last executing test programs: 26.306765788s ago: executing program 1 (id=2704): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 26.129063084s ago: executing program 1 (id=2705): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) 26.020227061s ago: executing program 1 (id=2706): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 25.820197252s ago: executing program 1 (id=2709): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 25.626967444s ago: executing program 1 (id=2711): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x841}, 0x84) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4040) 25.239976902s ago: executing program 1 (id=2713): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0xd6fe2, 0x3d3b4e}) 24.886246337s ago: executing program 32 (id=2713): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0xd6fe2, 0x3d3b4e}) 5.283392103s ago: executing program 3 (id=2845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000007c0)={0x1f, 0x4, 0x70}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000009e02"]) 5.010182959s ago: executing program 3 (id=2847): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x4, 0x0) 4.498026141s ago: executing program 3 (id=2851): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2, 0x2}, 0x8) 4.341050774s ago: executing program 3 (id=2854): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0], 0x1) 4.020273298s ago: executing program 0 (id=2858): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 3.792770653s ago: executing program 0 (id=2860): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0x5, 0x2, "19dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000400)={0x0, 0xd, 0xf, "d52c60a7aeb7a1e038ca3f66b00169"}, 0x0, 0x0}) 3.529644742s ago: executing program 3 (id=2862): unshare(0x400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000440)={0x0, r1}) 3.421065915s ago: executing program 3 (id=2863): close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 2.171968651s ago: executing program 2 (id=2870): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x6}, &(0x7f0000000040)=0x8) 2.155328887s ago: executing program 4 (id=2871): r0 = socket$kcm(0x11, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = dup(r0) write$uinput_user_dev(r1, 0x0, 0x0) 1.94016541s ago: executing program 2 (id=2872): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x0, 0x6}, 'syz1\x00', 0xe}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 1.776935237s ago: executing program 5 (id=2873): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0xa}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_clone(0x410c2000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.710557762s ago: executing program 4 (id=2874): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1.61184198s ago: executing program 0 (id=2875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x2, 0x4000, 0x1000, &(0x7f0000ec4000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 1.555608297s ago: executing program 2 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x72}, @void, @val={0xc, 0x99, {0x7, 0x19}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_PID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040000) 1.478933869s ago: executing program 5 (id=2877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 1.332166243s ago: executing program 4 (id=2878): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.276597079s ago: executing program 2 (id=2879): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000040)=""/81, 0x51}, {0x0}], 0x2) 1.253129054s ago: executing program 0 (id=2880): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) 980.036808ms ago: executing program 2 (id=2881): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x16, 0xfe, 0x0, 0x7ffc9ffe}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) timer_delete(r1) 925.298015ms ago: executing program 5 (id=2882): socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 856.31913ms ago: executing program 0 (id=2883): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000052c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="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", 0xff}, {&(0x7f0000000700)="0810beb086020ceaed4ba4c5d37b53f157c5e7d8", 0x14}], 0x2, 0x0, 0x0, 0x840}], 0x1, 0x20014004) 714.605889ms ago: executing program 5 (id=2884): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1a024) 632.30665ms ago: executing program 4 (id=2885): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 551.030933ms ago: executing program 0 (id=2886): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x77, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x69, 0x0, 0x0, 0xb0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x55, 0x0, @opaque="55b93303b219a96b60c48f8ec785b829d079619396fa0ba9e2e0b8122b9a0de82ce15478ae8fad7e1bb8106475584d666d9363ea69300c5004fdaa91eb93823588e174add066c9b84e8d928170"}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0xfffff000) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) 514.276245ms ago: executing program 5 (id=2887): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x1}}}}}}, 0x0) 235.952077ms ago: executing program 4 (id=2888): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) 198.630833ms ago: executing program 5 (id=2889): r0 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 38.862529ms ago: executing program 4 (id=2890): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x2400) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x50, 0x2}, @period={0x59, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 2 (id=2891): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) kernel console output (not intermixed with test programs): d interface number: 219 but max is 0 [ 243.995850][ T24] usb 5-1: config 0 has no interface number 0 [ 244.016134][ T24] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 244.035639][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.055917][ T24] usb 5-1: Product: syz [ 244.060633][ T24] usb 5-1: Manufacturer: syz [ 244.065264][ T24] usb 5-1: SerialNumber: syz [ 244.097987][ T24] usb 5-1: config 0 descriptor?? [ 244.115166][ T24] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 244.156121][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 244.181233][ T24] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 244.219619][ T24] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 244.237137][ T24] usb 5-1: media controller created [ 244.256248][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.309114][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 244.359079][ T24] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 244.643061][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 244.666054][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 244.668613][ T24] rc_core: IR keymap rc-dtt200u not found [ 244.717666][ T24] Registered IR keymap rc-empty [ 244.730322][ T24] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 244.765197][ T24] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input20 [ 244.790496][ T24] dvb-usb: schedule remote query interval to 300 msecs. [ 244.807559][ T24] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 244.837953][ T24] usb 5-1: USB disconnect, device number 15 [ 245.066149][ T24] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 245.681792][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 245.867614][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 245.879683][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 245.892116][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.903136][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.913787][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.929333][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.938511][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.168191][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 246.173852][ T24] usbtmc 1-1:16.0: can't read capabilities [ 246.420650][ T2154] usb 1-1: USB disconnect, device number 21 [ 247.667726][ T5889] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 247.794893][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 247.857742][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 247.875918][ T5889] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 247.888826][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.896861][ T5889] usb 2-1: Product: syz [ 247.901361][ T5889] usb 2-1: Manufacturer: syz [ 247.905988][ T5889] usb 2-1: SerialNumber: syz [ 247.915681][ T5889] usb 2-1: config 0 descriptor?? [ 247.938301][ T5889] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 248.736078][ T5889] gspca_ov534_9: reg_w failed -71 [ 249.047860][ T5889] gspca_ov534_9: Unknown sensor 0000 [ 249.047976][ T5889] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 249.116123][ T5889] usb 2-1: USB disconnect, device number 15 [ 250.083369][ T24] IPVS: starting estimator thread 0... [ 250.089093][ T9900] IPVS: ip_vs_add_dest(): server weight less than zero [ 250.187628][ T9901] IPVS: using max 27 ests per chain, 64800 per kthread [ 250.261479][ T30] audit: type=1800 audit(1748738266.429:886): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1743" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 250.678773][ T9915] input: syz1 as /devices/virtual/input/input21 [ 250.717124][ T9918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.837825][ T5889] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 251.057756][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 251.080063][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.111700][ T5889] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 251.134377][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.192265][ T5889] usb 4-1: config 0 descriptor?? [ 251.641083][ T5889] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 251.936356][ T5889] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 251.977418][ T5889] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.052050][ T9952] hid-generic 0000:0000:0000.0010: pid 9952 passed too large report [ 252.095206][ T2154] usb 4-1: USB disconnect, device number 14 [ 252.237377][ T9960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1770'. [ 252.433796][ T9967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1772'. [ 252.775403][ T9969] net_ratelimit: 66 callbacks suppressed [ 252.775427][ T9969] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.798325][ T5889] IPVS: starting estimator thread 0... [ 252.897676][ T9971] IPVS: using max 27 ests per chain, 64800 per kthread [ 253.557791][ T5889] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 253.742188][ T5889] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 253.765297][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.792289][ T5889] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.802472][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 253.825987][ T5889] usb 2-1: Product: syz [ 253.837755][ T5889] usb 2-1: Manufacturer: syz [ 253.846152][ T5889] usb 2-1: SerialNumber: syz [ 253.874852][ T5889] usb 2-1: config 0 descriptor?? [ 253.905873][ T5889] usb 2-1: selecting invalid altsetting 0 [ 254.145542][ T5889] usb 2-1: USB disconnect, device number 16 [ 254.567718][ T5888] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.750397][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.772892][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.811991][ T5888] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 254.823420][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.886684][ T5888] usb 4-1: config 0 descriptor?? [ 255.339355][ T5888] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 255.363629][ T5888] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 255.391754][ T5888] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 255.538408][ T5888] cp2112 0003:10C4:EA90.0011: error requesting version [ 255.580050][ T5888] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 255.621177][ T5888] usb 4-1: USB disconnect, device number 15 [ 255.828203][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.834791][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.967823][ T1209] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 256.132543][ T1209] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.152626][ T1209] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.193216][ T1209] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.222020][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.257602][ T1209] usb 1-1: SerialNumber: syz [ 256.504922][ T1209] usb 1-1: 0:2 : does not exist [ 256.558553][ T1209] usb 1-1: USB disconnect, device number 22 [ 256.630255][ T6434] udevd[6434]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.557721][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 257.769819][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 257.789700][ T5889] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.807977][ T5889] usb 4-1: config 0 has no interface number 0 [ 257.835904][ T5889] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 257.866935][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.900911][ T5889] usb 4-1: Product: syz [ 257.917401][ T5889] usb 4-1: Manufacturer: syz [ 257.927036][ T5889] usb 4-1: SerialNumber: syz [ 257.971130][ T5889] usb 4-1: config 0 descriptor?? [ 257.991283][ T5889] smsc95xx v2.0.0 [ 258.028058][ T5888] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 258.097842][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 258.217132][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.255419][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 258.279338][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 258.286791][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.297747][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 258.297783][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.297831][ T5888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.297878][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.342278][ T5888] usb 1-1: config 0 descriptor?? [ 258.363648][T10089] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 258.454759][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.481831][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 258.534317][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.572102][ T24] usb 5-1: config 0 descriptor?? [ 258.803295][ T5888] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 258.816714][ T5888] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 258.867175][ T5888] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 258.910399][T10099] input: syz1 as /devices/virtual/input/input23 [ 259.014035][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 259.026001][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.055005][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 259.078633][ T5888] usb 1-1: USB disconnect, device number 23 [ 259.099419][ T5889] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 259.160153][ T24] savu 0003:1E7D:2D5A.0013: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 259.181037][ T5889] usb 4-1: USB disconnect, device number 16 [ 259.291740][ T24] usb 5-1: USB disconnect, device number 16 [ 259.400840][T10106] fido_id[10106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 259.520611][T10108] tun0: tun_chr_ioctl cmd 1074025675 [ 259.536306][T10108] tun0: persist enabled [ 259.561571][T10108] tun0: tun_chr_ioctl cmd 1074025675 [ 259.566948][T10108] tun0: persist disabled [ 259.788806][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'. [ 259.833963][T10117] vlan2: entered promiscuous mode [ 259.855766][T10117] hsr0: entered promiscuous mode [ 260.257732][ T5888] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 260.438971][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.470586][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 260.497640][ T5888] usb 2-1: can't read configurations, error -71 [ 260.561589][T10136] loop2: detected capacity change from 0 to 7 [ 260.621931][ T8418] Dev loop2: unable to read RDB block 7 [ 260.637791][ T8418] loop2: unable to read partition table [ 260.643736][ T8418] loop2: partition table beyond EOD, truncated [ 260.685425][T10136] Dev loop2: unable to read RDB block 7 [ 260.696059][T10136] loop2: unable to read partition table [ 260.705478][T10136] loop2: partition table beyond