last executing test programs: 5m58.312261189s ago: executing program 3 (id=346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 5m58.287004643s ago: executing program 3 (id=347): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r0) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) 5m58.14049864s ago: executing program 3 (id=349): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) 5m57.983871891s ago: executing program 3 (id=351): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) 5m57.824209194s ago: executing program 3 (id=354): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 5m57.772956626s ago: executing program 3 (id=355): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0)=0x8001, 0x4) 5m42.719763857s ago: executing program 32 (id=355): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0)=0x8001, 0x4) 5m2.868326135s ago: executing program 1 (id=1006): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) 5m2.813970423s ago: executing program 1 (id=1007): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 5m2.742528723s ago: executing program 1 (id=1008): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c000100070c10000000000000000000", 0x58}], 0x1) 5m2.683312901s ago: executing program 1 (id=1010): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 5m2.524121464s ago: executing program 1 (id=1022): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 5m2.324069416s ago: executing program 1 (id=1027): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x17, &(0x7f00000001c0)="ec1c7507", 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 4m47.277311596s ago: executing program 33 (id=1027): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x17, &(0x7f00000001c0)="ec1c7507", 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 6.525279936s ago: executing program 0 (id=6169): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 6.4882963s ago: executing program 0 (id=6170): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 3.411491502s ago: executing program 0 (id=6218): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8000}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000001cc0)=""/194, 0xc2, 0x0) 3.410886617s ago: executing program 0 (id=6219): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/246, 0xf6}], 0x1, 0xdaf, 0x10) 2.444216098s ago: executing program 4 (id=6230): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 1.183542508s ago: executing program 4 (id=6240): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') 1.126564254s ago: executing program 4 (id=6241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000980)={0x1, 0x0, [{0xc0010004, 0x0, 0xfffffffffffffffd}]}) 917.259686ms ago: executing program 5 (id=6247): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x40000, &(0x7f0000000180)="6001fe3fce999b0d7343cf29eb1fd5c6b7e79d48c809093eb53e5b2c8ba7150173da0cac94f073d6c11130cafedfc16650e1fc9fadbbda2a1ed6fd56d2e06068", 0x40, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 857.033323ms ago: executing program 4 (id=6249): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r0], 0x27) 800.576666ms ago: executing program 4 (id=6251): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 708.782959ms ago: executing program 5 (id=6252): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000480)="fe209740dc8dcd1c", 0x54, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 708.338674ms ago: executing program 4 (id=6253): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000400)=[{0x2, 0x11, 0x0, 0x0}, {0x4, 0x0, 0x0, 0x0}, {0x8, 0x11010, 0x0, 0x0}], 0x3}) 608.767388ms ago: executing program 2 (id=6254): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 512.349354ms ago: executing program 5 (id=6255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000004900000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0) 512.057082ms ago: executing program 2 (id=6256): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xffff, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0xfffffffa, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0x1a47, 0x8, 0x3, 0x8, 0x1, 0x2, 0xac00, 0x6, 0x939, 0x5, 0x9, 0x9, 0x2, 0x4, 0xfffffff7, 0x7fff, 0xf9, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2b, 0x1, 0x23], [0x1, 0x9, 0x9, 0xfffffffe, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x7, 0x9, 0x82, 0x1008, 0x1, 0x40, 0xa3, 0x8, 0x0, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc6, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x2, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x80002, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff40, 0x8b2, 0x7, 0x0, 0x101, 0x140, 0x2, 0x9, 0xb, 0x2, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0x6, 0x4, 0x8, 0x0, 0xffffff00, 0x900, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x4, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x6, 0x1f, 0x3, 0x6, 0xfffffffa, 0x2, 0x8, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x6, 0x9, 0x770a, 0x7fe, 0x0, 0xffffff81, 0x5, 0x10001, 0x461, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1001e, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x3, 0x10001, 0x80, 0x20000008]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 474.847969ms ago: executing program 5 (id=6257): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) 446.727766ms ago: executing program 2 (id=6258): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x4010744d, &(0x7f0000000000)=0x20000002) 324.359885ms ago: executing program 0 (id=6259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)="ecf0", 0x2}, {&(0x7f0000000100)='\x00', 0x1}], 0x2, 0x0, 0x0, 0x20000040}}], 0x1, 0x24004c00) 324.097587ms ago: executing program 5 (id=6260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) 258.464212ms ago: executing program 2 (id=6261): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x81000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80]}, 0x45c) 256.173984ms ago: executing program 0 (id=6262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 132.661845ms ago: executing program 2 (id=6263): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x1, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 127.106585ms ago: executing program 5 (id=6264): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 0s ago: executing program 2 (id=6265): syz_io_uring_setup(0x7304, &(0x7f0000000340)={0x0, 0x9f7, 0x80, 0x3, 0x38}, &(0x7f0000000100), 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x0, 0x0, "5dc9ca561a5fbf61048955f6f876b2ff", 0x0, 0x1}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) kernel console output (not intermixed with test programs): 4427][T15896] netlink: 'syz.5.4423': attribute type 10 has an invalid length. [ 372.482889][T15896] lo: entered promiscuous mode [ 372.492322][T15896] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 372.863390][T15916] netlink: 'syz.2.4433': attribute type 4 has an invalid length. [ 372.914201][T15918] binder_alloc: binder_alloc_mmap_handler: 15917 200000735000-200000736000 already mapped failed -16 [ 372.915084][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4435'. [ 373.164014][T15936] tipc: Bearer : already 2 bearers with priority 10 [ 373.171863][T15936] tipc: Bearer : trying with adjusted priority [ 373.181735][T15936] tipc: Enabling of bearer rejected, failed to enable media [ 373.190381][T15933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4440'. [ 373.870796][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4461'. [ 374.004496][T15982] xt_l2tp: v2 tid > 0xffff: 37482740 [ 374.590786][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4485'. [ 374.683859][T16030] tipc: Enabling not permitted [ 374.697882][T16030] tipc: Enabling of bearer rejected, failed to enable media [ 375.125659][ T5928] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 375.275791][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 375.287502][ T5928] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.303309][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.315589][ T5928] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 375.335111][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.356669][ T5928] usb 6-1: config 0 descriptor?? [ 375.415606][ T6010] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 375.593312][ T6010] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 375.612902][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.635693][ T6010] usb 3-1: Product: syz [ 375.639890][ T6010] usb 3-1: Manufacturer: syz [ 375.644520][ T6010] usb 3-1: SerialNumber: syz [ 375.664370][ T6010] usb 3-1: config 0 descriptor?? [ 375.680002][ T6010] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 375.686037][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4508'. [ 375.781571][ T5928] kye 0003:0458:0153.008A: unknown main item tag 0x0 [ 375.803803][ T5928] kye 0003:0458:0153.008A: unknown main item tag 0x0 [ 375.821492][ T5928] kye 0003:0458:0153.008A: unknown main item tag 0x0 [ 375.836753][ T5928] kye 0003:0458:0153.008A: unknown main item tag 0x0 [ 375.844221][ T5928] kye 0003:0458:0153.008A: unknown main item tag 0x0 [ 375.860527][ T5928] kye 0003:0458:0153.008A: hidraw0: USB HID v0.05 Device [HID 0458:0153] on usb-dummy_hcd.5-1/input0 [ 376.049185][ T5928] usb 6-1: USB disconnect, device number 51 [ 376.113741][T16098] fido_id[16098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 376.163759][ T6010] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 376.363815][ T6010] usb 3-1: USB disconnect, device number 72 [ 376.479827][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4512'. [ 376.832870][T16130] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 376.875724][ T5928] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 377.027807][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.039461][ T5928] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 377.049722][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.077319][ T5928] usb 6-1: config 0 descriptor?? [ 377.507523][ T5928] playstation 0003:054C:0BA0.008B: item fetching failed at offset 6/7 [ 377.526484][ T5928] playstation 0003:054C:0BA0.008B: Parse failed [ 377.542658][ T5928] playstation 0003:054C:0BA0.008B: probe with driver playstation failed with error -22 [ 377.739539][ T5928] usb 6-1: USB disconnect, device number 52 [ 377.747181][ T44] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 377.947787][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.965710][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 377.985353][ T44] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 378.004682][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.027240][ T44] usb 5-1: config 0 descriptor?? [ 378.043235][ T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 378.055009][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 378.072087][ T44] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 378.094288][ T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 378.101520][ T44] usb 5-1: media controller created [ 378.109208][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.142507][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 378.155679][ T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 378.176566][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 378.215934][ T44] dvb-usb: schedule remote query interval to 150 msecs. [ 378.224543][ T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 378.289962][T16166] dvb-usb: bulk message failed: -22 (2/0) [ 378.299855][ T44] usb 5-1: USB disconnect, device number 62 [ 378.358785][ T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 378.542622][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.549118][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.689846][T16206] ptrace attach of "./syz-executor exec"[5860] was attempted by ""[16206] [ 378.802023][ T30] audit: type=1326 audit(1758825656.450:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16211 comm="syz.2.4561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df2f8eec9 code=0x0 [ 378.856004][ T5928] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 379.017323][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 379.029154][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.039695][ T5928] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 379.048888][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.065142][ T5928] usb 6-1: config 0 descriptor?? [ 379.484228][ T5928] cherry 0003:046A:0023.008C: item fetching failed at offset 5/7 [ 379.493033][ T5928] cherry 0003:046A:0023.008C: probe with driver cherry failed with error -22 [ 379.694058][ T44] usb 6-1: USB disconnect, device number 53 [ 380.047104][T16231] netlink: 'syz.2.4569': attribute type 13 has an invalid length. [ 380.055325][T16231] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4569'. [ 380.065154][T16231] syz_tun: refused to change device tx_queue_len [ 380.345631][ T5928] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 380.496963][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.509009][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.515664][ T5901] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 380.519684][ T5928] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 380.535586][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.545920][ T5928] usb 3-1: config 0 descriptor?? [ 380.677731][ T5901] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 380.686663][ T5901] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 380.695749][ T5901] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 380.706148][ T5901] usb 6-1: config 220 has no interface number 2 [ 380.713660][ T5901] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 380.726985][ T5901] usb 6-1: config 220 interface 0 has no altsetting 0 [ 380.733771][ T5901] usb 6-1: config 220 interface 76 has no altsetting 0 [ 380.740686][ T5901] usb 6-1: config 220 interface 1 has no altsetting 0 [ 380.749544][ T5901] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 380.758662][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.766970][ T5901] usb 6-1: Product: syz [ 380.771144][ T5901] usb 6-1: Manufacturer: syz [ 380.775832][ T5901] usb 6-1: SerialNumber: syz [ 380.965989][ T5928] hid-u2fzero 0003:10C4:8ACF.008D: unknown main item tag 0x3 [ 380.973598][ T5928] hid-u2fzero 0003:10C4:8ACF.008D: item fetching failed at offset 4/5 [ 380.982817][ T5928] hid-u2fzero 0003:10C4:8ACF.008D: probe with driver hid-u2fzero failed with error -22 [ 380.997647][ T5901] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 381.005089][ T5901] uvcvideo 6-1:220.0: No valid video chain found. [ 381.012287][ T5901] usb 6-1: selecting invalid altsetting 0 [ 381.029150][ T5901] usb 6-1: selecting invalid altsetting 0 [ 381.035289][ T5901] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 381.046692][ T5901] usb 6-1: USB disconnect, device number 54 [ 381.085819][ T5869] Bluetooth: hci4: command 0x1003 tx timeout [ 381.087005][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 381.180213][ T44] usb 3-1: USB disconnect, device number 73 [ 381.469966][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.478754][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.487278][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.494736][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.502213][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.509798][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.517268][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.524661][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.533444][ T44] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 381.546030][ T44] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.03 Device [syz1] on syz1 [ 381.614141][T16257] fido_id[16257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 381.677110][T16263] vivid-000: disconnect [ 381.685352][T16262] vivid-000: reconnect [ 381.796414][T16267] netlink: 'syz.4.4586': attribute type 4 has an invalid length. [ 381.921332][T16278] netlink: 'syz.2.4591': attribute type 178 has an invalid length. [ 381.938446][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4592'. [ 383.095738][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 