last executing test programs: 3.785231983s ago: executing program 4 (id=3694): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x5) 3.680290487s ago: executing program 4 (id=3696): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140), 0x4) 3.212392544s ago: executing program 4 (id=3704): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x6) 3.162674012s ago: executing program 0 (id=3706): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000380)=""/73, 0x49}], 0x2) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) 3.040059741s ago: executing program 4 (id=3707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004d00)=@newlink={0x4c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0xc060, 0x2d68}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 3.039336088s ago: executing program 2 (id=3708): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @media='ib\x00'}}}}, 0x68}}, 0x0) 2.871000098s ago: executing program 2 (id=3711): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x10, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x91, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004050}, 0x4040090) 2.79829523s ago: executing program 4 (id=3712): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, &(0x7f0000000280)={0x20, 0xf, 0x1, "ec"}, 0x0, 0x0}) 2.78110124s ago: executing program 1 (id=3713): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.727528757s ago: executing program 2 (id=3714): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)={0x0, 0x28, 0xc, {0xc, 0x21, "65b2dbda83117f000000"}}, 0x0}, 0x0) 2.45849336s ago: executing program 0 (id=3716): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.437906008s ago: executing program 0 (id=3717): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x40, 0xf, 0x1, "11"}, 0x0, 0x0}) 1.315754151s ago: executing program 1 (id=3724): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0', [{0x20, ',.q7z\xca\xa2\r\x00R\xc3\xab\xe7_!\x12}5\xe0\xc4wp\xcaq\xea\xd0a\x04\x1a\xef\xf3bIj<\xf0\xb8\xd1\x90\xed&\xfa\x8c\xb4\xe6l\xbc\xc4:,1\x17.\xf5\xc2h9N\xf4xs\x0e\xa6\x04\xc0\x8b\x943\x00\xce\t3~\xcb\xbd-X\x1d\xa6M\'>\x83z\xce\x9d$\xf1\x15\xa0\x9e\x9f(\aW\x99L\x9f\xf8\xb2#\xae\x9fYN\x1c\xb1O\x86\xa5\xa7}\xba\xc3\xa5\xd9\xa2It\x04K\xd6<\xd6\x8c\xcf\x03\xea9\t\xe4\x04\xbaa\x0e\x16=lT\x92\x94\xe1\x95\xf6\xf4\xea0Hv\xbe\x1d\t\xf1\x00\xb1+7\x91\x1b\fL\xfd\xa7\xff\xf1\xa3\xb4\xdbkF\xdd\x96\x88\xc9\xc8_\x0f\xd4\v\b\xae7pEb\xacYI\xc3@\x89\x152F\xff\xad/\xbeM\f(\x15al\xbd\\\x8a\x1d\xdc\xdf\xa5\x8a\x81-\xb9j|\xfe~\x00\xf4\xea[\x7f\xb7H\x043Z~\x87\xadI\xf2\x8f\xe1\xdf\x03\xb7>\"\x1e\xfc\xa5\xc4\x8d\x9f\x9d\b\xa0}\f\xde\\\xe6&\b7\xdd\xe7!*\x9a\xaa\x8ce<\x11\xf1c\xeb\xac\xa5\x8c\x84\x96\xbd\x16\x01\xdf\xce\x02\x847\x17\xca\xf3\xd81#\xfa\xf7q\x02`9/\xc9\xadG\x1fKK\x82\xe8S\xbb\xcak\x96'}]}, 0x142) pwrite64(r0, &(0x7f0000000040)="ab", 0x1, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.18430106s ago: executing program 1 (id=3725): r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11||\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1f\xbb\xf8.\xb1\x82L\x9aa\xba\x19\xe9 \xd1\xa2\xaf\xec\x1f\x80\a\x19j\xc5\x01\xae\xdf\x15\x19\xf2\xd3J{\x8dc\xb4;\xc9Z\xb9\xa21\x978\xfa\x94%N6\x92\x9d\x92\xc3pG\'\xcc\xd8h\xcb-\x17\x12\xaf\xdc\xb0\x7f:\x81\x1b\xee\xc5[=\x1a\xd6a\xba\xc2', 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 962.400869ms ago: executing program 1 (id=3726): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000004c80)={0x2020}, 0x2020) 877.717541ms ago: executing program 4 (id=3727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000480)="f8", 0x1, 0x20008085, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 788.698893ms ago: executing program 3 (id=3728): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x4b6, 0x0, 0xffffffe9, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 670.486924ms ago: executing program 3 (id=3729): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0) 639.520731ms ago: executing program 3 (id=3730): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) 572.080076ms ago: executing program 3 (id=3731): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 533.215357ms ago: executing program 2 (id=3732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="000001"]) 446.522534ms ago: executing program 0 (id=3733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 299.561374ms ago: executing program 3 (id=3734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0x1, 0x2, 0x0, 0xffffffff, 0x6, 0xe, 0xfe, 0xfd, 0x12, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x2, 0xf, 0x20, '\x00', 0x4, 0x8000000000005}) 214.446568ms ago: executing program 2 (id=3735): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 201.194817ms ago: executing program 1 (id=3736): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e27, @loopback}, 0x10) 184.763708ms ago: executing program 0 (id=3737): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x7, 0xa, 0x20, 0x80}, {0x1000000003ff, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x0, 0x1}, 0x7, 0x0, 0x1}, {{@in6=@mcast2, 0x4d6, 0x33}, 0x0, @in=@empty, 0x3502, 0x0, 0x0, 0x7, 0x78}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 82.214244ms ago: executing program 3 (id=3738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x245}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 49.439174ms ago: executing program 2 (id=3739): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r0, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) 145.215µs ago: executing program 0 (id=3740): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x9, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8) bind$can_raw(r0, &(0x7f0000000200), 0x10) 0s ago: executing program 1 (id=3741): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) tkill(r0, 0x15) kernel console output (not intermixed with test programs): T36] vhci_hcd: disconnect device [ 260.315731][T10488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2021'. [ 260.945685][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.961437][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.563685][ T5935] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 261.565531][ T30] kauditd_printk_skb: 2453 callbacks suppressed [ 261.565664][ T30] audit: type=1326 audit(1744427386.827:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 261.662767][ T30] audit: type=1326 audit(1744427386.877:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 261.721490][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 261.738597][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.757322][ T30] audit: type=1326 audit(1744427386.877:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 261.762768][ T5935] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.779726][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.844564][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.893062][ T5935] usb 2-1: config 0 descriptor?? [ 261.897344][ T30] audit: type=1326 audit(1744427386.877:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 261.949243][ T30] audit: type=1326 audit(1744427386.877:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 261.977454][ T30] audit: type=1326 audit(1744427386.877:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 262.015223][ T30] audit: type=1326 audit(1744427386.877:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 262.043426][ T30] audit: type=1326 audit(1744427386.877:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.2.2040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 262.130287][ T5935] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 262.183678][T10545] bridge0: port 3(vlan3) entered blocking state [ 262.210578][T10545] bridge0: port 3(vlan3) entered disabled state [ 262.226018][T10545] vlan3: entered allmulticast mode [ 262.243733][T10545] gretap0: entered allmulticast mode [ 262.267815][T10545] vlan3: entered promiscuous mode [ 262.287989][T10545] gretap0: entered promiscuous mode [ 262.295710][T10545] bridge0: port 3(vlan3) entered blocking state [ 262.302405][T10545] bridge0: port 3(vlan3) entered forwarding state [ 262.611985][ T5893] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 262.771686][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 262.792967][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.809694][ T5893] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.819532][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.833597][ T5893] usb 5-1: config 0 descriptor?? [ 262.897536][ T5935] usb 2-1: USB disconnect, device number 18 [ 263.120834][T10586] netlink: 'syz.2.2052': attribute type 12 has an invalid length. [ 263.145847][T10586] netlink: 'syz.2.2052': attribute type 29 has an invalid length. [ 263.155809][T10586] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2052'. [ 263.185334][T10586] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2052'. [ 263.276542][ T5893] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 263.611454][ T95] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 263.705429][ T5935] usb 5-1: USB disconnect, device number 24 [ 263.791775][ T95] usb 3-1: Using ep0 maxpacket: 16 [ 263.827866][ T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.866719][ T95] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 263.885574][ T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.915090][ T95] usb 3-1: config 0 descriptor?? [ 264.367189][ T95] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 264.708078][T10631] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 264.727244][T10633] loop6: detected capacity change from 0 to 524287999 [ 264.746270][ C0] blk_print_req_error: 7 callbacks suppressed [ 264.746295][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.761860][ C0] buffer_io_error: 7 callbacks suppressed [ 264.761877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.776064][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.785383][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.794264][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.803514][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.818528][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.828038][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.837186][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.846564][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.868299][ T5935] usb 3-1: USB disconnect, device number 24 [ 264.892529][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.901847][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.911018][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.920290][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.939013][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.948266][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.956945][T10633] ldm_validate_partition_table(): Disk read failed. [ 264.965677][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.975124][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.990594][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.999859][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 265.016627][T10633] Dev loop6: unable to read RDB block 0 [ 265.031770][T10633] loop6: unable to read partition table [ 265.050203][T10633] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 265.077741][T10636] ldm_validate_partition_table(): Disk read failed. [ 265.097254][T10636] Dev loop6: unable to read RDB block 0 [ 265.107313][T10636] loop6: unable to read partition table [ 265.113974][T10636] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 265.114794][T10644] loop2: detected capacity change from 0 to 7 [ 265.153580][T10644] Dev loop2: unable to read RDB block 7 [ 265.172824][T10644] loop2: unable to read partition table [ 265.187985][T10644] loop2: partition table beyond EOD, truncated [ 265.209185][T10644] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 265.601877][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 265.721445][ T95] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 265.821611][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 265.901450][ T95] usb 3-1: Using ep0 maxpacket: 8 [ 265.914196][ T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.930722][ T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 265.969952][ T95] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.997263][ T95] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 266.008814][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 266.017414][ T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.052489][ T95] usb 3-1: config 0 descriptor?? [ 266.060907][T10655] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.067550][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.101697][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 266.134228][T10671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.140782][T10671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.145231][ T9] usb 2-1: SerialNumber: syz [ 266.169650][T10671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.177648][T10671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.186554][T10671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.320110][T10679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2093'. [ 266.446351][ T5893] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 266.482586][ T95] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 266.489887][ T95] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 266.517627][ T95] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 266.531660][ T95] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 266.559844][ T95] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 266.569491][ T95] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 266.589919][ T95] prodikeys 0003:041E:2801.0018: unknown main item tag 0x0 [ 266.610458][ T95] prodikeys 0003:041E:2801.0018: hidraw0: USB HID v1.ff Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 266.639333][ T5893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.667332][ T5893] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.688968][ T5893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.703413][ T95] usb 3-1: USB disconnect, device number 25 [ 266.712501][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.740107][T10677] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 266.789465][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.993006][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 267.027977][ T9] usb 2-1: USB disconnect, device number 19 [ 267.134375][ T5897] usb 4-1: USB disconnect, device number 25 [ 268.141890][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 268.147988][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 268.221814][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 268.228809][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 268.234959][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 268.514774][ T5897] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 268.692712][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 