EOD, truncated [ 260.716052][T10136] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.511709][T10165] vivid-003: disconnect [ 261.538375][T10164] vivid-003: reconnect [ 262.237954][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 262.403771][T10184] netlink: 'syz.4.1867': attribute type 29 has an invalid length. [ 262.411952][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 262.432956][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.452732][ T10] usb 3-1: config 0 has no interface number 0 [ 262.472971][T10184] netlink: 'syz.4.1867': attribute type 29 has an invalid length. [ 262.482464][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.508862][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.521624][T10184] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1867'. [ 262.544805][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.586248][ T10] usb 3-1: config 0 descriptor?? [ 262.613132][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 262.797904][ T2154] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 262.972379][ T2154] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.984443][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.004402][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 263.035514][ T2154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.053172][ T2154] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.062755][ T2154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.080492][ T5888] usb 3-1: USB disconnect, device number 12 [ 263.103605][ T2154] usb 2-1: config 0 descriptor?? [ 263.457925][T10213] input: syz0 as /devices/virtual/input/input24 [ 263.524119][ T2154] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 263.537242][ T2154] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 263.590741][ T2154] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 263.717851][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 263.900793][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.924487][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.954222][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 263.973026][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.987386][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.017730][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.032083][ T24] usb 1-1: config 0 descriptor?? [ 264.168105][ T2154] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 264.337853][ T2154] usb 3-1: Using ep0 maxpacket: 8 [ 264.348419][ T2154] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 264.362289][ T2154] usb 3-1: config 0 has no interface number 0 [ 264.369721][ T2154] usb 3-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17 [ 264.402280][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.426002][ T2154] usb 3-1: config 0 descriptor?? [ 264.441465][ T2154] usb-storage 3-1:0.63: USB Mass Storage device detected [ 264.483261][ T24] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 264.550443][ T24] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 264.626258][ T24] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 264.699753][ T5888] usb 3-1: USB disconnect, device number 13 [ 264.896871][ T5889] usb 1-1: USB disconnect, device number 24 [ 265.695048][ T10] usb 2-1: USB disconnect, device number 19 [ 265.712447][T10267] bond1 (unregistering): Released all slaves [ 266.408499][ T5891] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 266.437729][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 266.557770][ T5889] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 266.587746][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 266.595085][ T5891] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 266.606730][ T10] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 266.613023][ T5891] usb 4-1: config 0 has no interface number 0 [ 266.639960][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.655957][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.677301][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 266.702661][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.717627][ T5891] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.729334][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 266.748889][ T5891] usb 4-1: config 0 interface 85 has no altsetting 0 [ 266.758068][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 266.767193][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.767965][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.793680][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.797559][ T5891] usb 4-1: Product: syz [ 266.812809][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.821659][ T5891] usb 4-1: Manufacturer: syz [ 266.831639][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 266.837583][ T5891] usb 4-1: SerialNumber: syz [ 266.838960][ T5889] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 266.885939][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.895532][ T5891] usb 4-1: config 0 descriptor?? [ 266.919802][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.939168][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.968133][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 266.986166][ T5889] usb 5-1: config 0 descriptor?? [ 266.998950][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.026449][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.044781][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.081939][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.100483][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.138818][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.163356][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.207698][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.235698][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.250730][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.260217][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.271370][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.302872][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.317657][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.367908][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 267.385275][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 267.394847][ T10] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 267.404078][ T10] usb 1-1: Product: syz [ 267.429131][ T10] usb 1-1: Manufacturer: syz [ 267.433918][ T10] usb 1-1: SerialNumber: syz [ 267.447165][ T5889] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 267.471413][ T10] usb 1-1: config 0 descriptor?? [ 267.477288][ T5889] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 267.485603][ T5889] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 267.502368][ T10] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 267.515015][ T5889] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 267.532131][ T5891] appletouch 4-1:0.85: Geyser mode initialized. [ 267.532624][ T5889] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 267.551884][ T5889] appleir 0003:05AC:8241.0016: No inputs registered, leaving [ 267.578854][ T5891] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input25 [ 267.594188][ T5889] appleir 0003:05AC:8241.0016: hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 267.709708][ T5889] usb 5-1: USB disconnect, device number 17 [ 267.837139][ T10] usb 4-1: USB disconnect, device number 17 [ 267.907187][T10305] fido_id[10305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 268.009509][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 268.018403][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 268.045976][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 268.093601][ T5888] usb 1-1: USB disconnect, device number 25 [ 268.121814][ T5888] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 268.275101][T10315] input: syz1 as /devices/virtual/input/input26 [ 269.201338][ T5888] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 269.357672][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 269.369329][ T5888] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 269.391295][ T5888] usb 1-1: config 0 has no interface number 0 [ 269.404943][ T5888] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.422680][ T5888] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 269.455963][ T5888] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.476658][ T5888] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.496339][ T5888] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 269.507033][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.533385][ T5888] usb 1-1: config 0 descriptor?? [ 269.560042][ T5888] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 269.863138][ T5889] usb 1-1: USB disconnect, device number 26 [ 269.869306][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 269.874603][T10340] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 269.917929][ T5889] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 270.448416][T10381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.347597][ T5889] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 271.548021][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 271.586248][ T5889] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 271.617895][ T5889] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 271.680304][ T5889] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 271.737179][ T5889] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 271.774437][ T5889] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 271.798223][ T5889] usb 5-1: config 0 has no interface number 0 [ 271.804437][ T5889] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 271.837928][ T5889] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 271.876243][ T5889] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.927697][ T5889] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.993428][ T5889] usb 5-1: config 0 interface 125 has no altsetting 0 [ 272.004530][ T5889] usb 5-1: config 0 interface 125 has no altsetting 2 [ 272.040738][ T5889] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 272.065926][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.077380][ T5889] usb 5-1: Product: syz [ 272.094706][ T5889] usb 5-1: Manufacturer: syz [ 272.118233][ T5889] usb 5-1: SerialNumber: syz [ 272.153272][ T5889] usb 5-1: config 0 descriptor?? [ 272.184589][ T5889] usb 5-1: selecting invalid altsetting 2 [ 272.331611][T10430] syzkaller1: entered promiscuous mode [ 272.354122][T10430] syzkaller1: entered allmulticast mode [ 272.642426][T10436] input: syz0 as /devices/virtual/input/input27 [ 273.157784][ T5891] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 273.242103][ T10] usb 5-1: USB disconnect, device number 18 [ 273.337605][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 273.346165][ T5891] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 273.357559][ T5891] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.377545][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.397554][ T5891] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.407743][ T5891] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.420888][ T5891] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.430111][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.668404][ T5891] usb 2-1: usb_control_msg returned -32 [ 273.674064][ T5891] usbtmc 2-1:16.0: can't read capabilities [ 274.050732][T10461] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 7e [ 274.275858][ T24] usb 2-1: USB disconnect, device number 20 [ 274.507735][ T2154] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 274.698035][ T2154] usb 3-1: Using ep0 maxpacket: 16 [ 274.715148][ T2154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.730010][ T2154] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 274.739885][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.751688][ T2154] usb 3-1: config 0 descriptor?? [ 274.839486][T10486] bond_slave_1: entered promiscuous mode [ 274.859711][T10486] bond_slave_1: left promiscuous mode [ 275.023397][ T30] audit: type=1326 audit(1748738291.189:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e92b2ab39 code=0x7ffc0000 [ 275.101622][ T30] audit: type=1326 audit(1748738291.219:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e92b2ab39 code=0x7ffc0000 [ 275.131316][ T30] audit: type=1326 audit(1748738291.219:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e92b2ab39 code=0x7ffc0000 [ 275.160995][ T30] audit: type=1326 audit(1748738291.219:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 275.176996][ T2154] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 275.254892][ T30] audit: type=1326 audit(1748738291.219:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e92b2ab39 code=0x7ffc0000 [ 275.290552][ T2154] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 275.326194][ T2154] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 275.356329][ T2154] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 275.385621][ T2154] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 275.387792][ T30] audit: type=1326 audit(1748738291.219:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 275.447462][ T2154] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 275.525167][ T30] audit: type=1326 audit(1748738291.219:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 275.554443][ T30] audit: type=1326 audit(1748738291.219:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e92b2ab39 code=0x7ffc0000 [ 275.588337][ T30] audit: type=1326 audit(1748738291.219:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e92b2ab39 code=0x7ffc0000 [ 275.617877][ T30] audit: type=1326 audit(1748738291.219:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e92b2ab39 code=0x7ffc0000 [ 275.647442][ T2154] usb 3-1: USB disconnect, device number 14 [ 276.105065][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2005'. [ 276.317758][ T5889] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 276.517700][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 276.529142][T10521] input: syz0 as /devices/virtual/input/input28 [ 276.549911][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 276.575109][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 276.604389][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 276.627011][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.637144][ T5889] usb 5-1: Product: syz [ 276.646307][ T5889] usb 5-1: Manufacturer: syz [ 276.657293][ T5889] usb 5-1: SerialNumber: syz [ 276.681005][ T5889] usb 5-1: config 0 descriptor?? [ 276.719541][ T5889] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 276.755940][ T5889] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 277.167649][ T2154] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 277.327863][ T5889] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 277.332137][ T2154] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 277.343579][ T5889] em28xx 5-1:0.0: Config register raw data: 0x41 [ 277.347548][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.383022][ T2154] usb 1-1: Product: syz [ 277.387296][ T2154] usb 1-1: Manufacturer: syz [ 277.416367][ T2154] usb 1-1: SerialNumber: syz [ 277.443387][ T2154] usb 1-1: config 0 descriptor?? [ 277.502632][ T5888] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 277.554669][ T24] usb 5-1: USB disconnect, device number 19 [ 277.586998][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 277.601251][ T24] em28xx 5-1:0.0: Freeing device [ 277.668432][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 277.692385][ T5888] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 277.708809][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.717016][ T5888] usb 3-1: Product: syz [ 277.721612][ T5888] usb 3-1: Manufacturer: syz [ 277.726258][ T5888] usb 3-1: SerialNumber: syz [ 277.754751][ T5888] usb 3-1: config 0 descriptor?? [ 277.768672][ T5888] gspca_main: se401-2.14.0 probing 047d:5003 [ 277.895270][ T2154] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 277.900764][T10550] loop6: detected capacity change from 0 to 63 [ 277.905051][ T2154] usb 1-1: Firmware version (0.0) predates our first public release. [ 277.918330][T10550] buffer_io_error: 23 callbacks suppressed [ 277.918349][T10550] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 277.918477][T10550] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 