383.255733][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 383.270681][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 383.285837][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.305729][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.320722][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 383.336775][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 383.358067][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.381847][ T10] usb 3-1: config 0 descriptor?? [ 383.790165][T16372] tmpfs: User quota inode hardlimit too large. [ 383.815333][ T10] redragon 0003:0C45:760B.008F: item fetching failed at offset 7/133 [ 383.834213][ T10] redragon 0003:0C45:760B.008F: probe with driver redragon failed with error -22 [ 384.042799][ T44] usb 3-1: USB disconnect, device number 74 [ 384.616993][T16398] devtmpfs: Too few inodes for current use [ 385.056174][ T44] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 385.217248][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.233273][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 385.246607][ T44] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 385.257757][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.288201][ T44] usb 3-1: config 0 descriptor?? [ 385.293900][T16412] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 385.378934][T16442] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4670'. [ 385.534922][T16454] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 385.752143][ T44] lenovo 0003:17EF:60FE.0090: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 385.878797][T16471] overlayfs: workdir and upperdir must be separate subtrees [ 385.944075][ T5928] usb 3-1: USB disconnect, device number 75 [ 386.042989][T16477] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 386.050526][T16477] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 386.059411][T16477] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 386.066152][T16477] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 386.072720][T16477] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 386.082154][T16477] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 386.088980][T16477] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 386.095932][T16477] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 386.102478][T16477] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 386.109201][T16477] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 386.835073][T16515] hugetlbfs: Bad value '' for mount option 'size' [ 386.835073][T16515] [ 387.367961][ T5901] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 387.468417][T16562] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 387.468417][T16562] The task syz.2.4726 (16562) triggered the difference, watch for misbehavior. [ 387.525605][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 387.532496][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.542570][ T5901] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 387.552465][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.563752][ T5901] usb 6-1: config 0 descriptor?? [ 387.985878][ T5901] creative-sb0540 0003:041E:3100.0091: item fetching failed at offset 0/1 [ 387.995078][ T5901] creative-sb0540 0003:041E:3100.0091: parse failed [ 388.002007][ T5901] creative-sb0540 0003:041E:3100.0091: probe with driver creative-sb0540 failed with error -22 [ 388.187153][ T10] usb 6-1: USB disconnect, device number 55 [ 388.516888][ T5901] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 388.677441][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 388.692053][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 388.710471][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 388.737505][ T5901] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 388.750622][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.760432][ T5901] usb 5-1: Product: syz [ 388.767959][ T5901] usb 5-1: Manufacturer: syz [ 388.772620][ T5901] usb 5-1: SerialNumber: syz [ 388.796256][ T5901] usb 5-1: config 0 descriptor?? [ 388.978268][T16598] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 389.575973][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 389.738484][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 389.741637][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.741669][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.741703][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 389.741726][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.744757][ T10] usb 3-1: config 0 descriptor?? [ 389.939534][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 390.189788][ T10] hid_parser_main: 77 callbacks suppressed [ 390.189813][ T10] corsair-cpro 0003:1B1C:0C10.0092: unknown main item tag 0x0 [ 390.219453][ T10] corsair-cpro 0003:1B1C:0C10.0092: unknown main item tag 0x0 [ 390.239325][ T10] corsair-cpro 0003:1B1C:0C10.0092: unknown main item tag 0x0 [ 390.253216][ T10] corsair-cpro 0003:1B1C:0C10.0092: unknown main item tag 0x0 [ 390.264541][ T10] corsair-cpro 0003:1B1C:0C10.0092: unknown main item tag 0x0 [ 390.285448][ T10] corsair-cpro 0003:1B1C:0C10.0092: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 390.381385][ T10] corsair-cpro 0003:1B1C:0C10.0092: probe with driver corsair-cpro failed with error -38 [ 390.430239][ T10] usb 3-1: USB disconnect, device number 76 [ 390.658832][T16657] program syz.5.4771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.042627][T16675] xt_l2tp: missing protocol rule (udp|l2tpip) [ 391.431248][T16693] vivid-000: disconnect [ 391.437329][T16692] vivid-000: reconnect [ 392.618676][T16744] cifs: Bad value for 'port' [ 392.752952][T16753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4818'. [ 392.762443][T16753] tipc: Invalid UDP bearer configuration [ 392.762581][T16753] tipc: Enabling of bearer rejected, failed to enable media [ 393.249805][T16778] mkiss: ax0: crc mode is auto. [ 393.395668][ T10] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 393.551266][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 393.570978][ T10] usb 3-1: config 0 has no interface number 0 [ 393.585672][ T10] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 393.611885][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 393.637070][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 393.654768][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 393.665474][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 393.673665][ T10] usb 3-1: Product: syz [ 393.678054][ T10] usb 3-1: SerialNumber: syz [ 393.695033][ T10] usb 3-1: config 0 descriptor?? [ 393.711151][ T10] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 393.735729][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input46 [ 393.901460][T16795] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 393.908515][T16795] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 393.915311][T16795] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 393.927068][T16795] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 393.934232][T16795] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 393.941740][T16795] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 393.949109][T16795] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 393.958126][T16795] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 393.967968][T16795] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 393.968473][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 393.974885][T16795] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 393.984658][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 393.995271][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.002470][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.010696][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.017977][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.027381][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.034551][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.041755][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.050670][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 394.058312][ T5928] usb 3-1: USB disconnect, device number 77 [ 394.064305][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 394.088308][ T5928] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 394.633218][T16811] fuse: Bad value for 'group_id' [ 394.641802][T16811] fuse: Bad value for 'group_id' [ 394.946921][T16825] overlayfs: workdir and upperdir must be separate subtrees [ 396.381279][T16899] overlayfs: conflicting lowerdir path [ 396.520325][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4879'. [ 396.937646][T16920] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.4885'. [ 396.950042][T16920] netlink: zone id is out of range [ 396.955285][T16920] netlink: zone id is out of range [ 396.961146][T16920] netlink: zone id is out of range [ 396.966691][T16920] netlink: zone id is out of range [ 396.971968][T16920] netlink: zone id is out of range [ 396.978002][T16920] netlink: zone id is out of range [ 396.983711][T16920] netlink: zone id is out of range [ 396.993173][T16920] netlink: zone id is out of range [ 396.999828][T16920] netlink: zone id is out of range [ 397.005054][T16920] netlink: zone id is out of range [ 397.255598][ T5928] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 397.408957][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 397.417085][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.428475][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.441707][ T5928] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 397.451352][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.462895][ T5928] usb 6-1: config 0 descriptor?? [ 397.733104][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4898'. [ 397.886761][ T5928] microsoft 0003:045E:07DA.0093: ignoring exceeding usage max [ 397.896513][ T5928] microsoft 0003:045E:07DA.0093: ignoring exceeding usage max [ 397.905339][ T5928] microsoft 0003:045E:07DA.0093: usage index exceeded [ 397.916594][ T5928] microsoft 0003:045E:07DA.0093: item 0 0 2 2 parsing failed [ 397.927130][ T5928] microsoft 0003:045E:07DA.0093: parse failed [ 397.933412][ T5928] microsoft 0003:045E:07DA.0093: probe with driver microsoft failed with error -22 [ 398.097290][ T5928] usb 6-1: USB disconnect, device number 56 [ 398.975686][ T5928] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 399.135575][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 399.153524][ T5928] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 399.175688][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.197001][ T5928] usb 6-1: config 0 descriptor?? [ 399.618684][ T5862] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 399.631491][ T5928] monterey 0003:0566:3004.0094: unknown main item tag 0x0 [ 399.640500][ T5928] monterey 0003:0566:3004.0094: unknown main item tag 0x0 [ 399.657745][ T5928] monterey 0003:0566:3004.0094: unknown main item tag 0x0 [ 399.662837][ T5901] iguanair 5-1:0.0: failed to get version [ 399.665042][ T5928] monterey 0003:0566:3004.0094: unknown main item tag 0x0 [ 399.684749][ T5928] monterey 0003:0566:3004.0094: unknown main item tag 0x0 [ 399.692351][ T5928] monterey 0003:0566:3004.0094: unknown main item tag 0x0 [ 399.696235][ T5901] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 399.701732][ T5928] monterey 0003:0566:3004.0094: unknown main item tag 0x0 [ 399.720321][ T5901] usb 5-1: USB disconnect, device number 63 [ 399.729699][ T5928] monterey 0003:0566:3004.0094: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.5-1/input0 [ 399.798739][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 399.810278][ T5862] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 399.825715][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.846921][ T5862] usb 3-1: Product: syz [ 399.851114][ T5862] usb 3-1: Manufacturer: syz [ 399.865977][T17017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4931'. [ 399.867155][ T5862] usb 3-1: SerialNumber: syz [ 399.883595][ T44] usb 6-1: USB disconnect, device number 57 [ 399.916741][ T5862] usb 3-1: config 0 descriptor?? [ 399.943692][ T5862] gspca_main: se401-2.14.0 probing 047d:5003 [ 399.971073][T17019] random: crng reseeded on system resumption [ 400.348261][ T5862] gspca_se401: Wrong descriptor type [ 400.477532][T17047] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4945'. [ 400.555648][ T5862] usb 3-1: USB disconnect, device number 78 [ 401.167359][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4953'. [ 401.378742][T17080] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4960'. [ 401.542765][T17091] netlink: 'syz.5.4965': attribute type 17 has an invalid length. [ 401.564567][T17091] netlink: 'syz.5.4965': attribute type 16 has an invalid length. [ 401.573963][T17091] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4965'. [ 401.831887][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4974'. [ 402.018638][T17125] netlink: 'syz.5.4981': attribute type 58 has an invalid length. [ 402.346759][ T5901] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 402.505556][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 402.523072][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.545644][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.568480][ T5901] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 402.588340][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.614297][ T5901] usb 5-1: config 0 descriptor?? [ 402.708647][ T30] audit: type=1326 audit(1758825680.360:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17155 comm="syz.0.4997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f758bb8eec9 code=0x0 [ 402.865753][ T5862] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 402.979072][T17170] fuse: Bad value for 'user_id' [ 402.984091][T17170] fuse: Bad value for 'user_id' [ 403.017408][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.028894][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.041851][ T5862] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 403.051301][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.060472][ T5901] logitech 0003:046D:C29C.0095: unknown main item tag 0x0 [ 403.070293][ T5862] usb 3-1: config 0 descriptor?? [ 403.073949][ T5901] logitech 0003:046D:C29C.0095: unknown main item tag 0x0 [ 403.083480][ T5901] logitech 0003:046D:C29C.0095: unknown main item tag 0x0 [ 403.103826][ T5901] logitech 0003:046D:C29C.0095: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 403.247615][ T5901] logitech 0003:046D:C29C.0095: no inputs found [ 403.269120][ T5901] usb 5-1: USB disconnect, device number 64 [ 403.502350][ T5862] bigben 0003:146B:0902.0096: unexpected rdesc, please submit for review [ 403.513438][ T5862] bigben 0003:146B:0902.0096: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 403.525177][ T5862] bigben 0003:146B:0902.0096: missing HID_OUTPUT_REPORT 0 [ 403.532613][ T5862] bigben 0003:146B:0902.0096: no output report found [ 403.545962][ T6010] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 403.710638][ T5862] usb 3-1: USB disconnect, device number 79 [ 403.718214][ T6010] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.728215][ T6010] usb 6-1: config 0 has no interface number 0 [ 403.734384][ T6010] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.746167][ T6010] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.757831][ T6010] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 403.767653][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.786610][ T6010] usb 6-1: config 0 descriptor?? [ 404.145666][ T5901] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 404.213405][ T6010] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0097/input/input47 [ 404.307538][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 404.314819][ T6010] holtek_kbd 0003:04D9:A055.0097: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 404.348451][ T5901] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 404.364229][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 404.386258][ T5901] usb 5-1: Product: syz [ 404.390474][ T5901] usb 5-1: Manufacturer: syz [ 404.395094][ T5901] usb 5-1: SerialNumber: syz [ 404.416710][ T5901] usb 