last executing test programs: 4m15.359850883s ago: executing program 2 (id=541): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m12.874687738s ago: executing program 2 (id=556): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') symlinkat(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000100)='./control\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 4m11.050826478s ago: executing program 2 (id=568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) 4m10.958583219s ago: executing program 2 (id=569): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 4m9.992883263s ago: executing program 2 (id=574): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc72380000000001000000fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c342b9ac5a51eacf8a09cede8676044eafd3d7935f900"/142, 0x8e}, {&(0x7f0000000840)="8d03cab9cbe923f2ab882de5", 0xc}, {&(0x7f0000000400)="b4addc94bbb291", 0x7}], 0x3, 0x0, 0x0, 0x400c800}, 0x4000000) close(r1) 4m9.849828759s ago: executing program 2 (id=575): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 4m9.445861807s ago: executing program 32 (id=575): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5.190114212s ago: executing program 0 (id=2874): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000340)={0x0, 0x13, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.745966416s ago: executing program 3 (id=2882): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) 4.089914752s ago: executing program 3 (id=2888): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)='-', 0x1, 0x4004085, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 3.171750401s ago: executing program 3 (id=2894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.116957438s ago: executing program 0 (id=2895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x64}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004810) 3.017798807s ago: executing program 0 (id=2896): r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0xe, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x8, 0x7ff, r0, 0x0, 0x0, 0x4000000000000000}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_pgetevents(r1, 0x2, 0x2, &(0x7f00000003c0)=[{}, {}], &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2.892014954s ago: executing program 0 (id=2897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000001040)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x6, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.566143334s ago: executing program 4 (id=2899): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfff, @empty, 0x8}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "dcd7fdbba1b2073f21c27b4085cf306d4d97824995179e32e1f10a34ac"}, 0x28) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 2.522721989s ago: executing program 4 (id=2900): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={&(0x7f0000000800)=[0xfffff801, 0x4, 0x401, 0x3, 0x7, 0x2, 0x7fffffff, 0x1, 0x7, 0x2, 0x9, 0x6, 0xffffffff, 0x10001, 0x6, 0x6, 0xcad9, 0x636b79c1, 0x9, 0xf, 0x1, 0x3, 0xad67, 0x5, 0x5, 0x8000, 0x4, 0x8000, 0x3ff, 0x6, 0x1, 0x7, 0x99, 0x4, 0x9, 0xffff1e1b, 0xd5f, 0x1df000, 0x500, 0xb, 0x6a0, 0x0, 0x8, 0x4, 0x7, 0xa8, 0x7, 0x9, 0x6, 0x0, 0x10, 0xfffffff7, 0x0, 0xe36, 0xffff18f9, 0x7fff, 0x4, 0x200, 0x8000, 0x0, 0xd, 0x8f8a, 0x200, 0x3, 0xa2, 0x3, 0x8, 0xfffffff9, 0x1aac, 0x4, 0x9, 0x1, 0x5, 0xd, 0x7, 0x2, 0x3, 0xc1, 0x7, 0x1, 0x6, 0x100, 0x6, 0x40, 0x5, 0xff, 0x9, 0x2, 0x101, 0x81, 0x21, 0x7, 0x7fffffff, 0x1ff, 0x0, 0xe29c, 0x2, 0x9, 0x7, 0xebd4, 0x8, 0x80000001, 0x4c, 0x3, 0x5, 0xffff, 0x3, 0x0, 0x8, 0x9, 0x6, 0x6, 0xd10, 0x80, 0xffffff40, 0x101, 0x1000, 0xab48, 0xe92, 0x9, 0x2, 0x9, 0xbb78, 0x7, 0x7, 0x4, 0x6, 0xffffffff, 0x5, 0x559c, 0x10000, 0x7, 0x8, 0x8, 0x5, 0x80, 0x5, 0x1, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x80, 0x7, 0x1fee0412, 0x58a, 0x7, 0x0, 0x7, 0x1b, 0x0, 0x6, 0x2, 0x0, 0x4, 0x4, 0x10001, 0x237, 0x80000001, 0x5, 0x9, 0x8, 0x400, 0x8, 0x3, 0xffffffff, 0x8000, 0x5, 0x400, 0x536, 0x1ff, 0x64b, 0x80, 0x8000, 0xa, 0xb8e, 0x4, 0x7f, 0x0, 0x2, 0x8000, 0x4, 0x8, 0x6, 0x9, 0x1, 0x9, 0x7, 0x5, 0x6, 0x81, 0xa, 0x3, 0xffffffff, 0x6, 0xe, 0x5, 0xeb4b, 0x8, 0x7fffffff, 0x3, 0xc73, 0x6, 0x0, 0x6, 0x5, 0xf, 0xeaab1946, 0x0, 0x5, 0x8, 0x94b, 0x1a76, 0x7, 0x3, 0x4, 0x7fffffff, 0x5, 0x8001, 0x7fffffff, 0x5, 0xc960000, 0x9, 0x80000000, 0xc, 0x1, 0x80000001, 0x1, 0xc, 0x5, 0x2, 0x1f, 0xffffffff, 0x2, 0x0, 0x5, 0x6e, 0x80000001, 0x4, 0x3, 0x9, 0x20, 0x1, 0xe, 0xc0, 0x9, 0x19344b89, 0x655, 0x0, 0x3, 0x1ff, 0x8, 0x3, 0x2, 0x1000, 0x9, 0x2, 0x7ff, 0x1, 0x3, 0x1004000, 0x4, 0x0, 0x4, 0x80, 0x3, 0x60000000, 0x10, 0x4, 0x1ff, 0x0, 0xfc000000, 0x5, 0x31b, 0x1ff, 0xa, 0xdfe, 0x7, 0x7, 0x3, 0x8, 0x4, 0x7ff, 0x1000, 0xffffff42, 0x2, 0x4, 0x3, 0x4, 0x7, 0x5, 0x3, 0x7, 0x7, 0x4, 0xe029, 0x0, 0x6, 0x7, 0x0, 0x49cd, 0xffffffff, 0x6, 0x3, 0x9, 0x20000000, 0x3, 0x8, 0x6, 0x9, 0x3, 0x80000000, 0x8ca, 0x9, 0x101, 0x5, 0xfffffe01, 0x3, 0x7f, 0x3, 0xdd5, 0xed, 0x3, 0x1ff, 0x3, 0x1, 0x7, 0x5, 0xe0c2, 0xe85, 0xff, 0x10001, 0x3ff, 0x9, 0x5, 0xb, 0x9, 0x15, 0x3, 0x80000005, 0x6, 0x10000, 0xf, 0x1, 0x2, 0x2a96de3d, 0x6, 0x89c, 0x80000000, 0x0, 0x5, 0x0, 0xfff, 0x1800000, 0x7, 0xd2, 0xb802, 0x80000000, 0x9, 0x30000, 0x7fff, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x7, 0x1, 0x9, 0xffffffff, 0x0, 0x80000000, 0x5, 0x400, 0x7, 0xa73, 0x7, 0x8, 0x8, 0x42e236bc, 0x4, 0x1ff, 0x3, 0x2183, 0xdf1, 0xff, 0xff, 0x3bf317c9, 0x2, 0x8, 0x0, 0x4, 0xd, 0x3, 0x6, 0xf33, 0x8, 0x7, 0x8, 0x7, 0xffffffff, 0x12, 0x8000, 0x3, 0x350, 0x4, 0x5, 0xe, 0x0, 0x3, 0x445, 0x2184, 0x9, 0x1, 0x5, 0x4, 0xffffffff, 0x200, 0x6, 0x2, 0x400003, 0x7, 0x6, 0x3, 0x0, 0x6, 0xfffffeda, 0x4, 0x6, 0x4, 0x401, 0x1, 0x400, 0x9, 0x8, 0x2, 0x4, 0x5, 0x1, 0x81b, 0x9, 0x80, 0x9, 0xff, 0x6, 0x9, 0x4, 0x9, 0xffffffff, 0x7, 0x7, 0x9, 0x2, 0x3, 0x5d, 0x3, 0x3, 0x1b, 0x40006, 0x15, 0xd87, 0x7, 0x40, 0x13, 0x845, 0x8000, 0x2, 0x824, 0x7, 0x80000001, 0x6, 0x23, 0x8, 0x1000, 0x1, 0xbf10, 0xe, 0x4, 0x7, 0x9, 0x2b, 0x8, 0xda0, 0x5, 0x3, 0x1dc, 0x6, 0x7, 0x7, 0xc, 0xfffffff9, 0xfffffffc, 0x400, 0x3, 0x3, 0xb, 0xffff4696, 0x61, 0xe0000000, 0xfffffff6, 0x9, 0x5, 0x9, 0x8, 0x0, 0x6, 0x2fa, 0x8, 0x7, 0x8, 0x5, 0xe, 0x0, 0x4, 0x4, 0x0, 0x5, 0x7f, 0x2000, 0x10000, 0x10001, 0x6, 0x7, 0x6, 0x8, 0xc10, 0x7, 0xaabc, 0x5fc3, 0x4, 0x81, 0x7d094b8, 0x7, 0x9, 0x2, 0x1, 0x1, 0x7, 0x800, 0x8, 0xfffffff8, 0xfffffff8, 0x0, 0x0, 0x45e8, 0xc, 0x0, 0xcb4b, 0x3, 0x1, 0x2, 0x7, 0x3, 0xd12, 0x6, 0x9, 0x6, 0xffff45dd, 0x6, 0x8000, 0x0, 0x0, 0x6, 0x3, 0x5, 0x9, 0xd743, 0x6, 0x0, 0x7, 0x5, 0xfffffff7, 0xdd, 0x9, 0x1, 0x9, 0x6, 0x3, 0x8, 0x5, 0x8001, 0x4, 0xd, 0x6, 0x0, 0x5, 0x7, 0x919, 0x80000001, 0x9, 0x0, 0x7ff, 0x4, 0x1, 0x8, 0x2c000000, 0x7, 0x6, 0x1, 0x1, 0x0, 0x3, 0xe, 0x0, 0x2, 0x6, 0xffff, 0x1, 0x10001, 0x101, 0x41c1, 0x3, 0x8000, 0x4, 0x2, 0x14000, 0xb, 0x5, 0x671e, 0x9, 0xba, 0x3, 0x1, 0x8001, 0x8, 0x2000, 0x4, 0x2ab, 0x5, 0x1, 0x80, 0x80000000, 0xfffffffd, 0x4, 0xb, 0xeaa, 0x6, 0x10000, 0x11, 0x9, 0x2, 0xfffeffff, 0x4, 0x3, 0x80, 0x0, 0x9, 0x800, 0x7, 0x67, 0x2, 0x4, 0xfffffffc, 0x6, 0x1, 0xe, 0x40, 0x8, 0x800, 0x6, 0x3, 0x8, 0x4, 0x3, 0xf, 0x7, 0x10000, 0x2, 0xfffffffd, 0x7, 0x4fad94f8, 0x2, 0xffff, 0xd8b7ea2, 0x4, 0xe, 0x8, 0x8, 0x8e63, 0x9, 0x0, 0x0, 0x14, 0xf, 0xffff, 0x0, 0x84, 0x8000, 0x9, 0x2, 0x9, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x0, 0x9, 0x4, 0x9, 0xd2, 0x8dcc, 0x401, 0x8, 0x80, 0xfab6, 0x1c11, 0x4, 0x7, 0x9, 0x4, 0x9, 0xff, 0x1943, 0x84, 0x8001, 0x7ff, 0x1, 0x8000, 0xffffffff, 0x1, 0x4, 0x196a, 0x1, 0x9, 0x7, 0x3, 0x1, 0x6, 0x2, 0x5, 0x1ff, 0x166304f4, 0x4, 0x5, 0x8626, 0x2378, 0x3, 0x3, 0x4, 0xe, 0xce6a, 0x3, 0x17a000, 0x3, 0x4, 0x5, 0x1, 0x8, 0x5, 0x65, 0x5, 0xe, 0xd2, 0x2, 0x4, 0xccd1, 0x3, 0x10000, 0xfb12, 0x8, 0x80000, 0x8, 0x10, 0x2, 0x0, 0x1, 0x7, 0x4ed, 0x3b1, 0x1, 0xff, 0x401, 0x10, 0x5, 0x2, 0x10000, 0x3, 0x80, 0x2, 0xffff, 0x825d, 0x10000, 0x6, 0x95, 0x6, 0x4, 0x1, 0x3, 0x0, 0x9, 0x7, 0x5, 0x5000000, 0x5, 0x10, 0x1, 0xfffffff8, 0x6, 0x106, 0x3, 0x80000000, 0x0, 0x1, 0x0, 0x7, 0x7, 0x480, 0x7, 0x250, 0xe, 0x8, 0x7f, 0xfffffbff, 0xfff, 0x2293, 0x91, 0x5, 0x9, 0x400, 0x0, 0x5, 0x3, 0x42, 0xfffffeff, 0x848, 0x8, 0x7, 0x48000, 0x7fffffff, 0x2d62, 0x2, 0x80000000, 0x35, 0x2, 0x9, 0x2, 0x2, 0x7, 0x5, 0x2b5, 0xd96d, 0x3, 0x6, 0x2, 0x10000, 0x38, 0x1, 0x0, 0x5, 0x800, 0xecc7, 0x4, 0x2, 0x81, 0x7, 0x6, 0x72bd3e53, 0x9, 0xca9e, 0x2523, 0x200101, 0x7, 0x556c, 0x1, 0xbdfb, 0x9c5, 0x8, 0xfffffc01, 0x9, 0x3, 0x649, 0x6, 0x1, 0x0, 0x8, 0x0, 0xb25, 0x9, 0xa5, 0x10001, 0xfffffff8, 0x6, 0x2, 0x4, 0x2, 0x200, 0xb, 0x8, 0x9, 0x0, 0xffff, 0xffffffff, 0x5, 0xc, 0x200, 0x0, 0x8, 0x0, 0xfffffff9, 0xaedf, 0x3, 0x1, 0x0, 0xfff, 0x96c000, 0xffff, 0x40, 0xce42, 0x945, 0xffffffff, 0x2, 0x9, 0x1, 0x9, 0x6, 0x133d540c, 0x7, 0x10000, 0xffffa2f1, 0x1, 0x6, 0x6, 0xc, 0x9, 0xd3a, 0x8, 0x2, 0x7, 0x10000, 0x6d4d13b0, 0x3f2, 0xfffffff7, 0x9, 0xfffffffd, 0x5, 0x3, 0xd7b, 0x10001, 0x7, 0x6b5, 0x80000000, 0x800ab1c, 0x6, 0x1d, 0x8000, 0x6, 0x5, 0x5, 0x8, 0xe3d, 0x3, 0xfffffffb, 0xfe, 0xba19, 0xff, 0x1, 0x2, 0x3, 0x8f, 0x3, 0x1, 0xfffffff7, 0x1, 0x6, 0x8001, 0x0, 0x1, 0x80, 0x3, 0x0, 0x2, 0x3, 0xfffffffc, 0x6, 0x24000000, 0x1287, 0x1, 0x401, 0xa, 0x4, 0x7, 0x7fff, 0x0, 0x101, 0x0, 0x20000000, 0x100, 0x200, 0x0, 0x1, 0x35, 0x0, 0x80000000, 0x7f, 