last executing test programs: 8.17949115s ago: executing program 3 (id=14073): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) socketpair$unix(0x1, 0xfe3aa8430967555e, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x2020) 6.550227936s ago: executing program 3 (id=14093): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0xed) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7f, 0x4) 4.681851304s ago: executing program 3 (id=14113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x1c4, 0x0, 0xaa8a}]}) 4.330598026s ago: executing program 2 (id=14116): io_setup(0x239f, &(0x7f0000000380)=0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000080)="f6c9e32ae40f4d", 0x7}], 0x1, 0x0, 0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x1, r1}]) 4.035613416s ago: executing program 2 (id=14118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000015c0)={0xa, 0x0, [{0x2, 0x0, 0x1}, {0x3, 0x0, 0xae}, {0x20002}, {0xb, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x1, 0x0, 0xfffffffffffffffe}, {0xfffffffb, 0x0, 0xb0}, {0x2000080, 0x0, 0x6}, {0x2001000a, 0x0, 0x3d}, {0x40, 0x0, 0x80000001}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x3}, {0x7, 0x0, 0x1}, {0xfffffff7, 0x0, 0xfffffffffffff804}, {0x4, 0x0, 0x3}, {0x40, 0x0, 0x8000000000000000}]}) 3.739911576s ago: executing program 2 (id=14123): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 3.43762151s ago: executing program 2 (id=14128): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64=r0], 0xfc) 2.78001966s ago: executing program 3 (id=14134): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 2.172509235s ago: executing program 3 (id=14142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03, 0x0, 0x8000000000000000}]}) 1.702843228s ago: executing program 3 (id=14148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.510748802s ago: executing program 0 (id=14149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000081, 0x0, 0x400000000149}]}) 1.367327407s ago: executing program 0 (id=14150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1.313976874s ago: executing program 0 (id=14151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010006}]}) 1.166909421s ago: executing program 0 (id=14152): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r1 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 996.268092ms ago: executing program 0 (id=14154): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 966.440291ms ago: executing program 0 (id=14155): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x0, 0x1, 0x58, {0x58, 0x3, "e064e4a364758bc512d716f43bbfe92b3a8abf578d1647a6f889772db7c91d13884792d2f4e23108d1943d8ce458cb385c81b2b0c83594295b16f7e644a3cf8c417587fc9e39f7711a5742db4cb743e72c50c387654f"}}, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 930.139481ms ago: executing program 4 (id=14156): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001043, r0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x4) 775.751466ms ago: executing program 4 (id=14158): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0002}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000080)) 684.32884ms ago: executing program 4 (id=14159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(0x3) 580.452723ms ago: executing program 1 (id=14160): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x4000001) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, 0x0, 0x18}, 0xfffffffc}], 0x1, 0x0, 0x0) 560.91055ms ago: executing program 4 (id=14161): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20000056) 470.142342ms ago: executing program 1 (id=14162): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/205, 0x4c, 0x53) flock(r0, 0x6) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 438.410958ms ago: executing program 4 (id=14163): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x803, 0x7ff, 0x200000, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 290.292457ms ago: executing program 2 (id=14164): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861, 0x0, 0x0, "61bcf34b016813cf"}}, 0x38}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) 288.189944ms ago: executing program 1 (id=14165): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='L', 0x1, 0x1c}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000180)={0x28, 0x245f6e86cba75af9, r1, r1, 0x6, 0x9}) 262.550301ms ago: executing program 4 (id=14166): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) 152.200776ms ago: executing program 1 (id=14167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x17) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/27, 0x1b}, 0x2a4}], 0x39, 0x100, 0x0) 100.604076ms ago: executing program 2 (id=14168): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7f) write$FUSE_STATX(r0, &(0x7f0000002200)={0x130, 0x0, 0x0, {0x5, 0xba92, 0x0, '\x00', {0x1000, 0xf, 0x2, 0x8, 0xee01, 0x0, 0x2000, '\x00', 0x80000000, 0x10000, 0xf, 0xde, {0x63, 0x9}, {0xcb, 0x2}, {0x5, 0x6}, {0x1000}, 0x4, 0x4, 0x80000000, 0xa}}}, 0x130) 61.970815ms ago: executing program 1 (id=14169): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x1, 0x4b5f}, &(0x7f00000003c0)=0xc) 0s ago: executing program 1 (id=14170): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x39, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x5, 0x30}, 0xc) kernel console output (not intermixed with test programs): config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.329885][T31961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12299'. [ 839.350020][ T5908] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.386515][ T5908] usb 1-1: config 0 interface 1 has no altsetting 0 [ 839.399934][ T5908] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 839.460371][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.489826][ T5908] usb 1-1: config 0 descriptor?? [ 839.522504][T31968] vivid-003: disconnect [ 839.547447][T31967] vivid-003: reconnect [ 839.944158][T31972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12295'. [ 840.019910][T31972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12295'. [ 840.163743][ T5908] input: HID 145f:0212 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:145F:0212.0051/input/input92 [ 840.215634][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12309'. [ 840.302014][ T5908] input: HID 145f:0212 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:145F:0212.0051/input/input93 [ 840.398907][ T794] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 840.460932][ T5908] uclogic 0003:145F:0212.0051: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.0-1/input1 [ 840.520663][ T5908] usb 1-1: USB disconnect, device number 49 [ 840.569692][ T794] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 840.621505][ T794] usb 2-1: config 0 has no interface number 0 [ 840.651092][ T794] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.682677][ T794] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 840.694210][T31989] fido_id[31989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 840.711351][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.720371][ T794] usb 2-1: Product: syz [ 840.724552][ T794] usb 2-1: Manufacturer: syz [ 840.778266][ T794] usb 2-1: SerialNumber: syz [ 840.802098][ T794] usb 2-1: config 0 descriptor?? [ 840.839492][ T794] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 841.081144][ T5886] usb 2-1: USB disconnect, device number 57 [ 841.098477][ T5886] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 841.152459][T32004] loop5: detected capacity change from 0 to 4095 [ 841.179199][ T30] audit: type=1326 audit(1771020133.346:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32005 comm="syz.0.12317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7d319bf79 code=0x0 [ 841.245761][ T30] audit: type=1326 audit(1771020133.366:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32005 comm="syz.0.12317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7d319bf79 code=0x0 [ 842.107462][ T5908] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 842.301972][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 842.327961][ T5908] usb 5-1: config 0 has no interfaces? [ 842.339320][ T5908] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 842.360442][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.394425][ T5908] usb 5-1: Product: syz [ 842.399162][ T5908] usb 5-1: Manufacturer: syz [ 842.411693][ T5908] usb 5-1: SerialNumber: syz [ 842.447383][ T5908] usb 5-1: config 0 descriptor?? [ 842.692875][ T5908] usb 5-1: USB disconnect, device number 43 [ 843.362168][T32042] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12334'. [ 844.487486][ T5908] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 844.672853][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 844.687580][ T794] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 844.855839][ T794] usb 2-1: unable to get BOS descriptor or descriptor too short [ 844.874939][ T794] usb 2-1: not running at top speed; connect to a high speed hub [ 844.905538][ T5908] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 844.917893][ T794] usb 2-1: config 3 has an invalid interface number: 140 but max is 1 [ 844.936335][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.946404][ T794] usb 2-1: config 3 has an invalid interface number: 228 but max is 1 [ 844.967266][ T5908] usb 4-1: Product: syz [ 844.974809][ T794] usb 2-1: config 3 has an invalid descriptor of length 10, skipping remainder of the config [ 844.995945][ T5908] usb 4-1: Manufacturer: syz [ 845.005795][ T5908] usb 4-1: SerialNumber: syz [ 845.034492][ T794] usb 2-1: config 3 has no interface number 0 [ 845.062104][ T794] usb 2-1: config 3 has no interface number 1 [ 845.097737][ T794] usb 2-1: config 3 interface 140 has no altsetting 0 [ 845.128171][ T794] usb 2-1: config 3 interface 228 has no altsetting 0 [ 845.151227][ T5908] r8152-cfgselector 4-1: Unknown version 0x0000 [ 845.157908][ T5908] r8152-cfgselector 4-1: config 0 descriptor?? [ 845.166564][ T794] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=41.a4 [ 845.200324][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.229842][ T794] usb 2-1: Product: syz [ 845.234090][ T794] usb 2-1: Manufacturer: syz [ 845.248585][ T794] usb 2-1: SerialNumber: syz [ 845.606428][ T5908] r8152-cfgselector 4-1: Needed 2 retries to read version [ 845.636740][ T5908] r8152-cfgselector 4-1: Unknown version 0x0000 [ 845.675472][ T5908] r8152-cfgselector 4-1: bad CDC descriptors [ 845.814090][ T794] usb 2-1: USB disconnect, device number 58 [ 845.839601][T32082] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12352'. [ 845.857633][T32082] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12352'. [ 845.930416][T24097] udevd[24097]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.228/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 845.950376][T31996] udevd[31996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.140/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.964276][ T5908] r8152-cfgselector 4-1: USB disconnect, device number 31 [ 845.978189][ T5886] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 846.152145][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 846.171374][ T5886] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 846.197229][ T5886] usb 5-1: config 0 has no interface number 0 [ 846.219693][ T5886] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 846.255682][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.277307][ T5886] usb 5-1: Product: syz [ 846.281505][ T5886] usb 5-1: Manufacturer: syz [ 846.297436][ T5886] usb 5-1: SerialNumber: syz [ 846.318484][ T5886] usb 5-1: config 0 descriptor?? [ 846.340991][ T5886] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 846.483266][T32098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12360'. [ 846.496898][T32098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12360'. [ 846.542837][ T5886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 846.587836][ T5886] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 846.657970][ T794] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 846.808861][ T794] usb 2-1: Using ep0 maxpacket: 32 [ 846.816748][ T794] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 846.825731][ T794] usb 2-1: config 0 has no interface number 0 [ 846.834705][ T794] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 846.847319][ T794] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 846.860077][ T794] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 183 [ 846.871916][ T5908] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 846.884968][ T794] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 846.903689][ T794] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 846.914148][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.922603][ T794] usb 2-1: Product: syz [ 846.926990][ T794] usb 2-1: Manufacturer: syz [ 846.933498][ T794] usb 2-1: SerialNumber: syz [ 846.946496][ T794] usb 2-1: config 0 descriptor?? [ 846.954993][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 846.956358][T28218] usb 5-1: USB disconnect, device number 44 [ 846.977690][T32095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 846.992340][ T794] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input94 [ 847.005548][T28218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 847.025423][ T5174] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 847.049308][T28218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 847.078794][ T5908] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 847.086913][ T5908] usb 1-1: config 0 has no interface number 0 [ 847.095081][T28218] quatech2 5-1:0.51: device disconnected [ 847.143009][ T5908] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.177419][ T5908] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.195838][ T5908] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.218355][ T5908] usb 1-1: config 0 interface 1 has no altsetting 0 [ 847.235197][ T5908] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 847.251459][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.272586][ T5908] usb 1-1: config 0 descriptor?? [ 847.315439][ C1] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 847.320622][ T794] usb 2-1: USB disconnect, device number 59 [ 847.443084][T32104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12363'. [ 847.894236][ T5908] uclogic 0003:145F:0212.0052: pen parameters not found [ 847.911877][ T5908] uclogic 0003:145F:0212.0052: interface is invalid, ignoring [ 848.111083][ T5908] usb 1-1: USB disconnect, device number 50 [ 849.207057][T32153] 8021q: adding VLAN 0 to HW filter on device bond9 [ 849.216326][T32153] bond0: (slave bond9): Enslaving as an active interface with an up link [ 850.422686][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12395'. [ 850.469300][T32185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12395'. [ 850.477804][T32182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12395'. [ 850.497603][T32185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12395'. [ 850.584438][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.593458][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.647341][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.668556][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.177472][T32203] tap0: tun_chr_ioctl cmd 2147767507 [ 851.379645][T32213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12409'. [ 851.500764][T32215] Attempt