268.708400][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.740644][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.765732][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.781315][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.793327][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.810280][ T5897] usb 4-1: config 0 descriptor?? [ 269.266369][ T5897] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 269.274850][ T5897] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 269.360654][ T5897] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0019/input/input32 [ 269.498942][ T5897] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 269.548937][ T5897] usb 4-1: USB disconnect, device number 26 [ 270.237741][ T30] audit: type=1326 audit(1744427395.507:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.3.2132" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d579 code=0x0 [ 270.316940][T10769] loop6: detected capacity change from 0 to 524287999 [ 270.346480][ C1] blk_print_req_error: 24 callbacks suppressed [ 270.346502][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.363047][ C1] buffer_io_error: 24 callbacks suppressed [ 270.363065][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.381694][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.390963][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.403647][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.412910][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.442163][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.451477][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.459715][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.468966][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.477130][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.486424][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.496296][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.505609][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.514475][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.523724][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.531703][T10769] ldm_validate_partition_table(): Disk read failed. [ 270.543271][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.552573][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.560958][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.570270][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.579160][T10769] Dev loop6: unable to read RDB block 0 [ 270.587679][T10769] loop6: unable to read partition table [ 270.601916][T10769] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 270.611598][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 270.647680][T10775] ldm_validate_partition_table(): Disk read failed. [ 270.656290][T10775] Dev loop6: unable to read RDB block 0 [ 270.663687][T10775] loop6: unable to read partition table [ 270.669776][T10775] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 270.781536][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 270.806256][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 270.815813][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.830624][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.854539][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.874115][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.913617][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.927079][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.026438][T10789] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 271.183215][ T9] usb 1-1: GET_CAPABILITIES returned 4c [ 271.188888][ T9] usbtmc 1-1:16.0: can't read capabilities [ 271.418782][T10801] dummy0: entered promiscuous mode [ 271.449390][ T9] usb 1-1: USB disconnect, device number 24 [ 271.472977][T10801] macsec1: entered allmulticast mode [ 271.488058][T10801] dummy0: entered allmulticast mode [ 271.540845][T10801] dummy0: left allmulticast mode [ 271.559753][T10801] dummy0: left promiscuous mode [ 273.262093][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'. [ 273.271165][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2165'. [ 274.020724][T10865] vlan0: entered allmulticast mode [ 274.091500][T10865] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 276.523994][T10956] sctp: [Deprecated]: syz.0.2218 (pid 10956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.523994][T10956] Use struct sctp_sack_info instead [ 276.680617][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 276.928452][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2226'. [ 278.288699][T11026] bridge0: entered promiscuous mode [ 278.297019][T11026] batadv0: entered promiscuous mode [ 278.341859][ T5897] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 278.522973][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 278.549564][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.591621][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.623281][ T5897] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.648925][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.658610][T11039] erspan0: entered promiscuous mode [ 278.674570][T11039] erspan0: left promiscuous mode [ 278.680820][ T5897] usb 3-1: config 0 descriptor?? [ 278.699276][ T5897] hub 3-1:0.0: USB hub found [ 278.926097][ T5897] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 279.102529][T11054] macvtap1: entered allmulticast mode [ 279.108017][T11054] veth0_macvtap: entered allmulticast mode [ 279.128283][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 279.141958][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 279.192304][ T5897] usb 3-1: USB disconnect, device number 26 [ 279.215073][ T5895] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 279.382836][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 279.398929][ T5895] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 279.416543][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.428647][ T5895] usb 5-1: Product: syz [ 279.436717][ T5895] usb 5-1: Manufacturer: syz [ 279.445679][ T5895] usb 5-1: SerialNumber: syz [ 279.463443][ T5895] usb 5-1: config 0 descriptor?? [ 279.477941][ T5895] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 279.655838][ T5893] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 279.773665][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 279.784638][T11077] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2273'. [ 279.796936][T11077] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2273'. [ 279.830749][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.848163][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 279.861153][ T5893] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.882234][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.915388][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 279.926610][ T5893] usb 1-1: SerialNumber: syz [ 279.943212][T11062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.965523][ T5893] hub 1-1:1.0: bad descriptor, ignoring hub [ 279.972403][ T5893] hub 1-1:1.0: probe with driver hub failed with error -5 [ 280.171658][T11062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.201515][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 280.288780][ T5895] gspca_sonixj: reg_r err -71 [ 280.304148][ T5895] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 280.323734][ T5895] usb 5-1: USB disconnect, device number 25 [ 280.371527][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 280.379227][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.390494][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 280.404721][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.417046][ T9] usb 4-1: config 0 descriptor?? [ 280.636198][ T5893] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 280.649875][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.660633][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.940667][ T5850] usb 1-1: USB disconnect, device number 25 [ 280.974208][ T5850] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 281.096895][ T5893] usb 4-1: USB disconnect, device number 27 [ 281.538179][T11107] bond0: entered promiscuous mode [ 281.551704][T11107] bond_slave_0: entered promiscuous mode [ 281.583762][T11107] bond_slave_1: entered promiscuous mode [ 281.610605][T11107] batadv0: entered promiscuous mode [ 281.642462][T11107] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 281.675240][T11107] Cannot create hsr debugfs directory [ 281.698664][T11107] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 281.739765][T11107] bond0: left promiscuous mode [ 281.749901][T11107] bond_slave_0: left promiscuous mode [ 281.764240][T11107] bond_slave_1: left promiscuous mode [ 281.787941][T11107] batadv0: left promiscuous mode [ 281.860706][T11119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 284.805954][T11161] tun0: tun_chr_ioctl cmd 1074025677 [ 284.812216][T11161] tun0: linktype set to 776 [ 285.051447][T11178] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 287.407035][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 287.436802][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'. [ 287.911943][ T5895] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 288.021777][ T5850] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 288.036657][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 288.087662][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 288.100039][ T5895] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 288.110684][ T5895] usb 3-1: config 0 has no interface number 0 [ 288.124295][ T5895] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 288.135495][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.144468][ T5895] usb 3-1: Product: syz [ 288.148947][ T5895] usb 3-1: Manufacturer: syz [ 288.157415][ T5895] usb 3-1: SerialNumber: syz [ 288.168053][ T5895] usb 3-1: config 0 descriptor?? [ 288.185723][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 288.188637][ T5895] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 288.197114][ T5850] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.213473][ T5850] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.225168][ T5850] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.232533][ T5850] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 288.251472][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.280834][ T5850] usb 5-1: config 0 descriptor?? [ 288.423931][ T5895] usb 3-1: qt2_attach - failed to power on unit: -71 [ 288.456197][ T5895] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 288.483004][ T5895] usb 3-1: USB disconnect, device number 27 [ 288.899806][T11316] vivid-007: disconnect [ 288.907207][T11315] vivid-007: reconnect [ 288.921679][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 288.965046][ T5893] usb 5-1: USB disconnect, device number 26 [ 289.103153][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 289.110778][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 289.122378][ T9] usb 2-1: config 0 has no interface number 0 [ 289.152171][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 289.162086][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.170145][ T9] usb 2-1: Product: syz [ 289.175372][ T9] usb 2-1: Manufacturer: syz [ 289.180157][ T9] usb 2-1: SerialNumber: syz [ 289.201047][ T9] usb 2-1: config 0 descriptor?? [ 289.212206][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 289.320142][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2375'. [ 289.417606][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.447599][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.486778][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 289.535823][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 289.912372][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 289.920695][ T5893] usb 2-1: USB disconnect, device number 20 [ 289.947151][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 289.977134][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 290.016015][ T5893] quatech2 2-1:0.51: device disconnected [ 290.083061][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 290.101480][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 290.271455][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 290.295645][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.315177][ T9] usb 1-1: Product: syz [ 290.319435][ T9] usb 1-1: Manufacturer: syz [ 290.337018][ T9] usb 1-1: SerialNumber: syz [ 290.354428][ T9] usb 1-1: config 0 descriptor?? [ 290.366163][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 291.004319][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 291.021448][ T9] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 291.070676][ T9] usb 1-1: USB disconnect, device number 26 [ 291.112788][T11378] netlink: 'syz.3.2407': attribute type 9 has an invalid length. [ 291.582177][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 291.757777][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 291.778101][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.800401][ T9] usb 4-1: Product: syz [ 291.826944][ T9] usb 4-1: Manufacturer: syz [ 291.841706][ T9] usb 4-1: SerialNumber: syz [ 291.862543][ T9] usb 4-1: config 0 descriptor?? [ 292.193607][ T5896] usb 4-1: USB disconnect, device number 28 [ 292.891409][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 293.086670][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 293.119389][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 293.134946][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 293.150142][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.204602][ T9] usb 1-1: config 0 descriptor?? [ 293.260319][T11447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.272386][T11447] bridge0: port 2(bond3) entered blocking state [ 293.281695][T11447] bridge0: port 2(bond3) entered disabled state [ 293.332510][T11447] bond3: entered allmulticast mode [ 293.362088][T11447] bond3: entered promiscuous mode [ 293.485847][T11455] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 293.643647][ T9] creative-sb0540 0003:041E:3100.001C: unknown main item tag 0x0 [ 293.672565][ T9] creative-sb0540 0003:041E:3100.001C: unknown main item tag 0x0 [ 293.696090][ T9] creative-sb0540 0003:041E:3100.001C: No inputs registered, leaving [ 293.711969][T11460] GUP no longer grows the stack in syz.2.2436 (11460): 80009000-8000a000 (80005000) [ 293.725190][ T9] creative-sb0540 0003:041E:3100.001C: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 293.742357][T11460] CPU: 1 UID: 0 PID: 11460 Comm: syz.2.2436 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 293.742393][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.742411][T11460] Call Trace: [ 293.742420][T11460] [ 293.742429][T11460] dump_stack_lvl+0x241/0x360 [ 293.742473][T11460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.742506][T11460] ? __pfx__printk+0x10/0x10 [ 293.742531][T11460] ? find_vma+0xfa/0x170 [ 293.742578][T11460] __get_user_pages+0x3b46/0x4180 [ 293.742658][T11460] ? __pfx___get_user_pages+0x10/0x10 [ 293.742689][T11460] ? __gup_longterm_locked+0xd86/0x1850 [ 293.742725][T11460] ? __pfx_down_read_killable+0x10/0x10 [ 293.742759][T11460] ? __lock_acquire+0xad5/0xd80 [ 293.742800][T11460] __gup_longterm_locked+0xec1/0x1850 [ 293.742850][T11460] ? try_get_folio+0xfd/0x6a0 [ 293.742873][T11460] ? try_grab_folio_fast+0x1d6/0x500 [ 293.742893][T11460] ? __pfx___gup_longterm_locked+0x10/0x10 [ 293.742937][T11460] ? gup_fast_fallback+0x203f/0x2980 [ 293.742971][T11460] gup_fast_fallback+0x2227/0x2980 [ 293.743039][T11460] ? __pfx_gup_fast_fallback+0x10/0x10 [ 293.743072][T11460] ? finish_task_switch+0x1e5/0x870 [ 293.743091][T11460] ? lockdep_hardirqs_on+0x9d/0x150 [ 293.743122][T11460] ? rcu_is_watching+0x15/0xb0 [ 293.743150][T11460] ? trace_sched_exit_tp+0x3c/0x120 [ 293.743172][T11460] ? __schedule+0x1ba6/0x5240 [ 293.743217][T11460] ? __lock_acquire+0xad5/0xd80 [ 293.743245][T11460] ? is_valid_gup_args+0x124/0x200 [ 293.743279][T11460] get_user_pages_fast+0xd2/0x160 [ 293.743316][T11460] ? __pfx_get_user_pages_fast+0x10/0x10 [ 293.743350][T11460] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 293.743390][T11460] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 293.743433][T11460] ? __se_sys_vmsplice+0x4bc/0x1430 [ 293.743470][T11460] iov_iter_get_pages2+0xd1/0x130 [ 293.743505][T11460] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 293.743539][T11460] ? __se_sys_vmsplice+0x94e/0x1430 [ 293.743576][T11460] __se_sys_vmsplice+0x6c6/0x1430 [ 293.743632][T11460] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 293.743665][T11460] ? __pfx_futex_wait+0x10/0x10 [ 293.743757][T11460] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 293.743784][T11460] ? lockdep_hardirqs_on+0x9d/0x150 [ 293.743813][T11460] __do_fast_syscall_32+0xb4/0x110 [ 293.743840][T11460] ? exc_page_fault+0x5f8/0x920 [ 293.743870][T11460] do_fast_syscall_32+0x34/0x80 [ 293.743898][T11460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.743930][T11460] RIP: 0023:0xf743d579 [ 293.743953][T11460] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.743971][T11460] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 000000000000013c [ 293.743995][T11460] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 293.744010][T11460] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.744024][T11460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.744036][T11460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.744049][T11460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.744081][T11460] [ 294.064997][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.118798][ T5893] usb 1-1: USB disconnect, device number 27 [ 294.811864][T11470] syz.4.2441 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 296.272697][T11536] netem: change failed [ 296.866831][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 297.141587][ T5893] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 297.171513][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 297.247237][T11562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2483'. [ 297.304492][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.331587][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.353177][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 297.374285][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 297.384432][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 297.401233][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 297.415347][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.426357][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 297.434974][ T9] usb 4-1: Product: syz [ 297.444910][ T9] usb 4-1: Manufacturer: syz [ 297.453626][ T9] usb 4-1: SerialNumber: syz [ 297.470876][ T9] usb 4-1: config 0 descriptor?? [ 297.496792][ T9] usb 4-1: selecting invalid altsetting 0 [ 297.672161][ T5893] usb 5-1: GET_CAPABILITIES returned 0 [ 297.672213][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 297.795701][ T5893] usb 4-1: USB disconnect, device number 29 [ 297.909410][ T9] usb 5-1: USB disconnect, device number 27 [ 297.967220][T11579] ALSA: mixer_oss: invalid OSS volume '' [ 298.389542][T11592] ALSA: mixer_oss: invalid OSS volume 'SYN‘H' [ 299.039101][T11612] input: syz1 as /devices/virtual/input/input34 [ 300.100107][T11657] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2526'. [ 300.120222][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 300.601453][ T95] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 300.764248][ T95] usb 3-1: Using ep0 maxpacket: 16 [ 300.776384][ T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.788883][ T95] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.813760][ T95] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.854377][ T95] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.878297][ T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.904081][ T95] usb 3-1: config 0 descriptor?? [ 301.357258][ T95] microsoft 0003:045E:07DA.001D: No inputs registered, leaving [ 301.389424][ T95] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 301.415714][ T95] microsoft 0003:045E:07DA.001D: no inputs found [ 301.425713][ T95] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 301.573316][ T95] usb 3-1: USB disconnect, device number 28 [ 301.864841][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 301.917951][T11683] [U] . [ 302.254812][ T30] audit: type=1326 audit(1744427427.527:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.293077][ T30] audit: type=1326 audit(1744427427.527:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.399742][ T30] audit: type=1326 audit(1744427427.537:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.434356][ T30] audit: type=1326 audit(1744427427.537:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.508305][ T30] audit: type=1326 audit(1744427427.537:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.616680][ T30] audit: type=1326 audit(1744427427.537:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.661443][ T30] audit: type=1326 audit(1744427427.537:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.754572][ T30] audit: type=1326 audit(1744427427.537:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.813465][ T30] audit: type=1326 audit(1744427427.547:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=378 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.861460][ T30] audit: type=1326 audit(1744427427.547:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 302.883592][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.240777][T11753] netlink: 'syz.2.2570': attribute type 1 has an invalid length. [ 303.251599][ T5935] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 303.279807][T11753] netlink: 'syz.2.2570': attribute type 2 has an invalid length. [ 303.433558][ T5935] usb 2-1: config 0 has no interfaces? [ 303.452755][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 303.472475][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.480569][ T5935] usb 2-1: Product: syz [ 303.515968][ T5935] usb 2-1: Manufacturer: syz [ 303.526089][ T5935] usb 2-1: SerialNumber: syz [ 303.545653][ T5935] usb 2-1: config 0 descriptor?? [ 303.768999][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 303.788638][ T5935] usb 2-1: USB disconnect, device number 21 [ 304.394953][T11790] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 304.978670][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 305.068564][T11822] loop6: detected capacity change from 0 to 63 [ 305.330732][T11835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2608'. [ 305.513304][T11845] netlink: 'syz.3.2613': attribute type 4 has an invalid length. [ 306.240822][T11870] netlink: 'syz.0.2625': attribute type 6 has an invalid length. [ 306.266988][T11870] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2625'. [ 306.299628][T11870] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 308.091484][ T5893] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 308.241522][ T5895] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 308.301528][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 308.310859][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.333647][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.361782][ T5893] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 308.370894][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.404587][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 308.414355][ T5893] usb 5-1: config 0 descriptor?? [ 308.426457][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.466882][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.505299][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59152, setting to 1024 [ 308.536297][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.565579][ T5895] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.576233][ T5895] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.593890][ T5895] usb 4-1: Manufacturer: syz [ 308.611040][ T5895] usb 4-1: config 0 descriptor?? [ 308.836180][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x0 [ 308.849917][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x6 [ 308.871772][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x5 [ 308.899188][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x4 [ 308.909311][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x0 [ 308.935920][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x0 [ 308.945680][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x0 [ 308.956784][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x0 [ 308.961556][ T5895] rc_core: IR keymap rc-hauppauge not found [ 308.964397][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x0 [ 308.987743][ T5893] cherry 0003:046A:0027.001E: unknown main item tag 0x0 [ 308.999421][ T5893] cherry 0003:046A:0027.001E: unknown global tag 0xd [ 309.003373][ T5895] Registered IR keymap rc-empty [ 309.013173][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.031731][ T5893] cherry 0003:046A:0027.001E: item 0 4 1 13 parsing failed [ 309.046728][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.056255][ T5893] cherry 0003:046A:0027.001E: probe with driver cherry failed with error -22 [ 309.101246][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 309.105887][ T5893] usb 5-1: USB disconnect, device number 28 [ 309.171928][ T5896] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 309.200238][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 309.411412][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 309.422135][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.434612][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.449822][ T5896] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.474284][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.484139][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.503962][ T5896] usb 1-1: config 0 descriptor?? [ 309.525878][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.551845][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.571774][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.591798][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.632270][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.669805][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.705303][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.742629][ T5896] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 309.759405][ T5895] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 309.793676][ T5895] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 309.823239][ T5895] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.883555][ T5895] usb 4-1: USB disconnect, device number 30 [ 310.017516][T11973] netlink: 'syz.4.2671': attribute type 1 has an invalid length. [ 310.148597][ T5896] usb 1-1: USB disconnect, device number 28 [ 310.579567][T11988] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 311.221778][ T5896] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 311.401731][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 311.418552][ T5896] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 311.435712][ T5896] usb 4-1: config 0 has no interface number 0 [ 311.448578][ T5896] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.491457][ T5896] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 311.541438][ T5896] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 311.596874][ T5896] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.653259][ T5896] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 311.682022][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.690092][ T5896] usb 4-1: Product: syz [ 311.717695][ T5896] usb 4-1: Manufacturer: syz [ 311.727839][ T5896] usb 4-1: SerialNumber: syz [ 311.755587][ T5896] usb 4-1: config 0 descriptor?? [ 311.955904][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2695'. [ 311.997588][ T5896] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 312.024327][T12030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2695'. [ 312.230579][ T5893] usb 4-1: USB disconnect, device number 31 [ 312.541536][ T5896] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 312.702147][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 312.715433][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 312.726829][ T5896] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 312.747124][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.772892][ T5896] usb 1-1: config 0 descriptor?? [ 313.189330][T12036] [U] . [ 313.447487][ T5895] usb 1-1: USB disconnect, device number 29 [ 314.538526][T11955] syz.1.2664 (11955) used greatest stack depth: 18584 bytes left [ 314.661654][T12090] input: syz1 as /devices/virtual/input/input39 [ 314.851531][ T5896] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 314.885721][T12102] tun0: tun_chr_ioctl cmd 1074025672 [ 314.901585][T12102] tun0: ignored: set checksum enabled [ 315.045660][ T5896] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.067673][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 315.096731][ T5896] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.117666][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.137243][ T5896] usb 1-1: Product: syz [ 315.162316][ T5896] usb 1-1: Manufacturer: syz [ 315.182175][ T5896] usb 1-1: SerialNumber: syz [ 315.203376][ T5896] usb 1-1: config 0 descriptor?? [ 315.235629][ T5896] usb 1-1: selecting invalid altsetting 0 [ 315.460387][ T5935] usb 1-1: USB disconnect, device number 30 [ 315.834858][ T5893] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 316.028515][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.060150][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 316.096368][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 316.126354][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 316.144618][ T5893] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.161741][ T5893] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.170458][ T5893] usb 2-1: Manufacturer: syz [ 316.201106][ T5893] usb 2-1: config 0 descriptor?? [ 316.581488][ T5893] rc_core: IR keymap rc-hauppauge not found [ 316.601471][ T5893] Registered IR keymap rc-empty [ 316.629816][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.671466][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.702807][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 316.741148][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 316.762760][T12157] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2751'. [ 316.782703][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.795334][T12157] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2751'. [ 316.821615][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.871555][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.921546][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.944503][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 316.986662][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.031791][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.071044][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.116720][ T95] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 317.131519][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.171540][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.211541][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 317.244693][ T5893] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 317.266572][ T5893] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 317.300224][ T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.310907][ T5893] usb 2-1: USB disconnect, device number 22 [ 317.329200][ T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.367414][ T95] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 317.397050][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.442463][ T95] usb 1-1: config 0 descriptor?? [ 317.908558][ T95] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 317.929550][ T95] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 317.939285][ T95] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 317.950930][ T95] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 317.966573][ T95] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 317.979967][ T95] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 318.009685][ T95] logitech 0003:046D:C294.0020: unknown main item tag 0x0 [ 318.033822][ T95] logitech 0003:046D:C294.0020: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.0-1/input0 [ 318.082020][ T95] logitech 0003:046D:C294.0020: no inputs found [ 318.154510][ T95] usb 1-1: USB disconnect, device number 31 [ 318.614883][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 318.614903][ T30] audit: type=1326 audit(1744427443.877:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz.1.2775" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744d579 code=0x0 [ 321.911088][T12314] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2822'. [ 322.391867][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.398493][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.496744][T12338] tipc: Started in network mode [ 322.521481][T12338] tipc: Node identity ac14140f, cluster identity 4711 [ 322.529511][T12338] tipc: New replicast peer: 255.255.255.255 [ 322.554107][T12338] tipc: Enabled bearer , priority 10 [ 323.071493][ T5935] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 323.121621][ T5893] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 323.246312][ T5935] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 323.263788][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.272278][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 323.298690][ T5893] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 323.310846][ T5935] usb 3-1: Product: syz [ 323.318794][ T5935] usb 3-1: Manufacturer: syz [ 323.328313][ T5893] usb 5-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 323.341464][ T5935] usb 3-1: SerialNumber: syz [ 323.348417][ T5893] usb 5-1: Product: syz [ 323.355561][ T5935] usb 3-1: config 0 descriptor?? [ 323.367344][ T5893] usb 5-1: Manufacturer: syz [ 323.372444][ T5893] usb 5-1: SerialNumber: syz [ 323.388407][ T5893] usb 5-1: config 0 descriptor?? [ 323.624824][ T5893] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 323.641527][ T5850] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 323.671697][ T95] tipc: Node number set to 2886997007 [ 323.792303][ T5935] usb 3-1: Firmware: major: 108, minor: 98, hardware type: RZUSB (3) [ 323.836461][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 323.847095][ T5850] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 323.874043][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.895281][ T5850] usb 2-1: Product: syz [ 323.899553][ T5850] usb 2-1: Manufacturer: syz [ 323.917854][ T5850] usb 2-1: SerialNumber: syz [ 323.946516][ T5850] usb 2-1: config 0 descriptor?? [ 324.005267][ T5935] usb 3-1: failed to fetch extended address, random address set [ 324.143106][ T5935] usb 3-1: USB disconnect, device number 29 [ 324.228991][ T5893] gspca_sunplus: reg_w_riv err -71 [ 324.236162][ T5893] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 324.285415][ T5893] usb 5-1: USB disconnect, device number 29 [ 324.370627][ T5850] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 324.401277][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.432888][ T5850] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 324.441088][ T5850] usb 2-1: media controller created [ 324.506129][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.617282][ T5850] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 324.651476][ T5850] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 324.853847][ T5850] usb 2-1: USB disconnect, device number 23 [ 324.937172][ T5850] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 324.981577][ T95] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 325.172697][ T95] usb 3-1: Using ep0 maxpacket: 32 [ 325.188629][ T30] audit: type=1326 audit(1744427450.457:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.2859" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x0 [ 325.228394][ T95] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 325.237911][ T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.260486][ T95] usb 3-1: config 0 descriptor?? [ 325.283028][ T95] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 325.865006][ T5896] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 326.049248][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 326.068236][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.092735][ T95] gspca_nw80x: reg_r err -71 [ 326.097605][ T95] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 326.124384][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 326.146661][ T95] usb 3-1: USB disconnect, device number 30 [ 326.160178][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 326.201256][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 326.255948][ T5896] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 326.276793][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.339910][ T5896] usb 4-1: config 0 descriptor?? [ 326.356507][T12417] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 326.367499][T12433] sg_write: process 1304 (syz.1.2873) changed security contexts after opening file descriptor, this is not allowed. [ 326.370926][ T5896] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 326.639687][ T5850] usb 4-1: USB disconnect, device number 32 [ 326.645917][ C0] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 326.689535][ T5196] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 326.742506][ T5196] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 326.931436][ T5893] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 327.104126][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 327.129343][ T5893] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 327.181487][ T5893] usb 1-1: can't read configurations, error -71 [ 328.566304][T12507] IPVS: Scheduler module ip_vs_ not found [ 329.050376][T12519] tmpfs: Unknown parameter 'ÿ' [ 329.131474][ T5850] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 329.285956][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 329.303735][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.322145][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.353160][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59152, setting to 1024 [ 329.383109][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.414371][ T5850] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.425829][ T5850] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.448250][ T5850] usb 5-1: Manufacturer: syz [ 329.474509][ T5850] usb 5-1: config 0 descriptor?? [ 330.051498][ T5850] rc_core: IR keymap rc-hauppauge not found [ 330.057598][ T5850] Registered IR keymap rc-empty [ 330.063443][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.101779][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.132355][ T5850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 330.191755][ T5850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input42 [ 330.232246][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.282866][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.341710][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.371654][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.411663][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.450741][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.511499][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.544932][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.591683][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.593251][T12552] syz_tun: entered promiscuous mode [ 330.629381][ T5850] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 330.649523][T12551] syz_tun: left promiscuous mode [ 330.656901][ T5850] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 330.682283][ T5850] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 330.738036][ T5850] usb 5-1: USB disconnect, device number 30 [ 331.065932][T12566] tap0: tun_chr_ioctl cmd 1074025677 [ 331.097224][T12566] tap0: linktype set to 769 [ 331.127415][T12573] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 331.136170][T12573] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.311487][ T5850] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 331.445275][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.473206][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.493366][ T5850] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 331.513956][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.519683][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.534581][ T5850] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.542529][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.551461][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.554240][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.574501][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.576460][ T5850] usb 4-1: Product: syz [ 331.593048][ T5850] usb 4-1: Manufacturer: syz [ 331.597827][ T5850] usb 4-1: SerialNumber: syz [ 331.605392][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.617801][ T5850] usb 4-1: config 0 descriptor?? [ 331.624494][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.636497][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.648374][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 331.663489][ T5850] usb 4-1: selecting invalid altsetting 0 [ 331.689683][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.751693][T12584] batadv_slave_0: entered promiscuous mode [ 331.800434][T12584] batadv_slave_0: left promiscuous mode [ 332.001673][ T5893] usb 4-1: USB disconnect, device number 33 [ 332.003118][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2948'. [ 332.425836][ T95] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 332.497400][ T5896] IPVS: starting estimator thread 0... [ 332.596695][ T95] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 332.612238][T12619] IPVS: using max 25 ests per chain, 60000 per kthread [ 332.614862][ T95] usb 5-1: config 0 has no interface number 0 [ 332.681480][ T95] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 332.706848][ T95] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 332.746233][ T95] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 332.790035][ T95] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.823746][ T95] usb 5-1: config 0 descriptor?? [ 332.846292][ T95] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input43 [ 332.941719][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 333.026418][T12636] input: syz0 as /devices/virtual/input/input44 [ 333.088008][ T5895] usb 5-1: USB disconnect, device number 31 [ 333.961516][ T95] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 334.140794][ T95] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 334.176550][ T95] usb 5-1: config 0 interface 0 has no altsetting 0 [ 334.196572][ T95] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 334.207598][ T95] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 334.215959][ T95] usb 5-1: Product: syz [ 334.220302][ T95] usb 5-1: Manufacturer: syz [ 334.245441][ T95] usb 5-1: SerialNumber: syz [ 334.268509][ T95] usb 5-1: config 0 descriptor?? [ 334.300912][ T95] usb 5-1: selecting invalid altsetting 0 [ 334.596887][ T95] usb 5-1: USB disconnect, device number 32 [ 334.761563][ T5850] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 334.925545][ T5850] usb 1-1: Using ep0 maxpacket: 32 [ 334.947523][ T5850] usb 1-1: config 0 interface 0 has no altsetting 0 [ 334.968833][ T5850] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 334.998719][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.018869][ T5850] usb 1-1: Product: syz [ 335.031690][ T5850] usb 1-1: Manufacturer: syz [ 335.043865][ T5850] usb 1-1: SerialNumber: syz [ 335.060686][ T5850] usb 1-1: config 0 descriptor?? [ 335.221094][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 335.237625][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 335.272128][ T95] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 335.457849][ T95] usb 3-1: Using ep0 maxpacket: 8 [ 335.468999][ T95] usb 3-1: too many configurations: 10, using maximum allowed: 8 [ 335.485380][ T5850] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 335.537507][ T95] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 335.559414][ T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.585678][ T95] usb 3-1: Product: syz [ 335.590003][ T95] usb 3-1: Manufacturer: syz [ 335.611599][ T95] usb 3-1: SerialNumber: syz [ 335.632663][ T95] usb 3-1: config 0 descriptor?? [ 335.657188][ T95] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 335.887390][ T5850] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 335.923482][ T5850] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 335.938158][ T5850] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 335.963653][ T5850] usb 1-1: USB disconnect, device number 34 [ 336.288370][ T95] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 