ 639.593303][ T30] audit: type=1326 audit(1744154484.294:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23018 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ef3d29359 code=0x7ffc0000 [ 640.396143][ T5887] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 640.556158][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 640.592829][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.634477][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.666352][ T5887] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 640.718012][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.738719][ T5887] usb 2-1: config 0 descriptor?? [ 640.758902][ T5887] usb 2-1: can't set config #0, error -71 [ 640.778024][T23054] loop6: detected capacity change from 0 to 524287999 [ 640.785756][ C1] blk_print_req_error: 7 callbacks suppressed [ 640.785804][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.787666][ T5887] usb 2-1: USB disconnect, device number 69 [ 640.791954][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.837008][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.846334][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.856253][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.865648][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.879306][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.888521][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.897707][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.906919][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.996537][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.005741][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.014135][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.023358][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.031435][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.040650][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.048667][T23054] ldm_validate_partition_table(): Disk read failed. [ 641.100887][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.110057][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.142109][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.152643][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.161602][T23054] Dev loop6: unable to read RDB block 0 [ 641.174679][T23054] loop6: unable to read partition table [ 641.198540][T23054] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 641.231786][T23058] ldm_validate_partition_table(): Disk read failed. [ 641.239390][T23058] Dev loop6: unable to read RDB block 0 [ 641.247517][T23058] loop6: unable to read partition table [ 641.273351][T23058] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 641.354110][ T5211] ldm_validate_partition_table(): Disk read failed. [ 641.371412][ T5211] Dev loop6: unable to read RDB block 0 [ 641.390951][ T5211] loop6: unable to read partition table [ 641.477186][T23069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.500319][T23072] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 641.612972][T23076] input: syz0 as /devices/virtual/input/input82 [ 641.903460][T23090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7687'. [ 641.922770][T23090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7687'. [ 641.946934][T23093] loop2: detected capacity change from 0 to 7 [ 641.957843][T23093] Dev loop2: unable to read RDB block 7 [ 641.966281][T23093] loop2: unable to read partition table [ 641.972194][T23093] loop2: partition table beyond EOD, truncated [ 641.988711][T23093] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 642.204143][T23105] vlan4: entered promiscuous mode [ 642.212193][T23105] netdevsim netdevsim1 : entered promiscuous mode [ 642.419752][T23114] syzkaller1: entered promiscuous mode [ 642.425566][T23114] syzkaller1: entered allmulticast mode [ 643.216743][ T5888] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 643.388749][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 643.410066][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 643.439950][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 643.456466][ T5888] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 643.465962][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.474068][ T5888] usb 2-1: Product: syz [ 643.485579][ T5888] usb 2-1: Manufacturer: syz [ 643.502968][ T5888] usb 2-1: SerialNumber: syz [ 643.525041][ T5888] usb 2-1: config 0 descriptor?? [ 643.541733][ T5888] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 643.571635][ T5888] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 644.097465][T23164] syzkaller1: entered promiscuous mode [ 644.103241][T23164] syzkaller1: entered allmulticast mode [ 644.157575][ T5888] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 644.164566][ T5888] em28xx 2-1:0.0: Config register raw data: 0x56 [ 644.351163][T23172] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 644.366313][ T5888] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 644.382030][ T5888] em28xx 2-1:0.0: No AC97 audio processor [ 644.414559][ T5888] usb 2-1: USB disconnect, device number 70 [ 644.432476][ T5888] em28xx 2-1:0.0: Disconnecting em28xx [ 644.454175][ T5888] em28xx 2-1:0.0: Freeing device [ 645.235479][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 645.235499][ T30] audit: type=1326 audit(1744154490.684:8342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2ed8d169 code=0x7ffc0000 [ 645.305064][ T30] audit: type=1326 audit(1744154490.734:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 645.329812][ T5891] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 645.431994][ T30] audit: type=1326 audit(1744154490.734:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 645.490077][T23210] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 645.506143][ T30] audit: type=1326 audit(1744154490.734:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 645.533259][ T5891] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 645.552258][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.562091][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.603474][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 645.616476][ T30] audit: type=1326 audit(1744154490.734:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 645.651210][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.661831][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.676458][ T30] audit: type=1326 audit(1744154490.734:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 645.706241][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 645.737647][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.756095][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.776378][ T30] audit: type=1326 audit(1744154490.734:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 645.817686][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 645.844770][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.858053][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.883078][ T30] audit: type=1326 audit(1744154490.734:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 645.906755][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 645.930750][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.953972][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.971837][ T30] audit: type=1326 audit(1744154490.734:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 646.003010][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 646.010457][ T30] audit: type=1326 audit(1744154490.734:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23205 comm="syz.2.7738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2ed29359 code=0x7ffc0000 [ 646.034506][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 646.051591][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 646.063266][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 646.072567][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 646.082236][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 646.097759][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 646.111666][ T5891] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 646.121166][ T5891] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 646.145236][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 646.163702][ T5891] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 646.182515][ T5891] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 646.200995][ T5891] usb 5-1: Product: syz [ 646.213047][ T5891] usb 5-1: Manufacturer: syz [ 646.219499][ T5891] usb 5-1: SerialNumber: syz [ 646.239069][ T5891] usb 5-1: config 0 descriptor?? [ 646.257268][ T5891] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 646.511149][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 646.511678][ T5888] usb 5-1: USB disconnect, device number 89 [ 646.527185][ T5888] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 646.606343][ T5887] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 646.616261][ T5891] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 646.771374][ T5887] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.781727][ T5887] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.792271][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.796773][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 646.801904][ T5887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 646.828285][ T5887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 646.829806][ T5891] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 646.844968][ T5887] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.850109][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.882738][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.883964][ T5891] usb 4-1: config 0 descriptor?? [ 646.898272][T23223] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 646.901338][ T5887] usb 3-1: Product: syz [ 646.909757][ T5887] usb 3-1: Manufacturer: syz [ 646.928380][ T5887] cdc_wdm 3-1:1.0: skipping garbage [ 646.933653][ T5887] cdc_wdm 3-1:1.0: skipping garbage [ 646.947526][ T5887] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 646.953487][ T5887] cdc_wdm 3-1:1.0: Unknown control protocol [ 647.362852][ T5891] elan 0003:04F3:0755.0057: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 647.600481][ T5891] usb 4-1: USB disconnect, device number 68 [ 647.656147][ T5888] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 647.816370][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 647.829145][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 647.842869][ T5888] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 647.852685][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.877302][ T5888] usb 5-1: config 0 descriptor?? [ 647.889788][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input83 [ 647.950098][ T5887] usb 3-1: USB disconnect, device number 79 [ 648.103815][ T5196] bcm5974 5-1:0.0: could not read from device [ 648.123469][ T5196] bcm5974 5-1:0.0: could not read from device [ 648.168832][ T5888] usb 5-1: USB disconnect, device number 90 [ 648.179211][ T5196] bcm5974 5-1:0.0: could not read from device [ 648.803714][T23266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.308505][ T5888] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 649.466663][ T5890] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 649.474808][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 649.487496][ T5888] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 649.496490][ T5888] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 649.504785][ T5888] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 649.513302][ T5888] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 649.522420][ T5888] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 649.535176][ T5888] usb 5-1: config 0 has no interface number 0 [ 649.541442][ T5888] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 649.566000][ T5888] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 649.586634][ T5888] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 649.610315][ T5888] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.614939][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7772'. [ 649.630862][ T5890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 649.652208][ T5888] usb 5-1: config 0 interface 125 has no altsetting 0 [ 649.665424][ T5890] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 649.675235][ T5888] usb 5-1: config 0 interface 125 has no altsetting 2 [ 649.682996][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.710397][ T5888] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 649.720595][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 649.737032][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.745167][ T5890] usb 2-1: Product: syz [ 649.749710][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.757887][ T5888] usb 5-1: Product: syz [ 649.762098][ T5888] usb 5-1: Manufacturer: syz [ 649.766900][ T5890] usb 2-1: Manufacturer: syz [ 649.771535][ T5890] usb 2-1: SerialNumber: syz [ 649.776280][ T5888] usb 5-1: SerialNumber: syz [ 649.802859][ T5888] usb 5-1: config 0 descriptor?? [ 649.824443][ T5888] usb 5-1: selecting invalid altsetting 2 [ 649.923916][T23300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7775'. [ 649.954025][T23302] bridge0: port 1(syz_tun) entered blocking state [ 649.970104][T23302] bridge0: port 1(syz_tun) entered disabled state [ 649.981840][T23302] syz_tun: entered allmulticast mode [ 649.990829][T23302] syz_tun: entered promiscuous mode [ 650.024227][ T5890] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 650.224708][ T5891] usb 2-1: USB disconnect, device number 71 [ 650.247760][ T5891] usblp0: removed [ 650.879162][ T5888] usb 5-1: USB disconnect, device number 91 [ 651.796023][ T5890] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 651.966000][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 651.992945][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.015464][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 652.045968][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 652.056007][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.086177][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 652.095275][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.333177][ T5890] usb 4-1: usb_control_msg returned -32 [ 652.339334][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 652.548986][T23384] bridge0: entered promiscuous mode [ 652.555330][T23384] macvlan2: entered promiscuous mode [ 652.576480][T23384] macvlan3: entered promiscuous mode [ 652.753652][T23391] netlink: 'syz.2.7817': attribute type 1 has an invalid length. [ 652.764290][T23391] netlink: 'syz.2.7817': attribute type 2 has an invalid length. [ 652.921765][T23397] ALSA: mixer_oss: invalid OSS volume '' [ 652.927858][T23397] ALSA: mixer_oss: invalid OSS volume 'H' [ 652.933817][T23397] ALSA: mixer_oss: invalid OSS volume '' [ 654.565082][ T5889] usb 4-1: USB disconnect, device number 69 [ 655.188803][T23472] tun0: tun_chr_ioctl cmd 1074025675 [ 655.194161][T23472] tun0: persist enabled [ 655.199137][T23472] tun0: tun_chr_ioctl cmd 1074025675 [ 655.204535][T23472] tun0: persist disabled [ 656.656177][T23483] syz.1.7858: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 656.685522][T23483] CPU: 0 UID: 0 PID: 23483 Comm: syz.1.7858 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 656.685555][T23483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 656.685566][T23483] Call Trace: [ 656.685573][T23483] [ 656.685580][T23483] dump_stack_lvl+0x241/0x360 [ 656.685612][T23483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.685636][T23483] ? __pfx__printk+0x10/0x10 [ 656.685658][T23483] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 656.685684][T23483] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 656.685707][T23483] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 656.685733][T23483] warn_alloc+0x27c/0x410 [ 656.685754][T23483] ? __pfx_warn_alloc+0x10/0x10 [ 656.685775][T23483] ? packet_set_ring+0x6e7/0x24b0 [ 656.685798][T23483] ? __get_vm_area_node+0x1c8/0x2d0 [ 656.685822][T23483] ? __get_vm_area_node+0x25c/0x2d0 [ 656.685851][T23483] __vmalloc_node_range_noprof+0x634/0x1390 [ 656.685902][T23483] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 656.685931][T23483] ? rcu_is_watching+0x15/0xb0 [ 656.685963][T23483] ? packet_set_ring+0x6e7/0x24b0 [ 656.685993][T23483] vzalloc_noprof+0x79/0x90 [ 656.686014][T23483] ? packet_set_ring+0x6e7/0x24b0 [ 656.686045][T23483] packet_set_ring+0x6e7/0x24b0 [ 656.686102][T23483] ? __pfx_packet_set_ring+0x10/0x10 [ 656.686155][T23483] ? _copy_from_user+0x95/0xb0 [ 656.686194][T23483] packet_setsockopt+0x1024/0x1870 [ 656.686233][T23483] ? __pfx_packet_setsockopt+0x10/0x10 [ 656.686276][T23483] ? futex_wait+0x287/0x370 [ 656.686307][T23483] ? aa_sk_perm+0x96f/0xac0 [ 656.686343][T23483] ? __lock_acquire+0xad5/0xd80 [ 656.686367][T23483] ? __pfx_aa_sk_perm+0x10/0x10 [ 656.686401][T23483] ? aa_sock_opt_perm+0x79/0x120 [ 656.686439][T23483] ? __pfx_packet_setsockopt+0x10/0x10 [ 656.686469][T23483] do_sock_setsockopt+0x3b1/0x710 [ 656.686500][T23483] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 656.686521][T23483] ? __fget_files+0x2a/0x420 [ 656.686547][T23483] ? __fget_files+0x39d/0x420 [ 656.686566][T23483] ? __fget_files+0x2a/0x420 [ 656.686596][T23483] __x64_sys_setsockopt+0x1ee/0x280 [ 656.686628][T23483] do_syscall_64+0xf3/0x230 [ 656.686657][T23483] ? clear_bhb_loop+0x45/0xa0 [ 656.686684][T23483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.686706][T23483] RIP: 0033:0x7fc3bb58d169 [ 656.686727][T23483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.686746][T23483] RSP: 002b:00007fc3bc324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 656.686770][T23483] RAX: ffffffffffffffda RBX: 00007fc3bb7a5fa0 RCX: 00007fc3bb58d169 [ 656.686788][T23483] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 656.686802][T23483] RBP: 00007fc3bb60e2a0 R08: 000000000000001c R09: 0000000000000000 [ 656.686817][T23483] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 656.686832][T23483] R13: 0000000000000000 R14: 00007fc3bb7a5fa0 R15: 00007fc3bb8cfa28 [ 656.686866][T23483] [ 657.106056][T23483] Mem-Info: [ 657.109224][T23483] active_anon:7083 inactive_anon:2 isolated_anon:0 [ 657.109224][T23483] active_file:1161 inactive_file:3010 isolated_file:0 [ 657.109224][T23483] unevictable:768 dirty:409 writeback:0 [ 657.109224][T23483] slab_reclaimable:5679 slab_unreclaimable:110979 [ 657.109224][T23483] mapped:29571 shmem:1424 pagetables:1839 [ 657.109224][T23483] sec_pagetables:0 bounce:0 [ 657.109224][T23483] kernel_misc_reclaimable:0 [ 657.109224][T23483] free:1341541 free_pcp:5576 free_cma:0 [ 657.154789][T23483] Node 0 active_anon:28332kB inactive_anon:8kB active_file:4644kB inactive_file:12036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118284kB dirty:1636kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12164kB pagetables:7356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 657.190766][T23483] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 657.222386][T23483] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.249681][T23483] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 657.255485][T23483] Node 0 DMA32 free:1443604kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:28324kB inactive_anon:8kB active_file:4644kB