5-1: config 0 descriptor?? [ 404.481184][ T5862] usb 6-1: USB disconnect, device number 58 [ 404.548919][T17195] option changes via remount are deprecated (pid=17194 comm=syz.2.5013) [ 404.640487][ T5901] usb 5-1: USB disconnect, device number 65 [ 404.767037][T17204] netlink: 'syz.2.5018': attribute type 1 has an invalid length. [ 404.776705][T17204] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.5018'. [ 404.822028][T17207] raw_sendmsg: syz.2.5019 forgot to set AF_INET. Fix it! [ 404.940753][T17213] program syz.2.5022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.746271][T17252] netlink: 'syz.0.5040': attribute type 58 has an invalid length. [ 406.425621][ T5901] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 406.505736][ T5862] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 406.576135][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 406.582864][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 406.594016][ T5901] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 406.603174][ T5901] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 406.611557][ T5901] usb 3-1: Product: syz [ 406.616911][ T5901] usb 3-1: Manufacturer: syz [ 406.621997][ T5901] usb 3-1: SerialNumber: syz [ 406.667465][ T5862] usb 6-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 406.678097][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 406.707595][ T5862] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 406.716821][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.731161][ T5862] usb 6-1: Product: syz [ 406.735388][ T5862] usb 6-1: Manufacturer: syz [ 406.741232][ T5862] usb 6-1: SerialNumber: syz [ 406.751189][ T5862] usb 6-1: config 0 descriptor?? [ 406.767536][ T5862] usb-storage 6-1:0.0: USB Mass Storage device detected [ 406.800263][ T5862] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 406.835050][ T5901] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 406.843588][ T5901] usb 3-1: Handspring Visor / Palm OS: port 0, is for Console use [ 406.852108][ T5901] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 406.860490][ T5901] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 406.999434][ T6010] usb 6-1: USB disconnect, device number 59 [ 407.036933][ T5901] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 407.045314][ T5901] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 407.064132][ T5901] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 407.096562][ T5901] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 407.113249][ T5901] usb 3-1: USB disconnect, device number 80 [ 407.130747][ T5901] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 407.154859][ T5901] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 407.185785][ T5901] visor 3-1:1.0: device disconnected [ 407.289331][T17305] netlink: 'syz.0.5064': attribute type 21 has an invalid length. [ 407.848180][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5081'. [ 408.359281][T17376] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 408.368255][T17376] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 408.374822][T17376] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 408.475587][ T44] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 408.637977][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.657628][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.673376][ T44] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 408.683371][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.707492][ T44] usb 6-1: config 0 descriptor?? [ 408.913709][T17408] netlink: 'syz.0.5113': attribute type 11 has an invalid length. [ 409.095748][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 409.143654][ T44] glorious 0003:258A:0036.0098: item fetching failed at offset 0/2 [ 409.157375][ T44] glorious 0003:258A:0036.0098: probe with driver glorious failed with error -22 [ 409.257746][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 409.275635][ T10] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 409.290353][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.302040][ T10] usb 5-1: config 0 descriptor?? [ 409.338856][ T5928] usb 6-1: USB disconnect, device number 60 [ 409.405540][T17433] program syz.0.5126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.732571][ T10] hid_parser_main: 157 callbacks suppressed [ 409.732594][ T10] samsung 0003:0419:0600.0099: unknown main item tag 0x1 [ 409.746750][ T10] samsung 0003:0419:0600.0099: item fetching failed at offset 6/7 [ 409.755796][ T10] samsung 0003:0419:0600.0099: parse failed [ 409.761961][ T10] samsung 0003:0419:0600.0099: probe with driver samsung failed with error -22 [ 409.918709][ T5901] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 409.943871][ T10] usb 5-1: USB disconnect, device number 66 [ 410.076416][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 410.084020][ T5901] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 410.092581][ T5901] usb 3-1: config 0 has no interface number 0 [ 410.106107][ T5901] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 410.118471][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.127669][ T5901] usb 3-1: Product: syz [ 410.131866][ T5901] usb 3-1: Manufacturer: syz [ 410.136938][ T5901] usb 3-1: SerialNumber: syz [ 410.146254][ T5901] usb 3-1: config 0 descriptor?? [ 410.149842][T17466] overlayfs: failed to resolve './file1': -2 [ 410.157830][ T5901] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 410.210542][T17468] sctp: [Deprecated]: syz.5.5143 (pid 17468) Use of int in maxseg socket option. [ 410.210542][T17468] Use struct sctp_assoc_value instead [ 410.367036][ T5901] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 410.386050][ T5901] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 410.578724][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 410.779698][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 410.780265][ T10] usb 3-1: USB disconnect, device number 81 [ 410.824654][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 410.857620][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 410.884862][ T10] quatech2 3-1:0.51: device disconnected [ 411.645966][ T5901] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 411.811356][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.822782][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 411.834756][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 411.848593][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 411.858907][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 411.874413][ T5901] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 411.883997][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 411.896266][ T5901] usb 3-1: Product: syz [ 411.900549][ T5901] usb 3-1: Manufacturer: syz [ 411.905237][ T5901] usb 3-1: SerialNumber: syz [ 411.914363][ T5901] usb 3-1: config 0 descriptor?? [ 412.131473][ T5901] radio-si470x 3-1:0.0: DeviceID=0xa78c ChipID=0x46e0 [ 412.248454][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 412.332631][ T5901] radio-si470x 3-1:0.0: software version 167, hardware version 140 [ 412.405607][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 412.412362][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.424024][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.434044][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.00 [ 412.443595][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.455664][ T10] usb 5-1: config 0 descriptor?? [ 412.541542][ T5901] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 412.551977][ T5901] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 412.561598][ T5901] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 412.570329][ T5901] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 412.583477][ T5901] usb 3-1: USB disconnect, device number 82 [ 412.615768][ T6010] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 412.769153][ T6010] usb 6-1: Using ep0 maxpacket: 16 [ 412.777995][ T6010] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 412.787106][ T6010] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 412.796939][ T6010] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 412.806662][ T6010] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 412.816582][ T6010] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 412.826407][ T6010] usb 6-1: config 1 interface 0 has no altsetting 0 [ 412.833145][ T6010] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 412.842283][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.857418][ T6010] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 412.877960][ T10] logitech-hidpp-device 0003:046D:C26E.009A: collection stack underflow [ 412.887038][ T10] logitech-hidpp-device 0003:046D:C26E.009A: item 0 0 0 12 parsing failed [ 412.896403][ T10] logitech-hidpp-device 0003:046D:C26E.009A: hidpp_probe:parse failed [ 412.905213][ T10] logitech-hidpp-device 0003:046D:C26E.009A: probe with driver logitech-hidpp-device failed with error -22 [ 413.001762][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5195'. [ 413.080002][ T5901] usb 5-1: USB disconnect, device number 67 [ 413.091104][ T6010] scsi host1: usb-storage 6-1:1.0 [ 413.535220][T17610] 9pnet_rdma: rdma_create_trans (17610): problem binding to privport: 13 [ 413.667932][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5215'. [ 414.131601][ T1144] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 414.184477][ T30] audit: type=1326 audit(1758825691.830:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.2.5220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df2f8eec9 code=0x0 [ 414.210372][ T1144] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 414.414519][T17582] sddr09: could not read card info [ 414.420255][ T10] usb 6-1: USB disconnect, device number 61 [ 414.443981][T17654] vivid-000: ================= START STATUS ================= [ 414.454363][T17654] vivid-000: Test Pattern: 75% Colorbar [ 414.462615][T17654] vivid-000: Fill Percentage of Frame: 100 [ 414.469475][ T36] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 414.476657][ T36] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 414.482774][ T36] sd 1:0:0:0: [sdb] Write Protect is off [ 414.489571][T17654] vivid-000: Horizontal Movement: No Movement [ 414.496190][ T36] sd 1:0:0:0: [sdb] Asking for cache data failed [ 414.505097][T17654] vivid-000: Vertical Movement: No Movement [ 414.511319][ T36] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 414.518455][T17654] vivid-000: OSD Text Mode: All [ 414.523377][T17654] vivid-000: Show Border: false [ 414.535765][T17654] vivid-000: Show Square: false [ 414.544554][T17654] vivid-000: Sensor Flipped Horizontally: false [ 414.563769][ T36] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 414.571133][T17654] vivid-000: Sensor Flipped Vertically: false [ 414.577656][T17654] vivid-000: Insert SAV Code in Image: false [ 414.586302][T17654] vivid-000: Insert EAV Code in Image: false [ 414.592350][T17654] vivid-000: Insert Video Guard Band: false [ 414.598761][T17654] vivid-000: Reduced Framerate: false [ 414.607664][T17654] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 414.615602][T17654] vivid-000: S-Video 000-0 Is Connected To: None [ 414.623658][T17654] vivid-000: Enable Capture Cropping: true grabbed [ 414.633341][T17654] vivid-000: Enable Capture Composing: true grabbed [ 414.646095][T17654] vivid-000: Enable Capture Scaler: true grabbed [ 414.664116][T17654] vivid-000: Timestamp Source: End of Frame [ 414.673487][T17654] vivid-000: Colorspace: Rec. 709 [ 414.689907][T17654] vivid-000: Transfer Function: Default [ 414.710458][T17654] vivid-000: Y'CbCr Encoding: Default [ 414.735251][T17654] vivid-000: HSV Encoding: Hue 0-179 [ 414.752419][T17654] vivid-000: Quantization: Default [ 414.763830][ T6790] udevd[6790]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 414.764707][T17654] vivid-000: Apply Alpha To Red Only: false [ 414.809244][T17654] vivid-000: Standard Aspect Ratio: 4x3 [ 414.823181][T17654] vivid-000: DV Timings Signal Mode: Current DV Timings [ 414.840947][T17654] vivid-000: DV Timings: 640x480p59 inactive [ 414.857780][T17654] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 414.878950][T17654] vivid-000: Maximum EDID Blocks: 2 [ 414.893199][T17654] vivid-000: Limited RGB Range (16-235): true [ 414.912075][T17654] vivid-000: Rx RGB Quantization Range: Automatic [ 414.919216][ T5871] udevd[5871]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 414.929481][T17654] vivid-000: Power Present: 0x00000001 [ 414.941708][T17654] tpg source WxH: 1280x720 (Y'CbCr) [ 414.957232][T17654] tpg field: 1 [ 414.960772][T17654] tpg crop: (0,0)/1280x720 [ 414.965206][T17654] tpg compose: (0,0)/1280x720 [ 414.995015][T17654] tpg colorspace: 3 [ 415.008716][T17654] tpg transfer function: 0/1 [ 415.018535][ T5928] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 415.022168][T17654] tpg Y'CbCr encoding: 0/2 [ 415.028039][T17665] tipc: Started in network mode [ 415.036267][T17665] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 415.037418][T17654] tpg quantization: 0/2 [ 415.045004][T17665] tipc: Enabled bearer , priority 2 [ 415.062949][T17654] tpg RGB range: 0/1 [ 415.073409][T17654] vivid-000: ================== END STATUS ================== [ 415.197909][ T5928] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.207915][ T5928] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.227787][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.248112][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5239'. [ 415.262005][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 415.274301][ T5928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 415.287915][ T5928] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.299843][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.308462][ T5928] usb 5-1: Product: syz [ 415.312732][ T5928] usb 5-1: Manufacturer: syz [ 415.329293][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 415.338932][ T5928] cdc_wdm 5-1:1.0: skipping garbage [ 415.346820][ T5928] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 415.352885][ T5928] cdc_wdm 5-1:1.0: Unknown control protocol [ 415.534098][ T5928] usb 5-1: USB disconnect, device number 68 [ 415.728237][T17697] netlink: 'syz.5.5251': attribute type 29 has an invalid length. [ 415.741305][T17697] netlink: 'syz.5.5251': attribute type 29 has an invalid length. [ 415.844818][T17705] [U]  [ 415.847835][T17705] [U] K{ [ 415.850857][T17705] [U] t 1ŠFfˊ`GJgo/mC [ 415.857790][T17705] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 415.873583][T17705] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 415.884000][T17705] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 415.919615][T17705] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 415.943148][T17705] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 415.954257][T17705] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 415.965814][T17705] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 416.057124][T17705] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 416.065636][T17705] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 416.079353][T17705] [U] 22Ʃx?0;3u [ 416.083512][T17705] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 416.108597][T17705] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 416.117876][T17705] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 416.126451][T17705] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 416.132613][T17705] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 416.144931][T17705] [U] ec [ 416.148050][T17705] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 416.160424][ T5928] tipc: Node number set to 10070698 [ 416.171009][T17704] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 416.485594][ T5928] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 416.645629][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 416.656968][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.670680][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.681060][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 416.693121][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 416.703468][ T5928] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 416.713434][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.727762][ T5928] usb 5-1: config 0 descriptor?? [ 416.870399][T17743] trusted_key: encrypted_key: hex blob is missing [ 417.155066][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: unknown main item tag 0x0 [ 417.191229][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: unknown main item tag 0x0 [ 417.207440][T17757] program syz.0.5280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.211545][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: unknown main item tag 0x0 [ 417.234838][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: unknown main item tag 0x0 [ 417.254360][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: unknown main item tag 0x0 [ 417.274052][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 417.309318][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: U2F Zero LED initialised [ 417.345744][ T5928] hid-u2fzero 0003:10C4:8ACF.009B: U2F Zero RNG initialised [ 417.393141][ T5928] usb 5-1: USB disconnect, device number 69 [ 417.438897][T17762] fido_id[17762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 417.615754][ T5901] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 417.778734][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 417.786096][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.797394][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.807639][ T5901] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 417.816977][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.828183][ T5901] usb 3-1: config 0 descriptor?? [ 418.254412][ T5901] hid-led 0003:0FC5:B080.009C: unknown main item tag 0x0 [ 418.262829][ T5901] hid-led 0003:0FC5:B080.009C: unknown main item tag 0x0 [ 418.270241][ T5901] hid-led 0003:0FC5:B080.009C: unknown main item tag 0x0 [ 418.277924][ T5901] hid-led 0003:0FC5:B080.009C: unknown main item tag 0x0 [ 418.285003][ T5901] hid-led 0003:0FC5:B080.009C: unknown main item tag 0x0 [ 418.443146][ T5901] hid-led 0003:0FC5:B080.009C: probe with driver hid-led failed with error -71 [ 418.473106][ T5901] usb 3-1: USB disconnect, device number 83 [ 418.829334][T17834] netlink: 'syz.5.5317': attribute type 8 has an invalid length. [ 419.755580][ T5928] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 419.905631][ T5901] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 419.915830][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 419.922578][ T5928] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.934639][ T5928] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.944450][ T5928] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.957380][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 419.964012][ T5928] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 419.973208][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.983371][ T5928] usb 5-1: config 0 descriptor?? [ 420.057397][ T5901] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 420.068463][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.079505][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 420.090368][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 420.103414][ T5901] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 420.112752][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.123813][ T5901] usb 6-1: config 0 descriptor?? [ 420.129900][T17884] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 420.412578][ T5928] hid-retrode 0003:0403:97C1.009D: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.4-1/input0 [ 420.558397][ T5901] uclogic 0003:28BD:0055.009E: interface is invalid, ignoring [ 420.599201][ T5928] usb 5-1: USB disconnect, device number 70 [ 420.752883][ T10] usb 6-1: USB disconnect, device number 62 [ 421.390302][T17935] xt_bpf: check failed: parse error [ 421.805698][ T10] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 421.955594][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 421.955690][ T6010] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 421.964224][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.980489][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.990359][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 422.003292][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.012450][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.023920][ T10] usb 6-1: config 0 descriptor?? [ 422.118549][ T6010] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.127916][ T6010] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 422.136673][ T6010] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 422.147063][ T6010] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.156678][ T6010] usb 5-1: language id specifier not provided by device, defaulting to English [ 422.174571][ T6010] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.184826][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.439060][ T10] hid_parser_main: 160 callbacks suppressed [ 422.439084][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.452953][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.461311][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.466264][ T30] audit: type=1326 audit(1758825700.120:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17950 comm="syz.2.5373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df2f8eec9 code=0x7fc00000 [ 422.491703][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.491746][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.491778][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.491811][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.491842][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.491872][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.542144][ T10] microsoft 0003:045E:07DA.009F: unknown main item tag 0x0 [ 422.563573][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.009F/input/input50 [ 422.615895][ T6010] usb 5-1: 0:2 : does not exist [ 422.670310][ T6010] usb 5-1: USB disconnect, device number 71 [ 422.739889][ T10] microsoft 0003:045E:07DA.009F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 422.799762][ T10] usb 6-1: USB disconnect, device number 63 [ 422.870077][T17964] fido_id[17964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 423.471686][T17992] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.531728][T17997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.544012][T17997] overlayfs: missing 'lowerdir' [ 423.909696][ T10] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 424.068313][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 424.089735][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.102569][ T10] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.118616][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 424.129617][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 424.139087][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.154360][ T10] usb 6-1: config 0 descriptor?? [ 424.260114][ T5949] rtc_cmos 00:00: Alarms can be up to one day in the future [ 424.268759][ T5949] rtc_cmos 00:00: Alarms can be up to one day in the future [ 424.281730][ T5949] rtc_cmos 00:00: Alarms can be up to one day in the future [ 424.295349][ T5949] rtc_cmos 00:00: Alarms can be up to one day in the future [ 424.303111][ T5949] rtc rtc0: __rtc_set_alarm: err=-22 [ 424.596058][ T10] lenovo 0003:17EF:60B5.00A0: hidraw0: USB HID v5f.b2 Device [HID 17ef:60b5] on usb-dummy_hcd.5-1/input0 [ 424.779408][ T5862] usb 6-1: USB disconnect, device number 64 [ 424.865558][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 425.017181][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.028318][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.038137][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.052436][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 425.061530][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.071787][ T10] usb 3-1: config 0 descriptor?? [ 425.499944][ T10] elecom 0003:056E:00FB.00A1: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 425.693068][ T6010] usb 3-1: USB disconnect, device number 84 [ 425.715649][ T5949] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 425.886319][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 425.897331][ T5949] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 425.906425][ T5949] usb 5-1: config 0 has no interface number 0 [ 425.915104][ T5949] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.924322][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.932439][ T5949] usb 5-1: Product: syz [ 425.936741][ T5949] usb 5-1: Manufacturer: syz [ 425.941356][ T5949] usb 5-1: SerialNumber: syz [ 425.956232][ T5949] usb 5-1: config 0 descriptor?? [ 425.971175][ T5949] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 426.185167][ T5949] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 426.239261][ T5949] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 426.373357][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 426.535736][ T5949] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 426.575784][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 426.595610][ T6010] usb 5-1: USB disconnect, device number 72 [ 426.606936][ T6010] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 426.629350][ T6010] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 426.647562][ T6010] quatech2 5-1:0.51: device disconnected [ 426.705596][ T5949] usb 6-1: Using ep0 maxpacket: 16 [ 426.712923][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.725322][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.739916][ T5949] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 426.750609][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.766865][ T5949] usb 6-1: config 0 descriptor?? [ 426.839679][T18082] atomic_op ffff888031f5b998 conn xmit_atomic 0000000000000000 [ 427.185629][ T6010] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 427.203197][ T5949] hid-picolcd 0003:04D8:F002.00A2: item fetching failed at offset 7/11 [ 427.226872][ T5949] hid-picolcd 0003:04D8:F002.00A2: device report parse failed [ 427.234469][ T5949] hid-picolcd 0003:04D8:F002.00A2: probe with driver hid-picolcd failed with error -22 [ 427.377377][ T6010] usb 3-1: Using ep0 maxpacket: 16 [ 427.384227][ T6010] usb 3-1: config 1 has an invalid interface number: 73 but max is 0 [ 427.403367][ T6010] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.410949][ T10] usb 6-1: USB disconnect, device number 65 [ 427.423910][ T6010] usb 3-1: config 1 has no interface number 0 [ 427.430525][ T6010] usb 3-1: config 1 interface 73 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.450708][ T6010] usb 3-1: config 1 interface 73 has no altsetting 0 [ 427.472591][ T6010] usb 3-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=18.0b [ 427.489931][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.515592][ T6010] usb 3-1: Product: syz [ 427.519935][ T6010] usb 3-1: Manufacturer: syz [ 427.530430][ T6010] usb 3-1: SerialNumber: syz [ 427.548444][ T6010] em28xx 3-1:1.73: New device syz syz @ 480 Mbps (eb1a:50a6, interface 73, class 73) [ 427.568479][ T6010] em28xx 3-1:1.73: Video interface 73 found: [ 427.806465][ T6010] em28xx 3-1:1.73: unknown em28xx chip ID (0) [ 427.825571][ T5862] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 427.869681][ T6010] em28xx 3-1:1.73: reading from i2c device at 0xa0 failed (error=-5) [ 427.878120][ T6010] em28xx 3-1:1.73: board has no eeprom [ 427.935677][ T6010] em28xx 3-1:1.73: Identified as Gadmei UTV330 (card=37) [ 427.942793][ T6010] em28xx 3-1:1.73: [ 427.942793][ T6010] [ 427.942793][ T6010] The support for this board weren't valid yet. [ 427.942793][ T6010] Please send a report of having this working [ 427.942793][ T6010] not to V4L mailing list (and/or to other addresses) [ 427.942793][ T6010] [ 427.971162][ T6010] em28xx 3-1:1.73: analog set to bulk mode. [ 427.975944][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 427.983661][ T5949] em28xx 3-1:1.73: Registering V4L2 extension [ 427.988352][ T5862] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 428.007023][ T6010] usb 3-1: USB disconnect, device number 85 [ 428.022706][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.027112][ T6010] em28xx 3-1:1.73: Disconnecting em28xx [ 428.045345][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.077939][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 428.092299][ T5862] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 428.103066][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.123118][ T5862] usb 5-1: config 0 descriptor?? [ 428.193894][ T5949] em28xx 3-1:1.73: Config register raw data: 0xffffffed [ 428.202729][ T5949] em28xx 3-1:1.73: AC97 chip type couldn't be determined [ 428.210794][ T5949] em28xx 3-1:1.73: No AC97 audio processor [ 428.231412][ T5949] usb 3-1: Decoder not found [ 428.236222][ T5949] em28xx 3-1:1.73: failed to create media graph [ 428.242517][ T5949] em28xx 3-1:1.73: V4L2 device video103 deregistered [ 428.257714][ T5949] em28xx 3-1:1.73: Remote control support is not available for this card. [ 428.266651][ T6010] em28xx 3-1:1.73: Closing input extension [ 428.289193][ T6010] em28xx 3-1:1.73: Freeing device [ 428.542365][ T5862] redragon 0003:0C45:760B.00A3: Fixing Redragon ASURA report descriptor. [ 428.557185][ T5862] hid_parser_main: 12 callbacks suppressed [ 428.557204][ T5862] redragon 0003:0C45:760B.00A3: unknown main item tag 0x6 [ 428.570292][ T5862] redragon 0003:0C45:760B.00A3: item fetching failed at offset 7/133 [ 428.579200][ T5862] redragon 0003:0C45:760B.00A3: probe with driver redragon failed with error -22 [ 428.715757][ T5949] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 428.741661][ T5862] usb 5-1: USB disconnect, device number 73 [ 428.875856][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 428.882245][ T5949] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 428.890391][ T5949] usb 6-1: config 0 has no interface number 0 [ 428.896549][ T5949] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.907422][ T5949] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 428.919052][ T5949] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.930151][ T5949] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.944223][ T5949] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 428.953964][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.964325][ T5949] usb 6-1: config 0 descriptor?? [ 428.975182][ T5949] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 429.179848][ T5928] usb 6-1: USB disconnect, device number 66 [ 429.190486][ T5928] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 429.525639][ T5862] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 429.675760][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 429.686304][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.696631][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.707833][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 429.719297][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 34, changing to 9 [ 429.731574][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 25831, setting to 1024 [ 429.743095][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.760023][ T5862] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.769750][ T5862] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.778731][ T5862] usb 5-1: Manufacturer: syz [ 429.786773][ T5862] usb 5-1: config 0 descriptor?? [ 429.884391][T18166] ALSA: mixer_oss: invalid OSS volume '' [ 430.087401][ T5862] rc_core: IR keymap rc-hauppauge not found [ 430.093362][ T5862] Registered IR keymap rc-empty [ 430.115239][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.136937][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.157647][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 430.174250][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input51 [ 430.193064][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.225927][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.245979][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.266183][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.306136][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.326960][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.345897][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.366342][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.384407][T18190] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5480'. [ 