336.307124][ T95] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 336.326158][ T95] usb 3-1: USB disconnect, device number 31 [ 337.448896][ T30] audit: type=1326 audit(1744427462.717:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 337.541513][ T30] audit: type=1326 audit(1744427462.717:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 337.612189][ T30] audit: type=1326 audit(1744427462.717:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 337.687614][ T30] audit: type=1326 audit(1744427462.717:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 337.784181][ T30] audit: type=1326 audit(1744427462.717:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 337.839380][ T30] audit: type=1326 audit(1744427462.717:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 337.899293][ T30] audit: type=1326 audit(1744427462.717:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 337.989504][ T30] audit: type=1326 audit(1744427462.717:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 338.048714][ T30] audit: type=1326 audit(1744427462.717:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 338.140503][ T30] audit: type=1326 audit(1744427462.717:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12772 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 338.321431][ T5896] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 338.474906][ T5896] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 338.483740][ T5896] usb 2-1: config 0 has no interface number 0 [ 338.498530][ T5896] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.546431][ T5896] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 338.595843][ T5896] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 338.629794][ T5896] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 338.670463][ T5896] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 338.703232][ T5896] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.707557][ T5893] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 338.732539][ T5896] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 338.766274][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.817844][ T5896] usb 2-1: config 0 descriptor?? [ 338.851996][T12790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 338.860400][T12790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 338.909067][ T5896] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 338.943688][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.954824][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.964801][ T5893] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 338.974376][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.995937][ T5893] usb 3-1: config 0 descriptor?? [ 339.139187][ T5896] usb 2-1: USB disconnect, device number 24 [ 339.145587][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 339.177946][ T5896] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 339.424789][ T5893] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 339.812871][ T5893] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 339.824800][ T5893] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 339.837988][ T5893] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -71 [ 339.863203][ T5893] usb 3-1: USB disconnect, device number 32 [ 340.566817][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3062'. [ 341.526769][T12878] pimreg0: tun_chr_ioctl cmd 35108 [ 341.701628][ T5893] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 341.757607][T12887] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3078'. [ 341.882911][ T5893] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 341.897018][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.908161][ T5893] usb 1-1: Product: syz [ 341.918671][ T5893] usb 1-1: Manufacturer: syz [ 341.929847][ T5893] usb 1-1: SerialNumber: syz [ 341.962686][ T5893] usb 1-1: config 0 descriptor?? [ 342.178170][ T5893] usb 1-1: ignoring: probably an ADSL modem [ 342.580420][ T5893] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 342.813458][ T5893] usb 1-1: USB disconnect, device number 35 [ 343.161002][T12921] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.381493][ T5893] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 343.535101][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.568955][ T5893] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.588608][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.624803][ T5893] usb 4-1: config 0 descriptor?? [ 343.893439][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.924248][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.966236][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 343.987775][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 344.027734][ T5893] usb 4-1: USB disconnect, device number 34 [ 344.481461][ T5893] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 344.669540][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 344.723541][ T5893] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 344.744461][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.758022][ T5893] usb 4-1: Product: syz [ 344.762596][ T5893] usb 4-1: Manufacturer: syz [ 344.767243][ T5893] usb 4-1: SerialNumber: syz [ 344.781193][ T5893] usb 4-1: config 0 descriptor?? [ 344.801839][ T5893] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 345.060842][ T5898] usb 4-1: USB disconnect, device number 35 [ 345.152080][ T5896] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 345.328114][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 345.350690][ T5896] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.373917][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.399756][ T5896] usb 3-1: Product: syz [ 345.404978][ T5896] usb 3-1: Manufacturer: syz [ 345.409907][ T5896] usb 3-1: SerialNumber: syz [ 345.438400][ T5896] usb 3-1: config 0 descriptor?? [ 345.691466][ T5896] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.291587][ T5896] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 346.340670][ T5896] usb 3-1: USB disconnect, device number 33 [ 347.261422][ T5893] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 347.441484][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 347.462267][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.481666][ T5893] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.498174][ T5893] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.508834][ T5893] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 347.553961][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 347.561210][ T5893] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 347.601118][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.632495][ T5893] usb 5-1: config 0 descriptor?? [ 348.057334][ T5893] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 348.080346][ T5893] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 348.101405][ T5893] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 348.109319][ T5893] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 348.123329][ T5893] hid-thrustmaster 0003:044F:B65D.0022: unknown main item tag 0x0 [ 348.162085][ T5893] hid-thrustmaster 0003:044F:B65D.0022: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 348.186971][ T5893] hid-thrustmaster 0003:044F:B65D.0022: Wrong number of endpoints? [ 348.271720][ C0] hid-thrustmaster 0003:044F:B65D.0022: Unknown packet type 0x0, unable to proceed further with wheel init [ 348.488417][ T5893] usb 5-1: USB disconnect, device number 33 [ 348.687793][T13078] bridge0: port 3(vlan3) entered blocking state [ 348.699964][T13078] bridge0: port 3(vlan3) entered disabled state [ 348.718634][T13078] vlan3: entered allmulticast mode [ 348.725456][T13078] bridge0: entered allmulticast mode [ 348.748989][T13078] vlan3: left allmulticast mode [ 348.755663][T13078] bridge0: left allmulticast mode [ 349.262587][T13091] ALSA: mixer_oss: invalid OSS volume '' [ 349.792256][ T95] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 349.967341][ T95] usb 5-1: Using ep0 maxpacket: 32 [ 349.987974][ T95] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 350.008368][ T95] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.050357][ T95] usb 5-1: config 0 descriptor?? [ 350.083999][ T95] gspca_main: sunplus-2.14.0 probing 041e:400b [ 350.743057][T13120] bridge0: entered promiscuous mode [ 350.766898][T13120] macsec3: entered allmulticast mode [ 350.783357][T13120] bridge0: entered allmulticast mode [ 350.811576][T13120] bridge0: port 3(macsec3) entered blocking state [ 350.852823][T13120] bridge0: port 3(macsec3) entered disabled state [ 350.897841][ T95] gspca_sunplus: reg_r err -71 [ 350.906406][ T95] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 350.922879][T13120] bridge0: left allmulticast mode [ 350.948725][T13120] bridge0: left promiscuous mode [ 350.968434][ T95] usb 5-1: USB disconnect, device number 34 [ 351.623307][ T95] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 351.797350][ T95] usb 3-1: Using ep0 maxpacket: 32 [ 351.805090][ T95] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 351.828613][ T95] usb 3-1: config 0 has no interface number 0 [ 351.850983][ T95] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 351.872450][ T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.880514][ T95] usb 3-1: Product: syz [ 351.881552][T13148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3192'. [ 351.891521][ T95] usb 3-1: Manufacturer: syz [ 351.909016][ T95] usb 3-1: SerialNumber: syz [ 351.930388][ T95] usb 3-1: config 0 descriptor?? [ 351.940347][ T95] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 352.135348][T13150] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 352.151017][ T95] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 352.186773][ T95] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 352.350292][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 48 [ 352.561455][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 352.569701][ T5896] usb 3-1: USB disconnect, device number 34 [ 352.592251][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 352.633877][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 352.651828][ T5893] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 352.676436][ T5896] quatech2 3-1:0.51: device disconnected [ 352.730415][T13165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3201'. [ 352.825494][ T5893] usb 1-1: config 0 has no interfaces? [ 352.841250][ T5893] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 352.862715][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.870965][ T5893] usb 1-1: Product: syz [ 352.879846][ T5893] usb 1-1: Manufacturer: syz [ 352.887049][ T5893] usb 1-1: SerialNumber: syz [ 352.907777][ T5893] r8152-cfgselector 1-1: Unknown version 0x0000 [ 352.924845][ T5893] r8152-cfgselector 1-1: config 0 descriptor?? [ 353.173342][ T5935] r8152-cfgselector 1-1: USB disconnect, device number 36 [ 354.145210][T13218] fuse: Bad value for 'source' [ 354.326041][T13226] netlink: 'syz.2.3230': attribute type 21 has an invalid length. [ 354.339674][T13226] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3230'. [ 354.461848][ T95] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 354.545052][T13234] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.552935][T13234] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.640555][ T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.651993][ T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.669374][ T95] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 354.685505][ T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.702982][ T95] usb 2-1: config 0 descriptor?? [ 355.163826][ T95] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 355.211489][ T95] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 355.219320][ T95] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 355.278490][ T95] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 355.300516][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 355.318951][ T95] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 355.362396][ T95] playstation 0003:054C:0DF2.0023: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 355.450698][T13259] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3246'. [ 355.467191][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 355.492358][ T95] playstation 0003:054C:0DF2.0023: Invalid byte count transferred, expected 20 got 0 [ 355.523589][ T95] playstation 0003:054C:0DF2.0023: Failed to retrieve DualSense pairing info: -22 [ 355.561488][ T95] playstation 0003:054C:0DF2.0023: Failed to get MAC address from DualSense [ 355.601412][ T95] playstation 0003:054C:0DF2.0023: Failed to create dualsense. [ 355.626887][ T95] playstation 0003:054C:0DF2.0023: probe with driver playstation failed with error -22 [ 355.700730][ T95] usb 2-1: USB disconnect, device number 25 [ 357.423515][T13330] bridge0: port 4(vlan4) entered blocking state [ 357.442336][T13330] bridge0: port 4(vlan4) entered disabled state [ 357.460388][T13330] vlan4: entered allmulticast mode [ 357.481623][T13330] bridge0: entered allmulticast mode [ 357.566769][T13330] vlan4: left allmulticast mode [ 357.586459][T13330] bridge0: left allmulticast mode [ 357.926013][T13351] kAFS: unable to lookup cell '.,' [ 358.034886][T13353] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3289'. [ 358.051587][ T5893] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 358.107965][T13355] wireguard0: entered promiscuous mode [ 358.113837][T13355] wireguard0: entered allmulticast mode [ 358.239067][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 358.263903][ T5893] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.276202][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 358.283531][ T5893] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 358.293318][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.324149][ T5893] usb 3-1: config 0 descriptor?? [ 358.621886][ T5935] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 358.744101][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.751162][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.767739][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.782112][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.791830][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.798884][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.812147][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.819287][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.833978][ T5893] wacom 0003:056A:0094.0024: unknown main item tag 0x0 [ 358.851716][ T5935] usb 2-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 358.860826][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.869793][ T5893] wacom 0003:056A:0094.0024: Using device in hidraw-only mode [ 358.893985][ T5893] wacom 0003:056A:0094.0024: hidraw0: USB HID v3.ff Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 358.914467][ T5935] usb 2-1: config 0 descriptor?? [ 358.955377][ T5893] usb 3-1: USB disconnect, device number 35 [ 