inactive_file:11952kB unevictable:1536kB writepending:1636kB present:3129332kB managed:2547244kB mlocked:0kB bounce:0kB free_pcp:22804kB local_pcp:22020kB free_cma:0kB [ 657.287539][T23483] lowmem_reserve[]: 0 0 0 0 0 [ 657.292300][T23483] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 657.319208][T23483] lowmem_reserve[]: 0 0 0 0 0 [ 657.323948][T23483] Node 1 Normal free:3906600kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 657.366060][T23483] lowmem_reserve[]: 0 0 0 0 0 [ 657.375530][T23483] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 657.436172][T23483] Node 0 DMA32: 26*4kB (UE) 422*8kB (ME) 884*16kB (ME) 871*32kB (UME) 627*64kB (UME) 319*128kB (UME) 128*256kB (UME) 48*512kB (UME) 22*1024kB (ME) 18*2048kB (UME) 293*4096kB (UM) = 1443320kB [ 657.470835][T23483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 657.521751][T23483] Node 1 Normal: 232*4kB (UE) 65*8kB (UE) 42*16kB (UE) 209*32kB (UE) 95*64kB (UME) 26*128kB (UE) 13*256kB (UME) 10*512kB (UM) 3*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3906600kB [ 657.540015][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.554860][T23483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.565383][T23483] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 657.583086][T23483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.599718][T23483] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 657.611360][T23483] 5599 total pagecache pages [ 657.621014][T23483] 2 pages in swap cache [ 657.625287][T23483] Free swap = 124988kB [ 657.630265][T23483] Total swap = 124996kB [ 657.634531][T23483] 2097051 pages RAM [ 657.643303][T23483] 0 pages HighMem/MovableOnly [ 657.648904][T23483] 428582 pages reserved [ 657.653137][T23483] 0 pages cma reserved [ 657.796099][ T5891] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 657.967024][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 658.031462][ T5891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.045728][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 658.159266][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 658.196021][ T5891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.231973][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 658.249115][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.419926][T23533] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 658.496492][ T5891] usb 5-1: GET_CAPABILITIES returned 0 [ 658.504151][ T5891] usbtmc 5-1:16.0: can't read capabilities [ 658.921165][T23557] input: syz0 as /devices/virtual/input/input84 [ 659.049264][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7895'. [ 659.155241][T23568] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7897'. [ 659.276629][ T5891] usb 5-1: USB disconnect, device number 92 [ 660.100945][T23612] netlink: 'syz.1.7914': attribute type 9 has an invalid length. [ 660.580616][ T5889] hid-generic 0000:0000:0000.0058: unknown main item tag 0x7 [ 660.589718][ T5889] hid-generic 0000:0000:0000.0058: ignoring exceeding usage max [ 660.600505][ T5889] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 660.608341][ T5889] hid-generic 0000:0000:0000.0058: unknown main item tag 0x6 [ 660.616285][ T5889] hid-generic 0000:0000:0000.0058: reserved main item tag 0xd [ 660.629033][ T5889] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz0] on syz0 [ 660.766183][ T5888] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 660.900340][T23641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.959163][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 660.976022][ T5888] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 660.990805][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 661.000166][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.010474][T23644] vlan0: entered allmulticast mode [ 661.015737][T23644] bridge_slave_0: entered allmulticast mode [ 661.018103][T23627] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 661.024146][T23644] bridge0: port 2(vlan0) entered blocking state [ 661.037497][T23644] bridge0: port 2(vlan0) entered disabled state [ 661.041228][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 661.047172][T23644] vlan0: entered promiscuous mode [ 661.062557][T23644] bridge0: mtu less than device minimum [ 661.282326][ T5888] usb 3-1: USB disconnect, device number 80 [ 661.624408][T23658] geneve0: entered promiscuous mode [ 661.629967][T23658] geneve0: entered allmulticast mode [ 663.252914][T23698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7952'. [ 663.391128][T23702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.839658][ T5890] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 664.116693][ T5890] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 664.125360][ T5890] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 664.160686][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 664.184537][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 664.221495][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 664.276521][ T5890] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 664.294123][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 664.316183][ T5890] usb 4-1: Product: syz [ 664.320423][ T5890] usb 4-1: Manufacturer: syz [ 664.350120][ T5890] cdc_wdm 4-1:1.0: skipping garbage [ 664.355480][ T5890] cdc_wdm 4-1:1.0: skipping garbage [ 664.401837][ T5890] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 664.416119][ T5890] cdc_wdm 4-1:1.0: Unknown control protocol [ 664.443259][T23719] syzkaller1: entered promiscuous mode [ 664.460025][T23719] syzkaller1: entered allmulticast mode [ 664.613499][ T5890] usb 4-1: USB disconnect, device number 70 [ 665.104795][T23744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.112143][T23744] IPv6: NLM_F_CREATE should be set when creating new route [ 665.119421][T23744] IPv6: NLM_F_CREATE should be set when creating new route [ 666.406087][ T5891] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 666.877221][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 666.877242][ T30] audit: type=1326 audit(1744154512.334:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.4.7987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39f238d169 code=0x0 [ 666.905899][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.100507][T23781] input: syz1 as /devices/virtual/input/input85 [ 667.126147][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 667.212516][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.232836][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.287118][ T5891] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 667.312541][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.329853][ T5891] usb 3-1: config 0 descriptor?? [ 667.854698][ T5891] kye 0003:0458:5016.0059: control desc unexpectedly large [ 667.891380][ T5891] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0059/input/input86 [ 668.004679][ T5891] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0059/input/input87 [ 668.072844][ T5891] kye 0003:0458:5016.0059: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 668.489895][ T5890] usb 3-1: USB disconnect, device number 81 [ 670.368594][T23880] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 670.376712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.606441][ T53] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 670.802472][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.817524][ T53] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 670.836076][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.867351][ T53] usb 2-1: config 0 descriptor?? [ 671.095397][ T53] usbhid 2-1:0.0: can't add hid device: -71 [ 671.103123][ T53] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 671.123291][ T53] usb 2-1: USB disconnect, device number 72 [ 671.576593][ T53] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 671.736576][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 671.743723][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.754781][ T5889] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 671.776713][ T53] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 671.785827][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.809421][ T53] usb 2-1: config 0 descriptor?? [ 671.951178][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.985985][ T5889] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 671.995179][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.029747][ T53] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 672.042706][T23909] netlink: 'syz.0.8040': attribute type 29 has an invalid length. [ 672.052422][ T5889] usb 5-1: config 0 descriptor?? [ 672.061981][ T53] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input88 [ 672.074939][T23909] netlink: 'syz.0.8040': attribute type 29 has an invalid length. [ 672.095447][T23909] netlink: 500 bytes leftover after parsing attributes in process `syz.0.8040'. [ 672.463725][ C1] powermate: config urb returned -71 [ 672.469721][ C1] powermate: config urb returned -71 [ 672.475291][ C1] powermate: config urb returned -71 [ 672.496294][T22157] usb 2-1: USB disconnect, device number 73 [ 672.496381][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 672.512101][ T5889] keytouch 0003:0926:3333.005A: fixing up Keytouch IEC report descriptor [ 672.531080][ T5889] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.005A/input/input89 [ 672.650156][ T5889] keytouch 0003:0926:3333.005A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 673.130044][ T5890] usb 5-1: USB disconnect, device number 93 [ 673.526027][ T5888] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 673.577967][T23931] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8048'. [ 