430.395980][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.425957][ T5862] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 430.448176][ T5862] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 430.463946][ T5862] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 430.482422][ T5862] usb 5-1: USB disconnect, device number 74 [ 430.925697][ T5949] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 431.011559][T18208] CUSE: info not properly terminated [ 431.086521][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 431.109379][ T5949] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 431.124448][ T5949] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 431.133825][ T5949] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 431.141980][ T5949] usb 6-1: Product: syz [ 431.148458][ T5949] usb 6-1: Manufacturer: syz [ 431.153077][ T5949] usb 6-1: SerialNumber: syz [ 431.393866][ T5949] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 431.444288][ T5949] usb 6-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 431.453184][ T5949] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 431.465914][ T5949] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 431.595807][ T5949] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 431.615924][ T5949] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 431.637954][ T5949] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 431.653947][ T5949] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 431.673186][ T5949] usb 6-1: USB disconnect, device number 67 [ 431.689156][ T5949] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 431.734399][ T5949] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 431.753071][ T5949] visor 6-1:1.0: device disconnected [ 431.786814][ T5901] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 431.945755][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 431.953261][ T5901] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 431.963164][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.987226][ T5901] usb 5-1: config 0 descriptor?? [ 432.416895][ T5901] koneplus 0003:1E7D:2E22.00A4: unknown main item tag 0x0 [ 432.429466][ T5901] koneplus 0003:1E7D:2E22.00A4: unknown main item tag 0x0 [ 432.440901][ T5901] koneplus 0003:1E7D:2E22.00A4: unknown main item tag 0x0 [ 432.449972][ T5901] koneplus 0003:1E7D:2E22.00A4: unknown main item tag 0x0 [ 432.458817][ T5901] koneplus 0003:1E7D:2E22.00A4: unknown main item tag 0x0 [ 432.488882][ T5901] koneplus 0003:1E7D:2E22.00A4: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 432.632367][ T5901] usb 5-1: USB disconnect, device number 75 [ 432.674124][T18262] fido_id[18262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 432.712385][T18266] netlink: 'syz.5.5517': attribute type 2 has an invalid length. [ 433.124629][T18253] syz.2.5511 (18253): drop_caches: 2 [ 433.465705][ T5901] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 433.615645][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 433.622815][ T5901] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.634010][ T5901] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.644160][ T5901] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.659137][ T6010] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 433.667054][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 433.673686][ T5901] usb 3-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 433.683259][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.695192][ T5901] usb 3-1: config 0 descriptor?? [ 433.835608][ T6010] usb 5-1: Using ep0 maxpacket: 32 [ 433.847998][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.870422][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.887009][ T6010] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 433.900720][ T6010] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 433.915816][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.945603][ T6010] usb 5-1: config 0 descriptor?? [ 434.135264][ T5901] lenovo 0003:04B3:3109.00A5: item fetching failed at offset 5/9 [ 434.144047][ T5901] lenovo 0003:04B3:3109.00A5: hid_parse failed [ 434.150872][ T5901] lenovo 0003:04B3:3109.00A5: probe with driver lenovo failed with error -22 [ 434.336403][ T5862] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 434.358010][ T10] usb 3-1: USB disconnect, device number 86 [ 434.409856][ T6010] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00A6/input/input52 [ 434.507795][ T6010] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00A6/input/input53 [ 434.510931][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 434.540374][ T5862] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.557462][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 434.567213][ T5862] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 434.585023][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.615343][ T6010] kye 0003:0458:5011.00A6: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 434.627626][ T5862] usb 6-1: config 0 descriptor?? [ 434.705194][ T6010] usb 5-1: USB disconnect, device number 76 [ 434.777947][T18349] fido_id[18349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 435.111572][ T5862] uclogic 0003:5543:0042.00A7: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 435.264417][T18372] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5568'. [ 435.327911][ T5862] usb 6-1: USB disconnect, device number 68 [ 435.381073][T18379] ALSA: mixer_oss: invalid index 100000 [ 435.736400][T18402] netlink: 'syz.4.5583': attribute type 12 has an invalid length. [ 435.744376][T18402] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5583'. [ 435.940006][T18413] [U] ^C [ 436.035602][ T5862] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 436.195604][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 436.202575][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.228125][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.238263][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.251505][ T5862] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.260681][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.272674][ T5862] usb 3-1: config 0 descriptor?? [ 436.335892][ T44] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 436.497702][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 436.504908][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 436.519761][ T44] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 436.531194][T18441] netlink: 192 bytes leftover after parsing attributes in process `syz.5.5602'. [ 436.531638][ T44] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 436.549786][ T44] usb 5-1: Product: syz [ 436.553980][ T44] usb 5-1: Manufacturer: syz [ 436.559091][ T44] usb 5-1: SerialNumber: syz [ 436.734342][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00A8/input/input54 [ 436.760450][ T5862] microsoft 0003:045E:07DA.00A8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 436.805869][ T44] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 436.814211][ T44] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 436.827739][ T44] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 436.837291][ T44] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 436.896387][ T5862] usb 3-1: USB disconnect, device number 87 [ 437.023418][ T44] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 437.039214][ T44] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 437.052283][ T44] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 437.253174][ T44] usb 5-1: USB disconnect, device number 77 [ 437.276431][ T44] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 437.302134][ T44] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 437.316074][ T44] visor 5-1:1.0: device disconnected [ 437.365222][T18458] syz.5.5610 (18458): drop_caches: 2 [ 437.451164][T18462] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5611'. [ 437.465639][T18462] netlink: 'syz.5.5611': attribute type 1 has an invalid length. [ 437.554394][T18468] xt_limit: Overflow, try lower: 271964/0 [ 437.692320][T18478] net_ratelimit: 2 callbacks suppressed [ 437.692342][T18478] openvswitch: netlink: nsh attr 0 has unexpected len 49149 expected 0 [ 437.707168][T18478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.820738][T18482] syz.4.5622 (18482): drop_caches: 2 [ 437.996705][T18496] fuse: Bad value for 'user_id' [ 438.008565][T18496] fuse: Bad value for 'user_id' [ 438.090335][T18502] binder: 18501:18502 ioctl c0306201 200000000300 returned -22 [ 438.354203][T18521] netlink: 'syz.2.5640': attribute type 6 has an invalid length. [ 439.165668][ T5901] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 439.328874][ T5901] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.340135][ T5901] usb 6-1: config 0 interface 0 has no altsetting 0 [ 439.347243][ T5901] usb 6-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 439.357806][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.369666][T18583] can0: slcan on ptm0. [ 439.377696][ T5901] usb 6-1: config 0 descriptor?? [ 439.445941][T18582] can0 (unregistered): slcan off ptm0. [ 439.526563][ T5862] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 439.688513][ T5862] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 439.728167][ T5862] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.745709][ T5862] usb 3-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.775527][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 439.785961][ T5862] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 439.808959][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.814381][ T5901] lenovo 0003:17EF:61AE.00A9: unknown main item tag 0x1 [ 439.839413][ T5901] lenovo 0003:17EF:61AE.00A9: hidraw0: USB HID v0.04 Device [HID 17ef:61ae] on usb-dummy_hcd.5-1/input0 [ 439.845979][ T5862] usb 3-1: config 0 descriptor?? [ 439.976898][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.983340][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.024775][ T6010] usb 6-1: USB disconnect, device number 69 [ 440.279736][ T5862] kye 0003:0458:501B.00AA: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 440.316933][ T5862] kye 0003:0458:501B.00AA: hidraw0: USB HID v0.02 Device [HID 0458:501b] on usb-dummy_hcd.2-1/input0 [ 440.345678][ T5862] kye 0003:0458:501B.00AA: tablet-enabling feature report not found [ 440.362423][ T5862] kye 0003:0458:501B.00AA: tablet enabling failed [ 440.503127][ T5862] usb 3-1: USB disconnect, device number 88 [ 440.915689][ T6010] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 441.076262][ T6010] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 441.096491][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.105928][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.117689][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.128895][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.138182][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.153005][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.164272][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.185931][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.193827][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.205789][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.222752][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.235005][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.243789][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.254683][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.266481][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.276576][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.284697][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.294100][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.305356][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.315963][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.324188][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.345634][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.345665][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.345687][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.396786][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.415587][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.435735][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.446321][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.454071][ T6010] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.463145][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.474506][ T6010] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 441.486775][ T6010] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.498918][ T6010] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 441.508294][ T6010] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 441.516701][ T6010] usb 6-1: Product: syz [ 441.521078][ T6010] usb 6-1: Manufacturer: syz [ 441.525885][ T6010] usb 6-1: SerialNumber: syz [ 441.536959][ T6010] usb 6-1: config 0 descriptor?? [ 441.545907][ T6010] yurex 6-1:0.0: Could not submitting URB [ 441.552133][ T6010] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 441.720030][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'. [ 441.730116][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'. [ 441.741058][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5684'. [ 441.760059][ T6010] usb 6-1: USB disconnect, device number 70 [ 441.885860][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 441.900785][T18647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5686'. [ 441.910359][T18646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5686'. [ 442.050796][ T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 442.062656][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 442.072149][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.094757][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 442.116369][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5690'. [ 442.215607][ T6010] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 442.367792][ T6010] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 442.384759][ T6010] usb 6-1: config 0 has no interface number 0 [ 442.391678][T18671] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5697'. [ 442.406648][ T6010] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 442.418283][ T6010] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 442.429700][ T6010] usb 6-1: config 0 interface 200 has no altsetting 0 [ 442.439603][ T6010] usb 6-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 442.457407][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.469313][ T6010] usb 6-1: Product: syz [ 442.473513][ T6010] usb 6-1: Manufacturer: syz [ 442.478574][ T6010] usb 6-1: SerialNumber: syz [ 442.495421][ T6010] usb 6-1: config 0 descriptor?? [ 442.728175][ T6010] usb 6-1: USB disconnect, device number 71 [ 442.950230][T18700] loop6: detected capacity change from 0 to 524288000 [ 443.169118][ T10] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 443.370751][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 443.395559][ T10] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 443.422108][ T10] usb 5-1: USB disconnect, device number 78 [ 443.473767][T18726] netlink: 'syz.5.5723': attribute type 1 has an invalid length. [ 443.488383][T18726] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5723'. [ 443.499495][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5723'. [ 444.447286][ T30] audit: type=1400 audit(1758825722.100:32): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18794 comm="syz.5.5759" [ 444.805870][ T44] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 444.967492][ T44] usb 5-1: config index 0 descriptor too short (expected 19492, got 36) [ 444.978430][ T44] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 444.989463][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 