to restore checkpoint with obsolete wellknown handles [ 852.562862][T32241] pimreg: tun_chr_ioctl cmd 1074025677 [ 852.569287][T32241] pimreg: linktype set to 773 [ 852.695533][T32247] veth1_to_bond: entered allmulticast mode [ 852.704992][T32247] veth1_to_bond: left allmulticast mode [ 852.732269][T32249] netlink: 'syz.1.12425': attribute type 298 has an invalid length. [ 853.537335][ T794] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 853.606458][T32269] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 853.613020][T32269] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 853.651965][T32269] vhci_hcd vhci_hcd.0: Device attached [ 853.703536][T32273] vhci_hcd: connection closed [ 853.705935][ T3469] vhci_hcd vhci_hcd.1: stop threads [ 853.720778][ T794] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 853.733506][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.737889][ T3469] vhci_hcd vhci_hcd.1: release socket [ 853.752767][ T794] usb 5-1: Product: syz [ 853.757541][ T3469] vhci_hcd vhci_hcd.1: disconnect device [ 853.762951][ T794] usb 5-1: Manufacturer: syz [ 853.771239][ T794] usb 5-1: SerialNumber: syz [ 853.787066][ T794] usb 5-1: config 0 descriptor?? [ 854.053518][ T794] usb 5-1: USB disconnect, device number 45 [ 854.161424][T32287] bridge5: entered promiscuous mode [ 854.975064][T32310] netlink: 'syz.3.12450': attribute type 9 has an invalid length. [ 855.107457][ T794] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 855.295230][ T794] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 855.311929][ T794] usb 2-1: config 0 has no interface number 0 [ 855.325396][ T794] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 855.339852][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.355709][ T794] usb 2-1: Product: syz [ 855.360185][ T794] usb 2-1: Manufacturer: syz [ 855.365482][ T794] usb 2-1: SerialNumber: syz [ 855.388012][ T794] usb 2-1: config 0 descriptor?? [ 855.626392][ T794] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 855.682750][ T794] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 855.723129][ T794] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 855.737559][ T794] usb 2-1: media controller created [ 855.773885][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.878153][ T794] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 857.015217][ T794] usb 2-1: USB disconnect, device number 60 [ 857.828937][T32389] loop4: detected capacity change from 0 to 7 [ 857.836162][T32389] buffer_io_error: 29 callbacks suppressed [ 857.836178][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 857.930879][T32393] Buffer I/O error on dev loop4, logical block 0, async page read [ 857.942008][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 857.970570][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 857.999095][T32398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12492'. [ 858.009174][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 858.048849][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 858.056850][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 858.109274][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 858.117122][T32389] ldm_validate_partition_table(): Disk read failed. [ 858.143102][ T30] audit: type=1326 audit(1771020150.306:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.188181][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 858.217688][T32389] Buffer I/O error on dev loop4, logical block 0, async page read [ 858.225609][T32389] Dev loop4: unable to read RDB block 0 [ 858.245499][ T30] audit: type=1326 audit(1771020150.306:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.287393][T32389] loop4: unable to read partition table [ 858.293354][T32389] loop4: partition table beyond EOD, truncated [ 858.311795][T32389] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 858.337703][ T30] audit: type=1326 audit(1771020150.336:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.387416][ T30] audit: type=1326 audit(1771020150.346:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.407319][ T5886] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 858.421735][ T30] audit: type=1326 audit(1771020150.346:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.435762][ T5190] ldm_validate_partition_table(): Disk read failed. [ 858.492544][ T5190] Dev loop4: unable to read RDB block 0 [ 858.512914][ T5190] loop4: unable to read partition table [ 858.527618][ T5190] loop4: partition table beyond EOD, truncated [ 858.587198][ T5886] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 858.598580][ T30] audit: type=1326 audit(1771020150.346:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.642434][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.683293][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 858.706758][ T30] audit: type=1326 audit(1771020150.356:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.757233][ T5886] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 858.776803][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.808171][ T30] audit: type=1326 audit(1771020150.356:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.842393][ T5886] usb 1-1: config 0 descriptor?? [ 858.883746][ T30] audit: type=1326 audit(1771020150.366:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 858.967327][ T30] audit: type=1326 audit(1771020150.366:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 859.277814][ T5886] holtek_kbd 0003:04D9:A055.0053: unknown main item tag 0x0 [ 859.285181][ T5886] holtek_kbd 0003:04D9:A055.0053: unknown main item tag 0x0 [ 859.317417][ T5886] holtek_kbd 0003:04D9:A055.0053: unknown main item tag 0x0 [ 859.324747][ T5886] holtek_kbd 0003:04D9:A055.0053: unknown main item tag 0x0 [ 859.367359][T28218] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 859.376009][ T5886] holtek_kbd 0003:04D9:A055.0053: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 859.519039][ T794] usb 1-1: USB disconnect, device number 51 [ 859.557545][T28218] usb 5-1: Using ep0 maxpacket: 32 [ 859.565018][T28218] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 859.575370][T28218] usb 5-1: config 0 has no interface number 0 [ 859.588591][T28218] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 859.602426][T28218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.611419][T28218] usb 5-1: Product: syz [ 859.615785][T28218] usb 5-1: Manufacturer: syz [ 859.622799][T28218] usb 5-1: SerialNumber: syz [ 859.638540][T28218] usb 5-1: config 0 descriptor?? [ 859.649970][T28218] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 859.863239][T28218] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 859.882308][T28218] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 860.018388][ T794] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 860.109103][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 860.181346][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 860.198637][ T794] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 860.217681][ T794] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 860.229125][ T794] usb 4-1: config 0 has no interface number 0 [ 860.235676][ T794] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 860.287708][ T794] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 860.299472][ T794] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 860.315528][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 860.328128][T28218] usb 5-1: USB disconnect, device number 46 [ 860.353746][ T794] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 860.365707][T28218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 860.393348][ T794] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 860.418721][T28218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 860.439834][ T794] usb 4-1: Product: syz [ 860.444033][ T794] usb 4-1: Manufacturer: syz [ 860.471588][ T794] usb 4-1: config 0 descriptor?? [ 860.477690][T28218] quatech2 5-1:0.51: device disconnected [ 860.492782][T32429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 861.180084][ T794] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input95 [ 861.588810][T32462] netlink: 504 bytes leftover after parsing attributes in process `syz.4.12521'. [ 861.617342][T32462] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 862.257547][T28218] usb 4-1: USB disconnect, device number 32 [ 862.257617][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 862.457313][ T5886] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 862.627580][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 862.657569][ T5886] usb 2-1: config 16 has an invalid interface number: 124 but max is 0 [ 862.697316][ T5886] usb 2-1: config 16 has no interface number 0 [ 862.703863][ T5886] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= c.1b [ 862.737537][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.780152][ T5886] usb 2-1: MBOX3: Invalid descriptor size=18. [ 862.996032][T28218] usb 2-1: USB disconnect, device number 61 [ 865.781796][T32546] netlink: 'syz.1.12557': attribute type 5 has an invalid length. [ 866.245241][T32555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.665955][ T794] IPVS: starting estimator thread 0... [ 866.668140][T32567] : renamed from vlan0 (while UP) [ 866.779262][T32570] IPVS: using max 35 ests per chain, 84000 per kthread [ 866.903170][T32577] netlink: 'syz.2.12569': attribute type 9 has an invalid length. [ 866.927389][T32577] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12569'. [ 868.848263][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 868.848281][ T30] audit: type=1326 audit(1771020161.016:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 868.976893][ T30] audit: type=1326 audit(1771020161.076:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.061761][ T30] audit: type=1326 audit(1771020161.086:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.167250][ T30] audit: type=1326 audit(1771020161.086:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.247499][ T30] audit: type=1326 audit(1771020161.086:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.361661][ T30] audit: type=1326 audit(1771020161.116:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.457359][ T30] audit: type=1326 audit(1771020161.116:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.558175][ T30] audit: type=1326 audit(1771020161.116:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.647421][ T30] audit: type=1326 audit(1771020161.116:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 869.740182][ T30] audit: type=1326 audit(1771020161.116:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32621 comm="syz.4.12588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x7ffc0000 [ 870.071184][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.081846][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.281734][T32679] : renamed from vlan0 [ 871.827382][ T5886] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 871.987749][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 872.037387][ T5886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 872.066873][ T5886] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 872.097390][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.105539][ T5886] usb 5-1: Product: syz [ 872.156924][ T5886] usb 5-1: Manufacturer: syz [ 872.177332][ T5886] usb 5-1: SerialNumber: syz [ 872.199897][ T5886] usb 5-1: config 0 descriptor?? [ 872.615982][ T5886] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 873.020111][ T5886] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 873.049594][ T5886] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 873.088362][ T5886] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 873.175755][ T5886] usb 5-1: USB disconnect, device number 47 [ 873.299874][T28218] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 873.565571][T28218] usb 1-1: Using ep0 maxpacket: 8 [ 873.729080][T28218] usb 1-1: unable to get BOS descriptor or descriptor too short [ 873.747119][T28218] usb 1-1: no configurations [ 873.759935][T28218] usb 1-1: can't read configurations, error -22 [ 875.322039][ T315] netlink: 'syz.4.12657': attribute type 2 has an invalid length. [ 875.367436][ T315] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12657'. [ 876.276104][ T349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12671'. [ 876.458152][ T357] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 876.483395][ T357] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 876.980121][ T379] netlink: 'syz.1.12684': attribute type 2 has an invalid length. [ 877.028487][ T379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12684'. [ 877.458276][ T398] cgroup: fork rejected by pids controller in /syz1 [ 878.595676][T28218] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 878.621466][ T3469] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.641068][ T3469] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.677008][ T3469] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.697953][ T3469] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.738990][ T1565] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.12708'. [ 878.790376][T28218] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 878.807299][T28218] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 878.826731][T28218] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 878.840531][T28218] usb 5-1: config 220 has no interface number 2 [ 878.846890][T28218] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 878.881158][T28218] usb 5-1: config 220 interface 0 has no altsetting 0 [ 878.896181][T28218] usb 5-1: config 220 interface 76 has no altsetting 0 [ 878.917338][T28218] usb 5-1: config 220 interface 1 has no altsetting 0 [ 878.929620][T28218] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 878.947204][T28218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.956796][T28218] usb 5-1: Product: syz [ 878.965949][T28218] usb 5-1: Manufacturer: syz [ 878.971151][T28218] usb 5-1: SerialNumber: syz [ 879.168035][ T1578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12713'. [ 879.177414][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12713'. [ 879.204903][T28218] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 879.235384][T28218] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 879.253995][T28218] uvcvideo 5-1:220.0: No valid video chain found. [ 879.267963][T28218] usb 5-1: selecting invalid altsetting 0 [ 879.316247][T28218] usb 5-1: selecting invalid altsetting 0 [ 879.327383][T28218] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 879.362092][T28218] usb 5-1: USB disconnect, device number 48 [ 879.511168][ T1588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12716'. [ 881.411039][ T1643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12741'. [ 882.349588][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12751'. [ 882.387813][T29581] Bluetooth: hci0: command 0x0406 tx timeout [ 883.014616][ T794] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 883.197257][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 883.206352][ T794] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 883.239220][ T1687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12763'. [ 883.241206][ T794] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 883.284077][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.309660][ T794] usb 2-1: Product: syz [ 883.318673][ T794] usb 2-1: Manufacturer: syz [ 883.334295][ T794] usb 2-1: SerialNumber: syz [ 883.374840][ T794] usb 2-1: config 0 descriptor?? [ 883.394485][ T794] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 883.415182][ T794] usb 2-1: setting power ON [ 883.429399][ T794] dvb-usb: bulk message failed: -22 (2/0) [ 883.447565][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 883.469843][ T794] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 883.488155][ T794] usb 2-1: media controller created [ 883.552225][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 883.628878][ T1673] dvb-usb: bulk message failed: -22 (3/0) [ 883.635070][ T1673] cxusb: i2c wr: len=78 is too big! [ 883.635070][ T1673] [ 883.684200][ T794] usb 2-1: selecting invalid altsetting 6 [ 883.713635][ T794] usb 2-1: digital interface selection failed (-22) [ 883.735471][ T794] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 883.761857][ T794] usb 2-1: setting power OFF [ 883.766832][ T794] dvb-usb: bulk message failed: -22 (2/0) [ 883.793949][ T794] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 883.815767][ T794] (NULL device *): no alternate interface [ 883.891669][ T794] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 883.943913][ T794] usb 2-1: USB disconnect, device number 62 [ 885.247366][ T794] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 885.417397][T28218] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 885.425170][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 885.444325][ T794] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 885.456475][ T794] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 885.467507][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.495765][ T794] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 885.618542][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 885.632163][T28218] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 885.650266][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 885.658885][T28218] usb 5-1: config 0 has no interface number 0 [ 885.668005][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 885.681168][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 885.695371][T28218] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 885.713454][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 885.727274][T28218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.736519][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.752970][T28218] usb 5-1: Product: syz [ 885.758542][T28218] usb 5-1: Manufacturer: syz [ 885.763432][T28218] usb 5-1: SerialNumber: syz [ 885.768318][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 885.780952][T28218] usb 5-1: config 0 descriptor?? [ 885.792582][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.069640][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 886.079449][ T10] usbtmc 4-1:16.0: can't read capabilities [ 886.201137][T28218] usb 5-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 886.322527][ T10] usb 4-1: USB disconnect, device number 33 [ 886.415067][T28218] usb 5-1: failed to fetch extended address, random address set [ 886.469509][ T1763] loop7: detected capacity change from 0 to 7 [ 886.485623][ C0] blk_print_req_error: 10 callbacks suppressed [ 886.485643][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.501472][ C0] buffer_io_error: 29 callbacks suppressed [ 886.501489][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.517078][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.526750][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.534999][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.544705][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.555994][T28218] usb 5-1: USB disconnect, device number 49 [ 886.569191][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.578880][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.587601][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.597327][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.636410][ T794] stv0680 1-1:4.0: Could not get descriptor 0200 [ 886.663339][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.673008][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.681930][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.691691][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.699624][ T1763] ldm_validate_partition_table(): Disk read failed. [ 886.747999][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.757658][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.772345][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.782019][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.794471][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 886.804169][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 886.816678][ T1763] Dev loop7: unable to read RDB block 0 [ 886.831185][ T1763] loop7: unable to read partition table [ 886.840137][ T794] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 886.850633][ T794] stv0680 1-1:4.0: last error: 2, command = 0x23 [ 886.851063][ T1763] loop7: partition table beyond EOD, truncated [ 886.868117][ T1763] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 886.899057][ T794] usb 1-1: USB disconnect, device number 54 [ 887.783221][ T1790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12807'. [ 887.960437][ T1796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12809'. [ 889.237552][ T5883] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 889.400275][ T1839] netlink: 182 bytes leftover after parsing attributes in process `syz.4.12827'. [ 889.477735][ T5883] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 889.486858][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.517418][ T5883] usb 2-1: Product: syz [ 889.521624][ T5883] usb 2-1: Manufacturer: syz [ 889.526329][ T5883] usb 2-1: SerialNumber: syz [ 889.787624][ T794] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 889.961204][ T794] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 889.997938][ T794] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 890.027716][ T794] usb 5-1: config 0 interface 0 has no altsetting 0 [ 890.053182][ T794] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 890.082856][ T794] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 890.101599][ T794] usb 5-1: Product: syz [ 890.111714][ T794] usb 5-1: Manufacturer: syz [ 890.122023][ T794] usb 5-1: SerialNumber: syz [ 890.139274][ T794] usb 5-1: config 0 descriptor?? [ 890.160523][ T794] hub 5-1:0.0: bad descriptor, ignoring hub [ 890.168806][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12836'. [ 890.187234][ T794] hub 5-1:0.0: probe with driver hub failed with error -5 [ 890.203959][ T794] usb 5-1: selecting invalid altsetting 0 [ 890.210433][ T1857] netlink: 'syz.0.12836': attribute type 30 has an invalid length. [ 890.241535][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12836'. [ 890.403969][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 890.437860][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 890.509079][ T5886] usb 5-1: USB disconnect, device number 50 [ 890.516152][ T5883] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 890.604148][ T5883] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 890.664655][ T5883] usb 2-1: USB disconnect, device number 63 [ 890.949508][ T1868] netlink: 'syz.0.12840': attribute type 32 has an invalid length. [ 890.959004][ T1868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12840'. [ 890.971854][ T1868] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 891.008320][ T1870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12841'. [ 891.057340][ T5886] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 891.220513][ T5886] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 891.237378][ T5886] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 891.277225][ T5886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 891.299267][ T5886] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 891.327330][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 891.335572][ T5886] usb 5-1: Product: syz [ 891.367476][ T5886] usb 5-1: Manufacturer: syz [ 891.372129][ T5886] usb 5-1: SerialNumber: syz [ 891.408525][ T5886] usb 5-1: config 0 descriptor?? [ 891.430564][ T5886] hub 5-1:0.0: bad descriptor, ignoring hub [ 891.436546][ T5886] hub 5-1:0.0: probe with driver hub failed with error -5 [ 891.480482][ T5886] usb 5-1: selecting invalid altsetting 0 [ 891.660567][ T5886] usb 5-1: USB disconnect, device number 51 [ 891.694828][ T1891] netlink: 'syz.1.12850': attribute type 1 has an invalid length. [ 891.728875][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.391597][ T794] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 892.445314][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 892.445331][ T30] audit: type=1326 audit(1771020184.606:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.508706][ T30] audit: type=1326 audit(1771020184.646:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.531957][ T30] audit: type=1326 audit(1771020184.646:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.579961][ T30] audit: type=1326 audit(1771020184.646:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.602791][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 892.610386][ T30] audit: type=1326 audit(1771020184.646:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.634956][ T794] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.645394][ T794] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 892.656282][ T30] audit: type=1326 audit(1771020184.646:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.678956][ T794] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.692571][ T794] usb 1-1: config 1 interface 0 has no altsetting 0 [ 892.725678][ T794] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 892.737538][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.745641][ T794] usb 1-1: Product: syz [ 892.763648][ T30] audit: type=1326 audit(1771020184.646:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.811170][ T794] usb 1-1: Manufacturer: syz [ 892.815799][ T794] usb 1-1: SerialNumber: syz [ 892.843951][ T30] audit: type=1326 audit(1771020184.646:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.884676][ T30] audit: type=1326 audit(1771020184.646:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 892.966423][ T30] audit: type=1326 audit(1771020184.646:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1906 comm="syz.2.12858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 893.057514][ T794] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 893.259302][ T794] usb 1-1: USB disconnect, device number 55 [ 893.279950][ T794] usblp0: removed [ 894.170536][ T1956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.837739][T28218] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 895.010001][T28218] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 895.026002][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 895.058637][T28218] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 895.084996][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 895.109006][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 895.137477][T28218] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 895.147017][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 895.159648][T28218] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 895.173043][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 895.186260][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 895.217497][T28218] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 895.234681][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 895.260983][T28218] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 895.276745][ T794] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 895.305365][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 895.336938][T28218] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 895.381356][T28218] usb 5-1: string descriptor 0 read error: -22 [ 895.387966][T28218] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 895.417232][T28218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.458031][ T794] usb 2-1: Using ep0 maxpacket: 16 [ 895.470218][T28218] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 895.481768][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.512733][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.513073][ T1973] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.531369][ T1973] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.541021][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 895.551982][ T794] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 895.562915][ T794] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.579181][ T794] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 895.591838][ T794] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 895.600219][ T794] usb 2-1: Manufacturer: syz [ 895.610877][ T794] usb 2-1: config 0 descriptor?? [ 895.706238][ T9] usb 5-1: USB disconnect, device number 52 [ 896.157366][ T794] rc_core: IR keymap rc-hauppauge not found [ 896.167796][ T794] Registered IR keymap rc-empty [ 896.172798][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.186001][ T1973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.218379][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.254967][ T1973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.265023][ T794] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 896.312599][ T794] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input96 [ 896.388397][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.447426][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.497340][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.558775][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.598502][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.628698][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.658166][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.688813][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.717377][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.738029][ T794] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.770636][ T794] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 896.827403][ T794] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 896.881867][ T794] usb 2-1: USB disconnect, device number 64 [ 897.603095][ T1973] bridge1: left promiscuous mode [ 897.679623][ T2000] input: syz0 as /devices/virtual/input/input97 [ 897.929797][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.966345][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.998326][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.018289][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.044576][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.075882][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.105986][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.125129][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.217319][ T5886] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 898.379458][ T5886] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 898.407462][ T5886] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 898.447470][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 898.476850][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 898.506430][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 898.527133][ T5886] usb 2-1: Product: syz [ 898.531638][ T5886] usb 2-1: Manufacturer: syz [ 898.536248][ T5886] usb 2-1: SerialNumber: syz [ 898.588388][ T5886] usb 2-1: config 0 descriptor?? [ 898.611234][ T5886] usb 2-1: selecting invalid altsetting 0 [ 898.856350][ T5886] usb 2-1: USB disconnect, device number 65 [ 898.887306][ T794] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 898.996730][T23946] udevd[23946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.059154][ T2028] sctp: [Deprecated]: syz.0.12911 (pid 2028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 899.059154][ T2028] Use struct sctp_sack_info instead [ 899.080430][ T794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.090834][ T794] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.123972][ T794] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 899.145660][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 899.187210][ T794] usb 5-1: SerialNumber: syz [ 899.424329][ T794] usb 5-1: 0:2 : does not exist [ 899.536979][ T794] usb 5-1: USB disconnect, device number 53 [ 899.558252][ T2042] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 899.592386][T23976] udevd[23976]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 899.788399][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 899.970032][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 899.982875][ T10] usb 2-1: config 7 has an invalid interface number: 123 but max is 0 [ 899.996983][ T10] usb 2-1: config 7 has no interface number 0 [ 900.009928][ T10] usb 2-1: config 7 interface 123 has no altsetting 0 [ 900.020522][ T10] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 900.047205][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.085871][ T10] usb 2-1: Product: syz [ 900.096221][ T10] usb 2-1: Manufacturer: syz [ 900.126969][ T10] usb 2-1: SerialNumber: syz [ 900.131945][ T794] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 900.251742][ T2061] veth0: entered promiscuous mode [ 900.261957][ T2060] veth0: left promiscuous mode [ 900.292699][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12927'. [ 900.325010][ T794] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 900.358023][ T794] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 900.399507][ T10] kvaser_usb 2-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 900.417547][ T794] usb 1-1: config 0 interface 0 has no altsetting 0 [ 900.442209][ T794] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 900.452737][ T10] usb 2-1: USB disconnect, device number 66 [ 900.486721][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.534811][ T794] usb 1-1: config 0 descriptor?? [ 900.549750][ T2050] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 900.566022][ T2068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.007892][ T794] hid-u2fzero 0003:10C4:8ACF.0054: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 901.067962][ T794] hid-u2fzero 0003:10C4:8ACF.0054: U2F Zero LED initialised [ 901.075585][ T794] hid-u2fzero 0003:10C4:8ACF.0054: U2F Zero RNG initialised [ 901.161242][ T2078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12933'. [ 901.219710][ T794] usb 1-1: USB disconnect, device number 56 [ 902.559025][ T2112] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12948'. [ 903.201302][ T2126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12953'. [ 903.526029][ T2136] netlink: 'syz.2.12958': attribute type 15 has an invalid length. [ 903.580704][ T2135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.625448][ T1490] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 903.666449][ T1490] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 903.702085][ T1490] bond0: now running without any active interface! [ 903.906181][ T2156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12965'. [ 903.919803][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12965'. [ 903.930883][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12965'. [ 906.910741][ T2226] batadv_slave_1: entered promiscuous mode [ 906.935812][ T2225] batadv_slave_1: left promiscuous mode [ 907.764003][ T2247] misc userio: Invalid payload size [ 908.025097][ T2257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13011'. [ 908.059513][ T2257] bond0: entered promiscuous mode [ 908.064592][ T2257] bond_slave_0: entered promiscuous mode [ 908.114198][ T2257] bond_slave_1: entered promiscuous mode [ 908.142012][ T2257] bond0: left promiscuous mode [ 908.154426][ T2257] bond_slave_0: left promiscuous mode [ 908.170449][ T2257] bond_slave_1: left promiscuous mode [ 908.440387][ T794] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 908.582413][ T2274] macvlan2: entered allmulticast mode [ 908.618353][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 908.623935][ T2273] ip6tnl1: entered allmulticast mode [ 908.633250][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.646730][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.667345][ T794] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 908.686772][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.718133][ T794] usb 5-1: config 0 descriptor?? [ 909.092417][ T2283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 909.099839][ T2283] IPv6: NLM_F_CREATE should be set when creating new route [ 909.107212][ T2283] IPv6: NLM_F_CREATE should be set when creating new route [ 909.114452][ T2283] IPv6: NLM_F_CREATE should be set when creating new route [ 909.159131][ T794] ft260 0003:0403:6030.0055: unknown main item tag 0x7 [ 909.362357][ T794] ft260 0003:0403:6030.0055: failed to retrieve chip version [ 909.389490][ T794] ft260 0003:0403:6030.0055: probe with driver ft260 failed with error -32 [ 909.420624][ T794] usb 5-1: USB disconnect, device number 54 [ 910.537468][ T794] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 910.723452][ T794] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 910.734694][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.763171][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.783513][ T794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 910.797618][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 910.827268][ T794] usb 5-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 910.836444][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.863564][ T794] usb 5-1: config 0 descriptor?? [ 910.974338][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 911.005777][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.025552][ T10] usb 1-1: Product: syz [ 911.035478][ T10] usb 1-1: Manufacturer: syz [ 911.055709][ T10] usb 1-1: SerialNumber: syz [ 911.067016][ T2342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.299407][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 911.337015][ T794] wacom 0003:056A:0131.0056: Unknown device_type for 'HID 056a:0131'. Ignoring. [ 911.360757][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 911.386933][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 911.404469][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 911.438647][ T10] usb 1-1: USB disconnect, device number 57 [ 911.526536][ T794] usb 5-1: USB disconnect, device number 55 [ 911.714197][ T2358] vivid-002: disconnect [ 911.739435][ T794] vivid-002: reconnect [ 912.080956][ T2370] netlink: 'syz.0.13064': attribute type 9 has an invalid length. [ 912.113415][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13064'. [ 912.136422][ T2370] macvlan2: entered promiscuous mode [ 912.143970][ T2370] hsr0: entered promiscuous mode [ 912.151727][ T2370] macvlan2: entered allmulticast mode [ 912.157840][ T2370] hsr0: entered allmulticast mode [ 912.205290][ T2370] hsr_slave_0: entered allmulticast mode [ 912.229517][ T2370] hsr_slave_1: entered allmulticast mode [ 913.209926][ T2412] netlink: 'syz.4.13080': attribute type 5 has an invalid length. [ 914.297673][ T794] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 914.477450][ T794] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 914.487587][ T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.529015][ T794] usb 1-1: config 0 has no interface number 0 [ 914.536864][ T794] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 914.562857][ T794] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 914.573699][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.587742][ T794] usb 1-1: Product: syz [ 914.592032][ T794] usb 1-1: Manufacturer: syz [ 914.617253][ T794] usb 1-1: SerialNumber: syz [ 914.633003][ T794] usb 1-1: config 0 descriptor?? [ 914.667290][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 914.830877][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 914.852051][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.887405][ T10] usb 5-1: Product: syz [ 914.897197][ T10] usb 5-1: Manufacturer: syz [ 914.903899][ T10] usb 5-1: SerialNumber: syz [ 914.912231][ T2422] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13085'. [ 914.936057][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 914.960393][T28218] usb 1-1: USB disconnect, device number 58 [ 914.978746][ T794] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 915.333452][ T2462] loop4: detected capacity change from 0 to 7 [ 915.345503][T23976] buffer_io_error: 10 callbacks suppressed [ 915.345521][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.362094][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.371395][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.382177][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.393659][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.406226][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.416379][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.427571][T23976] ldm_validate_partition_table(): Disk read failed. [ 915.434269][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.448399][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.459821][T23976] Buffer I/O error on dev loop4, logical block 0, async page read [ 915.478325][T23976] Dev loop4: unable to read RDB block 0 [ 915.489995][T23976] loop4: unable to read partition table [ 915.507634][T23976] loop4: partition table beyond EOD, truncated [ 915.532928][ T2462] ldm_validate_partition_table(): Disk read failed. [ 915.557419][ T2462] Dev loop4: unable to read RDB block 0 [ 915.563341][ T2462] loop4: unable to read partition table [ 915.577726][ T2462] loop4: partition table beyond EOD, truncated [ 915.591219][ T2462] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 915.679361][ T2464] Invalid logical block size (4) [ 915.859637][T28218] usb 5-1: USB disconnect, device number 56 [ 916.007308][ T2478] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 916.628488][ T794] usb 5-1: Service connection timeout for: 258 [ 916.634926][ T794] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 916.654416][ T794] ath9k_htc: Failed to initialize the device [ 916.670385][T28218] usb 5-1: ath9k_htc: USB layer deinitialized [ 916.860552][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 916.994420][ T2524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13120'. [ 917.018761][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 917.031894][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.053754][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 917.076658][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.094229][ T10] usb 1-1: config 0 descriptor?? [ 917.273086][ T2528] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13122'. [ 917.548697][ T10] mcp2221 0003:04D8:00DD.0057: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 917.970914][ T10] usb 1-1: USB disconnect, device number 59 [ 918.468624][ T2555] Failed to get privilege flags for destination (handle=0x2:0x8) [ 918.870869][ T2566] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13138'. [ 919.044455][ T2575] loop5: detected capacity change from 0 to 7 [ 919.320731][ T2575] Dev loop5: unable to read RDB block 7 [ 919.367489][ C1] blk_print_req_error: 10 callbacks suppressed [ 919.367509][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 919.370053][ T2575] loop5: unable to read partition table [ 919.390471][ T2575] loop5: partition table beyond EOD, truncated [ 919.396926][ T2575] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 919.926181][ T2615] usb usb8: usbfs: process 2615 (syz.0.13156) did not claim interface 0 before use [ 920.297551][ T5883] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 920.447374][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 920.470885][ T5883] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 920.497372][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.505403][ T5883] usb 5-1: Product: syz [ 920.528547][ T5883] usb 5-1: Manufacturer: syz [ 920.533301][ T5883] usb 5-1: SerialNumber: syz [ 920.588765][ T5883] usb 5-1: config 0 descriptor?? [ 920.813476][ T5883] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 921.415641][ T5883] usb write operation failed. (-71) [ 921.430070][ T5883] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 921.467695][ T5883] dvbdev: DVB: registering new adapter (Terratec H7) [ 921.474488][ T5883] usb 5-1: media controller created [ 921.514517][ T5883] usb read operation failed. (-71) [ 921.537389][ T5883] usb write operation failed. (-71) [ 921.559311][ T5883] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 921.608241][ T5883] usb 5-1: USB disconnect, device number 57 [ 922.733799][ T2704] bond1: ARP target 9.0.0.0 is already present [ 922.778427][ T2704] bond1: option arp_ip_target: invalid value (9) [ 923.042714][ T2704] bond1 (unregistering): Released all slaves [ 924.027330][ T5883] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 924.200383][ T5883] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 924.227441][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.248253][ T5883] usb 5-1: config 0 descriptor?? [ 924.270122][ T5883] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 925.097612][ T5883] usb 5-1: USB disconnect, device number 58 [ 925.155544][ T2775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13211'. [ 925.310010][ T2778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.577327][ T10] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 925.772451][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 925.806245][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.835868][ T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 925.863448][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.935150][ T10] usb 1-1: config 0 descriptor?? [ 926.394764][ T10] hid-thrustmaster 0003:044F:B65D.0058: unknown main item tag 0x0 [ 926.463250][ T10] hid-thrustmaster 0003:044F:B65D.0058: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 926.516510][ T10] hid-thrustmaster 0003:044F:B65D.0058: Wrong number of endpoints? [ 926.658406][ C0] hid-thrustmaster 0003:044F:B65D.0058: Unknown packet type 0x0, unable to proceed further with wheel init [ 926.873890][ T5883] usb 1-1: USB disconnect, device number 60 [ 927.703875][ T2846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13235'. [ 928.217272][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 928.388669][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 928.396731][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 928.409400][ T10] usb 2-1: config 0 has no interface number 0 [ 928.435246][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 928.465154][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.484560][ T10] usb 2-1: Product: syz [ 928.497497][ T10] usb 2-1: Manufacturer: syz [ 928.514951][ T10] usb 2-1: SerialNumber: syz [ 928.546401][ T10] usb 2-1: config 0 descriptor?? [ 928.573547][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 928.787646][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 928.831799][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 929.218836][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 929.220169][ T5883] usb 2-1: USB disconnect, device number 67 [ 929.253845][ T5883] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 929.320735][ T5883] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 929.374105][ T5883] quatech2 2-1:0.51: device disconnected [ 929.432588][ T2891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13251'. [ 929.891604][ T2903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13257'. [ 930.934920][ T2931] netlink: 216 bytes leftover after parsing attributes in process `syz.1.13269'. [ 931.513406][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.522548][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.797200][ T5883] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 931.949981][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.980188][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.017526][ T5883] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 932.040914][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.078546][ T5883] usb 2-1: config 0 descriptor?? [ 932.125786][ T2972] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13289'. [ 932.520647][ T5883] hid-led 0003:0FC5:B080.0059: unknown main item tag 0x0 [ 932.911332][ T5883] hid-led 0003:0FC5:B080.0059: probe with driver hid-led failed with error -71 [ 932.957956][ T5883] usb 2-1: USB disconnect, device number 68 [ 935.071765][ T3052] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.13325'. [ 935.574817][ T3067] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.13331'. [ 937.018751][ T3110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13349'. [ 937.049424][ T3110] netem: unknown loss type 13 [ 937.055043][ T3110] netem: change failed [ 937.650812][ T3137] tipc: Enabling of bearer rejected, already enabled [ 938.817770][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 938.868136][ T3165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13373'. [ 939.024997][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 939.048536][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 939.075920][ T10] usb 1-1: config 220 has no interface number 2 [ 939.090195][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 939.148069][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 939.154889][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 939.167257][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 939.186541][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 939.199181][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.217195][ T10] usb 1-1: Product: syz [ 939.221497][ T10] usb 1-1: Manufacturer: syz [ 939.226112][ T10] usb 1-1: SerialNumber: syz [ 939.517662][ T10] usb 1-1: selecting invalid altsetting 0 [ 939.539386][ T10] usb 1-1: selecting invalid altsetting 0 [ 939.586496][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 939.605152][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 939.659746][ T10] usb 1-1: selecting invalid altsetting 0 [ 939.689884][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 939.734329][ T10] usb 1-1: USB disconnect, device number 61 [ 940.272510][ T3199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13382'. [ 940.354187][ T3201] netlink: 'syz.0.13384': attribute type 1 has an invalid length. [ 941.251646][ T3232] netlink: 'syz.1.13399': attribute type 1 has an invalid length. [ 941.290328][ T3232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13399'. [ 941.323956][ T3234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13400'. [ 941.641177][ T3245] input: syz1 as /devices/virtual/input/input101 [ 941.754224][ T3248] binder: 3246:3248 ioctl c018620c 200000000000 returned -22 [ 942.240087][ T3249] bridge_slave_0: left allmulticast mode [ 942.245775][ T3249] bridge_slave_0: left promiscuous mode [ 942.327910][ T3249] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.945098][ T3249] bridge_slave_1: left allmulticast mode [ 943.007640][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 943.142953][ T3249] bridge_slave_1: left promiscuous mode [ 943.164254][ T3249] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.173672][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 943.206392][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 943.215894][ T10] usb 5-1: config 0 has no interface number 0 [ 943.242055][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 943.254560][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.262884][ T10] usb 5-1: Product: syz [ 943.273783][ T10] usb 5-1: Manufacturer: syz [ 943.279251][ T10] usb 5-1: SerialNumber: syz [ 943.288989][ T10] usb 5-1: config 0 descriptor?? [ 943.302406][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 943.314844][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 943.349775][ T3249] bond0: (slave bond_slave_0): Releasing backup interface [ 943.362177][ T3249] bond0: (slave bond_slave_1): Releasing backup interface [ 943.374604][ T3249] team0: Port device team_slave_0 removed [ 943.384007][ T3249] team0: Port device team_slave_1 removed [ 943.395019][ T3249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.404829][ T3249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.414363][ T3249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 943.431957][ T3269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13415'. [ 943.442772][ T3269] netem: unknown loss type 0 [ 943.448867][ T3269] netem: change failed [ 943.521826][ T10] usb 5-1: USB disconnect, device number 59 [ 943.786735][ T3299] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13429'. [ 944.167428][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 944.356864][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 944.367460][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.393737][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 944.413802][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 944.437221][ T10] usb 1-1: Product: syz [ 944.449090][ T10] usb 1-1: Manufacturer: syz [ 944.453734][ T10] usb 1-1: SerialNumber: syz [ 944.488338][ T10] usb 1-1: config 0 descriptor?? [ 944.510907][ T10] usb 1-1: selecting invalid altsetting 0 [ 944.799355][ T10] usb 1-1: USB disconnect, device number 62 [ 945.042737][ T3328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13442'. [ 945.449667][ T3339] futex_wake_op: syz.4.13448 tries to shift op by 32; fix this program [ 946.025644][ T3362] veth0_to_team: entered promiscuous mode [ 946.836245][ T3396] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13470'. [ 946.845619][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 946.974886][ T3400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13472'. [ 947.017314][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 947.024358][ T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 947.037185][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 947.061611][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 947.092229][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 947.133332][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 947.147456][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 947.156874][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 947.166530][ T10] usb 1-1: Product: syz [ 947.188085][ T10] usb 1-1: Manufacturer: syz [ 947.192716][ T10] usb 1-1: SerialNumber: syz [ 947.210780][ T10] usb 1-1: config 0 descriptor?? [ 947.223989][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 947.244138][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 947.637564][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 947.828066][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 947.850542][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 947.872269][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 947.884034][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.906970][ T3409] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 947.948885][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 948.085351][ T5883] usb 1-1: USB disconnect, device number 63 [ 948.116867][ T5883] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 948.184911][ T10] usb 5-1: USB disconnect, device number 60 [ 949.321057][ T3465] kvm: apic: phys broadcast and lowest prio [ 949.842173][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 949.842192][ T30] audit: type=1800 audit(1771020242.006:909): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13508" name="file0" dev="tmpfs" ino=2713 res=0 errno=0 [ 949.915327][ T30] audit: type=1326 audit(1771020242.036:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3484 comm="syz.2.13509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4874b9bf79 code=0x0 [ 949.952633][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13511'. [ 951.503726][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13533'. [ 951.904403][ T3554] gre1: entered promiscuous mode [ 951.911527][ T3554] gre1: entered allmulticast mode [ 951.919569][ T3554] team0: Device gre1 is of different type [ 952.107790][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 952.280185][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 952.287224][ T10] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 952.301403][ T10] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 952.321432][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 952.351052][ T10] usb 2-1: config 1 has no interface number 0 [ 952.366832][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.392631][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 952.420409][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 952.439467][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.467310][ T5883] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 952.482717][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 952.637932][ T5883] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 952.651141][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.677396][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.685108][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 952.727429][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 952.744047][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.787548][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.808004][ T3579] loop2: detected capacity change from 0 to 7 [ 952.817431][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 952.841294][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.844926][ T3579] Dev loop2: unable to read RDB block 7 [ 952.876628][ T3579] loop2: unable to read partition table [ 952.877202][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.896900][ T3579] loop2: partition table beyond EOD, truncated [ 952.923353][ T3579] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 952.927394][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 952.959570][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.987714][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.027358][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.048338][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.077258][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.117361][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.144269][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.166057][ T10] usb 2-1: USB disconnect, device number 69 [ 953.167602][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.204058][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 953.217408][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.232225][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.272593][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.307401][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.327816][ T5883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.336772][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.387328][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.397577][ T5883] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 953.406769][ T5883] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 953.441238][ T5883] usb 1-1: Product: syz [ 953.445612][ T5883] usb 1-1: Manufacturer: syz [ 953.477341][ T5883] usb 1-1: SerialNumber: syz [ 953.498567][ T5883] usb 1-1: config 0 descriptor?? [ 953.537941][ T5883] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 953.801454][ T10] usb 1-1: USB disconnect, device number 64 [ 953.821336][ T10] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 954.025933][ T3603] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13561'. [ 954.302847][ T30] audit: type=1326 audit(1771020246.466:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3610 comm="syz.1.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb569b9bf79 code=0x7ffc0000 [ 954.366370][ T30] audit: type=1326 audit(1771020246.496:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3610 comm="syz.1.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb569b9bf79 code=0x7ffc0000 [ 954.400910][ T30] audit: type=1326 audit(1771020246.496:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3610 comm="syz.1.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb569b9bf79 code=0x7ffc0000 [ 954.424150][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 954.434643][ T30] audit: type=1326 audit(1771020246.496:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3610 comm="syz.1.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb569b9bf79 code=0x7ffc0000 [ 954.467811][ T30] audit: type=1326 audit(1771020246.496:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3610 comm="syz.1.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb569b9bf79 code=0x7ffc0000 [ 954.496571][ T30] audit: type=1326 audit(1771020246.496:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3610 comm="syz.1.