359.181523][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 359.204064][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 359.227653][ T5935] usb 2-1: USB disconnect, device number 26 [ 359.331692][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 359.501575][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 359.516445][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 359.531589][ T9] usb 4-1: config 0 has no interface number 0 [ 359.556608][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.569306][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 359.605425][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 359.622806][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 359.639094][ T9] usb 4-1: Product: syz [ 359.651697][ T9] usb 4-1: SerialNumber: syz [ 359.699845][ T9] usb 4-1: config 0 descriptor?? [ 359.723723][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 359.771700][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input46 [ 360.142499][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.152638][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.159954][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.167164][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.174405][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.181785][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.189026][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.196361][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.203599][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.211661][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 360.259462][ T9] usb 4-1: USB disconnect, device number 36 [ 360.265643][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 360.364015][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 361.284969][T13444] netlink: 'syz.2.3329': attribute type 4 has an invalid length. [ 361.508533][T13454] tap0: tun_chr_ioctl cmd 1074025677 [ 361.521093][T13454] tap0: linktype set to 768 [ 361.802775][T13458] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 362.790053][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 362.790075][ T30] audit: type=1800 audit(1744427488.057:2562): pid=13493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3350" name="file2" dev="tmpfs" ino=3569 res=0 errno=0 [ 363.049901][T13505] bridge0: port 4(hsr0) entered blocking state [ 363.068403][T13505] bridge0: port 4(hsr0) entered disabled state [ 363.086706][T13505] hsr0: entered allmulticast mode [ 363.096434][T13505] hsr_slave_0: entered allmulticast mode [ 363.117724][T13505] hsr_slave_1: entered allmulticast mode [ 363.140739][T13505] hsr0: entered promiscuous mode [ 363.157905][T13505] bridge0: port 4(hsr0) entered blocking state [ 363.164695][T13505] bridge0: port 4(hsr0) entered forwarding state [ 364.351418][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 364.531426][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 364.546503][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.571487][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.611522][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 364.641456][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.660991][ T9] usb 2-1: config 0 descriptor?? [ 364.685973][T13556] IPv6: NLM_F_REPLACE set, but no existing node found! [ 364.702081][ T9] hub 2-1:0.0: USB hub found [ 364.927772][ T9] hub 2-1:0.0: 1 port detected [ 365.368012][ T9] usb 2-1: USB disconnect, device number 27 [ 365.751591][ T95] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 365.762976][T13590] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3393'. [ 365.946578][ T95] usb 5-1: config 0 has no interfaces? [ 365.965232][ T95] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 365.984827][ T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.008353][ T95] usb 5-1: Product: syz [ 366.016763][ T95] usb 5-1: Manufacturer: syz [ 366.031493][ T95] usb 5-1: SerialNumber: syz [ 366.072455][ T95] r8152-cfgselector 5-1: Unknown version 0x0000 [ 366.099438][ T95] r8152-cfgselector 5-1: config 0 descriptor?? [ 366.110056][T13599] raw_sendmsg: syz.1.3397 forgot to set AF_INET. Fix it! [ 366.293465][T13606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3400'. [ 366.357419][ T9] r8152-cfgselector 5-1: USB disconnect, device number 35 [ 367.001823][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 367.170984][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 367.191487][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.222148][ T9] usb 3-1: config 0 descriptor?? [ 367.233735][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 367.435191][ T9] gp8psk: usb in 128 operation failed. [ 367.449498][ T9] gp8psk: usb in 137 operation failed. [ 367.456013][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.477512][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 367.493727][ T9] usb 3-1: media controller created [ 367.508420][T13653] xt_CT: No such helper "snmp" [ 367.539324][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.592170][ T9] gp8psk_fe: Frontend attached [ 367.598171][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 367.619623][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 367.933254][ T9] gp8psk: usb in 137 operation failed. [ 367.945447][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 367.985394][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 368.032393][ T9] usb 3-1: USB disconnect, device number 36 [ 368.258876][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 368.586110][T13687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3437'. [ 368.600427][T13686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3437'. [ 368.631022][T13687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3437'. [ 369.659018][ T55] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 369.894371][ T5895] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 370.062313][ T5895] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 370.080836][ T5895] usb 3-1: config 0 has no interface number 0 [ 370.094061][ T5895] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 370.111002][ T5895] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 370.123808][ T5895] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 370.159521][ T5895] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 370.198120][ T5895] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 370.212059][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 370.226246][ T5895] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 370.261446][ T5895] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 370.280822][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.308986][ T5895] usb 3-1: config 0 descriptor?? [ 370.322336][T13729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.330281][T13729] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.360221][ T5895] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 370.403781][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.432348][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.466581][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.10 [ 370.491841][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.509533][ T9] usb 2-1: config 0 descriptor?? [ 370.567889][ T5895] usb 3-1: USB disconnect, device number 37 [ 370.574076][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 370.601701][ T5935] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 370.612149][ T5895] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 370.793461][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.818099][ T5935] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 370.837878][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.868260][ T5935] usb 5-1: config 0 descriptor?? [ 370.900336][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 370.929911][ T9] sony 0003:054C:0268.0025: unbalanced collection at end of report description [ 370.950861][ T9] sony 0003:054C:0268.0025: parse failed [ 370.960078][ T9] sony 0003:054C:0268.0025: probe with driver sony failed with error -22 [ 371.131869][ T9] usb 2-1: USB disconnect, device number 28 [ 371.298126][ T5935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 371.531478][ T5935] pwc: recv_control_msg error -71 req 02 val 2c00 [ 371.561515][ T5935] pwc: recv_control_msg error -71 req 04 val 1000 [ 371.571593][ T5935] pwc: recv_control_msg error -71 req 04 val 1300 [ 371.588294][ T5935] pwc: recv_control_msg error -71 req 04 val 1400 [ 371.611878][ T5935] pwc: recv_control_msg error -71 req 02 val 2000 [ 371.618965][ T5935] pwc: recv_control_msg error -71 req 02 val 2100 [ 371.641809][ T5935] pwc: recv_control_msg error -71 req 04 val 1500 [ 371.664120][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3472'. [ 371.690947][ T5935] pwc: recv_control_msg error -71 req 02 val 2500 [ 371.706866][ T5935] pwc: recv_control_msg error -71 req 02 val 2400 [ 371.742309][ T5935] pwc: recv_control_msg error -71 req 02 val 2600 [ 371.751999][ T5935] pwc: recv_control_msg error -71 req 02 val 2900 [ 371.776320][ T5935] pwc: recv_control_msg error -71 req 02 val 2800 [ 371.807920][ T5935] pwc: recv_control_msg error -71 req 04 val 1100 [ 371.822005][ T5935] pwc: recv_control_msg error -71 req 04 val 1200 [ 371.848299][ T5935] pwc: Registered as video103. [ 371.864528][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47 [ 371.931803][ T5935] usb 5-1: USB disconnect, device number 36 [ 372.541692][ T5895] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 372.733128][ T5895] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.758714][ T5895] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 372.782516][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.800146][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 372.847503][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 372.903818][ T5895] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.914370][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.933669][ T5895] usb 5-1: Product: syz [ 372.937912][ T5895] usb 5-1: Manufacturer: syz [ 372.995255][ T5895] cdc_wdm 5-1:1.0: skipping garbage [ 373.001030][ T5895] cdc_wdm 5-1:1.0: skipping garbage [ 373.056229][ T5895] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 373.082851][ T5895] cdc_wdm 5-1:1.0: Unknown control protocol [ 373.216740][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.223443][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.230993][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.237659][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.244043][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.250682][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.257138][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.263780][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.270430][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.277081][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.283568][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.290344][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.296741][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.303393][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.309979][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.316637][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.323842][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.330498][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.337482][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 373.344134][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 373.371472][ T5895] usb 5-1: USB disconnect, device number 37 [ 373.371553][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 374.554472][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 374.724666][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 374.746977][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 374.759312][ T9] usb 1-1: config 179 has no interface number 0 [ 374.766211][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 374.778443][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 374.790569][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.821433][ T30] audit: type=1326 audit(1744427500.087:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 374.821518][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 374.901467][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 374.902915][ T30] audit: type=1326 audit(1744427500.087:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 374.931394][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 374.989308][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.019946][ T30] audit: type=1326 audit(1744427500.087:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.046676][T13832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 375.081441][ T30] audit: type=1326 audit(1744427500.087:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.154564][ T30] audit: type=1326 audit(1744427500.087:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.265229][ T30] audit: type=1326 audit(1744427500.087:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.341531][ T30] audit: type=1326 audit(1744427500.087:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.439200][ T30] audit: type=1326 audit(1744427500.087:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.552064][ T30] audit: type=1326 audit(1744427500.087:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.619126][ T30] audit: type=1326 audit(1744427500.087:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d598 code=0x7ffc0000 [ 375.649026][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input48 [ 375.877275][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 375.885660][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 375.896363][ T9] usb 1-1: USB disconnect, device number 37 [ 375.956578][ T9] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 376.565797][T13880] af_packet: tpacket_rcv: packet too big, clamped from 700 to 4294967272. macoff=96 [ 376.741737][ T5898] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 376.962384][ T5898] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 376.972120][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.982660][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.015536][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.031978][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.052187][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.064168][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.076152][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.086199][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.100816][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.112767][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.125306][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.146840][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.162801][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.179504][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.213832][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.226534][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.270838][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.287218][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 