673.686041][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 673.694544][ T5888] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 673.712144][ T5888] usb 2-1: config 0 has no interface number 0 [ 673.731381][ T5888] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.761911][ T5888] usb 2-1: config 0 interface 85 has no altsetting 0 [ 673.781974][ T5888] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 673.797545][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.800325][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8052'. [ 673.805790][ T5888] usb 2-1: Product: syz [ 673.825711][ T5888] usb 2-1: Manufacturer: syz [ 673.831446][ T5888] usb 2-1: SerialNumber: syz [ 673.848966][ T5888] usb 2-1: config 0 descriptor?? [ 673.957940][T23940] syzkaller1: entered promiscuous mode [ 673.963559][T23940] syzkaller1: entered allmulticast mode [ 674.216688][T23950] netlink: 'syz.3.8058': attribute type 11 has an invalid length. [ 674.552809][ T5888] appletouch 2-1:0.85: Geyser mode initialized. [ 674.616940][ T5888] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input90 [ 674.735994][T22157] usb 2-1: USB disconnect, device number 74 [ 674.742028][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 674.845605][T22157] appletouch 2-1:0.85: input: appletouch disconnected [ 674.856958][T23963] syzkaller1: entered promiscuous mode [ 674.867468][T23963] syzkaller1: entered allmulticast mode [ 675.125986][ T5889] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 675.404509][ T5889] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 675.415705][T22157] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 675.431093][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.447602][ T5889] usb 3-1: config 0 descriptor?? [ 675.475832][ T30] audit: type=1326 audit(1744154520.924:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23980 comm="syz.1.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3bb58d169 code=0x7ffc0000 [ 675.484523][T23982] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8070'. [ 675.515343][ T30] audit: type=1326 audit(1744154520.924:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23980 comm="syz.1.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fc3bb58d169 code=0x7ffc0000 [ 675.542634][ T30] audit: type=1326 audit(1744154520.924:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23980 comm="syz.1.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3bb58d169 code=0x7ffc0000 [ 675.565120][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.587482][ T5889] gspca_main: spca508-2.14.0 probing 8086:0110 [ 675.599390][T22157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 675.610828][T22157] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 675.620331][T22157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.644271][T22157] usb 5-1: config 0 descriptor?? [ 675.650829][T23971] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 675.712316][T23987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8071'. [ 675.828914][ T5889] gspca_spca508: reg_read err -32 [ 675.834878][ T5889] gspca_spca508: reg_read err -32 [ 675.844278][ T5889] gspca_spca508: reg_read err -32 [ 676.075720][ T5889] gspca_spca508: reg_read err -71 [ 676.084375][ T5889] gspca_spca508: reg write: error -71 [ 676.090536][T22157] elan 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 676.103180][ T5889] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 676.126577][ T5889] usb 3-1: USB disconnect, device number 82 [ 676.285104][T17827] usb 5-1: USB disconnect, device number 94 [ 678.172295][T24066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8104'. [ 679.364131][T24106] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 680.106313][T22157] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 680.293866][T22157] usb 2-1: Using ep0 maxpacket: 32 [ 680.306576][T22157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.341452][T22157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.375089][T22157] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 680.429453][T22157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.491071][T22157] usb 2-1: config 0 descriptor?? [ 680.640822][T24152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8139'. [ 680.690378][T24152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8139'. [ 680.855567][T24158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8143'. [ 680.928552][T22157] savu 0003:1E7D:2D5A.005C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 681.179828][T22157] usb 2-1: USB disconnect, device number 75 [ 682.697035][ T5890] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 682.867864][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 682.874547][ T5890] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 682.893390][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.904644][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.919211][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 682.931263][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.955736][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 682.966658][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.208637][ T5890] usb 4-1: GET_CAPABILITIES returned 0 [ 683.220854][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 683.451079][ T5888] usb 4-1: USB disconnect, device number 71 [ 683.500843][T24248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.270629][T24278] loop2: detected capacity change from 0 to 7 [ 684.277816][T24278] Dev loop2: unable to read RDB block 7 [ 684.283506][T24278] loop2: AHDI p2 p3 [ 684.290157][T24278] loop2: partition table partially beyond EOD, truncated [ 684.300951][T24278] loop2: p2 size 150995456 extends beyond EOD, truncated [ 684.370381][T20297] udevd[20297]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 684.447515][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8198'. [ 685.058477][T24305] vlan3: entered promiscuous mode [ 685.063555][T24305] bond0: entered promiscuous mode [ 685.694230][T24333] loop2: detected capacity change from 0 to 7 [ 685.702549][T24333] Dev loop2: unable to read RDB block 7 [ 685.713481][T24333] loop2: unable to read partition table [ 685.720102][T24333] loop2: partition table beyond EOD, truncated [ 685.731832][T24333] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 685.745580][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.745692][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.297999][T22157] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 686.485965][T22157] usb 5-1: Using ep0 maxpacket: 8 [ 686.497478][T22157] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.508661][T22157] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.518988][T22157] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.529115][T22157] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.552536][T22157] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 686.576021][T22157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.798078][T22157] usb 5-1: GET_CAPABILITIES returned 0 [ 686.810119][T22157] usbtmc 5-1:16.0: can't read capabilities [ 687.009774][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.019202][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.028286][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.037358][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.047603][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.056705][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.065767][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.074819][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.089786][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.098926][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.108118][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.117663][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.126767][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.136503][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.145614][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.154680][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.186176][T22157] usb 5-1: USB disconnect, device number 95 [ 687.510813][T24376] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 687.886024][T22157] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 688.036259][T22157] usb 2-1: Using ep0 maxpacket: 8 [ 688.049939][T22157] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 688.077739][T22157] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 688.100080][T22157] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 688.120615][T22157] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.154958][T22157] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 688.173219][T22157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.406459][T22157] usb 2-1: GET_CAPABILITIES returned 0 [ 688.412174][T22157] usbtmc 2-1:16.0: can't read capabilities [ 688.626859][ T5889] usb 2-1: USB disconnect, device number 76 [ 688.714284][T24416] input: syz0 as /devices/virtual/input/input91 [ 690.248465][T24453] syzkaller1: entered promiscuous mode [ 690.254939][T24453] syzkaller1: entered allmulticast mode [ 690.297023][T22157] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 690.456867][T22157] usb 2-1: Using ep0 maxpacket: 16 [ 690.464319][T22157] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.476916][T22157] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.496321][T22157] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 690.506204][ T5890] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 690.506533][T22157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.522943][T22157] usb 2-1: Product: syz [ 690.527197][T22157] usb 2-1: Manufacturer: syz [ 690.531817][T22157] usb 2-1: SerialNumber: syz [ 690.677346][ T5890] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 690.686562][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.694605][ T5890] usb 4-1: Product: syz [ 690.699269][ T5890] usb 4-1: Manufacturer: syz [ 690.703906][ T5890] usb 4-1: SerialNumber: syz [ 690.712068][ T5890] usb 4-1: config 0 descriptor?? [ 690.746285][ T5891] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 690.940981][ T53] usb 4-1: USB disconnect, device number 72 [ 690.948228][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 690.956227][T22157] usb 2-1: 0:2 : does not exist [ 690.976826][ T5891] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 691.001072][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.021279][ T5891] usb 5-1: Product: syz [ 691.031487][ T5891] usb 5-1: Manufacturer: syz [ 691.044380][ T5891] usb 5-1: SerialNumber: syz [ 691.055172][ T5891] usb 5-1: config 0 descriptor?? [ 691.273747][ T5891] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 691.561164][ T5890] usb 2-1: USB disconnect, device number 77 [ 691.685002][ T5891] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 691.705593][ T5891] usb 5-1: USB disconnect, device number 96 [ 691.716634][T22172] udevd[22172]: setting owner of /dev/bus/usb/005/096 to uid=0, gid=0 failed: No such file or directory [ 692.951834][T24489] netlink: 566 bytes leftover after parsing attributes in process `syz.1.8286'. [ 693.274282][T22554] tipc: Subscription rejected, illegal request [ 694.868381][T24540] netlink: 'syz.3.8308': attribute type 29 has an invalid length. [ 694.876750][ T5891] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 694.919912][T24540] netlink: 'syz.3.8308': attribute type 29 has an invalid length. [ 694.939214][T24540] netlink: 500 bytes leftover after parsing attributes in process `syz.3.8308'. [ 695.091541][ T5891] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.106599][ T5891] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.120262][ T5891] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 695.131701][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.276093][T17827] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 695.356859][ T5891] usb 2-1: GET_CAPABILITIES returned 0 [ 695.362621][ T5891] usbtmc 2-1:16.0: can't read capabilities [ 695.427535][T17827] usb 4-1: Using ep0 maxpacket: 32 [ 695.434971][T17827] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 695.444815][T17827] usb 4-1: config 0 has no interface number 0 [ 695.454704][T17827] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 695.485953][T17827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.494069][T17827] usb 4-1: Product: syz [ 695.502367][T17827] usb 4-1: Manufacturer: syz [ 695.507094][T17827] usb 4-1: SerialNumber: syz [ 695.514618][T17827] usb 4-1: config 0 descriptor?? [ 695.526997][T22157] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 695.537601][T17827] smsc95xx v2.0.0 [ 695.567114][ T5891] usb 2-1: USB disconnect, device number 78 [ 695.748968][T22157] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 695.763776][T22157] usb 3-1: config 150 has no interface number 0 [ 695.771671][T22157] usb 3-1: config 150 interface 204 has no altsetting 0 [ 695.785317][T22157] usb 3-1: config 150 interface 1 has no altsetting 0 [ 695.794661][T22157] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 695.809777][T22157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.818265][T22157] usb 3-1: Product: syz [ 695.822463][T22157] usb 3-1: Manufacturer: syz [ 695.827307][T22157] usb 3-1: SerialNumber: syz [ 695.857497][T24565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.946023][T17827] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 695.966045][T17827] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 696.055659][T22157] xr_serial 3-1:150.204: xr_serial converter detected [ 696.379364][T17827] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 696.406896][T17827] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 696.441663][T17827] usb 4-1: USB disconnect, device number 73 [ 696.640827][T24584] kvm: apic: phys broadcast and lowest prio [ 697.018601][T22157] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 697.028466][T22157] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 697.065138][T22157] usb 3-1: USB disconnect, device number 83 [ 697.088503][T22157] xr_serial 3-1:150.204: device disconnected [ 697.265998][T17827] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 697.444650][T17827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 697.466047][T17827] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 697.475160][T17827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.516862][T17827] usb 4-1: config 0 descriptor?? [ 697.524334][T24596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 697.725020][T24613] syzkaller1: entered promiscuous mode [ 697.730773][T24613] syzkaller1: entered allmulticast mode [ 697.827555][T24615] tipc: Enabled bearer , priority 10 [ 698.031526][T17827] elan 0003:04F3:0755.005D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 698.230779][T17827] usb 4-1: USB disconnect, device number 74 [ 698.250909][T22381] tipc: Subscription rejected, illegal request [ 698.504366][T24629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.679570][T24639] loop2: detected capacity change from 0 to 7 [ 698.696397][T24639] Dev loop2: unable to read RDB block 7 [ 698.702034][T24639] loop2: AHDI p1 p2 p3 [ 698.707186][T24639] loop2: partition table partially beyond EOD, truncated [ 698.727867][T24639] loop2: p1 start 1601398130 is beyond EOD, truncated [ 698.734696][T24639] loop2: p2 start 1702059890 is beyond EOD, truncated [ 698.809596][T20297] Dev loop2: unable to read RDB block 7 [ 698.815361][T20297] loop2: AHDI p1 p2 p3 [ 698.829779][T20297] loop2: partition table partially beyond EOD, truncated [ 698.841375][T20297] loop2: p1 start 1601398130 is beyond EOD, truncated [ 698.867485][T20297] loop2: p2 start 1702059890 is beyond EOD, truncated [ 698.881811][T24645] Dev loop2: unable to read RDB block 7 [ 698.888723][T24645] loop2: AHDI p1 p2 p3 [ 698.893635][T24645] loop2: partition table partially beyond EOD, truncated [ 698.911581][T24645] loop2: p1 start 1601398130 is beyond EOD, truncated [ 698.919199][T24645] loop2: p2 start 1702059890 is beyond EOD, truncated [ 699.006033][T17827] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 699.166620][T17827] usb 5-1: Using ep0 maxpacket: 8 [ 699.176965][T17827] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 699.190506][T17827] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 699.341542][T17827] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 699.351511][T17827] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 699.364118][T17827] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.377362][T17827] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 699.386810][T17827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.623862][T17827] usb 5-1: usb_control_msg returned -32 [ 699.630068][T17827] usbtmc 5-1:16.0: can't read capabilities [ 700.206179][T17827] usb 5-1: USB disconnect, device number 97 [ 701.376399][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8384'. [ 701.486833][ T5889] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 701.647839][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.674414][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.694552][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.707896][ T5889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.717505][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.745572][ T5889] usb 2-1: config 0 descriptor?? [ 701.796079][ T53] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 701.969817][ T53] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.998953][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 702.011494][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.020259][ T53] usb 5-1: Product: syz [ 702.030959][ T53] usb 5-1: Manufacturer: syz [ 702.035619][ T53] usb 5-1: SerialNumber: syz [ 702.179470][ T5889] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 702.196097][ T5889] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 702.216173][ T5889] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 702.224388][ T5889] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 702.232851][ T5889] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 702.240792][ T5889] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 702.255695][ T53] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 702.267422][ T5889] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving [ 702.305537][ T5889] plantronics 0003:047F:FFFF.005E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 702.398187][ T5890] usb 2-1: USB disconnect, device number 79 [ 702.478373][T24732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8391'. [ 702.646469][T24738] sctp: [Deprecated]: syz.0.8393 (pid 24738) Use of int in maxseg socket option. [ 702.646469][T24738] Use struct sctp_assoc_value instead [ 703.015566][ T5889] usb 5-1: USB disconnect, device number 98 [ 703.043824][T24753] batadv_slave_1: entered promiscuous mode [ 703.056354][ T5889] usblp0: removed [ 703.063453][T24753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8398'. [ 704.536889][ T5890] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 704.736678][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.748550][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 704.766290][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28514, setting to 64 [ 