277.918590][T10550] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 277.918714][T10550] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 277.918871][T10550] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 277.929079][ T5831] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 277.934392][T10550] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 277.961107][ T2154] usb 1-1: Please update to version 0.2 or newer [ 277.998524][ T5831] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.018508][ T5831] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.043500][ T5831] Buffer I/O error on dev loop6, logical block 0, async page read [ 278.210615][ T2154] usb 1-1: USB disconnect, device number 27 [ 278.443625][ T5888] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 278.573881][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 278.658584][ T2154] usb 3-1: USB disconnect, device number 15 [ 279.131620][ T5888] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 279.222577][ T5889] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 279.311105][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.330315][ T5888] usb 4-1: not running at top speed; connect to a high speed hub [ 279.347342][ T5888] usb 4-1: config 1 has an invalid interface number: 169 but max is 0 [ 279.353001][T10587] input: syz1 as /devices/virtual/input/input30 [ 279.361974][ T5888] usb 4-1: config 1 has no interface number 0 [ 279.362026][ T5888] usb 4-1: config 1 interface 169 has no altsetting 0 [ 279.364817][ T5888] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=56.19 [ 279.394947][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.397985][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 279.421056][ T5889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.438881][ T5889] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.454161][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.470172][ T5888] usb 4-1: Product: syz [ 279.474736][ T5888] usb 4-1: Manufacturer: syz [ 279.480105][ T5888] usb 4-1: SerialNumber: syz [ 279.487018][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=86a1, bcdDevice= 0.40 [ 279.504341][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.525299][ T5889] usb 1-1: Product: syz [ 279.548177][ T5889] usb 1-1: Manufacturer: syz [ 279.562752][ T5889] usb 1-1: SerialNumber: syz [ 279.611366][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 279.621373][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 279.640414][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 279.655054][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 279.687730][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 279.726454][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.746452][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.756120][ T24] usb 5-1: Product: syz [ 279.756488][ T5888] rtsx_usb 4-1:1.169: probe with driver rtsx_usb failed with error -8 [ 279.764432][ T24] usb 5-1: Manufacturer: syz [ 279.823886][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 279.836348][ T5888] usb 4-1: USB disconnect, device number 18 [ 279.845564][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 279.867872][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 279.894214][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 280.337626][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.461697][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 280.508736][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 280.519755][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 280.535696][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.549585][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.577876][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.595141][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.618478][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 280.633992][ T5889] cdc_ncm 1-1:1.0: bind() failure [ 280.650895][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.669049][ T5910] usb 5-1: USB disconnect, device number 20 [ 280.677708][ T5889] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 280.707230][ T5889] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 280.736297][ T5889] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 280.786170][ T5889] usb 1-1: USB disconnect, device number 28 [ 280.898291][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 280.942047][ T24] usb 3-1: usb_control_msg returned -32 [ 280.948449][ T24] usbtmc 3-1:16.0: can't read capabilities [ 281.403754][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 281.404260][ T30] audit: type=1326 audit(1748738297.569:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 281.478632][ T30] audit: type=1326 audit(1748738297.569:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 281.547951][ T30] audit: type=1326 audit(1748738297.579:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 281.615704][ T30] audit: type=1326 audit(1748738297.579:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 281.677049][ T30] audit: type=1326 audit(1748738297.579:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10641 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 282.688582][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 282.849486][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 282.856205][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 282.887564][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.910119][ T5889] usb 4-1: config 0 descriptor?? [ 283.126620][ T5910] usb 3-1: USB disconnect, device number 16 [ 283.955202][ T5889] video4linux radio48: keene_cmd_set failed (-71) [ 283.974292][ T5889] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 284.010915][ T5889] usb 4-1: USB disconnect, device number 19 [ 284.117665][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 284.277651][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 284.316576][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 284.332771][ T10] usb 5-1: config 0 has no interface number 0 [ 284.344702][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.367058][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 284.389400][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 284.435151][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.452527][ T10] usb 5-1: Product: syz [ 284.456975][ T10] usb 5-1: Manufacturer: syz [ 284.462136][ T10] usb 5-1: SerialNumber: syz [ 284.481444][ T30] audit: type=1326 audit(1748738300.649:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.2.2101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1c0f8e969 code=0x0 [ 284.507021][ T10] usb 5-1: config 0 descriptor?? [ 284.693145][ T30] audit: type=1326 audit(1748738300.859:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.0.2105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1932d8e969 code=0x0 [ 285.034423][T10737] openvswitch: netlink: IPv4 tun info is not correct [ 285.277018][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 285.286474][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input31 [ 285.300066][ C1] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 285.712192][T10757] netlink: 'syz.2.2118': attribute type 12 has an invalid length. [ 285.741603][T10757] netlink: 'syz.2.2118': attribute type 29 has an invalid length. [ 285.753913][T10757] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2118'. [ 285.930141][T10764] fuse: Bad value for 'fd' [ 286.468050][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 286.633053][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 286.649068][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 286.675441][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.690389][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 286.703729][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 286.748970][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 286.756619][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 286.777326][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.791526][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 286.825622][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 286.868932][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 286.888564][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 286.919400][ T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.937934][ T5910] usb 5-1: USB disconnect, device number 21 [ 286.961173][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 287.000360][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 287.013138][ T5910] appletouch 5-1:0.85: input: appletouch disconnected [ 287.023769][ T10] usb 2-1: string descriptor 0 read error: -22 [ 287.030764][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 287.124502][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.183206][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 287.300493][T10803] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2137'. [ 287.873267][T10822] loop7: detected capacity change from 0 to 6 [ 287.967831][T10822] Dev loop7: unable to read RDB block 6 [ 287.984956][T10822] loop7: unable to read partition table [ 287.997726][ T10] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 288.016291][T10822] loop7: partition table beyond EOD, truncated [ 288.045380][T10822] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 288.178434][ T10] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 288.186858][ T10] usb 1-1: config 150 has no interface number 0 [ 288.227991][ T10] usb 1-1: config 150 interface 204 has no altsetting 0 [ 288.243857][ T10] usb 1-1: config 150 interface 1 has no altsetting 0 [ 288.261725][ T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 288.277707][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.285777][ T10] usb 1-1: Product: syz [ 288.307613][ T10] usb 1-1: Manufacturer: syz [ 288.312401][ T10] usb 1-1: SerialNumber: syz [ 288.558784][ T10] xr_serial 1-1:150.204: xr_serial converter detected [ 289.365809][ T10] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 289.386178][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 289.447890][ T10] usb 1-1: USB disconnect, device number 29 [ 289.490008][ T10] xr_serial 1-1:150.204: device disconnected [ 290.034254][T10882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.107889][ T5910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.280755][ T5910] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.293544][ T5910] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.304812][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.315124][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.337642][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.359621][ T5910] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.371771][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.381227][ T5910] usb 3-1: Product: syz [ 290.386223][ T5910] usb 3-1: Manufacturer: syz [ 290.397720][ T5910] cdc_wdm 3-1:1.0: skipping garbage [ 290.403020][ T5910] cdc_wdm 3-1:1.0: skipping garbage [ 290.410556][ T5910] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 290.416547][ T5910] cdc_wdm 3-1:1.0: Unknown control protocol [ 290.636399][ T5889] usb 2-1: USB disconnect, device number 21 [ 291.077630][ T5889] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 291.268343][ T5889] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 291.294679][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.305486][ T5889] usb 5-1: Product: syz [ 291.316321][ T5889] usb 5-1: Manufacturer: syz [ 291.331866][ T5889] usb 5-1: SerialNumber: syz [ 291.343273][ T5889] usb 5-1: config 0 descriptor?? [ 291.364008][ T5889] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 292.137659][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 292.309747][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.318670][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 292.330242][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.339527][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 292.350700][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 292.364060][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.374065][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.382292][ T10] usb 2-1: Product: syz [ 292.386662][ T10] usb 2-1: Manufacturer: syz [ 292.388297][ T5910] usb 5-1: USB disconnect, device number 22 [ 292.411366][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 292.418195][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 292.432851][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 292.440066][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 292.886470][ T5910] usb 3-1: USB disconnect, device number 17 [ 292.897967][ T2154] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 293.058131][ T2154] usb 1-1: Using ep0 maxpacket: 16 [ 293.072730][ T2154] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.117283][ T2154] usb 1-1: config 0 has no interface number 0 [ 293.129814][ T2154] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 293.148356][ T2154] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 293.159704][ T2154] usb 1-1: config 0 interface 41 has no altsetting 0 [ 293.170598][ T2154] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 293.184801][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.241850][ T2154] usb 1-1: Product: syz [ 293.246632][ T2154] usb 1-1: Manufacturer: syz [ 293.260005][ T10] usb 2-1: USB disconnect, device number 22 [ 293.265307][ T2154] usb 1-1: SerialNumber: syz [ 293.315473][ T2154] usb 1-1: config 0 descriptor?? [ 293.327444][T10953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 293.338189][T10953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 293.566381][T10953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 293.573920][T10953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 293.998836][ T2154] Error reading MAC address [ 294.008979][T10953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 294.026818][T10953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 294.253167][ T2154] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 294.290848][ T2154] usb 1-1: USB disconnect, device number 30 [ 294.403988][T11004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.479584][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 294.637763][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 294.649495][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 294.662310][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 294.672266][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 294.687781][ T5889] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 294.695509][ T10] usb 3-1: Product: syz [ 294.700302][ T10] usb 3-1: Manufacturer: syz [ 294.707664][ T10] usb 3-1: SerialNumber: syz [ 294.719848][ T10] usb 3-1: config 0 descriptor?? [ 294.726309][T10999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.746473][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 294.752692][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 294.847985][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 294.855854][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.876858][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.896352][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 294.916612][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.932378][ T5889] usb 2-1: config 0 descriptor?? [ 294.956332][ T5889] hub 2-1:0.0: USB hub found [ 294.964230][T11019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2227'. [ 295.168259][ T5889] hub 2-1:0.0: 1 port detected [ 295.439184][T10999] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 295.486755][T11043] openvswitch: netlink: IPv4 tun info is not correct [ 295.601546][T11050] input: syz0 as /devices/virtual/input/input32 [ 295.642948][T10999] usb 3-1: device firmware changed [ 295.665956][ T10] usb 3-1: USB disconnect, device number 18 [ 295.815224][ T5888] usb 2-1: USB disconnect, device number 23 [ 295.821398][T11058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.824437][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 296.018127][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 296.033383][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 296.047188][ T10] usb 3-1: string descriptor 0 read error: -22 [ 296.054293][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 