0xfffffffb, 0x30000000, 0x1, 0xfffffffe, 0x3ff, 0x10001, 0x7, 0x4, 0x86, 0xe85, 0x6, 0xe0000000, 0x7cc, 0x100, 0xc, 0x9, 0x80000001, 0xffffffff, 0x0, 0x7ff, 0x395b, 0xc00000, 0x2, 0x1, 0x3, 0xb24, 0x1000], 0x1, 0x400, 0x7e}) 2.442882452s ago: executing program 4 (id=2901): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x81}]}) 2.213692401s ago: executing program 3 (id=2902): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xc) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 2.20277389s ago: executing program 4 (id=2903): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="400b04"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="40150f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.106285499s ago: executing program 3 (id=2904): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f00000008c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.915690655s ago: executing program 0 (id=2905): syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000200)=0x6) 1.630210466s ago: executing program 5 (id=2907): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000300)=[0x2]}) 1.58472029s ago: executing program 1 (id=2908): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.563690202s ago: executing program 5 (id=2909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 1.381938982s ago: executing program 1 (id=2910): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000f80)=""/91, 0x5b}], 0x1) 1.193473237s ago: executing program 5 (id=2911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ed"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) 1.157992949s ago: executing program 0 (id=2912): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x7}, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000500)=0x1d) 484.684619ms ago: executing program 1 (id=2913): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 399.261392ms ago: executing program 1 (id=2914): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 338.650698ms ago: executing program 1 (id=2915): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 326.559687ms ago: executing program 5 (id=2916): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x10000010}) 217.624377ms ago: executing program 3 (id=2917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) 208.81437ms ago: executing program 4 (id=2918): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) 164.172505ms ago: executing program 1 (id=2919): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000180)={0x0, 0xc, 0x4, "e8c7d131"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 104.822516ms ago: executing program 5 (id=2920): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 24.272424ms ago: executing program 5 (id=2921): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 0s ago: executing program 4 (id=2922): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000001000)=[{0xfff, 0x10, 0x0, 0x0}, {0xc90, 0x2000, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): loop2: unable to read partition table [ 319.360398][ T6010] loop2: partition table beyond EOD, truncated [ 319.373143][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.390311][T10301] Dev loop2: unable to read RDB block 7 [ 319.403080][T10301] loop2: unable to read partition table [ 319.409309][T10301] loop2: partition table beyond EOD, truncated [ 319.423481][T10301] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.840940][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.366950][T10279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.773560][ T5922] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 320.874381][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.913441][ T5934] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 320.936630][ T5922] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 320.943092][ T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 320.954174][ T5922] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 320.965855][ T5922] usb 6-1: config 0 interface 0 has no altsetting 0 [ 320.990469][ T5922] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 321.010542][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 321.020466][ T5922] usb 6-1: Product: syz [ 321.024954][ T5922] usb 6-1: Manufacturer: syz [ 321.029624][ T5922] usb 6-1: SerialNumber: syz [ 321.037426][ T5922] usb 6-1: config 0 descriptor?? [ 321.056226][ T5922] hub 6-1:0.0: bad descriptor, ignoring hub [ 321.062574][ T5922] hub 6-1:0.0: probe with driver hub failed with error -5 [ 321.077788][ T5922] usb 6-1: selecting invalid altsetting 0 [ 321.084423][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 321.092630][ T5934] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 321.107415][ T5934] usb 5-1: config 0 has no interface number 0 [ 321.123710][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 321.130010][ T5934] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 321.137437][ T44] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 321.158040][ T5934] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 321.182118][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.194269][ T5934] usb 5-1: config 0 interface 126 has no altsetting 0 [ 321.216415][ T5934] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 321.228074][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.234161][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.238246][ T5934] usb 5-1: Product: syz [ 321.251580][ T5934] usb 5-1: Manufacturer: syz [ 321.256761][ T5934] usb 5-1: SerialNumber: syz [ 321.286275][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 321.292838][ T5934] usb 5-1: config 0 descriptor?? [ 321.300306][T10342] netlink: 'syz.3.1731': attribute type 2 has an invalid length. [ 321.314973][ T44] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 321.342119][T10327] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 321.345404][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.350188][T10327] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 321.362075][T10342] !: entered promiscuous mode [ 321.391371][ T44] usb 2-1: config 0 descriptor?? [ 321.427951][T10342] netlink: 'syz.3.1731': attribute type 2 has an invalid length. [ 321.439612][T10342] !: left promiscuous mode [ 321.830163][ T5934] ir_usb 5-1:0.126: IR Dongle converter detected [ 321.868911][ T44] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0038/input/input55 [ 321.913496][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.930337][ T44] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0038/input/input56 [ 322.035321][ T44] kye 0003:0458:5013.0038: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 322.035645][ T5934] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 322.056677][T10323] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 322.066028][T10323] usb 6-1: device reset changed ep0 maxpacket size! [ 322.101077][ T5922] usb 6-1: USB disconnect, device number 19 [ 322.142458][ T792] usb 2-1: USB disconnect, device number 40 [ 322.298657][T10355] fido_id[10355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 322.335943][ T5934] usb 5-1: USB disconnect, device number 37 [ 322.363800][ T5934] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 322.372596][ T5934] ir_usb 5-1:0.126: device disconnected [ 322.385406][ T5922] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 322.393880][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.573326][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 322.604037][ T5922] usb 6-1: config 0 has no interfaces? [ 322.622329][ T5922] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 322.649016][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.668788][ T5922] usb 6-1: Product: syz [ 322.678035][ T5922] usb 6-1: Manufacturer: syz [ 322.682708][ T5922] usb 6-1: SerialNumber: syz [ 322.697894][ T5922] usb 6-1: config 0 descriptor?? [ 322.961093][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.999843][ T5914] usb 6-1: USB disconnect, device number 20 [ 323.168219][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 323.201310][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.216239][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.223545][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.239919][ T8163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.249390][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.270648][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.284629][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 323.354116][T10370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1738'. [ 323.414789][T10370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1738'. [ 323.999504][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.265190][ T5934] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 324.437588][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.456697][ T5934] usb 4-1: config 0 has no interface number 0 [ 324.493778][ T5934] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.553104][ T5934] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.594058][ T5934] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 324.653185][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.664331][ T5934] usb 4-1: config 0 descriptor?? [ 324.851915][T10397] kvm: user requested TSC rate below hardware speed [ 324.973169][ T44] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 325.037932][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.069300][T10399] syzkaller1: entered promiscuous mode [ 325.083177][T10399] syzkaller1: entered allmulticast mode [ 325.116277][ T5934] prodikeys 0003:041E:2801.0039: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 325.145100][ T5934] hid_prodikeys: hid-prodikeys: failed to find output report [ 325.145100][ T5934] [ 325.153081][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 325.194565][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.233060][ T44] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 325.279113][ T44] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 325.309346][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.333105][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.350727][ T44] usb 1-1: Product: syz [ 325.358607][ T5934] usb 4-1: USB disconnect, device number 34 [ 325.366926][ T44] usb 1-1: Manufacturer: syz [ 325.371745][ T44] usb 1-1: SerialNumber: syz [ 325.410607][T10395] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 325.433475][ T792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.461526][T10407] input: syz1 as /devices/virtual/input/input57 [ 325.815113][T10418] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 325.991448][T10424] futex_wake_op: syz.4.1764 tries to shift op by 32; fix this program [ 326.073729][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.363165][ T5934] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 326.456531][ T44] cdc_ncm 1-1:1.0: bind() failure [ 326.468484][ T44] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 326.481743][ T44] usb 1-1: USB disconnect, device number 35 [ 326.515465][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.528104][ T5934] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 326.537589][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.548902][ T5934] usb 6-1: config 0 descriptor?? [ 326.603441][ T792] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 326.763010][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 326.770710][ T792] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 326.779109][ T792] usb 4-1: config 0 has no interface number 0 [ 326.786304][ T792] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.805428][ T792] usb 4-1: config 0 interface 85 has no altsetting 0 [ 326.815349][ T792] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 326.824856][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.838939][ T792] usb 4-1: Product: syz [ 326.843405][ T792] usb 4-1: Manufacturer: syz [ 326.848083][ T792] usb 4-1: SerialNumber: syz [ 326.858547][ T792] usb 4-1: config 0 descriptor?? [ 326.973125][ T5934] kye 0003:0458:5011.003A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 327.005946][ T5934] kye 0003:0458:5011.003A: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 327.033675][ T5934] kye 0003:0458:5011.003A: tablet-enabling feature report not found [ 327.056247][ T5934] kye 0003:0458:5011.003A: tablet enabling failed [ 327.223682][ T5934] usb 6-1: USB disconnect, device number 21 [ 327.243745][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 327.277832][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 327.493644][ T792] appletouch 4-1:0.85: Geyser mode initialized. [ 327.507389][ T792] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input58 [ 327.573783][ T5934] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 327.663777][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 327.681399][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 327.699851][ T792] usb 4-1: USB disconnect, device number 35 [ 327.722512][ T792] appletouch 4-1:0.85: input: appletouch disconnected [ 327.729562][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 327.737414][ T5934] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 327.748142][ T5934] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 327.763584][ T5934] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 327.777155][ T5934] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 327.791766][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 327.815688][ T5934] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 327.839310][ T5934] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 327.846329][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 327.860006][ T5934] usb 1-1: Product: syz [ 327.870140][ T5934] usb 1-1: Manufacturer: syz [ 327.887722][ T5934] usb 1-1: SerialNumber: syz [ 327.893145][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.916441][ T5934] usb 1-1: config 0 descriptor?? [ 327.932171][ T24] usb 2-1: config 0 descriptor?? [ 327.937705][ T5934] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 327.948973][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 327.966395][ T5934] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 328.159580][ T24] gspca_spca508: reg_read err -32 [ 328.165038][ T5914] net_ratelimit: 1 callbacks suppressed [ 328.165057][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.193368][ T24] gspca_spca508: reg_read err -32 [ 328.199668][ T24] gspca_spca508: reg_read err -32 [ 328.204907][ T5921] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 328.396868][ T5921] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 328.420690][ T24] gspca_spca508: reg_read err -71 [ 328.431547][ T5921] usb 5-1: config 160 has no interface number 0 [ 328.445988][ T5934] usb 1-1: USB disconnect, device number 36 [ 328.456105][ T24] gspca_spca508: reg write: error -71 [ 328.472051][ T5921] usb 5-1: config 160 interface 200 has no altsetting 0 [ 328.473357][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.479904][ T24] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 328.489486][ T5934] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 328.509969][ T5921] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 328.528833][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.560480][ T24] usb 2-1: USB disconnect, device number 41 [ 328.572062][ T5921] usb 5-1: Product: syz [ 328.593009][ T5921] usb 5-1: Manufacturer: syz [ 328.603138][ T5921] usb 5-1: SerialNumber: syz [ 328.653180][ T5923] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 328.803064][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 328.809905][ T5923] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 328.818892][ T5923] usb 6-1: config 0 has no interface number 0 [ 328.836209][ T5923] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 328.846797][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.868336][ T5923] usb 6-1: Product: syz [ 328.872575][ T5923] usb 6-1: Manufacturer: syz [ 328.875086][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.886202][ T5923] usb 6-1: SerialNumber: syz [ 328.893749][ T5921] usb 5-1: MIDIStreaming interface descriptor not found [ 328.904701][ T5923] usb 6-1: config 0 descriptor?? [ 328.916365][ T5923] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 328.957708][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.974978][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.983284][ T5921] usb 5-1: USB disconnect, device number 38 [ 328.993820][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.078226][ T8268] udevd[8268]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.170286][ T5923] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 329.204480][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.231713][ T5923] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 329.316587][T10483] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 329.390594][T10483] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 329.602788][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 329.604601][ T24] usb 6-1: USB disconnect, device number 22 [ 329.646986][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 329.686061][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 329.719270][ T24] quatech2 6-1:0.51: device disconnected [ 329.935639][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.956434][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.965663][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.975328][T10502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.171418][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 330.198953][T10513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.314461][T10513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.613136][ T5934] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 330.805339][ T5934] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 330.814314][ T5934] usb 6-1: config 160 has no interface number 0 [ 330.820862][ T5934] usb 6-1: config 160 interface 200 has no altsetting 0 [ 330.831646][ T5934] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 330.848801][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.866302][ T5934] usb 6-1: Product: syz [ 330.870899][ T5934] usb 6-1: Manufacturer: syz [ 330.878012][ T5934] usb 6-1: SerialNumber: syz [ 331.059348][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 