444.998674][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.010648][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.022007][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.038251][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 445.047733][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.065160][ T44] usb 5-1: config 0 descriptor?? [ 445.489375][ T44] lg-g15 0003:046D:C225.00AB: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.4-1/input0 [ 445.680725][ T44] usb 5-1: USB disconnect, device number 79 [ 446.288217][T18868] tipc: Bearer : already 2 bearers with priority 10 [ 446.296955][T18868] tipc: Bearer : trying with adjusted priority [ 446.305679][T18868] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 446.314651][T18868] tipc: Enabled bearer , priority 9 [ 446.460868][T18879] binder: 18878:18879 ioctl c00c620f 200000000180 returned -22 [ 446.673508][T18894] netlink: 'syz.5.5805': attribute type 1 has an invalid length. [ 446.731699][T18898] netlink: 'syz.5.5807': attribute type 27 has an invalid length. [ 447.004459][T18916] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5816'. [ 447.531118][T18952] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5832'. [ 447.559866][ T30] audit: type=1326 audit(1758825725.210:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18953 comm="syz.0.5834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f758bb8eec9 code=0x0 [ 447.769405][T18970] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5842'. [ 448.568821][ T5928] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 448.741308][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 448.749108][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 448.761147][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.773198][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 448.784646][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 448.805915][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 448.816160][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 448.823613][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 448.835159][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.849393][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 448.860824][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 448.873261][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 448.881095][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 448.892612][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.905259][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 448.919157][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 448.939904][ T5928] usb 6-1: string descriptor 0 read error: -22 [ 448.946395][ T5928] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 448.955843][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.981195][ T5928] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 448.992143][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 449.004689][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.014433][ T10] usb 3-1: Product: syz [ 449.018674][ T10] usb 3-1: Manufacturer: syz [ 449.023376][ T10] usb 3-1: SerialNumber: syz [ 449.204053][ T5928] usb 6-1: USB disconnect, device number 72 [ 449.643999][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 449.659984][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 449.670104][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 449.680796][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 449.697127][ T10] usb 3-1: USB disconnect, device number 89 [ 449.995600][ T6010] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 450.165735][ T6010] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 450.181775][ T6010] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 450.195563][ T6010] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 450.205034][ T6010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 450.217248][ T6010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 450.230900][ T6010] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 450.245643][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 450.255424][ T6010] usb 6-1: Product: syz [ 450.260136][ T6010] usb 6-1: Manufacturer: syz [ 450.279052][ T6010] cdc_wdm 6-1:1.0: skipping garbage [ 450.284308][ T6010] cdc_wdm 6-1:1.0: skipping garbage [ 450.292460][ T6010] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 450.309952][ T6010] cdc_wdm 6-1:1.0: Unknown control protocol [ 450.586582][T19070] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 450.678256][ T10] usb 6-1: USB disconnect, device number 73 [ 451.238859][ T6010] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 451.406144][ T6010] usb 3-1: Using ep0 maxpacket: 8 [ 451.415674][ T6010] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 451.424162][ T6010] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 451.432330][ T6010] usb 3-1: config 0 has no interface number 0 [ 451.438774][ T6010] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 451.450480][ T6010] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0xE has an invalid bInterval 211, changing to 11 [ 451.464591][ T6010] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0xE has invalid maxpacket 57888, setting to 1024 [ 451.478999][ T6010] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 451.489327][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 451.498478][ T6010] usb 3-1: Product: syz [ 451.513297][ T6010] usb 3-1: config 0 descriptor?? [ 451.730134][T19133] binder: 19132:19133 ioctl c0306201 0 returned -14 [ 451.733660][ T44] usb 3-1: USB disconnect, device number 90 [ 451.745405][T19133] binder: 19132:19133 ioctl c0306201 2000000000c0 returned -11 [ 451.815659][ T6010] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 451.910584][T19140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5923'. [ 451.985310][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.997588][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.007638][ T6010] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 452.016803][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.028846][ T6010] usb 5-1: config 0 descriptor?? [ 452.454954][ T6010] arvo 0003:1E7D:30D4.00AC: unknown main item tag 0x0 [ 452.462281][ T6010] arvo 0003:1E7D:30D4.00AC: unknown main item tag 0x0 [ 452.469732][ T6010] arvo 0003:1E7D:30D4.00AC: unknown main item tag 0x0 [ 452.476938][ T6010] arvo 0003:1E7D:30D4.00AC: unknown main item tag 0x0 [ 452.492223][ T6010] arvo 0003:1E7D:30D4.00AC: unknown main item tag 0x0 [ 452.502473][ T6010] arvo 0003:1E7D:30D4.00AC: unknown main item tag 0x0 [ 452.515631][ T6010] arvo 0003:1E7D:30D4.00AC: unknown main item tag 0x0 [ 452.532978][ T6010] arvo 0003:1E7D:30D4.00AC: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 452.557335][ T5862] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 452.652662][ T6010] arvo 0003:1E7D:30D4.00AC: couldn't init struct arvo_device [ 452.664242][ T6010] arvo 0003:1E7D:30D4.00AC: couldn't install keyboard [ 452.675594][ T6010] arvo 0003:1E7D:30D4.00AC: probe with driver arvo failed with error -71 [ 452.692079][ T6010] usb 5-1: USB disconnect, device number 80 [ 452.729156][ T5862] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 452.743818][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.761527][ T5862] usb 3-1: Product: syz [ 452.779696][ T5862] usb 3-1: Manufacturer: syz [ 452.789984][ T5862] usb 3-1: SerialNumber: syz [ 452.806691][ T5862] usb 3-1: config 0 descriptor?? [ 452.817109][ T5862] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 452.888391][T19178] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5941'. [ 453.036628][T19186] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5945'. [ 453.235365][ T5862] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55 [ 453.251008][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5951'. [ 453.421672][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5954'. [ 453.456637][ T5862] usb 3-1: USB disconnect, device number 91 [ 453.555659][T19205] syz.4.5954 (19205) used greatest stack depth: 17832 bytes left [ 453.886047][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 454.040033][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.060634][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.074705][ T10] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 454.084745][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.096646][ T10] usb 5-1: config 0 descriptor?? [ 454.234400][T19249] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 454.516655][ T6010] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 454.535335][ T10] hid (null): invalid report_count -160948754 [ 454.559329][ T10] megaworld 0003:07B5:0312.00AD: invalid report_count -160948754 [ 454.583869][ T10] megaworld 0003:07B5:0312.00AD: item 0 4 1 9 parsing failed [ 454.596368][ T10] megaworld 0003:07B5:0312.00AD: parse failed [ 454.602567][ T10] megaworld 0003:07B5:0312.00AD: probe with driver megaworld failed with error -22 [ 454.649047][T19272] netlink: 536 bytes leftover after parsing attributes in process `syz.5.5985'. [ 454.658497][T19272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5985'. [ 454.685900][ T6010] usb 3-1: Using ep0 maxpacket: 16 [ 454.694997][ T6010] usb 3-1: config 0 has no interfaces? [ 454.706541][ T6010] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 454.725695][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.733806][ T6010] usb 3-1: Product: syz [ 454.745983][ T6010] usb 3-1: Manufacturer: syz [ 454.750623][ T6010] usb 3-1: SerialNumber: syz [ 454.772945][ T6010] usb 3-1: config 0 descriptor?? [ 454.773003][ T10] usb 5-1: USB disconnect, device number 81 [ 454.997180][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.013562][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.023654][ T6010] usb 3-1: USB disconnect, device number 92 [ 455.501041][T19308] netlink: 'syz.0.6003': attribute type 2 has an invalid length. [ 455.508959][T19308] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6003'. [ 455.655657][T19312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6005'. [ 455.675619][ T44] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 455.825777][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 455.837519][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.862192][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.881688][ T44] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 455.896748][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.924786][ T44] usb 5-1: config 0 descriptor?? [ 456.190486][T19343] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6018'. [ 456.357651][ T44] koneplus 0003:1E7D:2D51.00AE: unbalanced collection at end of report description [ 456.393721][ T44] koneplus 0003:1E7D:2D51.00AE: parse failed [ 456.400385][ T44] koneplus 0003:1E7D:2D51.00AE: probe with driver koneplus failed with error -22 [ 456.548917][ T44] usb 5-1: USB disconnect, device number 82 [ 457.757025][ T5901] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 457.868742][T19441] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 457.928759][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 457.938598][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 457.962355][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 457.980769][ T5901] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 457.996108][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.004237][ T5901] usb 6-1: Product: syz [ 458.008545][ T5901] usb 6-1: Manufacturer: syz [ 458.013166][ T5901] usb 6-1: SerialNumber: syz [ 458.026226][ T5901] usb 6-1: config 0 descriptor?? [ 458.036919][ T5901] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 458.055808][ T5901] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 458.075572][ T5928] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 458.241231][ T5928] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.252411][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 458.259118][ T5928] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 458.268232][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.278665][ T5928] usb 5-1: config 0 descriptor?? [ 458.475663][ T6010] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 458.626202][ T6010] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 458.637648][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.646992][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 458.658285][ T5901] em28xx 6-1:0.0: chip ID is em28174 [ 458.663692][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.677919][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.687204][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 458.698854][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.708267][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.711252][ T5928] microsoft 0003:045E:00F9.00AF: unknown main item tag 0x0 [ 458.717899][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 458.736166][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.737712][ T5928] microsoft 0003:045E:00F9.00AF: unknown main item tag 0x0 [ 458.747777][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.759734][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 458.772050][ T5928] microsoft 0003:045E:00F9.00AF: unknown main item tag 0x0 [ 458.774068][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.786955][ T5928] microsoft 0003:045E:00F9.00AF: unknown main item tag 0x0 [ 458.787641][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.794206][ T5928] microsoft 0003:045E:00F9.00AF: unknown main item tag 0x0 [ 458.803974][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 458.810625][ T5928] microsoft 0003:045E:00F9.00AF: unknown main item tag 0x0 [ 458.821988][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.828839][ T5928] microsoft 0003:045E:00F9.00AF: unknown main item tag 0x0 [ 458.837360][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.852576][ T5928] microsoft 0003:045E:00F9.00AF: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.4-1/input0 [ 458.852610][ T5928] microsoft 0003:045E:00F9.00AF: no inputs found [ 458.852626][ T5928] microsoft 0003:045E:00F9.00AF: could not initialize ff, continuing anyway [ 458.869994][ T5928] usb 6-1: USB disconnect, device number 74 [ 458.871761][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 458.897677][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.905837][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.906953][ T5928] em28xx 6-1:0.0: Disconnecting em28xx [ 458.938125][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 458.939669][ T5928] em28xx 6-1:0.0: Freeing device [ 458.962740][ T5901] usb 5-1: USB disconnect, device number 83 [ 458.972289][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.987474][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.997151][ T6010] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 459.014881][ T6010] usb 3-1: config 0 interface 0 has no altsetting 0 [ 459.020511][T19454] fido_id[19454]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 459.028383][ T6010] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 459.054355][ T6010] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 459.063380][ T6010] usb 3-1: Product: syz [ 459.067892][ T6010] usb 3-1: Manufacturer: syz [ 459.072591][ T6010] usb 3-1: SerialNumber: syz [ 459.080736][ T6010] usb 3-1: config 0 descriptor?? [ 459.094655][ T6010] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 459.302400][ T5928] usb 3-1: USB disconnect, device number 93 [ 459.312380][ T5928] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 460.096549][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6076'. [ 460.106386][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6076'. [ 460.382037][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6080'. [ 460.385821][ T5928] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 460.395059][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6080'. [ 460.409546][T19477] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6080'. [ 460.419789][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6080'. [ 460.429710][T19477] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6080'. [ 460.545777][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 