296.064092][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 296.084676][ T10] usb 3-1: config 0 descriptor?? [ 296.102893][T11022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.139108][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 296.152937][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 296.507894][ T10] usb 3-1: USB disconnect, device number 19 [ 296.917542][ T2154] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 297.070222][ T2154] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.101805][ T2154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 297.116829][T11100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.128317][ T2154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 297.155081][ T2154] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 297.179444][ T2154] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 297.199584][ T2154] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 297.210363][ T2154] usb 5-1: Manufacturer: syz [ 297.231027][ T2154] usb 5-1: config 0 descriptor?? [ 297.548005][ T2154] rc_core: IR keymap rc-hauppauge not found [ 297.560191][ T2154] Registered IR keymap rc-empty [ 297.565227][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.580418][T11115] input: syz1 as /devices/virtual/input/input34 [ 297.607665][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.639197][ T2154] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 297.657438][ T2154] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 297.675181][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.697735][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.718092][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.780377][T11119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.788330][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.818630][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.847975][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.879293][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.937667][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 297.967797][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.025926][ T2154] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 298.079852][ T2154] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 298.107555][ T2154] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 298.141543][ T2154] usb 5-1: USB disconnect, device number 23 [ 298.621383][T11139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2276'. [ 298.675062][T11146] netlink: 'syz.3.2277': attribute type 1 has an invalid length. [ 298.702463][T11146] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2277'. [ 299.469343][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'. [ 299.488098][T11161] netlink: 'syz.3.2286': attribute type 30 has an invalid length. [ 299.533163][T11161] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.542388][T11161] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.551369][T11161] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.560172][T11161] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.779088][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 299.819099][T11169] bond0: option use_carrier: invalid value (8) [ 299.830081][ T1209] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 299.912964][T11176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.997620][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 300.016549][ T1209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 300.036704][ T1209] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 300.060588][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 300.079179][ T1209] usb 2-1: Product: syz [ 300.083419][ T1209] usb 2-1: Manufacturer: syz [ 300.111401][ T1209] usb 2-1: SerialNumber: syz [ 300.134984][ T1209] usb 2-1: config 0 descriptor?? [ 300.155044][T11163] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.179204][ T1209] hub 2-1:0.0: bad descriptor, ignoring hub [ 300.185189][ T1209] hub 2-1:0.0: probe with driver hub failed with error -5 [ 301.137989][T11163] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 301.238125][ T5888] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 301.331328][T11163] usb 2-1: device firmware changed [ 301.354776][ T1209] usb 2-1: USB disconnect, device number 24 [ 301.408016][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 301.422434][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.438250][ T5888] usb 4-1: config 0 has no interface number 0 [ 301.450901][ T5888] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 301.461529][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.471760][ T5888] usb 4-1: Product: syz [ 301.497777][ T5888] usb 4-1: Manufacturer: syz [ 301.505609][ T5888] usb 4-1: SerialNumber: syz [ 301.518300][ T1209] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 301.541751][ T5888] usb 4-1: config 0 descriptor?? [ 301.557419][ T5888] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 301.568478][ T5888] usb 4-1: selecting invalid altsetting 1 [ 301.574278][ T5888] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 301.587562][ T5888] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.598261][ T5888] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 301.606599][ T5888] usb 4-1: media controller created [ 301.636330][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.688004][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 301.701030][ T1209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 301.721044][ T1209] usb 2-1: string descriptor 0 read error: -22 [ 301.737995][ T1209] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 301.747324][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 301.773591][ T1209] usb 2-1: config 0 descriptor?? [ 301.791277][ T5888] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 301.803915][T11196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.821527][ T1209] hub 2-1:0.0: bad descriptor, ignoring hub [ 301.832201][ T5888] zl10353_read_register: readreg error (reg=127, ret==-71) [ 301.842493][ T1209] hub 2-1:0.0: probe with driver hub failed with error -5 [ 301.852250][ T5888] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 301.938494][ T5888] usb 4-1: USB disconnect, device number 20 [ 302.167983][ T1209] usb 2-1: USB disconnect, device number 25 [ 303.130295][T11241] sctp: [Deprecated]: syz.0.2322 (pid 11241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.130295][T11241] Use struct sctp_sack_info instead [ 303.227825][ T5888] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 303.403376][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 303.414011][ T5888] usb 4-1: config 1 has no interface number 0 [ 303.420330][ T5888] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.431713][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 303.441585][ T5888] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 303.463552][ T5888] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.486368][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.501752][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.520261][ T5888] usb 4-1: Product: syz [ 303.529982][ T5888] usb 4-1: Manufacturer: syz [ 303.539778][ T5888] usb 4-1: SerialNumber: syz [ 303.577895][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 303.589529][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.607672][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.623021][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.632208][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 303.675354][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 303.703844][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.718224][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.726531][ T10] usb 2-1: Product: syz [ 303.741228][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.744315][ T10] usb 2-1: Manufacturer: syz [ 303.767908][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.794726][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 303.815642][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 303.817716][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 303.846951][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.858353][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 303.864342][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 303.871874][ T24] usb 5-1: config 0 descriptor?? [ 304.060220][T11270] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.315948][ T24] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 304.334626][ T24] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 304.366980][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0018/input/input35 [ 304.412606][ T5888] cdc_ncm 4-1:1.1: bind() failure [ 304.435522][ T24] cm6533_jd 0003:0D8C:0022.0018: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 304.546679][ T24] usb 5-1: USB disconnect, device number 24 [ 304.593563][ T5888] usb 4-1: USB disconnect, device number 21 [ 304.639232][ T2154] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 304.664518][ T10] usb 2-1: USB disconnect, device number 26 [ 304.696089][T11281] fido_id[11281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 304.812623][ T2154] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.826051][ T2154] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.838284][ T2154] usb 1-1: config 1 has no interface number 0 [ 304.844441][ T2154] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.856970][ T2154] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 304.869825][ T2154] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.879261][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.887400][ T2154] usb 1-1: Product: syz [ 304.892442][ T2154] usb 1-1: Manufacturer: syz [ 304.897074][ T2154] usb 1-1: SerialNumber: syz [ 305.358856][T11295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.744947][ T2154] cdc_ncm 1-1:1.1: bind() failure [ 305.986502][ T2154] usb 1-1: USB disconnect, device number 31 [ 306.637703][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 306.759161][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.774725][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.877394][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 306.891922][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.900574][ T10] usb 5-1: Product: syz [ 306.904786][ T10] usb 5-1: Manufacturer: syz [ 306.915518][ T10] usb 5-1: SerialNumber: syz [ 306.931113][ T10] usb 5-1: config 0 descriptor?? [ 307.115878][T11333] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.156710][ T10] usb 5-1: USB disconnect, device number 25 [ 307.216001][T11333] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.253369][T11333] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.269082][T11333] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.434991][T11333] macvlan2: left promiscuous mode [ 307.484201][T11337] syzkaller1: entered promiscuous mode [ 307.490013][T11337] syzkaller1: entered allmulticast mode [ 308.047789][ T2154] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 308.237960][ T2154] usb 1-1: Using ep0 maxpacket: 8 [ 308.247901][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 308.263040][ T2154] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 308.282832][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.298473][ T2154] usb 1-1: Product: syz [ 308.303346][ T2154] usb 1-1: Manufacturer: syz [ 308.308858][ T2154] usb 1-1: SerialNumber: syz [ 308.316467][ T2154] usb 1-1: config 0 descriptor?? [ 308.341748][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2379'. [ 308.434700][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 308.472535][ T24] usb 3-1: config 1 has no interface number 0 [ 308.486787][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.510140][ T24] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 308.510628][ T30] audit: type=1326 audit(1748738324.679:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 308.538374][ T2154] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 308.551336][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 123 [ 308.560316][ T30] audit: type=1326 audit(1748738324.719:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 308.581679][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.597517][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.616443][ T24] usb 3-1: Product: syz [ 308.626632][ T24] usb 3-1: Manufacturer: syz [ 308.637791][ T24] usb 3-1: SerialNumber: syz [ 308.684698][ T30] audit: type=1326 audit(1748738324.719:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 308.709025][ T30] audit: type=1326 audit(1748738324.719:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 308.731438][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.794465][ T30] audit: type=1326 audit(1748738324.719:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 308.816881][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.854916][ T30] audit: type=1326 audit(1748738324.719:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 308.908290][T11364] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 308.945021][ T30] audit: type=1326 audit(1748738324.779:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 308.967528][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.987749][ T30] audit: type=1326 audit(1748738324.779:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11376 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e92b8e969 code=0x7ffc0000 [ 309.196464][T11391] netlink: 'syz.1.2388': attribute type 9 has an invalid length. [ 309.240415][T11391] netlink: 'syz.1.2388': attribute type 9 has an invalid length. [ 309.393028][ T2154] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 309.407932][ T2154] usb 1-1: USB disconnect, device number 32 [ 309.538121][T11364] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.572704][ T24] cdc_ncm 3-1:1.1: bind() failure [ 309.752293][ T2154] usb 3-1: USB disconnect, device number 20 [ 310.481076][T11421] kernel read not supported for file /eth0 (pid: 11421 comm: syz.4.2399) [ 310.507586][ T30] audit: type=1800 audit(1748738326.669:993): pid=11421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2399" name="eth0" dev="mqueue" ino=36509 res=0 errno=0 [ 310.687715][ T24] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 310.839784][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.859725][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.880595][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2406'. [ 310.898064][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 310.911176][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.926978][ T24] usb 1-1: config 0 descriptor?? [ 311.413503][ T24] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 311.463678][T11457] veth0_to_bond: entered promiscuous mode [ 311.474602][T11453] veth0_to_bond: left promiscuous mode [ 311.670059][ T1209] usb 1-1: USB disconnect, device number 33 [ 312.248697][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 312.429815][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 312.449760][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.466178][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.483627][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.495977][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.509555][ T24] usb 3-1: Product: syz [ 312.516086][ T24] usb 3-1: Manufacturer: syz [ 312.532198][ T24] usb 3-1: SerialNumber: syz [ 312.771571][ T24] usb 3-1: 0:2 : does not exist [ 312.792585][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 312.843039][ T24] usb 3-1: USB disconnect, device number 21 [ 312.926197][ T6434] udevd[6434]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.348456][T11505] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 314.533905][T11536] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2448'. [ 315.561118][ T30] audit: type=1326 audit(1748738331.729:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11579 comm="syz.0.2465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1932d8e969 code=0x0 [ 315.583002][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.968273][ T30] audit: type=1326 audit(1748738332.129:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c0f8e969 code=0x7ffc0000 [ 316.009964][ T30] audit: type=1326 audit(1748738332.129:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1c0f2ab39 