377.301584][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.314729][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.363652][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.401907][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.429122][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.438206][ T5898] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.464658][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 377.484922][ T5898] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 377.495166][ T5898] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 377.517125][ T5898] usb 4-1: Product: syz [ 377.521747][ T5898] usb 4-1: Manufacturer: syz [ 377.526391][ T5898] usb 4-1: SerialNumber: syz [ 377.534643][ T5898] usb 4-1: config 0 descriptor?? [ 377.546141][ T5898] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 377.622237][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3533'. [ 377.644219][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 377.813346][ T9] usb 2-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.829264][ T9] usb 2-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.839256][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 377.855744][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.881809][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 377.890812][ T5898] usb 4-1: USB disconnect, device number 37 [ 377.902592][ T5898] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 377.972199][ T5945] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 378.154244][ T5945] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.167268][ T5945] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 378.177847][ T5945] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.191523][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.204666][T13916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 378.217090][ T5945] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.454509][ T5945] usb 1-1: USB disconnect, device number 38 [ 378.717836][ T9] hid-led 0003:27B8:01ED.0026: probe with driver hid-led failed with error -71 [ 378.749247][ T9] usb 2-1: USB disconnect, device number 29 [ 379.977212][T13971] team0: Device gtp0 is of different type [ 380.181497][ T5898] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 380.353403][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 380.392976][ T5898] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 380.401736][ T5898] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 380.441722][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 380.471630][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.501400][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 380.511136][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 380.557432][ T5898] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 380.569644][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.618717][ T5898] usb 5-1: config 0 descriptor?? [ 380.839629][ T5898] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 381.077795][ T5945] usb 5-1: USB disconnect, device number 38 [ 381.103366][ T5945] usblp0: removed [ 382.351529][ T5896] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 382.542255][ T5896] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.558143][T14055] netlink: 'syz.1.3598': attribute type 9 has an invalid length. [ 382.567715][ T5896] usb 5-1: config 0 has no interface number 0 [ 382.577143][ T5896] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 382.605233][ T5896] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 382.616821][ T5896] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.627904][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.648657][ T5896] usb 5-1: config 0 descriptor?? [ 382.667483][T14036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 382.690197][ T5896] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 382.928416][ T5896] usb 5-1: USB disconnect, device number 39 [ 382.934740][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 383.095611][T14076] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 383.102970][T14076] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 383.209797][T14080] netlink: 'syz.1.3610': attribute type 11 has an invalid length. [ 383.256355][T14080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3610'. [ 383.553466][ T5898] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 383.681583][ T5896] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 383.701514][ T95] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 383.725340][ T5898] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.748065][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.771217][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.793008][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.826092][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.833272][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.845914][ T5898] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.863909][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.882966][ T5898] usb 4-1: Product: syz [ 383.891950][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.911621][ T5898] usb 4-1: Manufacturer: syz [ 383.916463][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.925738][ T95] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 383.953707][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 383.959003][ T5898] cdc_wdm 4-1:1.0: skipping garbage [ 383.964844][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.975251][ T5896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.002211][ T95] usb 1-1: config 0 descriptor?? [ 384.008983][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.017973][ T5898] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 384.031818][ T5896] usb 2-1: SerialNumber: syz [ 384.041061][ T5898] cdc_wdm 4-1:1.0: Unknown control protocol [ 384.251444][ T5945] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 384.268691][ T5896] usb 2-1: 0:2 : does not exist [ 384.306846][ T5896] usb 2-1: USB disconnect, device number 30 [ 384.416859][ T5945] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.430683][ T5945] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.446998][ T95] gembird 0003:11FF:3331.0027: hidraw0: USB HID v1.01 Device [HID 11ff:3331] on usb-dummy_hcd.0-1/input0 [ 384.451811][ T5945] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.475156][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.485273][ T5945] usb 5-1: SerialNumber: syz [ 384.517598][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.726621][ T5945] usb 5-1: 0:2 : does not exist [ 384.742329][ T5935] usb 1-1: USB disconnect, device number 39 [ 384.768414][ T5896] usb 4-1: USB disconnect, device number 38 [ 384.800217][ T5945] usb 5-1: USB disconnect, device number 40 [ 385.032658][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.077401][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3626'. [ 385.109186][ T1086] bond0: (slave bond1): link status definitely down, disabling slave [ 385.146272][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'. [ 385.373736][T14126] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[14126] [ 386.002136][ T30] kauditd_printk_skb: 546 callbacks suppressed [ 386.002156][ T30] audit: type=1326 audit(1744427511.277:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14150 comm="syz.2.3643" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf743d579 code=0x0 [ 386.881557][ T5945] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 387.057145][ T5945] usb 2-1: config 0 has no interfaces? [ 387.090036][ T5945] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 387.101447][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.130147][ T5945] usb 2-1: Product: syz [ 387.140267][ T5945] usb 2-1: Manufacturer: syz [ 387.161962][ T5945] usb 2-1: SerialNumber: syz [ 387.187708][ T5945] usb 2-1: config 0 descriptor?? [ 387.251472][ T95] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 387.412611][ T95] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 387.430322][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.447036][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.476284][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.486161][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.495948][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.517404][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.527482][ T9] usb 2-1: USB disconnect, device number 31 [ 387.532744][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.542454][ T5945] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 387.560775][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.581699][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.590108][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.599819][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.612739][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.633258][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.642565][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.671390][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.679714][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.689436][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.725328][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.731393][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 387.737016][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.749128][ T5945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 387.750186][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.757563][ T5945] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 387.776234][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.789113][ T95] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.798676][ T95] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 387.814635][ T95] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.826172][ T95] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 387.838886][ T95] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 387.841967][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.850242][ T95] usb 3-1: Product: syz [ 387.870923][ T95] usb 3-1: Manufacturer: syz [ 387.875829][ T95] usb 3-1: SerialNumber: syz [ 387.893261][ T5945] usb 5-1: config 0 descriptor?? [ 387.894662][ T95] usb 3-1: config 0 descriptor?? [ 387.921891][ T95] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 388.321583][ T5945] hid (null): usage index exceeded [ 388.326788][ T5945] hid (null): unknown global tag 0xe [ 388.342004][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 388.342206][ T5945] hid (null): unknown global tag 0x4a [ 388.366975][ T5896] usb 3-1: USB disconnect, device number 38 [ 388.377383][ T5896] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 388.400182][ T5945] hid (null): unknown global tag 0xc [ 388.557321][ T5945] usb 5-1: USB disconnect, device number 41 [ 388.781449][ T95] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 388.809914][T14211] netlink: 'syz.1.3671': attribute type 1 has an invalid length. [ 388.935843][ T95] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 388.973339][ T95] usb 1-1: config 0 has no interface number 0 [ 388.979529][ T95] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.996587][ T95] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 389.007811][ T95] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 389.026733][ T95] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 389.039536][ T95] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 389.061428][ T95] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.086883][ T95] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 389.116019][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.150470][ T95] usb 1-1: config 0 descriptor?? [ 389.175484][T14202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 389.191645][T14202] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 389.223584][ T95] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 389.539300][ T5945] usb 1-1: USB disconnect, device number 40 [ 389.539748][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 389.590433][ T5945] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 390.081643][T14249] input: syz0 as /devices/virtual/input/input51 [ 390.757707][T14273] netlink: 'syz.0.3700': attribute type 6 has an invalid length. [ 390.787134][T14278] vlan2: entered promiscuous mode [ 390.801397][T14278] bridge0: entered promiscuous mode [ 390.811752][T14278] vlan2: entered allmulticast mode [ 390.841060][T14278] bridge0: entered allmulticast mode [ 391.109844][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.551492][ T5945] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 391.692690][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 391.720000][ T5945] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 391.730330][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.744961][ T5945] usb 5-1: Product: syz [ 391.749197][ T5945] usb 5-1: Manufacturer: syz [ 391.755543][ T5945] usb 5-1: SerialNumber: syz [ 391.770436][ T5945] usb 5-1: config 0 descriptor?? [ 391.779413][ T5945] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 391.817751][ T30] audit: type=1800 audit(1744427517.087:3120): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3720" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51482 res=0 errno=0 [ 391.849882][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.861489][ T5893] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 391.869551][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 391.883163][ T9] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 391.892927][ T9] usb 3-1: config 0 has no interface number 0 [ 391.899132][ T9] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 391.915660][ T9] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 391.927070][ T9] usb 3-1: config 0 interface 126 has no altsetting 0 [ 391.944368][ T9] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 391.958944][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.970772][ T9] usb 3-1: Product: syz [ 391.997200][ T9] usb 3-1: Manufacturer: syz [ 392.008100][ T9] usb 3-1: SerialNumber: syz [ 392.021601][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 392.032513][ T9] usb 3-1: config 0 descriptor?? [ 392.041519][T14306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 392.048928][T14306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 392.063240][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 392.081253][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 392.106235][ T5893] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 392.118388][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.126585][ T5893] usb 1-1: Product: syz [ 392.130840][ T5893] usb 1-1: Manufacturer: syz [ 392.135639][ T5893] usb 1-1: SerialNumber: syz [ 392.145033][ T5893] usb 1-1: config 0 descriptor?? [ 392.155809][ T5893] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 392.166385][ T5893] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 392.484683][ T9] ir_usb 3-1:0.126: IR Dongle converter detected [ 392.614276][ T5945] usb 5-1: USB disconnect, device number 42 [ 392.695457][ T9] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 392.774372][ T5893] em28xx 1-1:0.0: chip ID is em2710 [ 392.928978][ T5896] usb 3-1: USB disconnect, device number 39 [ 392.952189][ T5896] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 392.969735][ T5896] ir_usb 3-1:0.126: device disconnected [ 392.977295][ T5893] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 392.998052][ T5893] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 393.018873][ T5893] em28xx 1-1:0.0: No AC97 audio processor [ 393.042328][ T5893] usb 1-1: USB disconnect, device number 41 [ 393.049971][ T5893] em28xx 1-1:0.0: Disconnecting em28xx [ 393.064282][ T5893] em28xx 1-1:0.0: Freeing device [ 394.016685][T14361] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 394.056954][T14361] macvlan2: entered allmulticast mode [ 394.071772][ C0] [ 394.074171][ C0] ============================================ [ 394.080432][ C0] WARNING: possible recursive locking detected [ 394.081688][T14361] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 394.086707][ C0] 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 Not tainted [ 394.086723][ C0] -------------------------------------------- [ 394.086732][ C0] syz-executor/5857 is trying to acquire lock: [ 394.086746][ C0] ffff88805c3eaf30 ( [ 394.110436][T14361] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 394.113559][ C0] &hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 394.113605][ C0] [ 394.113605][ C0] but task is already holding lock: [ 394.113614][ C0] ffff888078d84f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 394.113664][ C0] [ 394.113664][ C0] other info that might help us debug this: [ 394.113673][ C0] Possible unsafe locking scenario: [ 394.113673][ C0] [ 394.113680][ C0] CPU0 [ 394.113685][ C0] ---- [ 394.113690][ C0] lock(&hsr->seqnr_lock); [ 394.113704][ C0] lock(&hsr->seqnr_lock); [ 394.113718][ C0] [ 394.113718][ C0] *** DEADLOCK *** [ 394.113718][ C0] [ 394.113724][ C0] May be due to missing lock nesting notation [ 394.113724][ C0] [ 394.113731][ C0] 16 locks held by syz-executor/5857: [ 394.113746][ C0] #0: ffffffff8edf6270 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x1d6/0x22c0 [ 394.210382][ C0] #1: ffff88807a118be0 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x2a8/0x22c0 [ 394.219889][ C0] #2: ffff888028da33e0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: copy_mm+0x449/0x22c0 [ 394.229053][ C0] #3: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x84/0x350 [ 394.238742][ C0] #4: ffff8880359cecd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x1bd/0x310 [ 394.249477][ C0] #5: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x84/0x350 [ 394.259069][ C0] #6: ffff8880765b7d38 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pte_range+0x3b5/0x6680 [ 394.269569][ C0] #7: ffffc90000007bc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc2/0x650 [ 394.279169][ C0] #8: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1ef/0x1560 [ 394.288676][ C0] #9: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 394.298563][ C0] #10: ffffffff8ed3e000 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 394.308620][ C0] #11: ffff888078d84f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 394.318225][ C0] #12: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb8/0x2d20 [ 394.327824][ C0] #13: ffffffff8ed3e000 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 394.338147][ C0] #14: ffffffff8ed3dfa0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x220/0x1c00 [ 394.347577][ C0] #15: ffffffff8ed3e000 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 394.357612][ C0] [ 394.357612][ C0] stack backtrace: [ 394.363521][ C0] CPU: 0 UID: 0 PID: 5857 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) [ 394.363541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.363552][ C0] Call Trace: [ 394.363560][ C0] [ 394.363568][ C0] dump_stack_lvl+0x241/0x360 [ 394.363594][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.363616][ C0] ? __pfx__printk+0x10/0x10 [ 394.363646][ C0] print_deadlock_bug+0x2be/0x2d0 [ 394.363668][ C0] validate_chain+0x928/0x24e0 [ 394.363690][ C0] ? __resched_curr+0x20c/0x450 [ 394.363715][ C0] __lock_acquire+0xad5/0xd80 [ 394.363733][ C0] lock_acquire+0x116/0x2f0 [ 394.363748][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 394.363782][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 394.363796][ C0] _raw_spin_lock_bh+0x35/0x50 [ 394.363812][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 394.363826][ C0] hsr_dev_xmit+0x18a/0x210 [ 394.363841][ C0] dev_hard_start_xmit+0x2d4/0x840 [ 394.363864][ C0] __dev_queue_xmit+0x1b80/0x3f60 [ 394.363889][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 394.363920][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 394.363937][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 394.363952][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.363971][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 394.363987][ C0] ? ebt_do_table+0x2858/0x2a60 [ 394.364007][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 394.364024][ C0] ? ebt_do_table+0x2858/0x2a60 [ 394.364046][ C0] ? ebt_do_table+0x2858/0x2a60 [ 394.364069][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.364087][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 394.364102][ C0] ? skb_push+0x97/0x100 [ 394.364122][ C0] br_dev_queue_push_xmit+0x771/0x950 [ 394.364140][ C0] ? br_nf_post_routing+0x1ef/0xe80 [ 394.364160][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 394.364178][ C0] ? NF_HOOK+0xa1/0x460 [ 394.364194][ C0] NF_HOOK+0x3ac/0x460 [ 394.364210][ C0] ? NF_HOOK+0xa1/0x460 [ 394.364224][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 394.364240][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 394.364260][ C0] br_forward_finish+0xd8/0x130 [ 394.364275][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 394.364292][ C0] NF_HOOK+0x3ac/0x460 [ 394.364306][ C0] ? __ia32_compat_sys_ia32_clone+0x266/0x2e0 [ 394.364327][ C0] ? NF_HOOK+0xa1/0x460 [ 394.364341][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 394.364357][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 394.364376][ C0] __br_forward+0x46a/0x640 [ 394.364391][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 394.364409][ C0] ? __pfx___br_forward+0x10/0x10 [ 394.364425][ C0] ? skb_clone+0x240/0x390 [ 394.364444][ C0] maybe_deliver+0xb3/0x150 [ 394.364461][ C0] br_flood+0x2e4/0x680 [ 394.364479][ C0] br_dev_xmit+0x12ac/0x1c00 [ 394.364519][ C0] ? br_dev_xmit+0x220/0x1c00 [ 394.364542][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 394.364562][ C0] ? hsr_forward_skb+0x1238/0x2d20 [ 394.364580][ C0] ? dev_hard_start_xmit+0x2d4/0x840 [ 394.364596][ C0] ? __dev_queue_xmit+0x1b80/0x3f60 [ 394.364613][ C0] ? ip6_finish_output2+0x1296/0x1750 [ 394.364642][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 394.364658][ C0] ? call_timer_fn+0x189/0x650 [ 394.364676][ C0] ? netif_skb_features+0x8be/0xca0 [ 394.364698][ C0] dev_hard_start_xmit+0x2d4/0x840 [ 394.364721][ C0] __dev_queue_xmit+0x1b80/0x3f60 [ 394.364744][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 394.364763][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 394.364783][ C0] ? __copy_skb_header+0xa7/0x5a0 [ 394.364801][ C0] ? __asan_memcpy+0x40/0x70 [ 394.364817][ C0] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 394.364836][ C0] ? __asan_memcpy+0x40/0x70 [ 394.364851][ C0] ? __pskb_copy_fclone+0x9fb/0x10e0 [ 394.364873][ C0] ? hsr_create_tagged_frame+0x4de/0xef0 [ 394.364892][ C0] ? __asan_memmove+0x40/0x70 [ 394.364907][ C0] ? hsr_addr_subst_dest+0x30d/0xac0 [ 394.364936][ C0] hsr_forward_skb+0x184c/0x2d20 [ 394.364953][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.364975][ C0] ? hsr_forward_skb+0xb8/0x2d20 [ 394.364996][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 394.365014][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.365038][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.365056][ C0] ? hsr_dev_xmit+0x18a/0x210 [ 394.365071][ C0] hsr_dev_xmit+0x195/0x210 [ 394.365085][ C0] dev_hard_start_xmit+0x2d4/0x840 [ 394.365108][ C0] __dev_queue_xmit+0x1b80/0x3f60 [ 394.365125][ C0] ? register_lock_class+0x54/0x330 [ 394.365143][ C0] ? __lock_acquire+0xad5/0xd80 [ 394.365160][ C0] ? __dev_queue_xmit+0x2f9/0x3f60 [ 394.365179][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 394.365198][ C0] ? neigh_connected_output+0x1d5/0x450 [ 394.365220][ C0] ? read_seqbegin+0x15c/0x2c0 [ 394.365240][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.365259][ C0] ? read_seqbegin+0x202/0x2c0 [ 394.365280][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 394.365301][ C0] ? eth_header+0x11c/0x1f0 [ 394.365316][ C0] ? __asan_memcpy+0x40/0x70 [ 394.365332][ C0] ? eth_header+0x11c/0x1f0 [ 394.365347][ C0] ? __pfx_eth_header+0x10/0x10 [ 394.365361][ C0] ? neigh_connected_output+0x3a7/0x450 [ 394.365388][ C0] ip6_finish_output2+0x1296/0x1750 [ 394.365413][ C0] ? ip6_finish_output2+0x701/0x1750 [ 394.365440][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 394.365464][ C0] ? ip6_mtu+0x81/0x3f0 [ 394.365484][ C0] ? ip6_mtu+0x81/0x3f0 [ 394.365504][ C0] ip6_finish_output+0x421/0x840 [ 394.365527][ C0] ndisc_send_skb+0xb58/0x1560 [ 394.365544][ C0] ? ndisc_send_skb+0x1ef/0x1560 [ 394.365562][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 394.365578][ C0] ? __pfx_dst_output+0x10/0x10 [ 394.365597][ C0] ? __ndisc_fill_addr_option+0xe8/0x140 [ 394.365613][ C0] ? ndisc_send_rs+0x439/0x5c0 [ 394.365637][ C0] addrconf_rs_timer+0x380/0x680 [ 394.365664][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 394.365691][ C0] call_timer_fn+0x189/0x650 [ 394.365707][ C0] ? call_timer_fn+0xc2/0x650 [ 394.365722][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 394.365745][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 394.365763][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 394.365787][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 394.365810][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.365825][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.365843][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 394.365867][ C0] __run_timer_base+0x66e/0x8e0 [ 394.365887][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 394.365905][ C0] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 394.365931][ C0] run_timer_softirq+0xb7/0x170 [ 394.365947][ C0] handle_softirqs+0x2d6/0x9b0 [ 394.365966][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 394.365982][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 394.365999][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 394.366026][ C0] __irq_exit_rcu+0xfb/0x220 [ 394.366041][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 394.366061][ C0] irq_exit_rcu+0x9/0x30 [ 394.366075][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 394.366094][ C0] [ 394.366099][ C0] [ 394.366104][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.366122][ C0] RIP: 0010:__rcu_read_unlock+0x34/0x110 [ 394.366139][ C0] Code: 55 41 54 53 49 bc 00 00 00 00 00 fc ff df 65 4c 8b 34 25 08 c0 68 93 4d 8d ae 44 04 00 00 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 <84> c0 75 6b 41 8b 6d 00 ff cd 42 0f b6 04 23 84 c0 75 76 41 89 6d [ 394.366152][ C0] RSP: 0018:ffffc900040bf1c8 EFLAGS: 00000a03 [ 394.366167][ C0] RAX: 0000000000000000 RBX: 1ffff1100be9e808 RCX: 0000000000000007 [ 394.366178][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fde5e RDI: ffffffff8ca1b4a0 [ 394.366189][ C0] RBP: ffffc900040bf2b0 R08: ffffffff82395ed9 R09: 1ffff11003c995b3 [ 394.366201][ C0] R10: dffffc0000000000 R11: ffffed1003c995b4 R12: dffffc0000000000 [ 394.366213][ C0] R13: ffff88805f4f4044 R14: ffff88805f4f3c00 R15: 1ffff92000817e48 [ 394.366227][ C0] ? page_table_check_set+0x459/0x700 [ 394.366253][ C0] __page_table_check_ptes_set+0x365/0x400 [ 394.366276][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 394.366299][ C0] ? __folio_rmap_sanity_checks+0x163/0x3b0 [ 394.366317][ C0] copy_pte_range+0x46ee/0x6680 [ 394.366332][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 394.366356][ C0] ? kernel_text_address+0xa7/0xe0 [ 394.366372][ C0] ? unwind_get_return_address+0x4d/0x90 [ 394.366400][ C0] ? __pfx_copy_pte_range+0x10/0x10 [ 394.366413][ C0] ? stack_trace_save+0x11a/0x1d0 [ 394.366435][ C0] ? __lock_acquire+0xad5/0xd80 [ 394.366451][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 394.366474][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 394.366488][ C0] ? __lock_acquire+0xad5/0xd80 [ 394.366513][ C0] ? mas_wr_store_type+0xc24/0x16c0 [ 394.366532][ C0] copy_page_range+0xe57/0x13a0 [ 394.366559][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 394.366576][ C0] ? up_write+0x1ab/0x590 [ 394.366601][ C0] ? __asan_memset+0x23/0x50 [ 394.366615][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 394.366641][ C0] ? vma_interval_tree_insert_after+0x26f/0x2c0 [ 394.366661][ C0] copy_mm+0x130d/0x22c0 [ 394.366687][ C0] ? __pfx_copy_mm+0x10/0x10 [ 394.366708][ C0] ? __init_rwsem+0x122/0x160 [ 394.366728][ C0] ? copy_signal+0x500/0x630 [ 394.366746][ C0] copy_process+0x17de/0x3d10 [ 394.366768][ C0] ? copy_process+0xa07/0x3d10 [ 394.366787][ C0] ? __pfx_copy_process+0x10/0x10 [ 394.366805][ C0] ? count_memcg_event_mm+0x388/0x440 [ 394.366827][ C0] ? count_memcg_event_mm+0x96/0x440 [ 394.366850][ C0] kernel_clone+0x242/0x930 [ 394.366870][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 394.366889][ C0] ? handle_mm_fault+0x1830/0x1bf0 [ 394.366918][ C0] __ia32_compat_sys_ia32_clone+0x266/0x2e0 [ 394.366940][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 394.366967][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 394.366987][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 394.367006][ C0] __do_fast_syscall_32+0xb4/0x110 [ 394.367027][ C0] ? exc_page_fault+0x5f8/0x920 [ 394.367046][ C0] do_fast_syscall_32+0x34/0x80 [ 394.367066][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.367085][ C0] RIP: 0023:0xf744d579 [ 394.367099][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 394.367111][ C0] RSP: 002b:00000000f759fcbc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 394.367127][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 394.367138][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000580524a8 [ 394.367147][ C0] RBP: 00000000f743dff4 R08: 0000000000000000 R09: 0000000000000000 [ 394.367157][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 394.367166][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 394.367181][ C0] [ 394.371400][T14361] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 395.088830][ C1] vkms_vblank_simulate: vblank timer overrun