460.553828][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.578791][ T5928] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.594817][ T5928] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.605193][ T5928] usb 3-1: config 0 interface 0 has no altsetting 0 [ 460.612528][ T5928] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 460.622085][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.647393][ T5928] usb 3-1: config 0 descriptor?? [ 460.722373][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6086'. [ 461.096857][ T5928] kye 0003:0458:0153.00B0: unknown main item tag 0x0 [ 461.110340][ T5928] kye 0003:0458:0153.00B0: unknown main item tag 0x0 [ 461.126006][ T5928] kye 0003:0458:0153.00B0: unknown main item tag 0x0 [ 461.176808][ T5928] kye 0003:0458:0153.00B0: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 461.336115][ T6010] usb 3-1: USB disconnect, device number 94 [ 461.386238][T19521] program syz.4.6099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.523761][T19529] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6103'. [ 461.586518][T19533] loop9: detected capacity change from 0 to 7 [ 461.594617][T19533] buffer_io_error: 11 callbacks suppressed [ 461.594636][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.611787][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.619824][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.630414][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.638484][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.639888][T19535] program syz.5.6106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.652595][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.663680][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.672096][T19533] ldm_validate_partition_table(): Disk read failed. [ 461.678863][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.688210][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.696239][T19533] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.704256][T19533] Dev loop9: unable to read RDB block 0 [ 461.712868][T19533] loop9: unable to read partition table [ 461.715641][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 461.718837][T19533] loop9: partition table beyond EOD, truncated [ 461.741383][T19533] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 461.741383][T19533] ) failed (rc=-5) [ 461.820023][T19540] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.6108'. [ 461.877874][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 461.890161][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.909650][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.960013][ T10] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 461.969809][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.984397][ T10] usb 5-1: Product: syz [ 461.992118][ T10] usb 5-1: Manufacturer: syz [ 461.999641][ T10] usb 5-1: SerialNumber: syz [ 462.008126][ T10] usb 5-1: config 0 descriptor?? [ 462.310332][T19562] program syz.5.6119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.627565][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 462.653244][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 462.670592][ T10] usb 5-1: USB disconnect, device number 84 [ 463.244567][T19589] batadv_slave_1: entered promiscuous mode [ 463.266426][T19588] batadv_slave_1: left promiscuous mode [ 463.425586][ T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 463.592386][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 463.608385][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 463.633679][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 463.656036][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 463.675629][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 463.701401][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 463.715584][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 463.734031][ T10] usb 6-1: Product: syz [ 463.744682][ T10] usb 6-1: Manufacturer: syz [ 463.757183][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 463.762460][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 463.780446][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 463.795782][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 464.003411][ T5901] usb 6-1: USB disconnect, device number 75 [ 464.116711][T19612] bpf: Bad value for 'uid' [ 465.223389][T19653] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 465.237905][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 466.171004][ T30] audit: type=1326 audit(1758825743.820:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19662 comm="syz.5.6165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f268898eec9 code=0x7fc00000 [ 466.300906][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6174'. [ 466.369094][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6176'. [ 466.628301][T19704] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6184'. [ 466.995704][ T5928] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 467.155733][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 467.162599][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.173094][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.184213][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 467.193967][ T5928] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 467.203700][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.218883][ T5928] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 467.228015][ T5928] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 467.237300][ T5928] usb 3-1: Manufacturer: syz [ 467.244488][ T5928] usb 3-1: config 0 descriptor?? [ 467.245755][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 467.249719][ T5869] Bluetooth: hci4: command 0x1003 tx timeout [ 467.564981][ T5928] rc_core: IR keymap rc-hauppauge not found [ 467.582484][ T5928] Registered IR keymap rc-empty [ 467.591975][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.615786][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.651090][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 467.677247][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input56 [ 467.695890][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.729490][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.756035][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.775759][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.812554][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.836155][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.855671][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.875685][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.905738][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.935786][ T5928] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 467.956641][ T5901] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 467.964400][T19745] loop5: detected capacity change from 0 to 7 [ 467.976240][ T5928] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 467.985918][ T5928] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 467.991009][T17972] Dev loop5: unable to read RDB block 7 [ 468.005962][ T5928] usb 3-1: USB disconnect, device number 95 [ 468.010578][T17972] loop5: unable to read partition table [ 468.030666][T17972] loop5: partition table beyond EOD, truncated [ 468.054130][T19745] Dev loop5: unable to read RDB block 7 [ 468.062667][T19745] loop5: unable to read partition table [ 468.072470][T19745] loop5: partition table beyond EOD, truncated [ 468.079257][T19745] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 468.107753][T19746] Dev loop5: unable to read RDB block 7 [ 468.113489][T19746] loop5: unable to read partition table [ 468.120127][T19746] loop5: partition table beyond EOD, truncated [ 468.120251][ T5901] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 468.152189][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.170125][ T5901] usb 6-1: Product: syz [ 468.174471][ T5901] usb 6-1: Manufacturer: syz [ 468.179911][ T5901] usb 6-1: SerialNumber: syz [ 468.199899][ T5901] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 468.217447][ T6010] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 468.824307][T19770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.874566][ T5901] usb 6-1: USB disconnect, device number 76 [ 469.165598][ T5862] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 469.325619][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 469.332448][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.343456][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.353291][ T5862] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 469.362456][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.372851][ T5862] usb 3-1: config 0 descriptor?? [ 469.485970][ T6010] usb 6-1: Service connection timeout for: 256 [ 469.497685][ T6010] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 469.513550][ T6010] ath9k_htc: Failed to initialize the device [ 469.520843][ T5901] usb 6-1: ath9k_htc: USB layer deinitialized [ 469.787714][ T5862] apple 0003:05AC:024B.00B1: unknown global tag 0xe [ 469.794389][ T5862] apple 0003:05AC:024B.00B1: item 0 1 1 14 parsing failed [ 469.803508][ T5862] apple 0003:05AC:024B.00B1: parse failed [ 469.809997][ T5862] apple 0003:05AC:024B.00B1: probe with driver apple failed with error -22 [ 469.985644][ T5928] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 470.003970][ T5862] usb 3-1: USB disconnect, device number 96 [ 470.175666][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 470.182815][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 470.190332][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 470.202214][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.215375][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.227599][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.241071][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 470.248815][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 470.260072][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.271788][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.282859][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.295362][ T5928] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 470.302830][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 470.315391][ T5928] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 470.327157][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.338237][ T5928] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.353034][ T5928] usb 6-1: string descriptor 0 read error: -22 [ 470.359505][ T5928] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 470.368925][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.386141][ T5928] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 470.415894][ T6010] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 470.568140][ T6010] usb 5-1: Using ep0 maxpacket: 32 [ 470.578787][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.605548][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.618311][ T5928] usb 6-1: USB disconnect, device number 77 [ 470.625811][ T6010] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 470.644448][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.667528][ T6010] usb 5-1: config 0 descriptor?? [ 470.829099][T19797] adutux: No device or device unplugged -19 [ 470.886258][ T6010] usbhid 5-1:0.0: can't add hid device: -71 [ 470.892352][ T6010] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 470.903920][ T6010] usb 5-1: USB disconnect, device number 85 [ 471.578561][T19832] kvm: kvm [19831]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xfffffffffffffffd [ 471.641517][T19838] batadv_slave_1: entered promiscuous mode [ 471.660179][T19837] batadv_slave_1: left promiscuous mode [ 472.195914][ T5928] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 472.355591][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 472.364302][ T5928] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 472.398765][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.428712][ T5928] pvrusb2: Hardware description: Terratec Grabster AV400 [ 472.447616][ T5928] pvrusb2: ********** [ 472.455285][ T5928] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 472.470214][ T5928] pvrusb2: Important functionality might not be entirely working. [ 472.480323][ T5928] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 472.483975][T19875] input: syz0 as /devices/virtual/input/input58 [ 472.503626][ T5928] pvrusb2: ********** [ 472.644539][ T2345] pvrusb2: Invalid write control endpoint [ 472.786111][T19873] nbd0: detected capacity change from 0 to 127 [ 472.798121][ T5869] block nbd0: Receive control failed (result -104) [ 472.798669][ T5872] block nbd0: Receive control failed (result -32) [ 472.814908][T17970] block nbd0: Send control failed (result -32) [ 472.824871][T17970] block nbd0: Request send failed, requeueing [ 472.833814][ T2345] [ 472.836173][ T2345] ====================================================== [ 472.843210][ T2345] WARNING: possible circular locking dependency detected [ 472.850256][ T2345] syzkaller #0 Not tainted [ 472.854681][ T2345] ------------------------------------------------------ [ 472.861799][ T2345] pvrusb2-context/2345 is trying to acquire lock: [ 472.865786][T17970] block nbd0: Dead connection, failed to find a fallback [ 472.868235][ T2345] ffff88801bea7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x2fb/0x3e0 [ 472.868296][ T2345] [ 472.868296][ T2345] but task is already holding lock: [ 472.868304][ T2345] ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 472.868347][ T2345] [ 472.868347][ T2345] which lock already depends on the new lock. [ 472.868347][ T2345] [ 472.868354][ T2345] [ 472.868354][ T2345] the existing dependency chain (in reverse order) is: [ 472.868363][ T2345] [ 472.868363][ T2345] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 472.868406][ T2345] lock_acquire+0x120/0x360 [ 472.868427][ T2345] down_write+0x96/0x1f0 [ 472.868447][ T2345] kernfs_add_one+0x41/0x520 [ 472.868462][ T2345] kernfs_create_dir_ns+0xde/0x130 [ 472.868479][ T2345] internal_create_group+0x419/0x1110 [ 472.868506][ T2345] cpuhp_invoke_callback+0x445/0x860 [ 472.868531][ T2345] cpuhp_issue_call+0x430/0x7a0 [ 472.868554][ T2345] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 472.868578][ T2345] __cpuhp_setup_state+0x3f/0x60 [ 472.868601][ T2345] do_one_initcall+0x236/0x820 [ 472.868619][ T2345] do_initcall_level+0x104/0x190 [ 472.868644][ T2345] do_initcalls+0x59/0xa0 [ 472.868667][ T2345] kernel_init_freeable+0x334/0x4b0 [ 472.868691][ T2345] kernel_init+0x1d/0x1d0 [ 472.868712][ T2345] ret_from_fork+0x4bc/0x870 [ 472.868733][ T2345] ret_from_fork_asm+0x1a/0x30 [ 472.868751][ T2345] [ 472.868751][ T2345] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 472.868778][ T2345] [ 472.868778][ T2345] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 472.868806][ T2345] lock_acquire+0x120/0x360 [ 472.868825][ T2345] cpus_read_lock+0x42/0x160 [ 472.868844][ T2345] static_key_slow_inc+0x12/0x30 [ 472.868868][ T2345] setup_udp_tunnel_sock+0x34f/0x550 [ 472.868892][ T2345] l2tp_tunnel_register+0xcb6/0x1320 [ 472.868913][ T2345] pppol2tp_connect+0x87c/0x1750 [ 472.868935][ T2345] __sys_connect+0x316/0x440 [ 472.868963][ T2345] __x64_sys_connect+0x7a/0x90 [ 472.868988][ T2345] do_syscall_64+0xfa/0xfa0 [ 472.869006][ T2345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.869024][ T2345] [ 472.869024][ T2345] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 472.869053][ T2345] lock_acquire+0x120/0x360 [ 472.869072][ T2345] lock_sock_nested+0x48/0x100 [ 472.869096][ T2345] inet_shutdown+0x6a/0x390 [ 472.869121][ T2345] nbd_mark_nsock_dead+0x2e9/0x560 [ 472.869148][ T2345] sock_shutdown+0x15e/0x260 [ 472.869171][ T2345] nbd_config_put+0x342/0x790 [ 472.869195][ T2345] nbd_release+0xfe/0x140 [ 472.877042][ T125] block nbd0: Dead connection, failed to find a fallback [ 472.886794][ T2345] bdev_release+0x536/0x650 [ 472.886837][ T2345] blkdev_release+0x15/0x20 [ 472.886859][ T2345] __fput+0x44c/0xa70 [ 472.886884][ T2345] task_work_run+0x1d4/0x260 [ 472.886904][ T2345] exit_to_user_mode_loop+0xe9/0x130 [ 472.886926][ T2345] do_syscall_64+0x2bd/0xfa0 [ 472.900188][T17970] blk_print_req_error: 25 callbacks suppressed [ 472.900205][T17970] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.903637][ T2345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.914449][ T125] block nbd0: shutting down sockets [ 472.923153][ T2345] [ 472.923153][ T2345] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 472.923190][ T2345] lock_acquire+0x120/0x360 [ 472.923215][ T2345] __mutex_lock+0x187/0x1350 [ 472.923242][ T2345] nbd_queue_rq+0x257/0xf10 [ 473.218732][ T2345] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 473.224846][ T2345] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 473.231720][ T2345] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 473.238225][ T2345] blk_mq_run_hw_queue+0x348/0x4f0 [ 473.243854][ T2345] blk_mq_dispatch_list+0xd0c/0xe00 [ 473.249575][ T2345] blk_mq_flush_plug_list+0x469/0x550 [ 473.255481][ T2345] __blk_flush_plug+0x3d3/0x4b0 [ 473.260874][ T2345] __submit_bio+0x2d3/0x5a0 [ 473.265892][ T2345] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 473.272062][ T2345] block_read_full_folio+0x599/0x830 [ 473.277866][ T2345] filemap_read_folio+0x117/0x380 [ 473.283410][ T2345] do_read_cache_folio+0x350/0x590 [ 473.289048][ T2345] read_part_sector+0xb6/0x2b0 [ 473.294339][ T2345] adfspart_check_ICS+0xa4/0xa50 [ 473.299800][ T2345] bdev_disk_changed+0x75f/0x14b0 [ 473.305344][ T2345] blkdev_get_whole+0x380/0x510 [ 473.310741][ T2345] bdev_open+0x31e/0xd30 [ 473.315504][ T2345] blkdev_open+0x457/0x600 [ 473.320444][ T2345] do_dentry_open+0x953/0x13f0 [ 473.325724][ T2345] vfs_open+0x3b/0x340 [ 473.330316][ T2345] path_openat+0x2ee5/0x3830 [ 473.335522][ T2345] do_filp_open+0x1fa/0x410 [ 473.340555][ T2345] do_sys_openat2+0x121/0x1c0 [ 473.345754][ T2345] __x64_sys_openat+0x138/0x170 [ 473.351132][ T2345] do_syscall_64+0xfa/0xfa0 [ 473.356166][ T2345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.362575][ T2345] [ 473.362575][ T2345] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 473.369784][ T2345] lock_acquire+0x120/0x360 [ 473.374825][ T2345] __mutex_lock+0x187/0x1350 [ 473.379941][ T2345] nbd_queue_rq+0xc8/0xf10 [ 473.384994][ T2345] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 473.391116][ T2345] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 473.397992][ T2345] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 473.404515][ T2345] blk_mq_run_hw_queue+0x348/0x4f0 [ 473.410155][ T2345] blk_mq_dispatch_list+0xd0c/0xe00 [ 473.415893][ T2345] blk_mq_flush_plug_list+0x469/0x550 [ 473.421817][ T2345] __blk_flush_plug+0x3d3/0x4b0 [ 473.427211][ T2345] __submit_bio+0x2d3/0x5a0 [ 473.432244][ T2345] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 473.438413][ T2345] block_read_full_folio+0x599/0x830 [ 473.444235][ T2345] filemap_read_folio+0x117/0x380 [ 473.449781][ T2345] do_read_cache_folio+0x350/0x590 [ 473.455412][ T2345] read_part_sector+0xb6/0x2b0 [ 473.460703][ T2345] adfspart_check_ICS+0xa4/0xa50 [ 473.466163][ T2345] bdev_disk_changed+0x75f/0x14b0 [ 473.471715][ T2345] blkdev_get_whole+0x380/0x510 [ 473.477088][ T2345] bdev_open+0x31e/0xd30 [ 473.481946][ T2345] blkdev_open+0x457/0x600 [ 473.486920][ T2345] do_dentry_open+0x953/0x13f0 [ 473.492219][ T2345] vfs_open+0x3b/0x340 [ 473.496814][ T2345] path_openat+0x2ee5/0x3830 [ 473.501935][ T2345] do_filp_open+0x1fa/0x410 [ 473.506963][ T2345] do_sys_openat2+0x121/0x1c0 [ 473.512168][ T2345] __x64_sys_openat+0x138/0x170 [ 473.517557][ T2345] do_syscall_64+0xfa/0xfa0 [ 473.522580][ T2345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.529002][ T2345] [ 473.529002][ T2345] -> #4 (set->srcu){.+.+}-{0:0}: [ 473.536134][ T2345] lock_sync+0xba/0x160 [ 473.540819][ T2345] __synchronize_srcu+0x96/0x3a0 [ 473.546275][ T2345] elevator_switch+0x12b/0x640 [ 473.551557][ T2345] elevator_change+0x315/0x4c0 [ 473.556880][ T2345] elevator_set_default+0x186/0x260 [ 473.562601][ T2345] blk_register_queue+0x34e/0x3f0 [ 473.568141][ T2345] __add_disk+0x677/0xd50 [ 473.572999][ T2345] add_disk_fwnode+0xfc/0x480 [ 473.578205][ T2345] nbd_dev_add+0x717/0xae0 [ 473.583145][ T2345] nbd_init+0x168/0x1f0 [ 473.587835][ T2345] do_one_initcall+0x236/0x820 [ 473.593210][ T2345] do_initcall_level+0x104/0x190 [ 473.598762][ T2345] do_initcalls+0x59/0xa0 [ 473.603620][ T2345] kernel_init_freeable+0x334/0x4b0 [ 473.609341][ T2345] kernel_init+0x1d/0x1d0 [ 473.614196][ T2345] ret_from_fork+0x4bc/0x870 [ 473.619312][ T2345] ret_from_fork_asm+0x1a/0x30 [ 473.624595][ T2345] [ 473.624595][ T2345] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 473.632424][ T2345] lock_acquire+0x120/0x360 [ 473.637489][ T2345] __mutex_lock+0x187/0x1350 [ 473.642599][ T2345] elevator_change+0x1e5/0x4c0 [ 473.647916][ T2345] elevator_set_none+0x42/0xb0 [ 473.653288][ T2345] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 473.659618][ T2345] nbd_start_device+0x17f/0xb10 [ 473.665004][ T2345] nbd_genl_connect+0x135b/0x18f0 [ 473.670566][ T2345] genl_family_rcv_msg_doit+0x215/0x300 [ 473.676663][ T2345] genl_rcv_msg+0x60e/0x790 [ 473.681726][ T2345] netlink_rcv_skb+0x208/0x470 [ 473.687105][ T2345] genl_rcv+0x28/0x40 [ 473.691622][ T2345] netlink_unicast+0x82f/0x9e0 [ 473.696910][ T2345] netlink_sendmsg+0x805/0xb30 [ 473.702211][ T2345] __sock_sendmsg+0x21c/0x270 [ 473.707406][ T2345] ____sys_sendmsg+0x505/0x830 [ 473.712776][ T2345] ___sys_sendmsg+0x21f/0x2a0 [ 473.717999][ T2345] __x64_sys_sendmsg+0x19b/0x260 [ 473.723455][ T2345] do_syscall_64+0xfa/0xfa0 [ 473.728478][ T2345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.734911][ T2345] [ 473.734911][ T2345] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 473.743551][ T2345] lock_acquire+0x120/0x360 [ 473.748589][ T2345] blk_alloc_queue+0x538/0x620 [ 473.753873][ T2345] __blk_mq_alloc_disk+0x15c/0x340 [ 473.759519][ T2345] nbd_dev_add+0x46c/0xae0 [ 473.764482][ T2345] nbd_init+0x168/0x1f0 [ 473.769167][ T2345] do_one_initcall+0x236/0x820 [ 473.774452][ T2345] do_initcall_level+0x104/0x190 [ 473.779920][ T2345] do_initcalls+0x59/0xa0 [ 473.784786][ T2345] kernel_init_freeable+0x334/0x4b0 [ 473.790513][ T2345] kernel_init+0x1d/0x1d0 [ 473.795365][ T2345] ret_from_fork+0x4bc/0x870 [ 473.800480][ T2345] ret_from_fork_asm+0x1a/0x30 [ 473.805763][ T2345] [ 473.805763][ T2345] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 473.813063][ T2345] lock_acquire+0x120/0x360 [ 473.818089][ T2345] fs_reclaim_acquire+0x72/0x100 [ 473.823564][ T2345] kmem_cache_alloc_noprof+0x45/0x6e0 [ 473.829459][ T2345] __kernfs_iattrs+0xd9/0x320 [ 473.834669][ T2345] kernfs_iop_setattr+0xea/0x3f0 [ 473.840136][ T2345] notify_change+0xc1a/0xf40 [ 473.845246][ T2345] do_truncate+0x1a4/0x220 [ 473.850185][ T2345] path_openat+0x306c/0x3830 [ 473.855307][ T2345] do_filp_open+0x1fa/0x410 [ 473.860341][ T2345] do_sys_openat2+0x121/0x1c0 [ 473.865548][ T2345] __x64_sys_openat+0x138/0x170 [ 473.870932][ T2345] do_syscall_64+0xfa/0xfa0 [ 473.875975][ T2345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.882385][ T2345] [ 473.882385][ T2345] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 473.890900][ T2345] validate_chain+0xb9b/0x2140 [ 473.896187][ T2345] __lock_acquire+0xab9/0xd20 [ 473.901387][ T2345] lock_acquire+0x120/0x360 [ 473.906411][ T2345] down_write+0x96/0x1f0 [ 473.911702][ T2345] kernfs_link_sibling+0x2fb/0x3e0 [ 473.917341][ T2345] kernfs_add_one+0x1e0/0x520 [ 473.922535][ T2345] kernfs_create_link+0x161/0x200 [ 473.928077][ T2345] sysfs_do_create_link_sd+0x83/0x110 [ 473.934001][ T2345] driver_sysfs_add+0x89/0x210 [ 473.939370][ T2345] really_probe+0x151/0x9e0 [ 473.944393][ T2345] __driver_probe_device+0x18c/0x2f0 [ 473.950195][ T2345] driver_probe_device+0x4f/0x430 [ 473.955921][ T2345] __device_attach_driver+0x2ce/0x530 [ 473.961823][ T2345] bus_for_each_drv+0x251/0x2e0 [ 473.967192][ T2345] __device_attach+0x2b8/0x400 [ 473.972467][ T2345] bus_probe_device+0x185/0x260 [ 473.977837][ T2345] device_add+0x7b6/0xb50 [ 473.982697][ T2345] i2c_new_client_device+0xa11/0x1120 [ 473.988684][ T2345] v4l2_i2c_new_subdev_board+0x86/0x250 [ 473.994752][ T2345] v4l2_i2c_new_subdev+0x14a/0x1e0 [ 474.000406][ T2345] pvr2_hdw_initialize+0xe18/0x3ac0 [ 474.006152][ T2345] pvr2_context_thread_func+0x487/0xaf0 [ 474.012214][ T2345] kthread+0x711/0x8a0 [ 474.016838][ T2345] ret_from_fork+0x4bc/0x870 [ 474.021968][ T2345] ret_from_fork_asm+0x1a/0x30 [ 474.027266][ T2345] [ 474.027266][ T2345] other info that might help us debug this: [ 474.027266][ T2345] [ 474.037499][ T2345] Chain exists of: [ 474.037499][ T2345] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 474.037499][ T2345] [ 474.051927][ T2345] Possible unsafe locking scenario: [ 474.051927][ T2345] [ 474.059370][ T2345] CPU0 CPU1 [ 474.064733][ T2345] ---- ---- [ 474.070095][ T2345] lock(&root->kernfs_rwsem); [ 474.074865][ T2345] lock(cpuhp_state_mutex); [ 474.081978][ T2345] lock(&root->kernfs_rwsem); [ 474.089258][ T2345] lock(&root->kernfs_iattr_rwsem); [ 474.094546][ T2345] [ 474.094546][ T2345] *** DEADLOCK *** [ 474.094546][ T2345] [ 474.102691][ T2345] 3 locks held by pvrusb2-context/2345: [ 474.108238][ T2345] #0: ffff888058e18188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xc6/0x3ac0 [ 474.118688][ T2345] #1: ffff88802fef3108 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 474.127997][ T2345] #2: ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 474.137829][ T2345] [ 474.137829][ T2345] stack backtrace: [ 474.143727][ T2345] CPU: 1 UID: 0 PID: 2345 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 474.143746][ T2345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.143763][ T2345] Call Trace: [ 474.143771][ T2345] [ 474.143779][ T2345] dump_stack_lvl+0x189/0x250 [ 474.143806][ T2345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.143831][ T2345] ? __pfx__printk+0x10/0x10 [ 474.143853][ T2345] ? print_lock_name+0xde/0x100 [ 474.143881][ T2345] print_circular_bug+0x2ee/0x310 [ 474.143906][ T2345] check_noncircular+0x134/0x160 [ 474.143930][ T2345] validate_chain+0xb9b/0x2140 [ 474.143953][ T2345] ? lockdep_unlock+0x89/0x120 [ 474.143968][ T2345] ? validate_chain+0x897/0x2140 [ 474.143995][ T2345] __lock_acquire+0xab9/0xd20 [ 474.144015][ T2345] ? kernfs_link_sibling+0x2fb/0x3e0 [ 474.144029][ T2345] lock_acquire+0x120/0x360 [ 474.144049][ T2345] ? kernfs_link_sibling+0x2fb/0x3e0 [ 474.144067][ T2345] ? kernfs_root+0x1c/0x230 [ 474.144108][ T2345] down_write+0x96/0x1f0 [ 474.144127][ T2345] ? kernfs_link_sibling+0x2fb/0x3e0 [ 474.144143][ T2345] ? __pfx_down_write+0x10/0x10 [ 474.144161][ T2345] ? kernfs_root+0x1c/0x230 [ 474.144183][ T2345] ? kernfs_root+0x1c/0x230 [ 474.144207][ T2345] ? kernfs_root+0x1ea/0x230 [ 474.144231][ T2345] kernfs_link_sibling+0x2fb/0x3e0 [ 474.144249][ T2345] kernfs_add_one+0x1e0/0x520 [ 474.144265][ T2345] kernfs_create_link+0x161/0x200 [ 474.144287][ T2345] sysfs_do_create_link_sd+0x83/0x110 [ 474.144313][ T2345] driver_sysfs_add+0x89/0x210 [ 474.144330][ T2345] really_probe+0x151/0x9e0 [ 474.144348][ T2345] __driver_probe_device+0x18c/0x2f0 [ 474.144366][ T2345] driver_probe_device+0x4f/0x430 [ 474.144383][ T2345] __device_attach_driver+0x2ce/0x530 [ 474.144402][ T2345] bus_for_each_drv+0x251/0x2e0 [ 474.144423][ T2345] ? __pfx___device_attach_driver+0x10/0x10 [ 474.144442][ T2345] ? __pfx_bus_for_each_drv+0x10/0x10 [ 474.144467][ T2345] __device_attach+0x2b8/0x400 [ 474.144482][ T2345] ? __pfx___device_attach+0x10/0x10 [ 474.144499][ T2345] ? do_raw_spin_unlock+0x122/0x240 [ 474.144526][ T2345] bus_probe_device+0x185/0x260 [ 474.144549][ T2345] device_add+0x7b6/0xb50 [ 474.144575][ T2345] i2c_new_client_device+0xa11/0x1120 [ 474.144592][ T2345] ? __pfx___request_module+0x10/0x10 [ 474.144616][ T2345] ? __pfx_i2c_new_client_device+0x10/0x10 [ 474.144631][ T2345] ? idr_alloc+0x89/0xd0 [ 474.144658][ T2345] v4l2_i2c_new_subdev_board+0x86/0x250 [ 474.144676][ T2345] v4l2_i2c_new_subdev+0x14a/0x1e0 [ 474.144693][ T2345] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 474.144716][ T2345] pvr2_hdw_initialize+0xe18/0x3ac0 [ 474.144742][ T2345] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 474.144760][ T2345] ? rcu_is_watching+0x15/0xb0 [ 474.144781][ T2345] ? trace_contention_end+0x39/0x120 [ 474.144808][ T2345] ? pvr2_context_thread_func+0x263/0xaf0 [ 474.144828][ T2345] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 474.144848][ T2345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.144866][ T2345] ? schedule+0x91/0x360 [ 474.144897][ T2345] ? schedule+0x16f/0x360 [ 474.144921][ T2345] pvr2_context_thread_func+0x487/0xaf0 [ 474.144941][ T2345] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 474.144959][ T2345] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 474.144984][ T2345] ? __pfx_autoremove_wake_function+0x10/0x10 [ 474.145012][ T2345] ? __kthread_parkme+0x7b/0x200 [ 474.145035][ T2345] ? __kthread_parkme+0x1a1/0x200 [ 474.145058][ T2345] kthread+0x711/0x8a0 [ 474.145084][ T2345] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 474.145102][ T2345] ? __pfx_kthread+0x10/0x10 [ 474.145129][ T2345] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.145152][ T2345] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.145167][ T2345] ? __pfx_kthread+0x10/0x10 [ 474.145192][ T2345] ret_from_fork+0x4bc/0x870 [ 474.145212][ T2345] ? __pfx_ret_from_fork+0x10/0x10 [ 474.145234][ T2345] ? __switch_to_asm+0x39/0x70 [ 474.145250][ T2345] ? __switch_to_asm+0x33/0x70 [ 474.145277][ T2345] ? __pfx_kthread+0x10/0x10 [ 474.145301][ T2345] ret_from_fork_asm+0x1a/0x30 [ 474.145324][ T2345] [ 474.158237][ T125] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.213769][T17970] buffer_io_error: 14 callbacks suppressed [ 474.213789][T17970] Buffer I/O error on dev nbd0, logical block 2, async page read [ 474.217155][ T125] Buffer I/O error on dev nbd0, logical block 1, async page read [ 474.229082][ T6010] usb 5-1: USB disconnect, device number 86 [ 474.425962][T17970] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 474.471048][ T2345] pvrusb2: Invalid write control endpoint [ 474.473482][T17970] Buffer I/O error on dev nbd0, logical block 3, async page read [ 474.481679][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 474.615017][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 474.622651][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 474.632740][ T2345] pvrusb2: Device being rendered inoperable [ 474.638773][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 474.646424][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 474.658341][ T2345] pvrusb2: Attached sub-driver cx25840 [ 474.663848][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 474.673991][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 475.105679][ T56] block nbd0: Connection timed out, retrying (0/2 alive) [ 475.112846][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.122413][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 475.130476][T17970] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.139556][T17970] Buffer I/O error on dev nbd0, logical block 0, async page read [ 475.147375][T17970] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.156444][T17970] Buffer I/O error on dev nbd0, logical block 1, async page read [ 475.164258][T17970] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.173712][T17970] Buffer I/O error on dev nbd0, logical block 2, async page read [ 475.181927][T17970] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.191053][T17970] Buffer I/O error on dev nbd0, logical block 3, async page read [ 475.198957][T17970] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.208020][T17970] Buffer I/O error on dev nbd0, logical block 0, async page read [ 475.215890][T17970] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.225512][T17970] Buffer I/O error on dev nbd0, logical block 1, async page read [ 475.234432][T17970] ldm_validate_partition_table(): Disk read failed. [ 475.242042][T17970] Dev nbd0: unable to read RDB block 0 [ 475.249017][T17970] nbd0: unable to read partition table [ 475.258572][T17970] ldm_validate_partition_table(): Disk read failed. [ 475.266279][T17970] Dev nbd0: unable to read RDB block 0 [ 475.272649][T17970] nbd0: unable to read partition table