code=0x7ffc0000 [ 316.147650][ T30] audit: type=1326 audit(1748738332.129:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c0f8e969 code=0x7ffc0000 [ 316.194821][ T30] audit: type=1326 audit(1748738332.159:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1c0f2ab39 code=0x7ffc0000 [ 316.258988][ T30] audit: type=1326 audit(1748738332.159:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c0f8e969 code=0x7ffc0000 [ 316.285398][ T30] audit: type=1326 audit(1748738332.159:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1c0f2ab39 code=0x7ffc0000 [ 316.313121][ T30] audit: type=1326 audit(1748738332.159:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1c0f2ab39 code=0x7ffc0000 [ 316.342655][ T30] audit: type=1326 audit(1748738332.159:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c0f8e969 code=0x7ffc0000 [ 316.346057][T11598] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2471'. [ 316.365155][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.370377][ T30] audit: type=1326 audit(1748738332.169:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11569 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1c0f2ab39 code=0x7ffc0000 [ 317.275827][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.282371][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.596641][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2498'. [ 318.678118][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 318.873075][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 318.927599][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.958738][ T10] usb 5-1: config 0 descriptor?? [ 318.971992][ T10] cp210x 5-1:0.0: cp210x converter detected [ 319.188213][T11683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.380623][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 319.408836][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 319.452275][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 319.615304][ T10] usb 5-1: USB disconnect, device number 26 [ 319.718231][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 319.758687][ T10] cp210x 5-1:0.0: device disconnected [ 319.981664][T11704] syzkaller1: entered promiscuous mode [ 319.987418][T11704] syzkaller1: entered allmulticast mode [ 320.178164][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 320.340148][ T43] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 320.367754][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.388833][ T43] usb 4-1: config 0 descriptor?? [ 321.439984][ T43] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 321.487435][ T43] usb 4-1: USB disconnect, device number 22 [ 322.066454][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2536'. [ 322.161872][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2537'. [ 322.246011][T11754] team1: entered promiscuous mode [ 322.289160][T11754] team1: entered allmulticast mode [ 322.318029][T11754] 8021q: adding VLAN 0 to HW filter on device team1 [ 322.468045][ T43] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 322.643073][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.677866][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 322.719894][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 322.755682][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 322.807037][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 322.840348][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 322.875393][ T43] usb 1-1: Manufacturer: syz [ 322.901951][ T43] usb 1-1: config 0 descriptor?? [ 323.103861][T11771] input: syz0 as /devices/virtual/input/input36 [ 323.237660][ T43] rc_core: IR keymap rc-hauppauge not found [ 323.257516][ T43] Registered IR keymap rc-empty [ 323.262584][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.297831][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.328817][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 323.351978][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 323.388233][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.428507][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.452724][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.488623][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.517917][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.547692][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.567881][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.588590][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.607648][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.643190][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.695704][ T43] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 323.717527][ T43] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 323.748904][ T43] usb 1-1: USB disconnect, device number 34 [ 323.913759][T11788] syzkaller1: entered promiscuous mode [ 323.922236][T11788] syzkaller1: entered allmulticast mode [ 325.404733][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2569'. [ 326.317721][T11858] binder: 11857:11858 ioctl c018620c 200000000380 returned -22 [ 326.418513][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 326.893440][T11873] netlink: 'syz.0.2587': attribute type 3 has an invalid length. [ 326.907691][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 327.234871][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 327.258439][T11877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2589'. [ 327.987679][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 328.168489][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 328.182267][ T43] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 328.206723][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.229331][ T43] usb 1-1: Product: syz [ 328.233597][ T43] usb 1-1: Manufacturer: syz [ 328.267544][ T43] usb 1-1: SerialNumber: syz [ 328.309063][ T43] usb 1-1: config 0 descriptor?? [ 328.373011][ T43] usb 1-1: selecting invalid altsetting 3 [ 328.427750][ T43] comedi comedi0: could not set alternate setting 3 in high speed [ 328.445937][ T43] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 328.488180][ T43] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 328.563748][ T43] usb 1-1: USB disconnect, device number 35 [ 329.050002][T11898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2597'. [ 329.060898][T11898] netlink: 'syz.3.2597': attribute type 32 has an invalid length. [ 329.069821][T11898] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 329.320062][T11903] sctp: [Deprecated]: syz.0.2600 (pid 11903) Use of int in maxseg socket option. [ 329.320062][T11903] Use struct sctp_assoc_value instead [ 329.926318][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.933865][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.019772][T11921] team_slave_0: left promiscuous mode [ 330.044690][T11921] team_slave_1: left promiscuous mode [ 330.600938][T11921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.688800][T11921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.927889][T11921] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.950841][T11921] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.025785][T11921] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.096827][T11921] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.456893][T11921] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 331.530975][T11921] macvlan2: left allmulticast mode [ 331.677945][T11977] sctp: [Deprecated]: syz.3.2622 (pid 11977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.677945][T11977] Use struct sctp_sack_info instead [ 332.341520][T12002] ALSA: mixer_oss: invalid OSS volume '' [ 332.977711][ T5889] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 333.149969][ T5889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.222662][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 333.247916][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.269252][ T5889] usb 1-1: Product: syz [ 333.273513][ T5889] usb 1-1: Manufacturer: syz [ 333.294536][ T5889] usb 1-1: SerialNumber: syz [ 333.317666][T11954] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 333.479229][T11954] usb 5-1: Using ep0 maxpacket: 16 [ 333.509805][T11954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.561736][T11954] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.598546][T11954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.638872][T11954] usb 5-1: config 0 descriptor?? [ 334.103793][T11954] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 334.359552][ T5889] cdc_ncm 1-1:1.0: bind() failure [ 334.386790][ T5889] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 334.429625][ T5889] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 334.450637][ T5889] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 334.488083][ T5889] usb 1-1: USB disconnect, device number 36 [ 334.526108][T11954] usb 5-1: USB disconnect, device number 27 [ 334.661285][ T30] kauditd_printk_skb: 382 callbacks suppressed [ 334.661306][ T30] audit: type=1326 audit(1748738350.829:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f93f8e969 code=0x7ffc0000 [ 334.714640][ T30] audit: type=1326 audit(1748738350.859:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f93f2ab39 code=0x7ffc0000 [ 334.747654][ T30] audit: type=1326 audit(1748738350.859:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f93f2ab39 code=0x7ffc0000 [ 334.770375][ T30] audit: type=1326 audit(1748738350.859:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f93f8e969 code=0x7ffc0000 [ 334.793340][ T30] audit: type=1326 audit(1748738350.859:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f93f2ab39 code=0x7ffc0000 [ 334.837780][ T30] audit: type=1326 audit(1748738350.859:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f93f2ab39 code=0x7ffc0000 [ 334.868757][ T30] audit: type=1326 audit(1748738350.859:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f93f2ab39 code=0x7ffc0000 [ 334.903356][ T30] audit: type=1326 audit(1748738350.859:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f93f2ab39 code=0x7ffc0000 [ 334.930158][ T30] audit: type=1326 audit(1748738350.859:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f93f2ab39 code=0x7ffc0000 [ 334.953222][ T30] audit: type=1326 audit(1748738350.859:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f93f8e969 code=0x7ffc0000 [ 334.986100][T12041] syz.1.2651: attempt to access beyond end of device [ 334.986100][T12041] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 335.122857][T12045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2653'. [ 335.135676][T12044] loop4: detected capacity change from 0 to 524288000 [ 335.568746][T12058] loop5: detected capacity change from 0 to 1 [ 337.728747][T11954] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 337.914975][T11954] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 337.933283][T11954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.023398][T11954] usb 2-1: config 0 descriptor?? [ 338.389443][T12143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.046497][T11954] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 339.125506][T11954] usb 2-1: USB disconnect, device number 27 [ 339.337604][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 339.539966][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 339.563792][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.597661][ T24] usb 1-1: config 0 has no interfaces? [ 339.613984][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 339.649770][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.667946][ T24] usb 1-1: Product: syz [ 339.672238][ T24] usb 1-1: Manufacturer: syz [ 339.687860][ T24] usb 1-1: SerialNumber: syz [ 339.705745][ T24] usb 1-1: config 0 descriptor?? [ 339.707905][T11954] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 339.898072][T11954] usb 3-1: Using ep0 maxpacket: 16 [ 339.911866][T11954] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.937702][T11954] usb 3-1: config 0 has no interface number 0 [ 339.965026][T11954] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 339.984975][T11954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.002265][T11954] usb 3-1: Product: syz [ 340.009342][T11954] usb 3-1: Manufacturer: syz [ 340.014069][T11954] usb 3-1: SerialNumber: syz [ 340.024659][T11954] usb 3-1: config 0 descriptor?? [ 340.039171][T11954] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 340.173856][ T5889] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 340.337594][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 340.350689][ T5889] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 340.387729][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.445060][ T5889] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.507708][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.534028][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.555276][ T24] usb 1-1: USB disconnect, device number 37 [ 340.603667][ T5889] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 340.620016][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.635635][ T5889] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.672362][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.711852][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.732506][ T5889] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 340.746664][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.758934][ T5889] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.775410][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.809785][ T5889] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.873241][ T5889] usb 5-1: string descriptor 0 read error: -22 [ 340.897135][ T5889] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 340.906850][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.942193][ T5889] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 341.089340][T11954] gspca_spca1528: reg_w err -71 [ 341.094452][T11954] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 341.112666][T11954] usb 3-1: USB disconnect, device number 22 [ 341.149070][ T24] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 341.241166][ T1155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.256241][ T1155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.292545][ T5910] usb 5-1: USB disconnect, device number 28 [ 341.320812][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.346864][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.370832][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 341.381388][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.393783][ T1155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.399500][ T24] usb 4-1: config 0 descriptor?? [ 341.425386][ T1155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.535343][ T1155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.546810][ T1155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.679767][ T1155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.705175][T12194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2715'. [ 341.737680][ T1155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.037814][ T24] usb 4-1: language id specifier not provided by device, defaulting to English [ 342.153008][ T1155] bridge_slave_1: left allmulticast mode [ 342.186561][ T1155] bridge_slave_1: left promiscuous mode [ 342.203306][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.235604][ T1155] bridge_slave_0: left allmulticast mode [ 342.244813][ T24] uclogic 0003:256C:006D.001B: failed retrieving Huion firmware version: -71 [ 342.267292][ T1155] bridge_slave_0: left promiscuous mode [ 342.287888][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.295298][ T24] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 342.320878][ T24] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 342.360768][ T24] usb 4-1: USB disconnect, device number 23 [ 342.544665][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.555433][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.564527][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.581109][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.599017][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.060196][T12223] input: syz1 as /devices/virtual/input/input39 [ 343.870849][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.883132][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.896481][ T1155] bond0 (unregistering): Released all slaves [ 344.144838][T12243] syzkaller1: entered promiscuous mode [ 344.158344][T12243] syzkaller1: entered allmulticast mode [ 344.687672][ T5846] Bluetooth: hci2: command tx timeout [ 344.847420][ T1155] hsr_slave_0: left promiscuous mode [ 344.862107][ T1155] hsr_slave_1: left promiscuous mode [ 344.886484][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.915969][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.952553][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.971477][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.115741][ T1155] veth1_macvtap: left promiscuous mode [ 345.130014][ T1155] veth0_macvtap: left promiscuous mode [ 345.135682][ T1155] veth1_vlan: left allmulticast mode [ 345.151855][ T1155] veth1_vlan: left promiscuous mode [ 345.159900][ T1155] veth0_vlan: left promiscuous mode [ 345.391114][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 345.586393][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 345.616838][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.630023][ T24] usb 3-1: Product: syz [ 345.644831][ T24] usb 3-1: Manufacturer: syz [ 345.659117][ T24] usb 3-1: SerialNumber: syz [ 345.674734][ T24] usb 3-1: config 0 descriptor?? [ 345.690346][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 346.225958][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 346.247822][ T5889] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 346.283561][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 346.401266][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 346.416622][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 346.434425][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.446985][ T5889] usb 5-1: config 0 descriptor?? [ 346.718941][ T24] gspca_sunplus: reg_w_riv err -71 [ 346.724201][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 346.745859][ T24] usb 3-1: USB disconnect, device number 23 [ 346.767691][ T5846] Bluetooth: hci2: command tx timeout [ 346.873950][ T5889] logitech 0003:046D:C298.001C: unknown main item tag 0x0 [ 346.886408][ T5889] logitech 0003:046D:C298.001C: unknown main item tag 0x0 [ 346.894158][ T5889] logitech 0003:046D:C298.001C: unknown main item tag 0x0 [ 346.910389][ T5889] logitech 0003:046D:C298.001C: unknown main item tag 0x0 [ 346.920531][ T5889] logitech 0003:046D:C298.001C: unknown main item tag 0x0 [ 346.943918][ T5889] logitech 0003:046D:C298.001C: hidraw0: USB HID v0.05 Device [HID 046d:c298] on usb-dummy_hcd.4-1/input0 [ 346.969659][ T5889] logitech 0003:046D:C298.001C: no inputs found [ 347.136723][ T24] usb 5-1: USB disconnect, device number 29 [ 347.474403][T12213] chnl_net:caif_netlink_parms(): no params data found [ 347.554606][ T1155] IPVS: stop unused estimator thread 0... [ 347.927882][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 347.976852][T12213] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.984585][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.997416][T12213] bridge_slave_0: entered allmulticast mode [ 348.007237][T12213] bridge_slave_0: entered promiscuous mode [ 348.113802][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 348.148383][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.163149][T12213] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.178447][ T5889] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 348.182718][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.214623][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.248809][T12213] bridge_slave_1: entered allmulticast mode [ 348.261657][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.289373][T12213] bridge_slave_1: entered promiscuous mode [ 348.296091][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.324000][T12336] netlink: 'syz.3.2755': attribute type 16 has an invalid length. [ 348.337809][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.353565][T12336] netlink: 'syz.3.2755': attribute type 3 has an invalid length. [ 348.383495][ T5889] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 348.397697][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.397728][T12336] netlink: 'syz.3.2755': attribute type 1 has an invalid length. [ 348.417687][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.447641][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.467579][T12336] netlink: 'syz.3.2755': attribute type 1 has an invalid length. [ 348.475378][T12336] netlink: 'syz.3.2755': attribute type 2 has an invalid length. [ 348.494326][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 348.504339][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.525002][T12336] netlink: 64006 bytes leftover after parsing attributes in process `syz.3.2755'. [ 348.535615][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.558862][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.591389][ T5889] usb 5-1: config 0 descriptor?? [ 348.655837][T12213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.665378][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 348.675513][ T24] usbtmc 1-1:16.0: can't read capabilities [ 348.731638][T12213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.847714][ T5846] Bluetooth: hci2: command tx timeout [ 348.881297][T12213] team0: Port device team_slave_0 added [ 348.884118][ T24] usb 1-1: USB disconnect, device number 38 [ 348.903390][T12213] team0: Port device team_slave_1 added [ 349.012963][T12213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.029098][ T5889] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 349.057674][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.086617][ T5889] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 349.112561][ T5889] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 349.138887][T12345] input: syz1 as /devices/virtual/input/input41 [ 349.145782][T12213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.169689][T12213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.197160][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.282352][T12213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.330959][ T24] usb 5-1: USB disconnect, device number 30 [ 349.567355][T12213] hsr_slave_0: entered promiscuous mode [ 349.579542][T12213] hsr_slave_1: entered promiscuous mode [ 350.927758][ T5846] Bluetooth: hci2: command tx timeout [ 350.997712][ T5889] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 351.065302][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 351.065322][ T30] audit: type=1326 audit(1748738367.229:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1932d2ab39 code=0x7ffc0000 [ 351.104148][ T30] audit: type=1326 audit(1748738367.229:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1932d8e969 code=0x7ffc0000 [ 351.133140][ T30] audit: type=1326 audit(1748738367.229:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1932d8e969 code=0x7ffc0000 [ 351.202572][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 351.205997][ T30] audit: type=1326 audit(1748738367.259:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1932d2ab39 code=0x7ffc0000 [ 351.228689][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.230528][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.241667][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.257979][ T30] audit: type=1326 audit(1748738367.259:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1932d8e969 code=0x7ffc0000 [ 351.270988][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 351.280503][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.295486][ T30] audit: type=1326 audit(1748738367.259:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1932d2ab39 code=0x7ffc0000 [ 351.364181][ T30] audit: type=1326 audit(1748738367.259:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1932d8e969 code=0x7ffc0000 [ 351.401719][ T5889] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.415096][ T30] audit: type=1326 audit(1748738367.259:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1932d2ab39 code=0x7ffc0000 [ 351.432313][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.460347][ T30] audit: type=1326 audit(1748738367.259:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1932d8e969 code=0x7ffc0000 [ 351.482846][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.493817][ T5889] usb 4-1: config 0 descriptor?? [ 351.552636][ T30] audit: type=1326 audit(1748738367.259:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.0.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1932d2ab39 code=0x7ffc0000 [ 351.618217][T12213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.710195][T12213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.743723][T12213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.779698][T12213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.934887][ T5889] HID 045e:07da: Invalid code 65791 type 1 [ 351.990931][ T5889] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input42 [ 352.041379][T12213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.074497][ T5889] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 352.117762][T12213] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.482728][ T5889] usb 4-1: USB disconnect, device number 24 [ 352.651727][T12425] fido_id[12425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 352.733718][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.740988][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.833495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.840891][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.193796][T12213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.466286][T12213] veth0_vlan: entered promiscuous mode [ 353.521423][T12213] veth1_vlan: entered promiscuous mode [ 353.617594][ T5891] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 353.646202][T12457] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2789'. [ 353.653241][T12213] veth0_macvtap: entered promiscuous mode [ 353.710389][T12213] veth1_macvtap: entered promiscuous mode [ 353.778985][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 353.805364][ T5891] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 353.830598][T12213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.847834][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.867591][ T5891] usb 1-1: Product: syz [ 353.872153][ T5891] usb 1-1: Manufacturer: syz [ 353.885786][T12213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.896156][ T5891] usb 1-1: SerialNumber: syz [ 353.921514][ T5891] usb 1-1: config 0 descriptor?? [ 353.936271][T12213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.959418][ T5891] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 353.977555][T12213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.986612][ T5891] usb 1-1: setting power ON [ 353.991836][ T5891] dvb-usb: bulk message failed: -22 (2/0) [ 353.999110][T12213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.020395][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 354.036042][T12213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.047782][ T5891] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 354.069664][ T5891] usb 1-1: media controller created [ 354.138036][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 354.179483][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.185993][T12449] dvb-usb: bulk message failed: -22 (3/0) [ 354.278019][ T5891] usb 1-1: selecting invalid altsetting 6 [ 354.316882][ T5891] usb 1-1: digital interface selection failed (-22) [ 354.338126][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 354.349475][ T5891] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 354.374749][ T24] usb 5-1: config 0 has no interfaces? [ 354.396542][ T24] usb 5-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 354.409260][ T5891] usb 1-1: setting power OFF [ 354.426659][ T5891] dvb-usb: bulk message failed: -22 (2/0) [ 354.433220][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.442415][ T5891] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 354.462725][ T24] usb 5-1: Product: syz [ 354.466964][ T24] usb 5-1: Manufacturer: syz [ 354.486221][ T4527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.501212][ T5891] (NULL device *): no alternate interface [ 354.511706][ T24] usb 5-1: SerialNumber: syz [ 354.523461][ T4527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.572928][ T24] usb 5-1: config 0 descriptor?? [ 354.614518][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.629641][ T5891] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 354.644668][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.669529][ T5891] usb 1-1: USB disconnect, device number 39 [ 354.993536][T12464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.023032][T12464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.064622][ T5891] usb 5-1: USB disconnect, device number 31 [ 355.844109][ T5891] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 355.966336][T12517] syzkaller1: entered promiscuous mode [ 355.977660][T12517] syzkaller1: entered allmulticast mode [ 355.998116][ T5889] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 356.028250][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.057564][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.077544][ T5891] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 356.107036][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.127947][ T5891] usb 6-1: config 0 descriptor?? [ 356.159538][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.191551][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.222530][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.250437][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.270233][ T5889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.279997][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.293069][ T5889] usb 4-1: config 0 descriptor?? [ 356.299882][T12513] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 356.555910][ T5891] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 356.597648][ T5891] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 356.614508][ T5891] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 356.627629][ T5891] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 356.646132][ T5891] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 356.667315][ T5891] cm6533_jd 0003:0D8C:0022.001F: No inputs registered, leaving [ 356.710680][ T5891] cm6533_jd 0003:0D8C:0022.