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fb569b9bf79 code=0x7ffc0000 [ 954.532782][ T30] audit: type=1800 audit(1771020246.496:917): pid=3611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13565" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 954.594612][ T30] audit: type=1326 audit(1771020246.496:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3610 comm="syz.1.13565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb569b9bf79 code=0x7ffc0000 [ 954.657242][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 954.672875][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.696496][ T10] usb 5-1: config 0 descriptor?? [ 954.720671][ T10] cp210x 5-1:0.0: cp210x converter detected [ 955.133471][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 955.165281][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 955.302639][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 955.302656][ T30] audit: type=1326 audit(1771020247.466:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3631 comm="syz.1.13573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb569b9bf79 code=0x0 [ 955.356866][ T10] usb 5-1: USB disconnect, device number 61 [ 955.399972][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 955.447789][ T10] cp210x 5-1:0.0: device disconnected [ 956.247369][ T5883] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 956.426607][ T5883] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 956.456466][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.490775][ T5883] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 956.520641][ T5883] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 956.548633][ T5883] usb 5-1: Manufacturer: syz [ 956.568314][ T5883] usb 5-1: config 0 descriptor?? [ 956.719295][ T5883] rc_core: IR keymap rc-hauppauge not found [ 956.737341][ T5883] Registered IR keymap rc-empty [ 956.743492][ T5883] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 956.803165][ T5883] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input102 [ 956.882021][ T5883] usb 5-1: USB disconnect, device number 62 [ 957.621959][ T30] audit: type=1800 audit(1771020249.786:923): pid=3699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13601" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 957.690480][ T3701] bond0: entered promiscuous mode [ 957.695587][ T3701] bond_slave_0: entered promiscuous mode [ 957.719894][ T3701] bond_slave_1: entered promiscuous mode [ 957.769090][ T3701] bridge0: entered promiscuous mode [ 957.804902][ T3701] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 957.870747][ T3701] batadv0: entered promiscuous mode [ 957.913177][ T3701] bond9: entered promiscuous mode [ 957.951594][ T3701] bond0: left promiscuous mode [ 957.956624][ T3701] bond_slave_0: left promiscuous mode [ 957.966494][ T3701] bond_slave_1: left promiscuous mode [ 958.005730][ T3701] bridge0: left promiscuous mode [ 958.013952][ T3701] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 958.037010][ T3701] batadv0: left promiscuous mode [ 958.044022][ T3701] bond9: left promiscuous mode [ 959.242516][ T30] audit: type=1326 audit(1771020251.406:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.0.13626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d319bf79 code=0x7ffc0000 [ 959.290185][ T30] audit: type=1326 audit(1771020251.406:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.0.13626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d319bf79 code=0x7ffc0000 [ 959.343355][ T30] audit: type=1326 audit(1771020251.406:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.0.13626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fa7d319bf79 code=0x7ffc0000 [ 959.433746][ T30] audit: type=1326 audit(1771020251.406:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.0.13626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d319bf79 code=0x7ffc0000 [ 959.475030][ T30] audit: type=1326 audit(1771020251.406:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.0.13626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa7d319bf79 code=0x7ffc0000 [ 959.502934][ T30] audit: type=1326 audit(1771020251.406:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.0.13626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d319bf79 code=0x7ffc0000 [ 960.617269][ T5883] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 960.812872][ T5883] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 960.837177][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.845246][ T5883] usb 2-1: Product: syz [ 960.877259][ T5883] usb 2-1: Manufacturer: syz [ 960.882144][ T5883] usb 2-1: SerialNumber: syz [ 960.918352][ T5883] usb 2-1: config 0 descriptor?? [ 961.094440][ T3800] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13648'. [ 961.345208][ T5883] airspy 2-1:0.0: Board ID: 00 [ 961.357394][ T5883] airspy 2-1:0.0: Firmware version: [ 961.462880][ T3807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.767699][ T5883] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 961.815254][ T5883] airspy 2-1:0.0: Registered as swradio24 [ 961.838332][T17326] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 961.846414][ T5883] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 961.881515][ T3820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.891714][ T5883] usb 2-1: USB disconnect, device number 70 [ 961.930845][ T3820] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 962.047455][T17326] usb 4-1: Using ep0 maxpacket: 32 [ 962.069238][T17326] usb 4-1: config index 0 descriptor too short (expected 6701, got 45) [ 962.104227][T17326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.147757][T17326] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.194535][T17326] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.237849][T17326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 962.268049][T17326] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 962.297440][T17326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.358609][T17326] usb 4-1: config 0 descriptor?? [ 962.569352][ T3838] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13663'. [ 963.023177][ T3848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 963.051470][T17326] logitech 0003:046D:CA03.005A: item fetching failed at offset 5/7 [ 963.078684][T17326] logitech 0003:046D:CA03.005A: parse failed [ 963.107515][T17326] logitech 0003:046D:CA03.005A: probe with driver logitech failed with error -22 [ 963.579710][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13674'. [ 963.804295][T28218] usb 4-1: USB disconnect, device number 34 [ 964.231456][ T3871] ALSA: mixer_oss: invalid OSS volume '' [ 964.267337][T17326] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 964.417682][ T3873] netlink: 71 bytes leftover after parsing attributes in process `syz.4.13679'. [ 964.427300][T17326] usb 1-1: Using ep0 maxpacket: 8 [ 964.443985][T17326] usb 1-1: config 0 has no interfaces? [ 964.460551][T17326] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 964.487164][T17326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.520424][T17326] usb 1-1: Product: syz [ 964.524636][T17326] usb 1-1: Manufacturer: syz [ 964.553291][T17326] usb 1-1: SerialNumber: syz [ 964.592684][T17326] usb 1-1: config 0 descriptor?? [ 964.863601][T17326] usb 1-1: USB disconnect, device number 65 [ 965.855158][ T3892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13688'. [ 965.875499][ T3892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13688'. [ 966.582637][ T3907] macvlan0: entered promiscuous mode [ 966.608748][ T3907] netlink: 'syz.0.13693': attribute type 1 has an invalid length. [ 966.667335][ T3907] netlink: 'syz.0.13693': attribute type 2 has an invalid length. [ 967.477883][ T3935] netlink: 112 bytes leftover after parsing attributes in process `syz.4.13706'. [ 967.531889][T28218] hid-generic 0003:0004:0000.005B: unknown main item tag 0x0 [ 967.560023][T28218] hid-generic 0003:0004:0000.005B: unknown main item tag 0x0 [ 967.597178][T28218] hid-generic 0003:0004:0000.005B: unknown main item tag 0x0 [ 967.645354][T28218] hid-generic 0003:0004:0000.005B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 967.852596][ T3945] fido_id[3945]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 968.297222][T17326] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 968.349143][ T3965] netlink: 'syz.2.13719': attribute type 12 has an invalid length. [ 968.468994][T17326] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 968.487282][T17326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.526642][T17326] usb 1-1: config 0 descriptor?? [ 968.761122][T17326] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 968.958062][T17326] [drm:udl_init] *ERROR* Selecting channel failed [ 969.021617][T17326] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 969.048885][ T3981] input: syz0 as /devices/virtual/input/input103 [ 969.067579][T17326] [drm] Initialized udl on minor 2 [ 969.092003][T17326] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 969.127957][T17326] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 969.145161][ T5886] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 969.160358][ T5886] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 969.177325][T17326] usb 1-1: USB disconnect, device number 66 [ 969.907727][T28218] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 970.072433][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13736'. [ 970.087816][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13736'. [ 970.100137][T28218] usb 1-1: Using ep0 maxpacket: 16 [ 970.122390][T28218] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 970.162454][T28218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 970.216589][T28218] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 970.247471][T28218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.284881][T28218] usb 1-1: Product: syz [ 970.302844][T28218] usb 1-1: Manufacturer: syz [ 970.313715][T28218] usb 1-1: SerialNumber: syz [ 970.329643][T28218] usb 1-1: config 0 descriptor?? [ 970.341520][T28218] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 970.356785][T28218] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 970.369230][ T4007] tipc: Started in network mode [ 970.374201][ T4007] tipc: Node identity ac14140f, cluster identity 4711 [ 970.383550][ T4007] tipc: New replicast peer: 255.255.255.255 [ 970.395423][ T4007] tipc: Enabled bearer , priority 0 [ 970.819630][ T4030] bond2 (unregistering): Released all slaves [ 970.969525][T28218] em28xx 1-1:0.0: chip ID is em2860 [ 971.176473][T28218] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 971.195736][T28218] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 971.221684][T28218] em28xx 1-1:0.0: No AC97 audio processor [ 971.254463][T28218] usb 1-1: USB disconnect, device number 67 [ 971.284886][T28218] em28xx 1-1:0.0: Disconnecting em28xx [ 971.306037][T28218] em28xx 1-1:0.0: Freeing device [ 971.463267][ T30] audit: type=1326 audit(1771020263.626:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4048 comm="syz.1.13755" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb569b9bf79 code=0x0 [ 971.519487][ T10] tipc: Node number set to 2886997007 [ 972.057492][T17326] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 972.232052][T17326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.267254][T17326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.297658][T17326] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 972.337245][T17326] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 972.366913][T17326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.399932][T17326] usb 5-1: config 0 descriptor?? [ 972.828245][T17326] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 972.835679][T17326] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 972.898942][T17326] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 973.126671][ T10] usb 5-1: USB disconnect, device number 63 [ 973.230842][T28218] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 973.390036][T28218] usb 1-1: Using ep0 maxpacket: 16 [ 973.406421][T28218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.419411][T28218] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 973.436061][T28218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.472096][T28218] usb 1-1: config 0 descriptor?? [ 973.604256][ T4108] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.13781'. [ 973.905896][T28218] mcp2221 0003:04D8:00DD.005D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 974.409251][T17326] usb 1-1: USB disconnect, device number 68 [ 975.365720][ T4146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 976.778333][ T4191] xt_connbytes: Forcing CT accounting to be enabled [ 976.908663][ T4194] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 976.939726][ T4194] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 976.963659][ T4194] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 977.476540][ T4205] io-wq is not configured for unbound workers [ 978.077351][T28218] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 978.240330][T28218] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 978.253942][T28218] usb 5-1: config 0 has no interface number 0 [ 978.278047][T28218] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 978.298287][T28218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.306349][T28218] usb 5-1: Product: syz [ 978.327893][T28218] usb 5-1: Manufacturer: syz [ 978.332762][T28218] usb 5-1: SerialNumber: syz [ 978.355002][T28218] usb 5-1: config 0 descriptor?? [ 978.374036][T28218] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 978.400588][T28218] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 978.719410][T17326] usb 5-1: USB disconnect, device number 64 [ 980.277334][T17326] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 980.437353][T17326] usb 2-1: Using ep0 maxpacket: 16 [ 980.458850][T17326] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 980.477230][T17326] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 980.485521][T17326] usb 2-1: config 166 has no interface number 0 [ 980.517337][T17326] usb 2-1: config 166 has no interface number 1 [ 980.523662][T17326] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 980.537577][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 980.577184][T17326] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 980.607265][T17326] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 980.647338][T17326] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 980.687326][T17326] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 980.717179][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 980.717179][T17326] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 980.717206][T17326] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 980.743042][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.807401][T17326] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 980.816955][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.837214][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 980.841763][T17326] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 980.865971][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 980.903834][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.927249][T17326] usb 2-1: config 166 interface 177 has no altsetting 0 [ 980.949503][ T10] usb 5-1: config 0 descriptor?? [ 980.955262][T17326] usb 2-1: config 166 interface 34 has no altsetting 0 [ 980.975484][T17326] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 981.015445][T17326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.050915][T17326] usb 2-1: Product: syz [ 981.055113][T17326] usb 2-1: Manufacturer: syz [ 981.083120][T17326] usb 2-1: SerialNumber: syz [ 981.337916][T17326] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 981.379257][ T10] hid-generic 0003:045E:FC40.005E: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.4-1/input0 [ 981.550199][T17326] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 981.592401][ T10] usb 5-1: USB disconnect, device number 65 [ 981.854725][T17326] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 981.861081][ T4300] Set syz1 is full, maxelem 14 reached [ 981.946651][T17326] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 981.976674][T17326] uvcvideo 2-1:166.34: No valid video chain found. [ 981.992724][ T4308] ptrace attach of "./syz-executor exec"[29592] was attempted by "netdevsim0  \x0b   [ 982.007515][T17326] usb 2-1: USB disconnect, device number 71 [ 983.708563][ T4351] macsec1: entered promiscuous mode [ 983.714242][ T4351] macsec1: entered allmulticast mode [ 984.327553][T17326] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 984.344713][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13900'. [ 984.369840][ T4379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13900'. [ 984.392144][ T4379] vlan1: entered allmulticast mode [ 984.399021][ T4379] bridge_slave_0: entered allmulticast mode [ 984.406241][ T4381] binder: 4380:4381 ioctl c018620c 200000000000 returned -22 [ 984.487451][T17326] usb 2-1: Using ep0 maxpacket: 16 [ 984.499844][T17326] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 984.527207][T17326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.557384][T17326] usb 2-1: config 1 has no interface number 0 [ 984.563560][T17326] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.617266][T17326] usb 2-1: config 1 interface 105 has no altsetting 0 [ 984.651774][T17326] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 984.677161][T17326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.685186][T17326] usb 2-1: Product: syz [ 984.717150][T17326] usb 2-1: Manufacturer: syz [ 984.722550][T17326] usb 2-1: SerialNumber: syz [ 984.946810][T17326] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 985.156599][ T10] usb 2-1: USB disconnect, device number 72 [ 985.625997][ T4403] netlink: 'syz.0.13909': attribute type 4 has an invalid length. [ 986.167245][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 986.287271][T28218] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 986.349282][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.379142][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 986.398271][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 986.418886][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 986.426922][ T10] usb 1-1: SerialNumber: syz [ 986.471726][T28218] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.493670][T28218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 986.520029][T28218] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 986.539649][T28218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.569089][T28218] usb 5-1: config 0 descriptor?? [ 986.592866][ T4419] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 986.624113][T28218] hub 5-1:0.0: USB hub found [ 986.675388][ T10] usb 1-1: 0:2 : does not exist [ 986.691881][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13919'. [ 986.740859][ T10] usb 1-1: USB disconnect, device number 69 [ 986.748313][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13919'. [ 986.827003][T28218] hub 5-1:0.0: 2 ports detected [ 986.834032][T23976] udevd[23976]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.234386][T28218] hub 5-1:0.0: set hub depth failed [ 987.258517][T28218] usb 5-1: USB disconnect, device number 66 [ 988.027398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 988.607254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 988.647214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 988.687331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 989.382310][ T30] audit: type=1326 audit(1771020281.546:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.2.13935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x0 [ 989.621167][ T4472] bond0: option arp_validate: invalid value (5846) [ 991.347035][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13953'. [ 991.390619][ T4508] batman_adv: batadv0: Adding interface: ipvlan0 [ 991.408330][ T4508] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.476229][ T4508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.517276][ T4508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.551174][ T4508] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 991.737268][T28218] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 991.911283][T28218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.941861][T28218] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.969577][T28218] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 991.998279][T28218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 992.026930][T28218] usb 1-1: SerialNumber: syz [ 992.301461][T28218] usb 1-1: 0:2 : does not exist [ 992.444494][T28218] usb 1-1: USB disconnect, device number 70 [ 992.952274][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.959474][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.975118][ T4535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.444977][ T4582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13987'. [ 994.570449][ T30] audit: type=1326 audit(1771020286.736:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.609621][ T30] audit: type=1326 audit(1771020286.736:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.658108][ T30] audit: type=1326 audit(1771020286.766:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.740685][ T30] audit: type=1326 audit(1771020286.766:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.791906][ T30] audit: type=1326 audit(1771020286.766:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.840088][ T30] audit: type=1326 audit(1771020286.796:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.903676][ T30] audit: type=1326 audit(1771020286.796:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.979057][ T30] audit: type=1326 audit(1771020286.796:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 994.990207][ T4595] netlink: 678 bytes leftover after parsing attributes in process `syz.2.13991'. [ 995.024937][ T30] audit: type=1326 audit(1771020286.796:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 995.128826][ T30] audit: type=1326 audit(1771020286.796:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.2.13988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4874b9bf79 code=0x7ffc0000 [ 995.388028][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13995'. [ 996.286022][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14010'. [ 996.857298][T17326] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 997.017171][T17326] usb 5-1: Using ep0 maxpacket: 32 [ 997.039962][T17326] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 997.061297][T17326] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 997.097162][T17326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 997.097755][T28218] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 997.106143][T17326] usb 5-1: config 1 has no interface number 0 [ 997.106905][T17326] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.207263][T17326] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 997.247207][T17326] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 997.256281][T17326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.297857][T28218] usb 1-1: Using ep0 maxpacket: 16 [ 997.311096][T28218] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 997.318798][T17326] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 997.334509][T28218] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 997.360206][T28218] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 997.376013][T28218] usb 1-1: config 1 interface 0 has no altsetting 0 [ 997.388899][T28218] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 997.399679][T28218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.409126][T28218] usb 1-1: Product: syz [ 997.413527][T28218] usb 1-1: Manufacturer: syz [ 997.419165][T28218] usb 1-1: SerialNumber: syz [ 997.516589][T17326] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 997.623147][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14024'. [ 997.658065][T28218] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 997.903982][T28218] usb 1-1: USB disconnect, device number 71 [ 997.924646][T28218] usblp0: removed [ 998.032444][ T10] usb 5-1: USB disconnect, device number 67 [ 998.042641][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 998.348098][ T4683] loop3: detected capacity change from 0 to 7 [ 998.372473][ T4683] Dev loop3: unable to read RDB block 7 [ 998.387220][ T4683] loop3: AHDI p1 p2 [ 998.398511][ T4683] loop3: partition table partially beyond EOD, truncated [ 998.422812][ T4683] loop3: p1 start 1702000233 is beyond EOD, truncated [ 999.060018][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 999.247797][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 999.265963][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 999.296025][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.318928][ T10] usb 5-1: config 0 descriptor?? [ 999.344988][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 999.679943][ T4712] sock: sock_set_timeout: `syz.1.14043' (pid 4712) tries to set negative timeout [ 999.913733][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14047'. [ 999.967684][T28218] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1000.149217][ T10] gspca_sunplus: reg_r err -71 [ 1000.158034][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1000.176811][T28218] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1000.187986][T28218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.195993][T28218] usb 1-1: Product: syz [ 1000.210296][ T10] usb 5-1: USB disconnect, device number 68 [ 1000.216443][T28218] usb 1-1: Manufacturer: syz [ 1000.230015][T28218] usb 1-1: SerialNumber: syz [ 1000.255595][T28218] usb 1-1: config 0 descriptor?? [ 1000.693053][T28218] usb 1-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 1000.908568][T28218] usb 1-1: failed to fetch extended address, random address set [ 1001.003193][T28218] usb 1-1: USB disconnect, device number 72 [ 1002.018735][ T4767] Context (ID=0x4d5) not attached to queue pair (handle=0x2:0x2) [ 1003.148720][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14082'. [ 1003.183033][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14082'. [ 1004.589661][ T4844] netlink: 'syz.4.14100': attribute type 15 has an invalid length. [ 1004.669674][T28218] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1004.853114][T28218] usb 1-1: Using ep0 maxpacket: 16 [ 1004.889046][T28218] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.938057][T28218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1004.967353][T28218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1005.007172][T28218] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1005.016867][T28218] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.075168][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14104'. [ 1005.089095][T28218] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1005.114081][T28218] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1005.122290][T28218] usb 1-1: Manufacturer: syz [ 1005.157841][T28218] usb 1-1: config 0 descriptor?? [ 1005.485198][T28218] rc_core: IR keymap rc-hauppauge not found [ 1005.512432][T28218] Registered IR keymap rc-empty [ 1005.532254][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.573196][ T4840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.582739][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.604399][ T4840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.621383][T28218] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1005.649025][T28218] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input104 [ 1005.718820][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.752380][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.778147][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.807586][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.847299][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.878453][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.918038][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1005.959817][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1006.007474][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1006.040392][T28218] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1006.071896][T28218] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1006.090053][T28218] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1006.139527][T28218] usb 1-1: USB disconnect, device number 73 [ 1006.198612][ T4890] sock: sock_set_timeout: `syz.1.14117' (pid 4890) tries to set negative timeout [ 1006.692862][ T4906] netlink: 'syz.2.14123': attribute type 1 has an invalid length. [ 1006.717529][ T4906] netlink: 'syz.2.14123': attribute type 7 has an invalid length. [ 1006.750934][ T4906] netlink: 'syz.2.14123': attribute type 8 has an invalid length. [ 1006.788178][ T4906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14123'. [ 1009.727245][T28218] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1009.947979][T28218] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1009.980867][T28218] usb 1-1: config 1 has no interface number 0 [ 1009.986999][T28218] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1010.037180][T28218] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1010.062155][T28218] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.129256][T28218] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1010.145149][T28218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.192821][T28218] usb 1-1: Product: syz [ 1010.197742][T28218] usb 1-1: Manufacturer: syz [ 1010.202745][T28218] usb 1-1: SerialNumber: syz [ 1010.212327][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1010.212345][ T30] audit: type=1326 audit(1771020302.376:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.14166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff919bf79 code=0x0 [ 1010.251658][ T4975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1010.360779][ T5004] [ 1010.363146][ T5004] ===================================================== [ 1010.370082][ T5004] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1010.377559][ T5004] syzkaller #0 Tainted: G L [ 1010.383540][ T5004] ----------------------------------------------------- [ 1010.390475][ T5004] syz.2.14168/5004 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1010.398205][ T5004] ffff888053eb8750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1010.406931][ T5004] [ 1010.406931][ T5004] and this task is already holding: [ 1010.414387][ T5004] ffff888028442028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1010.424152][ T5004] which would create a new lock dependency: [ 1010.430045][ T5004] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1010.438258][ T5004] [ 1010.438258][ T5004] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1010.447712][ T5004] (&dev->event_lock#2){..-.}-{3:3} [ 1010.447753][ T5004] [ 1010.447753][ T5004] ... which became SOFTIRQ-irq-safe at: [ 1010.460700][ T5004] lock_acquire+0x106/0x330 [ 1010.465313][ T5004] _raw_spin_lock_irqsave+0x40/0x60 [ 1010.470616][ T5004] input_inject_event+0xa5/0x340 [ 1010.475656][ T5004] led_trigger_event+0x138/0x210 [ 1010.480682][ T5004] kbd_bh+0x1f3/0x300 [ 1010.484768][ T5004] tasklet_action_common+0x2da/0x4b0 [ 1010.490143][ T5004] handle_softirqs+0x22a/0x7c0 [ 1010.494993][ T5004] run_ksoftirqd+0x36/0x60 [ 1010.499483][ T5004] smpboot_thread_fn+0x541/0xa50 [ 1010.504490][ T5004] kthread+0x388/0x470 [ 1010.508633][ T5004] ret_from_fork+0x51e/0xb90 [ 1010.513294][ T5004] ret_from_fork_asm+0x1a/0x30 [ 1010.518133][ T5004] [ 1010.518133][ T5004] to a SOFTIRQ-irq-unsafe lock: [ 1010.525131][ T5004] (tasklist_lock){.+.