704.794620][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 704.810587][ T5890] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 704.820055][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 704.828692][ T5890] usb 2-1: Product: syz [ 704.832884][ T5890] usb 2-1: Manufacturer: syz [ 704.838119][ T5890] usb 2-1: SerialNumber: syz [ 704.848029][ T5890] usb 2-1: config 0 descriptor?? [ 704.853812][T24776] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 705.084672][ T5890] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 705.102516][ T5890] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 705.285349][ T5890] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 705.300276][ T5890] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 705.313238][ T5890] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 705.487474][ T5890] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 705.504821][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.511698][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.518644][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.525331][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.534145][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.542460][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.549402][ T5890] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 705.558182][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.564830][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.571546][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.579051][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.585886][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.593196][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.599847][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.608794][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.615546][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.622347][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.629015][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.635661][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.642351][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.649044][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.655687][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.662396][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.669039][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.675727][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.682432][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.689121][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.695779][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.702482][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.709130][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 705.716357][ T5890] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 705.730214][ T5890] usb 2-1: USB disconnect, device number 80 [ 705.851339][T24798] netlink: 173 bytes leftover after parsing attributes in process `syz.4.8416'. [ 706.309241][ T5890] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 706.466110][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 706.489808][ T5890] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 706.500285][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.506175][ T53] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 706.512353][ T5890] usb 3-1: config 0 descriptor?? [ 706.707676][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 706.714796][ T53] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 706.724374][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.740032][ T53] usb 5-1: config 0 descriptor?? [ 706.759942][ T53] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 706.808122][ T5890] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 707.788384][ T5887] usb 5-1: USB disconnect, device number 99 [ 707.837499][ T5890] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 707.852366][ T5890] asix 3-1:0.0: probe with driver asix failed with error -71 [ 707.882411][ T5890] usb 3-1: USB disconnect, device number 84 [ 708.156213][T17827] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 708.326268][T17827] usb 2-1: Using ep0 maxpacket: 8 [ 708.356765][T17827] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.377728][T17827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 708.395384][T17827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.410230][T17827] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.426653][T17827] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.436359][T17827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.679467][T17827] usb 2-1: usb_control_msg returned -32 [ 708.679521][T17827] usbtmc 2-1:16.0: can't read capabilities [ 709.038569][T24909] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 709.121648][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8468'. [ 709.516272][T24921] sctp: [Deprecated]: syz.0.8471 (pid 24921) Use of int in max_burst socket option deprecated. [ 709.516272][T24921] Use struct sctp_assoc_value instead [ 709.526020][T17827] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 709.715981][T17827] usb 4-1: Using ep0 maxpacket: 16 [ 709.736784][T17827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.764037][T17827] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 709.786790][T17827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.819404][T17827] usb 4-1: config 0 descriptor?? [ 710.243204][T17827] mcp2221 0003:04D8:00DD.005F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 710.665698][ T5889] usb 4-1: USB disconnect, device number 75 [ 710.931658][ T5890] usb 2-1: USB disconnect, device number 81 [ 712.286251][ T5889] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 712.469146][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 712.481866][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.505651][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 712.535813][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.557173][ T5889] usb 2-1: config 0 descriptor?? [ 712.566428][ T5889] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 712.759903][T25005] vcan0: tx drop: invalid da for name 0x0000100000000000 [ 713.246953][T25021] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 713.394417][T25026] hsr0: left promiscuous mode [ 713.410773][T25026] hsr0: entered promiscuous mode [ 713.420034][T25026] vlan2: entered promiscuous mode [ 713.796791][T22157] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 713.831314][ T5889] gspca_vc032x: reg_r err -71 [ 713.840263][ T5889] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 713.881115][ T5889] usb 2-1: USB disconnect, device number 82 [ 713.971288][T22157] usb 5-1: Using ep0 maxpacket: 16 [ 714.040123][T22157] usb 5-1: unable to get BOS descriptor or descriptor too short [ 714.055609][T22157] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 714.065678][T22157] usb 5-1: can't read configurations, error -71 [ 714.134607][T25040] syzkaller1: entered promiscuous mode [ 714.140730][T25040] syzkaller1: entered allmulticast mode [ 715.356232][T22157] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 715.527902][T22157] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.536384][T22157] usb 5-1: config 0 has no interface number 0 [ 715.542531][T22157] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 715.554120][T25084] syzkaller1: entered promiscuous mode [ 715.559866][T22157] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 715.572078][T25084] syzkaller1: entered allmulticast mode [ 715.578077][T22157] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 715.592095][T22157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.621394][T22157] usb 5-1: config 0 descriptor?? [ 715.629159][T25072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 715.645611][T22157] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 715.860584][ T53] usb 5-1: USB disconnect, device number 102 [ 715.866979][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 717.136121][T22157] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 717.226280][ T53] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 717.336332][T22157] usb 5-1: Using ep0 maxpacket: 16 [ 717.349311][T22157] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 717.362338][T22157] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.374609][T22157] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.389243][T22157] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 717.398962][T22157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.407439][T22157] usb 5-1: Product: syz [ 717.412455][T22157] usb 5-1: Manufacturer: syz [ 717.418728][T22157] usb 5-1: SerialNumber: syz [ 717.423625][ T53] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.434290][ T53] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 717.459237][ T53] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.469346][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.478729][ T53] usb 4-1: Product: syz [ 717.483123][ T53] usb 4-1: Manufacturer: syz [ 717.488333][ T53] usb 4-1: SerialNumber: syz [ 717.705802][T25121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.730427][T25121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.794574][ T53] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 717.836498][ T53] usb 4-1: USB disconnect, device number 76 [ 717.869646][T22157] usb 5-1: 0:2 : does not exist [ 718.346568][ T53] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 718.500258][T22157] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 718.537495][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 718.555025][ T53] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 