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 356.726517][ T5889] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 356.766779][ T5889] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 356.803117][ T5889] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 356.834311][ T5889] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 356.856681][ T1209] usb 6-1: USB disconnect, device number 2 [ 356.943608][ T5889] plantronics 0003:047F:FFFF.0020: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 357.030722][T12533] fido_id[12533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 357.032099][ T5889] usb 4-1: USB disconnect, device number 25 [ 357.252560][T12539] fido_id[12539]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 357.582899][T12545] netlink: 'syz.0.2812': attribute type 4 has an invalid length. [ 357.618884][T12545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2812'. [ 358.064137][T12575] netlink: 'syz.2.2820': attribute type 16 has an invalid length. [ 358.084175][T12575] netlink: 'syz.2.2820': attribute type 3 has an invalid length. [ 358.095777][T12575] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 358.138165][T12575] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 358.177363][T12575] netlink: 'syz.2.2820': attribute type 2 has an invalid length. [ 358.226360][T12575] netlink: 64006 bytes leftover after parsing attributes in process `syz.2.2820'. [ 358.357734][ T1209] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 358.537723][ T1209] usb 6-1: Using ep0 maxpacket: 16 [ 358.583186][ T1209] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 358.614127][ T1209] usb 6-1: config 0 has no interface number 0 [ 358.639521][ T1209] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 358.667219][ T1209] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 358.701363][ T1209] usb 6-1: config 0 interface 41 has no altsetting 0 [ 358.725638][ T1209] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 358.743144][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.770374][ T1209] usb 6-1: Product: syz [ 358.775863][ T1209] usb 6-1: Manufacturer: syz [ 358.803868][ T1209] usb 6-1: SerialNumber: syz [ 358.821578][ T1209] usb 6-1: config 0 descriptor?? [ 358.827737][T12579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 358.835673][T12579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 359.087948][T12579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 359.095903][T12579] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 359.116804][T12610] netlink: 'syz.2.2830': attribute type 10 has an invalid length. [ 359.176104][T12610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.185375][T12611] netlink: 'syz.2.2830': attribute type 10 has an invalid length. [ 359.203885][T12611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2830'. [ 359.212482][T12610] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 359.280413][T12611] batadv0: entered promiscuous mode [ 359.285691][T12611] batadv0: entered allmulticast mode [ 359.338198][T12611] bond0: (slave batadv0): Releasing backup interface [ 359.370563][T12611] bridge0: port 3(batadv0) entered blocking state [ 359.377146][T12611] bridge0: port 3(batadv0) entered disabled state [ 359.508521][ T3490] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 359.518737][ T3490] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 359.542134][ T1209] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 359.956540][ T1209] dm9601 6-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 359.989931][ T1209] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 360.011865][ T1209] usb 6-1: USB disconnect, device number 3 [ 360.307726][ T2154] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 360.470582][ T2154] usb 1-1: Using ep0 maxpacket: 32 [ 360.479689][ T2154] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 360.497539][ T2154] usb 1-1: config 0 has no interface number 0 [ 360.508510][ T2154] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 360.518168][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.527008][ T2154] usb 1-1: Product: syz [ 360.531831][ T2154] usb 1-1: Manufacturer: syz [ 360.536556][ T2154] usb 1-1: SerialNumber: syz [ 360.545784][ T2154] usb 1-1: config 0 descriptor?? [ 360.558225][ T2154] smsc95xx v2.0.0 [ 360.964690][ T1209] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 361.147575][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 361.163755][ T1209] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 361.200530][ T1209] usb 3-1: config 0 has no interface number 0 [ 361.228446][ T1209] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 361.285660][ T1209] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 361.305720][ T1209] usb 3-1: config 0 interface 41 has no altsetting 0 [ 361.325466][ T1209] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 361.335512][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.381697][ T1209] usb 3-1: Product: syz [ 361.385937][ T1209] usb 3-1: Manufacturer: syz [ 361.387758][ T2154] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 361.405145][ T1209] usb 3-1: SerialNumber: syz [ 361.447785][ T1209] usb 3-1: config 0 descriptor?? [ 361.477104][T12643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 361.495767][T12643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 361.589585][ T2154] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 361.626517][ T2154] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 361.680243][ T2154] usb 1-1: USB disconnect, device number 40 [ 361.762770][T12643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 361.789448][T12643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 362.003853][T12676] sctp: [Deprecated]: syz.3.2851 (pid 12676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.003853][T12676] Use struct sctp_sack_info instead [ 362.395047][ T5891] hid-generic 0000:0000:0000.0021: unknown main item tag 0x7 [ 362.427622][ T5891] hid-generic 0000:0000:0000.0021: ignoring exceeding usage max [ 362.447414][ T5891] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 362.463619][ T5891] hid-generic 0000:0000:0000.0021: unknown main item tag 0x6 [ 362.477534][ T5891] hid-generic 0000:0000:0000.0021: reserved main item tag 0xd [ 362.505723][ T5891] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 362.673267][T12693] fido_id[12693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 362.681439][ T1209] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 362.811667][ T1209] dm9601 3-1:0.41 eth5: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, ae:d2:e1:a3:12:0f [ 362.864333][ T1209] usb 3-1: USB disconnect, device number 24 [ 362.886334][ T1209] dm9601 3-1:0.41 eth5: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 362.988261][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 363.027595][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 363.157705][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 363.166529][ T5891] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 363.174955][ T5891] usb 6-1: config 0 has no interface number 0 [ 363.183627][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 363.198300][ T5891] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.204371][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.223197][ T5891] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 363.235296][ T10] usb 1-1: config 0 descriptor?? [ 363.253201][ T5891] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 363.270743][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 363.282570][ T10] cp210x 1-1:0.0: cp210x converter detected [ 363.312607][ T5891] usb 6-1: Product: syz [ 363.326194][ T5891] usb 6-1: SerialNumber: syz [ 363.365127][ T5891] usb 6-1: config 0 descriptor?? [ 363.376638][T12708] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2864'. [ 363.412060][ T5891] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 363.427673][ T5891] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input43 [ 363.704847][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 363.769075][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 363.947723][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 364.034504][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 364.034778][ T10] usb 6-1: USB disconnect, device number 4 [ 364.041525][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 364.067391][ T10] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 364.173847][ T1209] usb 1-1: USB disconnect, device number 41 [ 364.194051][ T1209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 364.233622][ T1209] cp210x 1-1:0.0: device disconnected [ 364.604067][T12726] input: syz1 as /devices/virtual/input/input44 [ 365.582368][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 365.582387][ T30] audit: type=1326 audit(1748738381.749:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12751 comm="syz.2.2881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1c0f8e969 code=0x0 [ 366.580895][T12778] [ 366.583280][T12778] ===================================================== [ 366.590205][T12778] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 366.597671][T12778] 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 Not tainted [ 366.604428][T12778] ----------------------------------------------------- [ 366.611356][T12778] syz.4.2890/12778 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 366.619073][T12778] ffff888033311210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 366.627798][T12778] [ 366.627798][T12778] and this task is already holding: [ 366.635158][T12778] ffff888032742028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 366.644913][T12778] which would create a new lock dependency: [ 366.650801][T12778] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 366.658920][T12778] [ 366.658920][T12778] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 366.668366][T12778] (&dev->event_lock#2){..-.}-{3:3} [ 366.668398][T12778] [ 366.668398][T12778] ... which became SOFTIRQ-irq-safe at: [ 366.681322][T12778] lock_acquire+0x120/0x360 [ 366.685918][T12778] _raw_spin_lock_irqsave+0xa7/0xf0 [ 366.691210][T12778] input_event+0x7a/0xc0 [ 366.695537][T12778] atp_complete_geyser_3_4+0xf6d/0x1e80 [ 366.701172][T12778] __usb_hcd_giveback_urb+0x41a/0x690 [ 366.706638][T12778] dummy_timer+0x862/0x4550 [ 366.711404][T12778] __hrtimer_run_queues+0x52c/0xc60 [ 366.716688][T12778] hrtimer_run_softirq+0x187/0x2b0 [ 366.721888][T12778] handle_softirqs+0x283/0x870 [ 366.726740][T12778] __irq_exit_rcu+0xca/0x1f0 [ 366.731429][T12778] irq_exit_rcu+0x9/0x30 [ 366.735761][T12778] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 366.741487][T12778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 366.747553][T12778] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 366.753367][T12778] dummy_urb_enqueue+0x58a/0x780 [ 366.758392][T12778] usb_hcd_submit_urb+0x325/0x1aa0 [ 366.763605][T12778] atp_open+0x63/0xc0 [ 366.767674][T12778] input_open_device+0x1c5/0x360 [ 366.772701][T12778] mousedev_open_device+0xcc/0x150 [ 366.777907][T12778] mousedev_open+0x2ef/0x4a0 [ 366.782583][T12778] chrdev_open+0x4cc/0x5e0 [ 366.787084][T12778] do_dentry_open+0xdf0/0x1970 [ 366.791939][T12778] vfs_open+0x3b/0x340 [ 366.796095][T12778] path_openat+0x2ee5/0x3830 [ 366.800772][T12778] do_filp_open+0x1fa/0x410 [ 366.805375][T12778] do_sys_openat2+0x121/0x1c0 [ 366.810573][T12778] __x64_sys_openat+0x138/0x170 [ 366.815523][T12778] do_syscall_64+0xfa/0x3b0 [ 366.820111][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.826087][T12778] [ 366.826087][T12778] to a SOFTIRQ-irq-unsafe lock: [ 366.833120][T12778] (tasklist_lock){.+.+}-{3:3} [ 366.833182][T12778] [ 366.833182][T12778] ... which became SOFTIRQ-irq-unsafe at: [ 366.845830][T12778] ... [ 366.845840][T12778] lock_acquire+0x120/0x360 [ 366.853008][T12778] _raw_read_lock+0x36/0x50 [ 366.857629][T12778] __do_wait+0xde/0x740 [ 366.861868][T12778] do_wait+0x1f8/0x520 [ 366.866020][T12778] kernel_wait+0xab/0x170 [ 366.870433][T12778] call_usermodehelper_exec_work+0xbe/0x230 [ 366.876418][T12778] process_scheduled_works+0xade/0x17b0 [ 366.882058][T12778] worker_thread+0x8a0/0xda0 [ 366.886752][T12778] kthread+0x711/0x8a0 [ 366.890912][T12778] ret_from_fork+0x3fc/0x770 [ 366.895614][T12778] ret_from_fork_asm+0x1a/0x30 [ 366.900526][T12778] [ 366.900526][T12778] other info that might help us debug this: [ 366.900526][T12778] [ 366.911021][T12778] Chain exists of: [ 366.911021][T12778] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 366.911021][T12778] [ 366.924693][T12778] Possible interrupt unsafe locking scenario: [ 366.924693][T12778] [ 366.933019][T12778] CPU0 CPU1 [ 366.938384][T12778] ---- ---- [ 366.943742][T12778] lock(tasklist_lock); [ 366.948000][T12778] local_irq_disable(); [ 366.954769][T12778] lock(&dev->event_lock#2); [ 366.961998][T12778] lock(&client->buffer_lock); [ 366.969372][T12778] [ 366.972819][T12778] lock(&dev->event_lock#2); [ 366.977681][T12778] [ 366.977681][T12778] *** DEADLOCK *** [ 366.977681][T12778] [ 366.985815][T12778] 7 locks held by syz.4.2890/12778: [ 366.991001][T12778] #0: ffff888029973118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 367.000153][T12778] #1: ffff8881473f2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 367.010257][T12778] #2: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 367.019924][T12778] #3: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 367.029593][T12778] #4: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 367.038739][T12778] #5: ffff888032742028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 367.048927][T12778] #6: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 367.057977][T12778] [ 367.057977][T12778] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 367.068390][T12778] -> (&dev->event_lock#2){..-.}-{3:3} { [ 367.074051][T12778] IN-SOFTIRQ-W at: [ 367.078125][T12778] lock_acquire+0x120/0x360 [ 367.084455][T12778] _raw_spin_lock_irqsave+0xa7/0xf0 [ 367.091501][T12778] input_event+0x7a/0xc0 [ 367.097580][T12778] atp_complete_geyser_3_4+0xf6d/0x1e80 [ 367.104973][T12778] __usb_hcd_giveback_urb+0x41a/0x690 [ 367.112178][T12778] dummy_timer+0x862/0x4550 [ 367.118524][T12778] __hrtimer_run_queues+0x52c/0xc60 [ 367.125556][T12778] hrtimer_run_softirq+0x187/0x2b0 [ 367.132516][T12778] handle_softirqs+0x283/0x870 [ 367.139119][T12778] __irq_exit_rcu+0xca/0x1f0 [ 367.145539][T12778] irq_exit_rcu+0x9/0x30 [ 367.151618][T12778] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 367.159095][T12778] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.166914][T12778] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 367.174491][T12778] dummy_urb_enqueue+0x58a/0x780 [ 367.181269][T12778] usb_hcd_submit_urb+0x325/0x1aa0 [ 367.188239][T12778] atp_open+0x63/0xc0 [ 367.194047][T12778] input_open_device+0x1c5/0x360 [ 367.200830][T12778] mousedev_open_device+0xcc/0x150 [ 367.207765][T12778] mousedev_open+0x2ef/0x4a0 [ 367.214186][T12778] chrdev_open+0x4cc/0x5e0 [ 367.220442][T12778] do_dentry_open+0xdf0/0x1970 [ 367.227035][T12778] vfs_open+0x3b/0x340 [ 367.232934][T12778] path_openat+0x2ee5/0x3830 [ 367.239347][T12778] do_filp_open+0x1fa/0x410 [ 367.245682][T12778] do_sys_openat2+0x121/0x1c0 [ 367.252283][T12778] __x64_sys_openat+0x138/0x170 [ 367.258975][T12778] do_syscall_64+0xfa/0x3b0 [ 367.265309][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.273037][T12778] INITIAL USE at: [ 367.277035][T12778] lock_acquire+0x120/0x360 [ 367.283306][T12778] _raw_spin_lock_irqsave+0xa7/0xf0 [ 367.290275][T12778] input_inject_event+0xab/0x320 [ 367.297160][T12778] kbd_led_trigger_activate+0xbc/0x100 [ 367.304388][T12778] led_trigger_set+0x52d/0x950 [ 367.310898][T12778] led_trigger_set_default+0x215/0x250 [ 367.318093][T12778] led_classdev_register_ext+0x73d/0x930 [ 367.325471][T12778] input_leds_connect+0x517/0x790 [ 367.332250][T12778] input_register_device+0xcee/0x10b0 [ 367.339374][T12778] atkbd_connect+0x70e/0x9c0 [ 367.345706][T12778] serio_driver_probe+0x82/0xa0 [ 367.352310][T12778] really_probe+0x26a/0x9a0 [ 367.358603][T12778] __driver_probe_device+0x18c/0x2f0 [ 367.365634][T12778] driver_probe_device+0x4f/0x430 [ 367.372419][T12778] __driver_attach+0x452/0x700 [ 367.378921][T12778] bus_for_each_dev+0x230/0x2b0 [ 367.385511][T12778] serio_handle_event+0x1a2/0x860 [ 367.392292][T12778] process_scheduled_works+0xade/0x17b0 [ 367.399576][T12778] worker_thread+0x8a0/0xda0 [ 367.405900][T12778] kthread+0x711/0x8a0 [ 367.411715][T12778] ret_from_fork+0x3fc/0x770 [ 367.418050][T12778] ret_from_fork_asm+0x1a/0x30 [ 367.424551][T12778] } [ 367.427131][T12778] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 367.436251][T12778] -> (&client->buffer_lock){....}-{3:3} { [ 367.441989][T12778] INITIAL USE at: [ 367.445878][T12778] lock_acquire+0x120/0x360 [ 367.451946][T12778] _raw_spin_lock+0x2e/0x40 [ 367.458014][T12778] evdev_pass_values+0xb9/0xbd0 [ 367.464429][T12778] evdev_events+0x1e6/0x340 [ 367.470498][T12778] input_pass_values+0x288/0x890 [ 367.477001][T12778] input_event_dispose+0x330/0x6b0 [ 367.483671][T12778] input_inject_event+0x1fe/0x320 [ 367.490286][T12778] evdev_write+0x2fc/0x480 [ 367.496280][T12778] vfs_write+0x27e/0xa90 [ 367.502096][T12778] ksys_write+0x145/0x250 [ 367.507987][T12778] do_syscall_64+0xfa/0x3b0 [ 367.514055][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.521510][T12778] } [ 367.524005][T12778] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 367.532180][T12778] ... acquired at: [ 367.535976][T12778] lock_acquire+0x120/0x360 [ 367.540651][T12778] _raw_spin_lock+0x2e/0x40 [ 367.545331][T12778] evdev_pass_values+0xb9/0xbd0 [ 367.550361][T12778] evdev_events+0x1e6/0x340 [ 367.555038][T12778] input_pass_values+0x288/0x890 [ 367.560151][T12778] input_event_dispose+0x330/0x6b0 [ 367.565436][T12778] input_inject_event+0x1fe/0x320 [ 367.570633][T12778] evdev_write+0x2fc/0x480 [ 367.575228][T12778] vfs_write+0x27e/0xa90 [ 367.579647][T12778] ksys_write+0x145/0x250 [ 367.584147][T12778] do_syscall_64+0xfa/0x3b0 [ 367.588823][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.594893][T12778] [ 367.597210][T12778] [ 367.597210][T12778] the dependencies between the lock to be acquired [ 367.597224][T12778] and SOFTIRQ-irq-unsafe lock: [ 367.610733][T12778] -> (tasklist_lock){.+.