+}-{3:3} [ 1010.525153][ T5004] [ 1010.525153][ T5004] ... which became SOFTIRQ-irq-unsafe at: [ 1010.537749][ T5004] ... [ 1010.537756][ T5004] lock_acquire+0x106/0x330 [ 1010.544900][ T5004] _raw_read_lock+0x36/0x50 [ 1010.549475][ T5004] __do_wait+0xde/0x740 [ 1010.553701][ T5004] do_wait+0x1e7/0x4f0 [ 1010.557844][ T5004] kernel_wait+0xd6/0x1c0 [ 1010.562266][ T5004] call_usermodehelper_exec_work+0xbe/0x230 [ 1010.568230][ T5004] process_scheduled_works+0xaec/0x17a0 [ 1010.573850][ T5004] worker_thread+0xa50/0xfc0 [ 1010.578646][ T5004] kthread+0x388/0x470 [ 1010.582825][ T5004] ret_from_fork+0x51e/0xb90 [ 1010.587490][ T5004] ret_from_fork_asm+0x1a/0x30 [ 1010.592350][ T5004] [ 1010.592350][ T5004] other info that might help us debug this: [ 1010.592350][ T5004] [ 1010.602574][ T5004] Chain exists of: [ 1010.602574][ T5004] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1010.602574][ T5004] [ 1010.616156][ T5004] Possible interrupt unsafe locking scenario: [ 1010.616156][ T5004] [ 1010.624473][ T5004] CPU0 CPU1 [ 1010.629832][ T5004] ---- ---- [ 1010.635200][ T5004] lock(tasklist_lock); [ 1010.639468][ T5004] local_irq_disable(); [ 1010.646208][ T5004] lock(&dev->event_lock#2); [ 1010.653399][ T5004] lock(&client->buffer_lock); [ 1010.660758][ T5004] [ 1010.664194][ T5004] lock(&dev->event_lock#2); [ 1010.669035][ T5004] [ 1010.669035][ T5004] *** DEADLOCK *** [ 1010.669035][ T5004] [ 1010.677161][ T5004] 7 locks held by syz.2.14168/5004: [ 1010.682338][ T5004] #0: ffff88802b7f5118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1010.691469][ T5004] #1: ffff88801df7c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1010.701650][ T5004] #2: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1010.711323][ T5004] #3: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1010.720885][ T5004] #4: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1010.730008][ T5004] #5: ffff888028442028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1010.740166][ T5004] #6: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1010.749203][ T5004] [ 1010.749203][ T5004] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1010.759593][ T5004] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1010.765225][ T5004] IN-SOFTIRQ-W at: [ 1010.769272][ T5004] lock_acquire+0x106/0x330 [ 1010.775595][ T5004] _raw_spin_lock_irqsave+0x40/0x60 [ 1010.782604][ T5004] input_inject_event+0xa5/0x340 [ 1010.789353][ T5004] led_trigger_event+0x138/0x210 [ 1010.796103][ T5004] kbd_bh+0x1f3/0x300 [ 1010.801893][ T5004] tasklet_action_common+0x2da/0x4b0 [ 1010.808987][ T5004] handle_softirqs+0x22a/0x7c0 [ 1010.815558][ T5004] run_ksoftirqd+0x36/0x60 [ 1010.821789][ T5004] smpboot_thread_fn+0x541/0xa50 [ 1010.828566][ T5004] kthread+0x388/0x470 [ 1010.834446][ T5004] ret_from_fork+0x51e/0xb90 [ 1010.840845][ T5004] ret_from_fork_asm+0x1a/0x30 [ 1010.847420][ T5004] INITIAL USE at: [ 1010.851400][ T5004] lock_acquire+0x106/0x330 [ 1010.857622][ T5004] _raw_spin_lock_irqsave+0x40/0x60 [ 1010.864544][ T5004] input_inject_event+0xa5/0x340 [ 1010.871205][ T5004] kbd_led_trigger_activate+0xbc/0x100 [ 1010.878398][ T5004] led_trigger_set+0x535/0x960 [ 1010.884893][ T5004] led_trigger_set_default+0x260/0x2a0 [ 1010.892080][ T5004] led_classdev_register_ext+0x787/0x9c0 [ 1010.899435][ T5004] input_leds_connect+0x517/0x790 [ 1010.906182][ T5004] input_register_device+0xd00/0x1160 [ 1010.913283][ T5004] atkbd_connect+0x731/0xa50 [ 1010.919594][ T5004] serio_driver_probe+0x82/0xd0 [ 1010.926169][ T5004] really_probe+0x267/0xaf0 [ 1010.932391][ T5004] __driver_probe_device+0x18c/0x320 [ 1010.939397][ T5004] driver_probe_device+0x4f/0x240 [ 1010.946150][ T5004] __driver_attach+0x3e7/0x710 [ 1010.952744][ T5004] bus_for_each_dev+0x23b/0x2c0 [ 1010.959328][ T5004] serio_handle_event+0x20a/0xdd0 [ 1010.966107][ T5004] process_scheduled_works+0xaec/0x17a0 [ 1010.973378][ T5004] worker_thread+0xa50/0xfc0 [ 1010.979697][ T5004] kthread+0x388/0x470 [ 1010.985520][ T5004] ret_from_fork+0x51e/0xb90 [ 1010.991833][ T5004] ret_from_fork_asm+0x1a/0x30 [ 1010.998321][ T5004] } [ 1011.000887][ T5004] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1011.010335][ T5004] -> (&client->buffer_lock){....}-{3:3} { [ 1011.016057][ T5004] INITIAL USE at: [ 1011.019930][ T5004] lock_acquire+0x106/0x330 [ 1011.025982][ T5004] _raw_spin_lock+0x2e/0x40 [ 1011.032033][ T5004] evdev_pass_values+0xb9/0xbd0 [ 1011.038956][ T5004] evdev_events+0x1e6/0x340 [ 1011.045012][ T5004] input_pass_values+0x288/0x890 [ 1011.051497][ T5004] input_event_dispose+0x330/0x6b0 [ 1011.058156][ T5004] input_inject_event+0x1dd/0x340 [ 1011.064729][ T5004] evdev_write+0x325/0x4c0 [ 1011.070693][ T5004] vfs_write+0x29a/0xb90 [ 1011.076522][ T5004] ksys_write+0x150/0x270 [ 1011.082402][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.088555][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.095997][ T5004] } [ 1011.098478][ T5004] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1011.106618][ T5004] ... acquired at: [ 1011.110409][ T5004] _raw_spin_lock+0x2e/0x40 [ 1011.115257][ T5004] evdev_pass_values+0xb9/0xbd0 [ 1011.120261][ T5004] evdev_events+0x1e6/0x340 [ 1011.124920][ T5004] input_pass_values+0x288/0x890 [ 1011.130009][ T5004] input_event_dispose+0x330/0x6b0 [ 1011.135282][ T5004] input_inject_event+0x1dd/0x340 [ 1011.140467][ T5004] evdev_write+0x325/0x4c0 [ 1011.145040][ T5004] vfs_write+0x29a/0xb90 [ 1011.149444][ T5004] ksys_write+0x150/0x270 [ 1011.153930][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.158677][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.164727][ T5004] [ 1011.167036][ T5004] [ 1011.167036][ T5004] the dependencies between the lock to be acquired [ 1011.167043][ T5004] and SOFTIRQ-irq-unsafe lock: [ 1011.180644][ T5004] -> (tasklist_lock){.+.+}-{3:3} { [ 1011.185928][ T5004] HARDIRQ-ON-R at: [ 1011.190065][ T5004] lock_acquire+0x106/0x330 [ 1011.196558][ T5004] _raw_read_lock+0x36/0x50 [ 1011.203041][ T5004] __do_wait+0xde/0x740 [ 1011.209175][ T5004] do_wait+0x1e7/0x4f0 [ 1011.215222][ T5004] kernel_wait+0xd6/0x1c0 [ 1011.221528][ T5004] call_usermodehelper_exec_work+0xbe/0x230 [ 1011.229401][ T5004] process_scheduled_works+0xaec/0x17a0 [ 1011.236928][ T5004] worker_thread+0xa50/0xfc0 [ 1011.243501][ T5004] kthread+0x388/0x470 [ 1011.249553][ T5004] ret_from_fork+0x51e/0xb90 [ 1011.256220][ T5004] ret_from_fork_asm+0x1a/0x30 [ 1011.262979][ T5004] SOFTIRQ-ON-R at: [ 1011.267122][ T5004] lock_acquire+0x106/0x330 [ 1011.273613][ T5004] _raw_read_lock+0x36/0x50 [ 1011.280103][ T5004] __do_wait+0xde/0x740 [ 1011.286242][ T5004] do_wait+0x1e7/0x4f0 [ 1011.292289][ T5004] kernel_wait+0xd6/0x1c0 [ 1011.298620][ T5004] call_usermodehelper_exec_work+0xbe/0x230 [ 1011.306497][ T5004] process_scheduled_works+0xaec/0x17a0 [ 1011.314026][ T5004] worker_thread+0xa50/0xfc0 [ 1011.320601][ T5004] kthread+0x388/0x470 [ 1011.326671][ T5004] ret_from_fork+0x51e/0xb90 [ 1011.333252][ T5004] ret_from_fork_asm+0x1a/0x30 [ 1011.340002][ T5004] INITIAL USE at: [ 1011.344055][ T5004] lock_acquire+0x106/0x330 [ 1011.350455][ T5004] _raw_write_lock_irq+0x3d/0x50 [ 1011.357297][ T5004] copy_process+0x247a/0x3cf0 [ 1011.363870][ T5004] kernel_clone+0x248/0x870 [ 1011.370270][ T5004] user_mode_thread+0x110/0x180 [ 1011.377024][ T5004] rest_init+0x23/0x300 [ 1011.383084][ T5004] start_kernel+0x385/0x3d0 [ 1011.389485][ T5004] x86_64_start_reservations+0x24/0x30 [ 1011.396843][ T5004] x86_64_start_kernel+0x143/0x1c0 [ 1011.403848][ T5004] common_startup_64+0x13e/0x147 [ 1011.410686][ T5004] INITIAL READ USE at: [ 1011.415171][ T5004] lock_acquire+0x106/0x330 [ 1011.422002][ T5004] _raw_read_lock+0x36/0x50 [ 1011.428923][ T5004] __do_wait+0xde/0x740 [ 1011.435405][ T5004] do_wait+0x1e7/0x4f0 [ 1011.441830][ T5004] kernel_wait+0xd6/0x1c0 [ 1011.448490][ T5004] call_usermodehelper_exec_work+0xbe/0x230 [ 1011.456712][ T5004] process_scheduled_works+0xaec/0x17a0 [ 1011.464584][ T5004] worker_thread+0xa50/0xfc0 [ 1011.471520][ T5004] kthread+0x388/0x470 [ 1011.477938][ T5004] ret_from_fork+0x51e/0xb90 [ 1011.484870][ T5004] ret_from_fork_asm+0x1a/0x30 [ 1011.492024][ T5004] } [ 1011.494677][ T5004] ... key at: [] tasklist_lock+0x18/0x40 [ 1011.502725][ T5004] ... acquired at: [ 1011.506687][ T5004] _raw_read_lock+0x36/0x50 [ 1011.511356][ T5004] send_sigurg+0x12b/0x420 [ 1011.515945][ T5004] sk_send_sigurg+0x6c/0x2e0 [ 1011.520707][ T5004] queue_oob+0x42c/0x4f0 [ 1011.525115][ T5004] unix_stream_sendmsg+0xcb1/0xe80 [ 1011.530399][ T5004] ____sys_sendmsg+0xa68/0xad0 [ 1011.535321][ T5004] ___sys_sendmsg+0x2a5/0x360 [ 1011.540153][ T5004] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1011.545245][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.549990][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.556150][ T5004] [ 1011.558471][ T5004] -> (&f_owner->lock){....}-{3:3} { [ 1011.563766][ T5004] INITIAL USE at: [ 1011.567730][ T5004] lock_acquire+0x106/0x330 [ 1011.573960][ T5004] _raw_write_lock_irq+0x3d/0x50 [ 1011.580618][ T5004] __f_setown+0x67/0x370 [ 1011.586586][ T5004] f_setown+0x23a/0x300 [ 1011.592530][ T5004] sock_ioctl+0x615/0x7f0 [ 1011.598583][ T5004] __se_sys_ioctl+0xfc/0x170 [ 1011.604899][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.611210][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.618823][ T5004] INITIAL READ USE at: [ 1011.623229][ T5004] lock_acquire+0x106/0x330 [ 1011.629895][ T5004] _raw_read_lock_irq+0x45/0x60 [ 1011.636897][ T5004] do_fcntl+0x30f/0x1a20 [ 1011.643300][ T5004] __se_sys_fcntl+0xc8/0x150 [ 1011.650051][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.656803][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.664871][ T5004] } [ 1011.667442][ T5004] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1011.676361][ T5004] ... acquired at: [ 1011.680232][ T5004] _raw_read_lock_irqsave+0x48/0x60 [ 1011.685675][ T5004] send_sigio+0x38/0x370 [ 1011.690076][ T5004] kill_fasync+0x24d/0x4d0 [ 1011.694648][ T5004] sock_wake_async+0x137/0x160 [ 1011.699569][ T5004] sk_wake_async+0x184/0x280 [ 1011.704316][ T5004] unix_release_sock+0x74f/0xc80 [ 1011.709496][ T5004] unix_release+0x92/0xd0 [ 1011.713983][ T5004] sock_close+0xc3/0x240 [ 1011.718383][ T5004] __fput+0x44f/0xa70 [ 1011.722521][ T5004] task_work_run+0x1d9/0x270 [ 1011.727268][ T5004] exit_to_user_mode_loop+0xed/0x480 [ 1011.732706][ T5004] do_syscall_64+0x32d/0xf80 [ 1011.737453][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.743501][ T5004] [ 1011.745809][ T5004] -> (&new->fa_lock){....}-{3:3} { [ 1011.750918][ T5004] INITIAL USE at: [ 1011.754793][ T5004] lock_acquire+0x106/0x330 [ 1011.760847][ T5004] _raw_write_lock_irq+0x3d/0x50 [ 1011.767337][ T5004] fasync_remove_entry+0xf1/0x1c0 [ 1011.773927][ T5004] pipe_fasync+0xff/0x1e0 [ 1011.779803][ T5004] __fput+0x8a5/0xa70 [ 1011.785334][ T5004] task_work_run+0x1d9/0x270 [ 1011.791472][ T5004] exit_to_user_mode_loop+0xed/0x480 [ 1011.798313][ T5004] do_syscall_64+0x32d/0xf80 [ 1011.804479][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.811924][ T5004] INITIAL READ USE at: [ 1011.816236][ T5004] lock_acquire+0x106/0x330 [ 1011.822718][ T5004] _raw_read_lock_irqsave+0x48/0x60 [ 1011.829900][ T5004] kill_fasync+0x199/0x4d0 [ 1011.836302][ T5004] pipe_release+0x1b2/0x330 [ 1011.842796][ T5004] __fput+0x44f/0xa70 [ 1011.848814][ T5004] fput_close_sync+0x11f/0x240 [ 1011.855659][ T5004] __x64_sys_close+0x7e/0x110 [ 1011.862335][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.868912][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.876788][ T5004] } [ 1011.879269][ T5004] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1011.887930][ T5004] ... acquired at: [ 1011.891715][ T5004] _raw_read_lock_irqsave+0x48/0x60 [ 1011.897070][ T5004] kill_fasync+0x199/0x4d0 [ 1011.901653][ T5004] evdev_pass_values+0x627/0xbd0 [ 1011.906748][ T5004] evdev_events+0x1e6/0x340 [ 1011.911449][ T5004] input_pass_values+0x288/0x890 [ 1011.916587][ T5004] input_event_dispose+0x330/0x6b0 [ 1011.921859][ T5004] input_inject_event+0x1dd/0x340 [ 1011.927042][ T5004] evdev_write+0x325/0x4c0 [ 1011.931617][ T5004] vfs_write+0x29a/0xb90 [ 1011.936450][ T5004] ksys_write+0x150/0x270 [ 1011.940937][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.945683][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.951733][ T5004] [ 1011.954049][ T5004] [ 1011.954049][ T5004] stack backtrace: [ 1011.959941][ T5004] CPU: 0 UID: 0 PID: 5004 Comm: syz.2.14168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.959960][ T5004] Tainted: [L]=SOFTLOCKUP [ 1011.959965][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1011.959977][ T5004] Call Trace: [ 1011.959984][ T5004] [ 1011.959991][ T5004] dump_stack_lvl+0xe8/0x150 [ 1011.960010][ T5004] __lock_acquire+0x2a94/0x2cf0 [ 1011.960030][ T5004] ? kill_fasync+0x199/0x4d0 [ 1011.960045][ T5004] lock_acquire+0x106/0x330 [ 1011.960058][ T5004] ? kill_fasync+0x199/0x4d0 [ 1011.960074][ T5004] ? do_raw_spin_lock+0x12b/0x2f0 [ 1011.960092][ T5004] _raw_read_lock_irqsave+0x48/0x60 [ 1011.960106][ T5004] ? kill_fasync+0x199/0x4d0 [ 1011.960120][ T5004] kill_fasync+0x199/0x4d0 [ 1011.960135][ T5004] ? kill_fasync+0x53/0x4d0 [ 1011.960150][ T5004] evdev_pass_values+0x627/0xbd0 [ 1011.960165][ T5004] ? evdev_pass_values+0x671/0xbd0 [ 1011.960178][ T5004] evdev_events+0x1e6/0x340 [ 1011.960189][ T5004] ? evdev_events+0x79/0x340 [ 1011.960200][ T5004] ? input_pass_values+0x8d/0x890 [ 1011.960211][ T5004] input_pass_values+0x288/0x890 [ 1011.960223][ T5004] ? input_handle_event+0x70c/0xf30 [ 1011.960239][ T5004] input_event_dispose+0x330/0x6b0 [ 1011.960256][ T5004] input_inject_event+0x1dd/0x340 [ 1011.960271][ T5004] ? input_inject_event+0xb6/0x340 [ 1011.960285][ T5004] evdev_write+0x325/0x4c0 [ 1011.960297][ T5004] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.960311][ T5004] ? __pfx_evdev_write+0x10/0x10 [ 1011.960323][ T5004] ? bpf_lsm_file_permission+0x9/0x20 [ 1011.960334][ T5004] ? security_file_permission+0x75/0x260 [ 1011.960353][ T5004] ? rw_verify_area+0x255/0x4d0 [ 1011.960368][ T5004] ? __pfx_evdev_write+0x10/0x10 [ 1011.960379][ T5004] vfs_write+0x29a/0xb90 [ 1011.960396][ T5004] ? __pfx_vfs_write+0x10/0x10 [ 1011.960411][ T5004] ? __fget_files+0x2a/0x420 [ 1011.960426][ T5004] ? __fget_files+0x2a/0x420 [ 1011.960438][ T5004] ? __fget_files+0x3a0/0x420 [ 1011.960450][ T5004] ? __fget_files+0x2a/0x420 [ 1011.960465][ T5004] ksys_write+0x150/0x270 [ 1011.960481][ T5004] ? __pfx_ksys_write+0x10/0x10 [ 1011.960499][ T5004] do_syscall_64+0x14d/0xf80 [ 1011.960513][ T5004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.960526][ T5004] ? trace_irq_disable+0x37/0x100 [ 1011.960541][ T5004] ? clear_bhb_loop+0x40/0x90 [ 1011.960554][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.960570][ T5004] RIP: 0033:0x7f4874b9bf79 [ 1011.960584][ T5004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.960596][ T5004] RSP: 002b:00007f4875a54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1011.960610][ T5004] RAX: ffffffffffffffda RBX: 00007f4874e15fa0 RCX: 00007f4874b9bf79 [ 1011.960620][ T5004] RDX: 0000000000000130 RSI: 0000200000002200 RDI: 0000000000000004 [ 1011.960628][ T5004] RBP: 00007f4874c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1011.960636][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.960643][ T5004] R13: 00007f4874e16038 R14: 00007f4874e15fa0 R15: 00007f4874f3fa48 [ 1011.960657][ T5004] [ 1012.325640][ T4975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1012.667611][T28218] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1013.101994][T28218] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 1013.137315][T28218] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 1013.157483][T28218] usb 1-1: USB disconnect, device number 74 [ 1013.172244][T28218] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 1013.248640][T28218] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19