331.079666][T10536] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1814'. [ 331.090322][T10538] batadv_slave_1: entered promiscuous mode [ 331.099980][T10537] batadv_slave_1: left promiscuous mode [ 331.127041][ T5934] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.135167][ T5934] usb 6-1: MIDIStreaming interface descriptor not found [ 331.230607][ T5934] usb 6-1: USB disconnect, device number 23 [ 331.320629][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.977585][T10560] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1825'. [ 332.403066][ T5934] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 332.575801][ T5934] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.603416][ T5934] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.620115][ T5934] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 332.633128][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 332.641425][ T5934] usb 6-1: SerialNumber: syz [ 332.867302][ T5934] usb 6-1: 0:2 : does not exist [ 333.513142][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 333.535239][ T5934] usb 6-1: USB disconnect, device number 24 [ 333.589267][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.694286][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 333.711897][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.745225][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.763285][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.791219][ T24] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 333.823516][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.855982][ T24] usb 1-1: config 0 descriptor?? [ 334.023691][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 334.081522][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.099852][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.293246][T10619] vlan0: entered allmulticast mode [ 334.305608][T10619] bridge0: port 3(vlan0) entered blocking state [ 334.332444][ T24] hid (null): global environment stack underflow [ 334.336072][T10619] bridge0: port 3(vlan0) entered disabled state [ 334.382430][T10619] vlan0: entered promiscuous mode [ 334.392055][ T24] hid_parser_main: 26 callbacks suppressed [ 334.392080][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.440672][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.464645][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'. [ 334.483120][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.483856][T10625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1853'. [ 334.490214][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.557265][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.573073][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.601005][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.653352][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.660434][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.680109][ T24] cougar 0003:060B:500A.003B: unknown main item tag 0x0 [ 334.696337][ T24] cougar 0003:060B:500A.003B: unexpected long global item [ 334.713917][ T24] cougar 0003:060B:500A.003B: parse failed [ 334.734955][ T24] cougar 0003:060B:500A.003B: probe with driver cougar failed with error -22 [ 334.775775][ T24] usb 1-1: USB disconnect, device number 37 [ 334.802815][T10632] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1856'. [ 334.855655][T10634] sctp: [Deprecated]: syz.4.1858 (pid 10634) Use of int in maxseg socket option. [ 334.855655][T10634] Use struct sctp_assoc_value instead [ 335.094795][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1861'. [ 335.362751][T10630] delete_channel: no stack [ 335.403170][ T5922] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 335.453062][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 335.543508][ T5921] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 335.580269][ T5922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.619462][ T5922] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 335.633063][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 335.640535][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 335.643069][ T5922] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.667480][ T24] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 335.691545][ T24] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 335.710308][ T5922] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 335.727291][ T5921] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 335.738554][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.739945][ T24] usb 1-1: Product: syz [ 335.754228][ T5922] usb 4-1: Product: syz [ 335.763015][ T5922] usb 4-1: Manufacturer: syz [ 335.767687][ T5922] usb 4-1: SerialNumber: syz [ 335.779420][ T5921] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 335.793763][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.805392][ T24] usb 1-1: Manufacturer: syz [ 335.812245][ T5921] usb 6-1: Product: syz [ 335.814593][ T5922] hub 4-1:1.0: bad descriptor, ignoring hub [ 335.819204][ T24] usb 1-1: SerialNumber: syz [ 335.829941][ T5921] usb 6-1: Manufacturer: syz [ 335.834078][ T5922] hub 4-1:1.0: probe with driver hub failed with error -5 [ 335.844741][ T5921] usb 6-1: SerialNumber: syz [ 335.901244][ T24] usb 1-1: config 0 descriptor?? [ 335.910234][T10644] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 335.929709][ T5921] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 336.015230][ T5922] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 336.103683][ T5914] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 336.239357][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.264621][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 336.273806][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.293116][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.297738][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.316207][ T5914] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 336.358262][ T5921] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 336.373123][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.391951][ T5921] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 336.404087][ T5921] usb 6-1: media controller created [ 336.410695][ T5914] usb 2-1: config 0 descriptor?? [ 336.468308][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.483482][ T5922] usb 4-1: USB disconnect, device number 36 [ 336.520978][ T5922] usblp1: removed [ 336.799465][ T5921] usb 6-1: USB disconnect, device number 25 [ 336.882320][ T5914] savu 0003:1E7D:2D5A.003C: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 337.107418][ T5922] usb 2-1: USB disconnect, device number 42 [ 337.244663][T10655] fido_id[10655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 338.288743][ T24] usb 1-1: USB disconnect, device number 38 [ 338.490846][T10689] loop8: detected capacity change from 0 to 7 [ 338.545771][T10689] Dev loop8: unable to read RDB block 7 [ 338.566382][T10695] net_ratelimit: 7 callbacks suppressed [ 338.566406][T10695] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.677409][T10689] loop8: unable to read partition table [ 338.695533][T10689] loop8: partition table beyond EOD, truncated [ 338.716610][T10689] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 338.753591][ T6010] Dev loop8: unable to read RDB block 7 [ 338.793778][ T6010] loop8: unable to read partition table [ 338.800812][ T6010] loop8: partition table beyond EOD, truncated [ 338.835248][T10694] Dev loop8: unable to read RDB block 7 [ 338.889304][T10694] loop8: unable to read partition table [ 338.933385][T10694] loop8: partition table beyond EOD, truncated [ 338.961781][T10694] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 338.996583][T10701] dummy0: entered promiscuous mode [ 339.037032][T10701] bond0: entered promiscuous mode [ 339.042141][T10701] bond_slave_0: entered promiscuous mode [ 339.069025][T10701] bond_slave_1: entered promiscuous mode [ 339.089994][T10701] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 339.163452][T10701] hsr1: entered allmulticast mode [ 339.204607][T10701] dummy0: entered allmulticast mode [ 339.214726][T10701] bond0: entered allmulticast mode [ 339.243093][T10701] bond_slave_0: entered allmulticast mode [ 339.278340][T10701] bond_slave_1: entered allmulticast mode [ 339.299218][T10701] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 339.619488][T10714] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 339.723469][T10714] xt_TPROXY: Can be used only with -p tcp or -p udp [ 340.102668][T10727] geneve2: entered promiscuous mode [ 340.134715][ T3453] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48156 - 0 [ 340.179292][ T3453] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48156 - 0 [ 340.223787][ T3453] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48156 - 0 [ 340.273078][ T3453] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48156 - 0 [ 340.288409][T10733] loop5: detected capacity change from 0 to 7 [ 340.307094][T10733] Dev loop5: unable to read RDB block 7 [ 340.314082][T10733] loop5: unable to read partition table [ 340.320441][T10733] loop5: partition table beyond EOD, truncated [ 340.328354][T10733] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.161301][ T30] audit: type=1326 audit(1765608110.468:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1908" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 341.265049][T10762] ALSA: mixer_oss: invalid OSS volume '' [ 341.526495][ T5934] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 341.635502][T10773] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1915'. [ 341.687557][ T5934] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 341.711053][ T5934] usb 1-1: config 4 has no interface number 0 [ 341.736496][ T5934] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 341.749060][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.761036][ T5934] usb 1-1: Product: syz [ 341.770930][ T5934] usb 1-1: Manufacturer: syz [ 341.777386][ T5934] usb 1-1: SerialNumber: syz [ 341.792914][ T5934] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.28/input/input59 [ 342.012334][ T5186] bcm5974 1-1:4.28: could not read from device [ 342.031391][ T5186] bcm5974 1-1:4.28: could not read from device [ 342.056164][ T5934] usb 1-1: USB disconnect, device number 39 [ 342.065094][ T5186] bcm5974 1-1:4.28: could not read from device [ 342.173082][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 342.227769][ T6715] udevd[6715]: Error opening device "/dev/input/event4": No such file or directory [ 342.257275][ T6715] udevd[6715]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.271358][ T6715] udevd[6715]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.282650][ T6715] udevd[6715]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.291516][ T6715] udevd[6715]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.363423][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 342.375788][ T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 342.388969][ T24] usb 2-1: config 0 has no interface number 0 [ 342.413781][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 342.430656][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.449609][ T24] usb 2-1: Product: syz [ 342.463098][ T24] usb 2-1: Manufacturer: syz [ 342.467857][ T24] usb 2-1: SerialNumber: syz [ 342.483712][ T5922] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 342.495515][ T24] usb 2-1: config 0 descriptor?? [ 342.513971][ T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.663477][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 342.672590][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.687880][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.699811][ T5922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.716914][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.731932][ T5922] usb 5-1: Product: syz [ 342.736721][ T5922] usb 5-1: Manufacturer: syz [ 342.744997][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 342.745391][ T5922] usb 5-1: SerialNumber: syz [ 342.773552][ T5934] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 342.781288][ T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 342.947071][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.959061][ T5923] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 342.967164][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.980391][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.996060][ T5934] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.007953][ T5922] usb 5-1: 0:2 : does not exist [ 343.014642][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.027360][ T5922] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 343.039404][ T5934] usb 6-1: config 0 descriptor?? [ 343.087138][ T5922] usb 5-1: USB disconnect, device number 39 [ 343.125188][ T5923] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 343.143400][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.155361][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.174785][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 343.175383][ T5923] usb 1-1: config 0 descriptor?? [ 343.185590][ T24] usb 2-1: USB disconnect, device number 43 [ 343.204182][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 343.237889][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 343.251010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 343.285942][ T24] quatech2 2-1:0.51: device disconnected [ 343.485533][ T5934] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xd [ 343.517914][ T5934] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 343.854967][ T24] usb 6-1: USB disconnect, device number 26 [ 344.053294][ T5922] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 344.238108][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.254728][ T5923] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 344.293096][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.326537][ T5923] usb 1-1: USB disconnect, device number 40 [ 344.334774][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.355076][ T5922] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.366541][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.433214][ T5922] usb 5-1: config 0 descriptor?? [ 344.703386][ T5923] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 344.833768][ T24] hid_parser_main: 73 callbacks suppressed [ 344.833793][ T24] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 344.869111][ T24] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.883392][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 344.907769][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 344.930694][ T5922] plantronics 0003:047F:FFFF.003F: reserved main item tag 0xd [ 344.970228][ T5922] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 344.981079][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 344.991307][ T5922] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 344.999670][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 345.015000][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 345.034110][ T5922] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 345.049564][ T5923] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 345.079591][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.128479][ T5923] usb 4-1: Product: syz [ 345.153297][ T5923] usb 4-1: Manufacturer: syz [ 345.158234][ T5923] usb 4-1: SerialNumber: syz [ 345.186318][ T5923] usb 4-1: config 0 descriptor?? [ 345.236720][ T5922] usb 5-1: USB disconnect, device number 40 [ 345.276118][ T5923] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 345.331462][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.407424][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.486932][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.543907][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.641173][ T6715] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.696412][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.723133][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 345.748619][T10813] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.839578][ T5186] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 345.866185][ T24] usb 4-1: USB disconnect, device number 37 [ 345.866264][ C0] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 346.155660][T10843] cifs: Unknown parameter 'f,' [ 346.532821][ T30] audit: type=1326 audit(1765608115.838:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10853 comm="syz.5.1948" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0 [ 346.584031][T10852] syzkaller1: entered promiscuous mode [ 346.591415][T10852] syzkaller1: entered allmulticast mode [ 347.313154][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 347.476314][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.499054][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 347.515220][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 347.537819][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 347.557189][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 347.593056][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.608227][T10882] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1960'. [ 347.633064][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.642377][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.644355][T10882] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1960'. [ 347.671794][ T9] usb 5-1: config 0 descriptor?? [ 348.120514][ T9] plantronics 0003:047F:FFFF.0040: ignoring exceeding usage max [ 348.203611][ T9] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 348.583372][ T5921] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 348.765909][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.811130][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.846742][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.898565][ T5921] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.923719][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.937080][ T5921] usb 4-1: config 0 descriptor?? [ 349.083177][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 349.245828][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.264309][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.286638][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.312694][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.322751][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.353576][ T24] usb 6-1: config 0 descriptor?? [ 349.377683][ T5921] plantronics 0003:047F:FFFF.0041: reserved main item tag 0xd [ 349.411015][ T5921] plantronics 0003:047F:FFFF.0041: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 349.428696][ T5914] usb 5-1: USB disconnect, device number 41 [ 349.623306][ T5921] usb 4-1: USB disconnect, device number 38 [ 349.790780][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'. [ 349.821902][ T24] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 350.199106][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 350.213831][T10953] netlink: 173 bytes leftover after parsing attributes in process `syz.1.1990'. [ 350.334898][ T5922] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 350.523015][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 350.535367][ T5922] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 350.563073][ T5922] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.574396][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.603026][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.623350][ T5922] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.645446][ T5922] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.671656][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.919228][ T5922] usb 5-1: usb_control_msg returned -32 [ 350.928115][ T5922] usbtmc 5-1:16.0: can't read capabilities [ 351.133410][ C0] plantronics 0003:047F:FFFF.0042: usb_submit_urb(ctrl) failed: -1 [ 351.523161][ T5934] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 351.580626][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 351.613200][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 351.683299][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 351.692670][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.707465][ T5934] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 351.726085][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.750933][ T5934] usb 1-1: config 0 descriptor?? [ 351.945014][ T5923] usb 6-1: USB disconnect, device number 27 [ 351.963157][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 352.113096][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 352.120711][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 352.129738][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.139729][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.151124][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.163044][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.177026][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 352.186355][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.205686][ T5934] mcp2221 0003:04D8:00DD.0043: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 352.449399][ T24] usb 1-1: USB disconnect, device number 41 [ 352.999525][T11023] usbtmc 4-1:16.0: simple control status returned cf [ 353.130170][ T24] usb 5-1: USB disconnect, device number 42 [ 353.201626][ T5922] usb 4-1: USB disconnect, device number 39 [ 353.207960][ T5934] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 353.395204][ T5934] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.425561][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.464576][ T5934] usb 6-1: config 0 descriptor?? [ 353.486818][ T5934] cp210x 6-1:0.0: cp210x converter detected [ 353.915732][ T5934] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 354.091521][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'. [ 354.093421][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 354.157460][ T5934] usb 6-1: cp210x converter now attached to ttyUSB0 [ 354.274526][T11057] netlink: 'syz.0.2035': attribute type 5 has an invalid length. [ 354.276169][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 354.322266][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.331952][ T24] usb 2-1: Product: syz [ 354.337331][ T24] usb 2-1: Manufacturer: syz [ 354.342002][ T24] usb 2-1: SerialNumber: syz [ 354.360936][ T24] usb 2-1: config 0 descriptor?? [ 354.360945][ T5934] usb 6-1: USB disconnect, device number 28 [ 354.377839][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 354.419139][ T5934] cp210x 6-1:0.0: device disconnected [ 354.528600][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 354.626933][ T24] usb 2-1: USB disconnect, device number 44 [ 354.955629][ T5934] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 355.113051][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 355.130119][ T5934] usb 4-1: config 0 has no interfaces? [ 355.138567][ T5934] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 355.168578][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.215446][ T5934] usb 4-1: config 0 descriptor?? [ 355.512787][ T5934] usb 4-1: USB disconnect, device number 40 [ 355.793297][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 355.956401][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.979002][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.994093][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.013913][ T9] usb 6-1: Product: syz [ 356.018333][ T9] usb 6-1: Manufacturer: syz [ 356.032641][ T9] usb 6-1: SerialNumber: syz [ 356.849068][T11116] netlink: 'syz.1.2062': attribute type 10 has an invalid length. [ 356.898511][T11116] team0: Port device dummy0 added [ 356.921254][T11116] netlink: 'syz.1.2062': attribute type 10 has an invalid length. [ 357.011321][T11116] team0: Port device dummy0 removed [ 357.102576][ T9] cdc_ncm 6-1:1.0: bind() failure [ 357.135309][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 357.146798][ T9] cdc_ncm 6-1:1.1: bind() failure [ 357.164468][ T9] usb 6-1: USB disconnect, device number 29 [ 357.995757][ T5923] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 358.174816][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 358.184878][ T5923] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 358.216668][ T5923] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 358.252086][ T5923] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.275146][ T5923] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 358.312368][ T5923] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 358.321745][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.345704][ T5923] usb 2-1: Product: syz [ 358.350208][ T5923] usb 2-1: Manufacturer: syz [ 358.359101][ T5923] usb 2-1: SerialNumber: syz [ 358.386882][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 358.402459][ T5923] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input63 [ 358.603812][ T5923] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 358.623349][ T5923] (id 0x00) [ 358.704916][ T5923] rc_core: IR keymap rc-imon-pad not found [ 358.731212][ T5923] Registered IR keymap rc-empty [ 358.736547][ T5922] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 358.744425][ T5923] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 358.775887][ T5923] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 358.814272][ T5923] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 358.847408][ T5923] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input64 [ 358.885068][ T5923] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:45> initialized [ 358.905120][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 358.923068][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 358.932218][ T5922] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.972909][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.997001][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.051972][ T5922] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.156765][ T5922] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.166198][ T24] usb 2-1: USB disconnect, device number 45 [ 359.197133][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.430432][ T5922] usb 5-1: GET_CAPABILITIES returned 0 [ 359.445545][ T5922] usbtmc 5-1:16.0: can't read capabilities [ 359.669151][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.678850][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.688071][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.703780][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.713634][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.723165][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.764125][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.774467][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.784162][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.796099][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.805839][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.815507][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.826459][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.873445][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.882609][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.925237][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 359.969955][ T44] usb 5-1: USB disconnect, device number 43 [ 360.977348][T11110] syz.3.2054 (11110): drop_caches: 3 [ 362.026940][T11205] sg_write: process 988 (syz.1.2099) changed security contexts after opening file descriptor, this is not allowed. [ 362.063603][ T5922] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 