718.571609][T22157] usb 5-1: USB disconnect, device number 103 [ 718.577770][ T53] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 718.595062][ T53] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 718.613320][ T53] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 718.625739][ T53] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 718.648181][ T53] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.659797][ T53] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 718.676965][T25152] loop6: detected capacity change from 0 to 63 [ 718.701052][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.715380][ C1] blk_print_req_error: 41 callbacks suppressed [ 718.715415][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 718.732267][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.741583][ C0] buffer_io_error: 41 callbacks suppressed [ 718.741613][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 718.756773][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.766193][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 718.774101][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.783413][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 718.791333][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.800614][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 718.809688][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.810427][T20297] udevd[20297]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.818899][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 718.819413][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.852056][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 718.859997][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.869282][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 718.877198][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.886485][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 718.895427][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 718.904693][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 718.912631][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 718.957329][ T53] usb 4-1: usb_control_msg returned -32 [ 718.973255][ T53] usbtmc 4-1:16.0: can't read capabilities [ 719.007227][ T53] usb 4-1: USB disconnect, device number 77 [ 719.688955][T25172] syzkaller1: entered promiscuous mode [ 719.694678][T25172] syzkaller1: entered allmulticast mode [ 719.925977][ T53] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 720.102636][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 720.114686][ T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.132397][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.139718][ T53] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 720.153583][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.175491][ T53] usb 5-1: config 0 descriptor?? [ 720.607345][ T53] elecom 0003:056E:010D.0060: unknown main item tag 0x0 [ 720.619734][ T53] elecom 0003:056E:010D.0060: unknown main item tag 0x0 [ 720.636059][ T53] elecom 0003:056E:010D.0060: unexpected long global item [ 720.648363][ T53] elecom 0003:056E:010D.0060: probe with driver elecom failed with error -22 [ 720.796571][T22157] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 720.832039][ T53] usb 5-1: USB disconnect, device number 104 [ 720.918831][T25214] syzkaller1: entered promiscuous mode [ 720.924544][T25214] syzkaller1: entered allmulticast mode [ 721.061223][T22157] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 721.083387][T22157] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.093060][T22157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 721.106976][T22157] usb 3-1: SerialNumber: syz [ 721.436401][ T5890] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 721.613274][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 721.622458][ T5890] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 721.639837][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 721.663031][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 721.675441][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 721.697060][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.719695][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 721.733604][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.812544][T22157] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 721.975084][ T5890] usb 4-1: usb_control_msg returned -32 [ 721.982730][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 722.251798][ T5890] usb 3-1: USB disconnect, device number 85 [ 722.262811][ T5890] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 722.780677][T25283] fuse: Bad value for 'fd' [ 722.785644][T25281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.922818][T25289] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 723.305992][ T5891] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 723.473000][ T5891] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.485238][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 723.492399][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 723.506812][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.519176][ T5891] usb 5-1: config 0 descriptor?? [ 723.656601][ T5890] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 723.830454][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 723.858731][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.881507][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.891788][ T5890] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 723.901310][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.922954][ T5890] usb 2-1: config 0 descriptor?? [ 723.947283][ T5891] logitech-djreceiver 0003:046D:C532.0061: unknown main item tag 0x0 [ 723.955667][ T5891] logitech-djreceiver 0003:046D:C532.0061: unknown main item tag 0x0 [ 723.965703][ T5891] logitech-djreceiver 0003:046D:C532.0061: unknown main item tag 0x0 [ 723.974521][ T5891] logitech-djreceiver 0003:046D:C532.0061: unknown main item tag 0x0 [ 724.171030][ T53] usb 5-1: USB disconnect, device number 105 [ 724.216900][T17827] usb 4-1: USB disconnect, device number 78 [ 724.357989][ T5890] savu 0003:1E7D:2D5A.0062: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 724.618021][ T5891] usb 2-1: USB disconnect, device number 83 [ 725.105882][T25354] cgroup: fork rejected by pids controller in /syz3 [ 725.229702][T25361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8653'. [ 725.681426][ T7805] syz_tun (unregistering): left allmulticast mode [ 725.729140][ T7805] syz_tun (unregistering): left promiscuous mode [ 725.735610][ T7805] bridge0: port 1(syz_tun) entered disabled state [ 725.759735][ T7805] bridge0: mtu less than device minimum [ 725.937843][T22554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.047944][T22554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.127031][T22554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.517640][T22554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.969381][T17827] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 727.003021][T25391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 727.012616][T25391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 727.021958][T22554] vlan0: left promiscuous mode [ 727.027705][T25391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 727.038444][T25391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 727.053424][T22554] bridge0: port 2(vlan0) entered disabled state [ 727.066710][T25391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 727.142190][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 727.149539][T17827] usb 2-1: Using ep0 maxpacket: 16 [ 727.158036][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 727.165425][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 727.185104][T17827] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 727.196113][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 727.206165][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 727.229536][T17827] usb 2-1: config 0 has no interface number 0 [ 727.235714][T17827] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 727.256908][T17827] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 727.275987][T17827] usb 2-1: config 0 interface 41 has no altsetting 0 [ 727.297246][T17827] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 727.306429][T17827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.314450][T17827] usb 2-1: Product: syz [ 727.318758][T17827] usb 2-1: Manufacturer: syz [ 727.323396][T17827] usb 2-1: SerialNumber: syz [ 727.331093][T17827] usb 2-1: config 0 descriptor?? [ 727.337042][T25390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 727.374792][T25390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 727.623851][T25390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 727.648974][T25390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 728.520520][T17827] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 728.904870][T22554] bond0 (unregistering): Released all slaves [ 729.112489][T22554] bond1 (unregistering): Released all slaves [ 729.265996][ T5846] Bluetooth: hci3: command tx timeout [ 729.280555][T17827] dm9601 2-1:0.41 eth5: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, ae:d2:e1:a3:12:0f [ 729.309760][T17827] usb 2-1: USB disconnect, device number 84 [ 729.328014][T17827] dm9601 2-1:0.41 eth5: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 729.545157][T25431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.653664][T25437] netlink: 'syz.0.8676': attribute type 10 has an invalid length. [ 729.664168][T22554] tipc: Disabling bearer [ 729.706515][T25437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8676'. [ 