+}-{3:3} { [ 367.616043][T12778] HARDIRQ-ON-R at: [ 367.620194][T12778] lock_acquire+0x120/0x360 [ 367.626712][T12778] _raw_read_lock+0x36/0x50 [ 367.633228][T12778] __do_wait+0xde/0x740 [ 367.639382][T12778] do_wait+0x1f8/0x520 [ 367.645459][T12778] kernel_wait+0xab/0x170 [ 367.651781][T12778] call_usermodehelper_exec_work+0xbe/0x230 [ 367.659671][T12778] process_scheduled_works+0xade/0x17b0 [ 367.667242][T12778] worker_thread+0x8a0/0xda0 [ 367.673848][T12778] kthread+0x711/0x8a0 [ 367.680062][T12778] ret_from_fork+0x3fc/0x770 [ 367.686662][T12778] ret_from_fork_asm+0x1a/0x30 [ 367.693444][T12778] SOFTIRQ-ON-R at: [ 367.697611][T12778] lock_acquire+0x120/0x360 [ 367.704210][T12778] _raw_read_lock+0x36/0x50 [ 367.710814][T12778] __do_wait+0xde/0x740 [ 367.716963][T12778] do_wait+0x1f8/0x520 [ 367.723024][T12778] kernel_wait+0xab/0x170 [ 367.729354][T12778] call_usermodehelper_exec_work+0xbe/0x230 [ 367.737247][T12778] process_scheduled_works+0xade/0x17b0 [ 367.744817][T12778] worker_thread+0x8a0/0xda0 [ 367.751420][T12778] kthread+0x711/0x8a0 [ 367.757774][T12778] ret_from_fork+0x3fc/0x770 [ 367.764376][T12778] ret_from_fork_asm+0x1a/0x30 [ 367.771139][T12778] INITIAL USE at: [ 367.775213][T12778] lock_acquire+0x120/0x360 [ 367.781636][T12778] _raw_write_lock_irq+0xa2/0xf0 [ 367.788498][T12778] copy_process+0x224f/0x3c00 [ 367.795120][T12778] kernel_clone+0x21e/0x870 [ 367.801557][T12778] user_mode_thread+0xdd/0x140 [ 367.808260][T12778] rest_init+0x23/0x300 [ 367.814354][T12778] start_kernel+0x478/0x500 [ 367.820776][T12778] x86_64_start_reservations+0x24/0x30 [ 367.828168][T12778] x86_64_start_kernel+0x143/0x1c0 [ 367.835217][T12778] common_startup_64+0x13e/0x147 [ 367.842091][T12778] INITIAL READ USE at: [ 367.846601][T12778] lock_acquire+0x120/0x360 [ 367.853554][T12778] _raw_read_lock+0x36/0x50 [ 367.860496][T12778] __do_wait+0xde/0x740 [ 367.867009][T12778] do_wait+0x1f8/0x520 [ 367.873424][T12778] kernel_wait+0xab/0x170 [ 367.880106][T12778] call_usermodehelper_exec_work+0xbe/0x230 [ 367.888345][T12778] process_scheduled_works+0xade/0x17b0 [ 367.896254][T12778] worker_thread+0x8a0/0xda0 [ 367.903194][T12778] kthread+0x711/0x8a0 [ 367.909619][T12778] ret_from_fork+0x3fc/0x770 [ 367.916571][T12778] ret_from_fork_asm+0x1a/0x30 [ 367.923685][T12778] } [ 367.926362][T12778] ... key at: [] tasklist_lock+0x18/0x40 [ 367.934273][T12778] ... acquired at: [ 367.938286][T12778] lock_acquire+0x120/0x360 [ 367.942963][T12778] _raw_read_lock+0x36/0x50 [ 367.947642][T12778] send_sigurg+0x12b/0x420 [ 367.952232][T12778] sk_send_sigurg+0x6c/0x2e0 [ 367.956992][T12778] queue_oob+0x699/0x8a0 [ 367.961419][T12778] unix_stream_sendmsg+0xaf9/0xc90 [ 367.966707][T12778] __sock_sendmsg+0x219/0x270 [ 367.971554][T12778] ____sys_sendmsg+0x52d/0x830 [ 367.976496][T12778] ___sys_sendmsg+0x21f/0x2a0 [ 367.981359][T12778] __sys_sendmmsg+0x227/0x430 [ 367.986245][T12778] __x64_sys_sendmmsg+0xa0/0xc0 [ 367.991281][T12778] do_syscall_64+0xfa/0x3b0 [ 367.995958][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.002374][T12778] [ 368.004691][T12778] -> (&f_owner->lock){....}-{3:3} { [ 368.010017][T12778] INITIAL USE at: [ 368.014009][T12778] lock_acquire+0x120/0x360 [ 368.020350][T12778] _raw_write_lock_irq+0xa2/0xf0 [ 368.027044][T12778] __f_setown+0x67/0x370 [ 368.033059][T12778] generic_setlease+0xd60/0x1240 [ 368.039736][T12778] fcntl_setlease+0x3a2/0x4c0 [ 368.046185][T12778] do_fcntl+0x6a9/0x1910 [ 368.052194][T12778] __se_sys_fcntl+0xc8/0x150 [ 368.058550][T12778] do_syscall_64+0xfa/0x3b0 [ 368.064796][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.072426][T12778] INITIAL READ USE at: [ 368.076845][T12778] lock_acquire+0x120/0x360 [ 368.083521][T12778] _raw_read_lock_irqsave+0xaf/0x100 [ 368.090984][T12778] send_sigio+0x38/0x370 [ 368.097395][T12778] kill_fasync+0x24d/0x4d0 [ 368.103983][T12778] lease_break_callback+0x26/0x30 [ 368.111196][T12778] __break_lease+0x6a2/0x1620 [ 368.118099][T12778] do_dentry_open+0xd62/0x1970 [ 368.125042][T12778] vfs_open+0x3b/0x340 [ 368.131308][T12778] path_openat+0x2ee5/0x3830 [ 368.138113][T12778] do_filp_open+0x1fa/0x410 [ 368.144874][T12778] do_sys_openat2+0x121/0x1c0 [ 368.151718][T12778] __x64_sys_open+0x11e/0x150 [ 368.158567][T12778] do_syscall_64+0xfa/0x3b0 [ 368.165249][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.173585][T12778] } [ 368.176170][T12778] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 368.185134][T12778] ... acquired at: [ 368.189032][T12778] lock_acquire+0x120/0x360 [ 368.193716][T12778] _raw_read_lock_irqsave+0xaf/0x100 [ 368.199180][T12778] send_sigio+0x38/0x370 [ 368.203678][T12778] kill_fasync+0x24d/0x4d0 [ 368.208286][T12778] lease_break_callback+0x26/0x30 [ 368.213492][T12778] __break_lease+0x6a2/0x1620 [ 368.218344][T12778] do_dentry_open+0xd62/0x1970 [ 368.223289][T12778] vfs_open+0x3b/0x340 [ 368.227548][T12778] path_openat+0x2ee5/0x3830 [ 368.232327][T12778] do_filp_open+0x1fa/0x410 [ 368.237016][T12778] do_sys_openat2+0x121/0x1c0 [ 368.241963][T12778] __x64_sys_open+0x11e/0x150 [ 368.246838][T12778] do_syscall_64+0xfa/0x3b0 [ 368.251527][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.257598][T12778] [ 368.259928][T12778] -> (&new->fa_lock){....}-{3:3} { [ 368.265066][T12778] INITIAL USE at: [ 368.268956][T12778] lock_acquire+0x120/0x360 [ 368.275023][T12778] _raw_write_lock_irq+0xa2/0xf0 [ 368.281536][T12778] fasync_remove_entry+0xf1/0x1c0 [ 368.288150][T12778] lease_modify+0x1ca/0x3c0 [ 368.294252][T12778] locks_remove_file+0x4bf/0xea0 [ 368.300769][T12778] __fput+0x3ab/0xa70 [ 368.306321][T12778] task_work_run+0x1d4/0x260 [ 368.312492][T12778] exit_to_user_mode_loop+0xec/0x110 [ 368.319348][T12778] do_syscall_64+0x2bd/0x3b0 [ 368.325504][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.332962][T12778] INITIAL READ USE at: [ 368.337288][T12778] lock_acquire+0x120/0x360 [ 368.343792][T12778] _raw_read_lock_irqsave+0xaf/0x100 [ 368.351145][T12778] kill_fasync+0x199/0x4d0 [ 368.357564][T12778] sock_wake_async+0x137/0x160 [ 368.364326][T12778] sock_def_write_space+0x390/0x430 [ 368.371529][T12778] sk_setsockopt+0x2189/0x2d30 [ 368.378296][T12778] do_sock_setsockopt+0x201/0x3e0 [ 368.385320][T12778] __x64_sys_setsockopt+0x18b/0x220 [ 368.392529][T12778] do_syscall_64+0xfa/0x3b0 [ 368.399032][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.406926][T12778] } [ 368.409419][T12778] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 368.418197][T12778] ... acquired at: [ 368.422057][T12778] lock_acquire+0x120/0x360 [ 368.426822][T12778] _raw_read_lock_irqsave+0xaf/0x100 [ 368.432402][T12778] kill_fasync+0x199/0x4d0 [ 368.437008][T12778] evdev_pass_values+0x627/0xbd0 [ 368.442123][T12778] evdev_events+0x1e6/0x340 [ 368.446803][T12778] input_pass_values+0x288/0x890 [ 368.451915][T12778] input_event_dispose+0x330/0x6b0 [ 368.457218][T12778] input_inject_event+0x1fe/0x320 [ 368.462418][T12778] evdev_write+0x2fc/0x480 [ 368.467019][T12778] vfs_write+0x27e/0xa90 [ 368.471437][T12778] ksys_write+0x145/0x250 [ 368.475940][T12778] do_syscall_64+0xfa/0x3b0 [ 368.480626][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.486697][T12778] [ 368.489043][T12778] [ 368.489043][T12778] stack backtrace: [ 368.495028][T12778] CPU: 0 UID: 0 PID: 12778 Comm: syz.4.2890 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 368.495048][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.495064][T12778] Call Trace: [ 368.495071][T12778] [ 368.495079][T12778] dump_stack_lvl+0x189/0x250 [ 368.495107][T12778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.495131][T12778] ? __pfx__printk+0x10/0x10 [ 368.495150][T12778] validate_chain+0x1f05/0x2140 [ 368.495184][T12778] __lock_acquire+0xab9/0xd20 [ 368.495202][T12778] ? kill_fasync+0x199/0x4d0 [ 368.495216][T12778] lock_acquire+0x120/0x360 [ 368.495232][T12778] ? kill_fasync+0x199/0x4d0 [ 368.495251][T12778] _raw_read_lock_irqsave+0xaf/0x100 [ 368.495275][T12778] ? kill_fasync+0x199/0x4d0 [ 368.495289][T12778] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 368.495311][T12778] ? do_raw_spin_lock+0x121/0x290 [ 368.495337][T12778] kill_fasync+0x199/0x4d0 [ 368.495350][T12778] ? kill_fasync+0x53/0x4d0 [ 368.495365][T12778] evdev_pass_values+0x627/0xbd0 [ 368.495388][T12778] ? evdev_pass_values+0x641/0xbd0 [ 368.495411][T12778] evdev_events+0x1e6/0x340 [ 368.495430][T12778] ? evdev_events+0x79/0x340 [ 368.495450][T12778] ? input_pass_values+0x8d/0x890 [ 368.495469][T12778] input_pass_values+0x288/0x890 [ 368.495491][T12778] ? input_handle_event+0x70c/0xf30 [ 368.495508][T12778] input_event_dispose+0x330/0x6b0 [ 368.495526][T12778] input_inject_event+0x1fe/0x320 [ 368.495542][T12778] ? input_inject_event+0xbc/0x320 [ 368.495559][T12778] evdev_write+0x2fc/0x480 [ 368.495582][T12778] ? __pfx_evdev_write+0x10/0x10 [ 368.495603][T12778] ? bpf_lsm_file_permission+0x9/0x20 [ 368.495621][T12778] ? security_file_permission+0x75/0x290 [ 368.495645][T12778] ? rw_verify_area+0x258/0x650 [ 368.495662][T12778] ? __pfx_evdev_write+0x10/0x10 [ 368.495682][T12778] vfs_write+0x27e/0xa90 [ 368.495702][T12778] ? __pfx_vfs_write+0x10/0x10 [ 368.495719][T12778] ? __fget_files+0x2a/0x420 [ 368.495740][T12778] ? __fget_files+0x2a/0x420 [ 368.495760][T12778] ? __fget_files+0x3a0/0x420 [ 368.495779][T12778] ? __fget_files+0x2a/0x420 [ 368.495802][T12778] ksys_write+0x145/0x250 [ 368.495820][T12778] ? __pfx_ksys_write+0x10/0x10 [ 368.495836][T12778] ? rcu_is_watching+0x15/0xb0 [ 368.495857][T12778] ? do_syscall_64+0xbe/0x3b0 [ 368.495874][T12778] do_syscall_64+0xfa/0x3b0 [ 368.495889][T12778] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.495903][T12778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.495918][T12778] ? clear_bhb_loop+0x60/0xb0 [ 368.495934][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.495952][T12778] RIP: 0033:0x7f7e92b8e969 [ 368.495970][T12778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.495984][T12778] RSP: 002b:00007f7e93a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.496000][T12778] RAX: ffffffffffffffda RBX: 00007f7e92db5fa0 RCX: 00007f7e92b8e969 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 368.496011][T12778] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 368.496021][T12778] RBP: 00007f7e92c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 368.496031][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.496040][T12778] R13: 0000000000000000 R14: 00007f7e92db5fa0 R15: 00007f7e92edfa28 [ 368.496056][T12778] [ 370.551554][ T1104] bridge_slave_1: left allmulticast mode [ 370.557253][ T1104] bridge_slave_1: left promiscuous mode [ 370.565671][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.573984][ T1104] bridge_slave_0: left allmulticast mode [ 370.580126][ T1104] bridge_slave_0: left promiscuous mode [ 370.585864][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.850745][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.861023][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.870714][ T1104] bond0 (unregistering): Released all slaves [ 371.103205][ T1104] hsr_slave_0: left promiscuous mode [ 371.111083][ T1104] hsr_slave_1: left promiscuous mode [ 371.116994][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.128309][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.459381][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 371.496790][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 372.078544][ T1104] IPVS: stop unused estimator thread 0... [ 372.165782][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.177264][ T1104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.209919][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.220330][ T1104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.275493][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.288073][ T1104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.348822][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.375465][ T1104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.498526][ T1104] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.554907][ T1104] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.619220][ T1104] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.673196][ T1104] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.303589][ T1104] bridge_slave_1: left allmulticast mode [ 373.312656][ T1104] bridge_slave_1: left promiscuous mode [ 373.318573][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.327330][ T1104] bridge_slave_0: left promiscuous mode [ 373.333871][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.343095][ T1104] bridge_slave_1: left allmulticast mode [ 373.348967][ T1104] bridge_slave_1: left promiscuous mode [ 373.354635][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.363146][ T1104] bridge_slave_0: left allmulticast mode [ 373.369038][ T1104] bridge_slave_0: left promiscuous mode [ 373.374722][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.384834][ T1104] bridge_slave_1: left allmulticast mode [ 373.390723][ T1104] bridge_slave_1: left promiscuous mode [ 373.396444][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.404749][ T1104] bridge_slave_0: left allmulticast mode [ 373.410573][ T1104] bridge_slave_0: left promiscuous mode [ 373.416247][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.426075][ T1104] bridge0: port 3(batadv0) entered disabled state [ 373.434087][ T1104] bridge_slave_1: left allmulticast mode [ 373.439911][ T1104] bridge_slave_1: left promiscuous mode [ 373.445612][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.456484][ T1104] bridge_slave_0: left allmulticast mode [ 373.462544][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.594996][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.606510][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.616270][ T1104] bond0 (unregistering): Released all slaves [ 373.626913][ T1104] bond1 (unregistering): Released all slaves [ 373.726022][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.736795][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.746578][ T1104] bond0 (unregistering): Released all slaves [ 374.005404][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.015073][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.024457][ T1104] bond0 (unregistering): Released all slaves [ 374.282183][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.291859][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.301227][ T1104] bond0 (unregistering): Released all slaves [ 374.940499][ T1104] hsr_slave_0: left promiscuous mode [ 374.946636][ T1104] hsr_slave_1: left promiscuous mode [ 374.953047][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.962428][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.974124][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.986584][ T1104] hsr_slave_0: left promiscuous mode [ 374.995309][ T1104] hsr_slave_1: left promiscuous mode [ 375.002707][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.011013][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.021120][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.028991][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.045658][ T1104] hsr_slave_0: left promiscuous mode [ 375.052191][ T1104] hsr_slave_1: left promiscuous mode [ 375.060127][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.068029][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.099222][ T1104] hsr_slave_0: left promiscuous mode [ 375.104975][ T1104] hsr_slave_1: left promiscuous mode [ 375.110910][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.120193][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.134444][ T1104] veth1_macvtap: left promiscuous mode [ 375.140200][ T1104] veth0_macvtap: left promiscuous mode [ 375.145836][ T1104] veth1_vlan: left promiscuous mode [ 375.151233][ T1104] veth0_vlan: left promiscuous mode [ 375.157340][ T1104] veth1_macvtap: left promiscuous mode [ 375.162911][ T1104] veth0_macvtap: left promiscuous mode [ 375.168874][ T1104] veth1_vlan: left promiscuous mode [ 375.174166][ T1104] veth0_vlan: left promiscuous mode [ 375.413988][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 375.437173][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 375.667637][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 375.696225][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 376.074713][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 376.110207][ T1104] team0 (unregistering): Port device team_slave_0 removed