729.843978][T22554] tipc: Disabling bearer [ 729.854069][T22554] tipc: Left network mode [ 729.880884][T25437] team0: Port device geneve0 added [ 729.959112][T22554] IPVS: stopping backup sync thread 7451 ... [ 729.995995][ T5888] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 730.165992][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 730.183671][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.225913][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.245415][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 730.268592][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.290321][ T5888] usb 5-1: config 0 descriptor?? [ 730.645145][T25394] chnl_net:caif_netlink_parms(): no params data found [ 730.743996][ T5888] savu 0003:1E7D:2D5A.0063: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 730.789788][T22554] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 730.895121][T25479] kvm: apic: phys broadcast and lowest prio [ 731.027525][ T5888] usb 5-1: USB disconnect, device number 106 [ 731.336044][ T5846] Bluetooth: hci3: command tx timeout [ 731.364065][T22554] hsr_slave_0: left promiscuous mode [ 731.375783][T22554] hsr_slave_1: left promiscuous mode [ 731.448650][T22554] macsec0: left allmulticast mode [ 731.483896][T22554] veth1_macvtap: left allmulticast mode [ 731.493282][T22554] veth1_macvtap: left promiscuous mode [ 731.531821][T22554] veth0_macvtap: left promiscuous mode [ 731.552854][T22554] veth1_vlan: left promiscuous mode [ 731.571369][T22554] veth0_vlan: left promiscuous mode [ 731.821194][T22554] [ 731.823579][T22554] ====================================================== [ 731.830608][T22554] WARNING: possible circular locking dependency detected [ 731.837644][T22554] 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 Not tainted [ 731.844771][T22554] ------------------------------------------------------ [ 731.851802][T22554] kworker/u8:11/22554 is trying to acquire lock: [ 731.858322][T22554] ffff888024020e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 731.868469][T22554] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 731.868469][T22554] but task is already holding lock: [ 731.875853][T22554] ffff888030f58d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 731.887480][T22554] [ 731.887480][T22554] which lock already depends on the new lock. [ 731.887480][T22554] [ 731.897911][T22554] [ 731.897911][T22554] the existing dependency chain (in reverse order) is: [ 731.906930][T22554] [ 731.906930][T22554] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 731.915378][T22554] lock_acquire+0x116/0x2f0 [ 731.920440][T22554] __mutex_lock+0x1a5/0x10c0 [ 731.925563][T22554] dev_set_mtu+0x11c/0x270 [ 731.930515][T22554] team_add_slave+0x83b/0x28b0 [ 731.935841][T22554] do_set_master+0x579/0x730 [ 731.940982][T22554] do_setlink+0x111d/0x43a0 [ 731.946020][T22554] rtnl_newlink+0x17e2/0x1fe0 [ 731.951229][T22554] rtnetlink_rcv_msg+0x80f/0xd70 [ 731.956694][T22554] netlink_rcv_skb+0x208/0x480 [ 731.961999][T22554] netlink_unicast+0x7f8/0x9a0 [ 731.967292][T22554] netlink_sendmsg+0x8c3/0xcd0 [ 731.972587][T22554] __sock_sendmsg+0x221/0x270 [ 731.978229][T22554] ____sys_sendmsg+0x523/0x860 [ 731.983519][T22554] __sys_sendmsg+0x271/0x360 [ 731.988658][T22554] do_syscall_64+0xf3/0x230 [ 731.993684][T22554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.000099][T22554] [ 732.000099][T22554] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 732.008295][T22554] validate_chain+0xa69/0x24e0 [ 732.013582][T22554] __lock_acquire+0xad5/0xd80 [ 732.018781][T22554] lock_acquire+0x116/0x2f0 [ 732.023805][T22554] __mutex_lock+0x1a5/0x10c0 [ 732.028919][T22554] team_vlan_rx_kill_vid+0x36/0xe0 [ 732.034554][T22554] vlan_vid_del+0x483/0x770 [ 732.039682][T22554] vlan_device_event+0x23c/0x1e00 [ 732.045227][T22554] notifier_call_chain+0x1a5/0x3f0 [ 732.050866][T22554] dev_close_many+0x33e/0x4c0 [ 732.056072][T22554] unregister_netdevice_many_notify+0x628/0x2510 [ 732.062916][T22554] default_device_exit_batch+0x7ff/0x880 [ 732.069170][T22554] cleanup_net+0x8af/0xd60 [ 732.074133][T22554] process_scheduled_works+0xac3/0x18e0 [ 732.080204][T22554] worker_thread+0x870/0xd50 [ 732.085319][T22554] kthread+0x7b7/0x940 [ 732.089919][T22554] ret_from_fork+0x4b/0x80 [ 732.094860][T22554] ret_from_fork_asm+0x1a/0x30 [ 732.100152][T22554] [ 732.100152][T22554] other info that might help us debug this: [ 732.100152][T22554] [ 732.110466][T22554] Possible unsafe locking scenario: [ 732.110466][T22554] [ 732.117999][T22554] CPU0 CPU1 [ 732.123360][T22554] ---- ---- [ 732.128721][T22554] lock(&dev_instance_lock_key#3); [ 732.133930][T22554] lock(team->team_lock_key#2); [ 732.141405][T22554] lock(&dev_instance_lock_key#3); [ 732.149152][T22554] lock(team->team_lock_key#2); [ 732.154131][T22554] [ 732.154131][T22554] *** DEADLOCK *** [ 732.154131][T22554] [ 732.162275][T22554] 5 locks held by kworker/u8:11/22554: [ 732.167727][T22554] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 732.178612][T22554] #1: ffffc90003af7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 732.189200][T22554] #2: ffffffff900f0890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 732.198621][T22554] #3: ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 732.208660][T22554] #4: ffff888030f58d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 732.220700][T22554] [ 732.220700][T22554] stack backtrace: [ 732.226590][T22554] CPU: 1 UID: 0 PID: 22554 Comm: kworker/u8:11 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 732.226612][T22554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 732.226626][T22554] Workqueue: netns cleanup_net [ 732.226653][T22554] Call Trace: [ 732.226660][T22554] [ 732.226667][T22554] dump_stack_lvl+0x241/0x360 [ 732.226700][T22554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.226725][T22554] ? __pfx__printk+0x10/0x10 [ 732.226749][T22554] ? print_lock+0x171/0x1a0 [ 732.226772][T22554] print_circular_bug+0x2e1/0x300 [ 732.226796][T22554] check_noncircular+0x142/0x160 [ 732.226822][T22554] validate_chain+0xa69/0x24e0 [ 732.226853][T22554] __lock_acquire+0xad5/0xd80 [ 732.226874][T22554] lock_acquire+0x116/0x2f0 [ 732.226890][T22554] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 732.226912][T22554] __mutex_lock+0x1a5/0x10c0 [ 732.226933][T22554] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 732.226952][T22554] ? __cancel_work+0x24c/0x390 [ 732.226975][T22554] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 732.226991][T22554] ? __cancel_work+0x2f0/0x390 [ 732.227013][T22554] ? __pfx___mutex_lock+0x10/0x10 [ 732.227033][T22554] ? __pfx___cancel_work+0x10/0x10 [ 732.227056][T22554] ? do_raw_spin_unlock+0x13c/0x8b0 [ 732.227084][T22554] team_vlan_rx_kill_vid+0x36/0xe0 [ 732.227103][T22554] vlan_vid_del+0x483/0x770 [ 732.227132][T22554] vlan_device_event+0x23c/0x1e00 [ 732.227151][T22554] ? br_device_event+0x28f/0xae0 [ 732.227173][T22554] ? __pfx_phonet_device_notify+0x10/0x10 [ 732.227190][T22554] ? __pfx_vlan_device_event+0x10/0x10 [ 732.227205][T22554] ? __pfx_br_device_event+0x10/0x10 [ 732.227226][T22554] ? raw_notifier+0x9d/0x740 [ 732.227249][T22554] ? isotp_notifier+0xa4/0x6b0 [ 732.227265][T22554] ? cgw_notifier+0xd8/0x3b0 [ 732.227279][T22554] ? packet_notifier+0x76/0xa30 [ 732.227303][T22554] notifier_call_chain+0x1a5/0x3f0 [ 732.227328][T22554] dev_close_many+0x33e/0x4c0 [ 732.227354][T22554] ? __pfx_dev_close_many+0x10/0x10 [ 732.227381][T22554] unregister_netdevice_many_notify+0x628/0x2510 [ 732.227405][T22554] ? lockdep_hardirqs_on+0x9d/0x150 [ 732.227425][T22554] ? __local_bh_enable_ip+0x168/0x200 [ 732.227444][T22554] ? batadv_tt_local_remove+0x119/0x230 [ 732.227462][T22554] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 732.227479][T22554] ? batadv_tt_local_remove+0x119/0x230 [ 732.227495][T22554] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 732.227535][T22554] ? unregister_netdevice_queue+0x2c4/0x400 [ 732.227556][T22554] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 732.227580][T22554] default_device_exit_batch+0x7ff/0x880 [ 732.227606][T22554] ? __pfx_default_device_exit_batch+0x10/0x10 [ 732.227630][T22554] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 732.227652][T22554] ? cfg802154_pernet_exit+0xc3/0xe0 [ 732.227666][T22554] ? __pfx_default_device_exit_batch+0x10/0x10 [ 732.227690][T22554] cleanup_net+0x8af/0xd60 [ 732.227720][T22554] ? __pfx_cleanup_net+0x10/0x10 [ 732.227747][T22554] ? process_scheduled_works+0x9cb/0x18e0 [ 732.227764][T22554] process_scheduled_works+0xac3/0x18e0 [ 732.227792][T22554] ? __pfx_process_scheduled_works+0x10/0x10 [ 732.227813][T22554] ? assign_work+0x367/0x3d0 [ 732.227831][T22554] worker_thread+0x870/0xd50 [ 732.227854][T22554] ? __kthread_parkme+0x1a8/0x200 [ 732.227875][T22554] ? __pfx_worker_thread+0x10/0x10 [ 732.227893][T22554] kthread+0x7b7/0x940 [ 732.227915][T22554] ? __pfx_worker_thread+0x10/0x10 [ 732.227933][T22554] ? __pfx_kthread+0x10/0x10 [ 732.227953][T22554] ? __pfx_kthread+0x10/0x10 [ 732.227974][T22554] ? __pfx_kthread+0x10/0x10 [ 732.227995][T22554] ? __pfx_kthread+0x10/0x10 [ 732.228016][T22554] ? _raw_spin_unlock_irq+0x23/0x50 [ 732.228031][T22554] ? lockdep_hardirqs_on+0x9d/0x150 [ 732.228048][T22554] ? __pfx_kthread+0x10/0x10 [ 732.228069][T22554] ret_from_fork+0x4b/0x80 [ 732.228086][T22554] ? __pfx_kthread+0x10/0x10 [ 732.228107][T22554] ret_from_fork_asm+0x1a/0x30 [ 732.228127][T22554] [ 732.605019][ C1] vkms_vblank_simulate: vblank timer overrun [ 732.622197][ T53] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 733.416085][ T5846] Bluetooth: hci3: command tx timeout [ 733.997937][ T53] usb 2-1: device descriptor read/all, error -71