362.208496][T11208] warning: `syz.0.2101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 362.238968][ T5922] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 362.267874][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.299422][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.322088][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 362.366602][ T5922] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 362.380322][ T5922] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 362.398969][ T5922] usb 6-1: Manufacturer: syz [ 362.414750][ T5922] usb 6-1: config 0 descriptor?? [ 362.779359][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 362.877184][ T5922] appleir 0003:05AC:8243.0044: unknown main item tag 0x0 [ 362.916249][ T5922] appleir 0003:05AC:8243.0044: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 363.155950][ T5907] usb 6-1: USB disconnect, device number 30 [ 363.422451][T11238] fido_id[11238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 363.623219][ T5907] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 363.783091][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 363.804471][ T5907] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=98.5e [ 363.823230][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.833359][ T5907] usb 4-1: Product: syz [ 363.837583][ T5907] usb 4-1: Manufacturer: syz [ 363.842214][ T5907] usb 4-1: SerialNumber: syz [ 363.850482][ T5907] usb 4-1: config 0 descriptor?? [ 364.104180][T11275] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2127'. [ 364.188065][ T5907] usb 4-1: USB disconnect, device number 41 [ 365.123867][T11296] input: syz0 as /devices/virtual/input/input65 [ 365.763380][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 365.948713][ T24] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 365.967975][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.979821][ T24] usb 4-1: Product: syz [ 365.994233][ T24] usb 4-1: Manufacturer: syz [ 366.013411][ T24] usb 4-1: SerialNumber: syz [ 366.033402][ T24] hub 4-1:24.0: bad descriptor, ignoring hub [ 366.051610][ T24] hub 4-1:24.0: probe with driver hub failed with error -5 [ 366.199190][T11318] bridge1: entered promiscuous mode [ 366.264126][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 366.307071][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.375201][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 366.423674][ T24] usb 4-1: media controller created [ 366.490720][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.584605][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.592570][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.718397][ T24] DVB: Unable to find symbol dib7000p_attach() [ 366.735663][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 366.843002][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 366.865518][ T24] Registered IR keymap rc-empty [ 366.872892][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.878504][ T24] dvb-usb: could not initialize remote control. [ 366.896465][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 366.897723][T11322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.933256][ T792] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 367.056558][T11322] vlan2: left promiscuous mode [ 367.061495][T11322] geneve1: left promiscuous mode [ 367.067109][T11322] vlan2: left allmulticast mode [ 367.072180][T11322] geneve1: left allmulticast mode [ 367.082638][T11322] hsr1: left allmulticast mode [ 367.087986][T11322] dummy0: left allmulticast mode [ 367.093560][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 367.100387][T11322] bond0: left allmulticast mode [ 367.108988][T11322] bond_slave_0: left allmulticast mode [ 367.115155][ T792] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 367.121855][T11322] bond_slave_1: left allmulticast mode [ 367.124959][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.130533][T11322] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 367.146888][ T792] usb 2-1: config 0 descriptor?? [ 367.157128][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.166788][ T792] gspca_main: sunplus-2.14.0 probing 041e:400b [ 367.168188][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.202478][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.224314][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.233409][ T5934] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 367.240603][ T24] usb 4-1: USB disconnect, device number 42 [ 367.289289][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 367.395338][ T5934] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.402156][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 367.412705][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.426991][ T5934] usb 5-1: config 0 descriptor?? [ 367.594453][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 367.765620][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.777708][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.791106][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 367.810445][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.819418][ T9] usb 1-1: SerialNumber: syz [ 368.065925][ T9] usb 1-1: 0:2 : does not exist [ 368.098963][ T9] usb 1-1: USB disconnect, device number 42 [ 368.133389][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 368.149894][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.195655][ T792] gspca_sunplus: reg_w_riv err -71 [ 368.206556][ T792] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 368.245079][ T792] usb 2-1: USB disconnect, device number 46 [ 368.323832][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.339702][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.349829][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 368.359303][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.371226][ T24] usb 4-1: config 0 descriptor?? [ 368.462283][ T5934] video4linux radio48: keene_cmd_set failed (-71) [ 368.483449][ T5934] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 368.494072][ T5934] usb 5-1: USB disconnect, device number 44 [ 368.588926][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 368.595438][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 368.607643][ T24] usb 4-1: USB disconnect, device number 43 [ 369.746774][T11374] geneve3: entered promiscuous mode [ 369.757793][T11374] geneve3: entered allmulticast mode [ 370.049557][T11386] loop6: detected capacity change from 0 to 524287999 [ 370.065270][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2171'. [ 371.023050][ T5921] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 371.183085][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 371.195829][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.212264][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.226879][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.239403][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.253920][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.264134][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.387891][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2183'. [ 371.481668][ T5921] usb 5-1: GET_CAPABILITIES returned 0 [ 371.494277][ T5921] usbtmc 5-1:16.0: can't read capabilities [ 371.517803][T11412] team0: Port device team_slave_0 removed [ 371.679769][T11422] tipc: Started in network mode [ 371.690860][ T5923] usb 5-1: USB disconnect, device number 45 [ 371.696954][T11422] tipc: Node identity ac14142f, cluster identity 4711 [ 371.697878][T11422] tipc: New replicast peer: 0.0.0.0 [ 371.724314][T11422] tipc: Enabled bearer , priority 10 [ 371.734769][T11424] tipc: New replicast peer: 172.30.1.6 [ 372.436646][T11447] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.444649][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.622428][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.901657][T11447] geneve2: left promiscuous mode [ 372.915675][T11447] bridge1: left promiscuous mode [ 372.932004][ T966] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.950264][ T966] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 48156 - 0 [ 372.981393][ T24] tipc: Node number set to 2886997039 [ 373.001862][ T966] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.022993][ T966] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 48156 - 0 [ 373.063181][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.093020][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 48156 - 0 [ 373.133092][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.142043][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 48156 - 0 [ 373.754577][T11478] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2211'. [ 374.425605][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'. [ 375.144505][ T5923] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 375.312870][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 375.335906][ T5923] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 375.354812][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.375259][ T5923] usb 5-1: Product: syz [ 375.379501][ T5923] usb 5-1: Manufacturer: syz [ 375.396856][ T5923] usb 5-1: SerialNumber: syz [ 375.417714][ T5923] usb 5-1: config 0 descriptor?? [ 375.445108][ T5923] gspca_main: se401-2.14.0 probing 047d:5003 [ 376.060884][ T5923] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67 [ 376.083961][T11543] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.091434][T11543] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.317053][ T5923] usb 5-1: USB disconnect, device number 46 [ 376.422077][ T1145] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.465221][ T1145] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.488982][ T1145] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.517659][ T1145] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.263479][ T5921] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 377.373144][ T5923] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 377.413056][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 377.425940][ T5921] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 377.436007][ T5921] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 377.453096][ T5921] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 24676, setting to 1024 [ 377.465138][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0 [ 377.475035][ T5921] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 377.485072][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.493447][ T5921] usb 6-1: Product: syz [ 377.497800][ T5921] usb 6-1: Manufacturer: syz [ 377.502421][ T5921] usb 6-1: SerialNumber: syz [ 377.511941][ T5921] usb 6-1: config 0 descriptor?? [ 377.523059][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 377.533957][ T5923] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 377.544953][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.555596][ T5923] usb 1-1: Product: syz [ 377.560353][ T5923] usb 1-1: Manufacturer: syz [ 377.565346][ T5923] usb 1-1: SerialNumber: syz [ 377.574067][ T5923] usb 1-1: config 0 descriptor?? [ 377.582431][ T5923] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 377.738989][ T5921] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input68 [ 377.790262][ T5923] usb 1-1: USB disconnect, device number 43 [ 377.966931][ T9] usb 6-1: USB disconnect, device number 31 [ 378.702660][T11587] gre0: left promiscuous mode [ 378.708094][T11587] gre0: left allmulticast mode [ 378.871937][T11591] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2254'. [ 378.884838][T11591] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2254'. [ 379.257971][ T30] audit: type=1326 audit(1765608148.568:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.314128][ T30] audit: type=1326 audit(1765608148.568:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.337559][ T30] audit: type=1326 audit(1765608148.598:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.360941][T11587] bridge1: left promiscuous mode [ 379.366684][ T30] audit: type=1326 audit(1765608148.598:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.392079][T11587] bridge1: left allmulticast mode [ 379.392465][ T30] audit: type=1326 audit(1765608148.598:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.421315][ T30] audit: type=1326 audit(1765608148.598:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.443978][T11587] bond0: left promiscuous mode [ 379.449347][T11587] macvlan2: left promiscuous mode [ 379.470629][ T8163] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.503135][ T8163] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.512193][ T30] audit: type=1326 audit(1765608148.598:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.543984][ T8163] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.605390][ T8163] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.643107][ T30] audit: type=1326 audit(1765608148.598:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.712039][ T30] audit: type=1326 audit(1765608148.598:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 379.782498][ T30] audit: type=1326 audit(1765608148.598:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11601 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 380.374269][T11640] netlink: 'syz.0.2274': attribute type 12 has an invalid length. [ 380.843185][ T792] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 381.007810][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.033967][ T792] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 381.053093][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.084038][ T792] usb 6-1: config 0 descriptor?? [ 381.306550][ T792] usbhid 6-1:0.0: can't add hid device: -71 [ 381.327562][ T792] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 381.347963][ T792] usb 6-1: USB disconnect, device number 32 [ 381.823155][ T792] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 381.993041][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 382.000638][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.029216][ T792] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 382.050254][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.081438][ T792] usb 6-1: config 0 descriptor?? [ 382.107084][ T792] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 382.142856][ T792] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 382.308439][ T792] usb 6-1: USB disconnect, device number 33 [ 382.318314][ T792] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 382.871705][T11706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.898195][ T792] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 383.065973][ T792] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.096845][ T792] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 383.156137][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 383.183680][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 256, setting to 64 [ 383.213176][ T792] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.241420][ T792] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 383.271372][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.306781][ T792] usb 2-1: Product: syz [ 383.311049][ T792] usb 2-1: Manufacturer: syz [ 383.343161][ T792] usb 2-1: SerialNumber: syz [ 383.363858][ T792] usb 2-1: config 0 descriptor?? [ 383.372093][T11699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.401726][ T792] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input70 [ 383.463630][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 383.658568][ T44] usb 2-1: USB disconnect, device number 47 [ 383.664689][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 383.723071][ T792] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 383.893378][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 383.903428][ T792] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 383.915963][ T792] usb 4-1: config 0 has no interface number 0 [ 383.954294][ T792] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 383.980182][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.999559][ T792] usb 4-1: Product: syz [ 384.012437][ T792] usb 4-1: Manufacturer: syz [ 384.018022][ T792] usb 4-1: SerialNumber: syz [ 384.045063][ T792] usb 4-1: config 0 descriptor?? [ 384.064548][ T792] smsc95xx v2.0.0 [ 384.641689][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.648202][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.943183][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 385.087616][ T792] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 385.103123][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 385.112292][ T792] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 385.116348][ T24] usb 6-1: config 33 has too many interfaces: 128, using maximum allowed: 32 [ 385.135293][ T792] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 385.136078][ T24] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 385.159760][ T24] usb 6-1: config 33 has 0 interfaces, different from the descriptor's value: 128 [ 385.170209][ T792] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 385.173609][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 385.188057][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.196584][ T24] usb 6-1: Product: syz [ 385.201585][ T24] usb 6-1: Manufacturer: syz [ 385.206549][ T24] usb 6-1: SerialNumber: syz [ 385.213656][ T792] usb 4-1: USB disconnect, device number 44 [ 385.484878][ T5923] usb 6-1: USB disconnect, device number 34 [ 385.693143][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 385.817102][T11785] loop8: detected capacity change from 0 to 8 [ 385.826421][ T6010] Dev loop8: unable to read RDB block 8 [ 385.832079][ T6010] loop8: unable to read partition table [ 385.840669][ T6010] loop8: partition table beyond EOD, truncated [ 385.847954][T11785] Dev loop8: unable to read RDB block 8 [ 385.854995][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.856458][T11785] loop8: unable to read partition table [ 385.871989][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.872835][T11785] loop8: partition table beyond EOD, truncated [ 385.882456][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.889194][T11785] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 385.913143][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.922329][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.936177][ T9] usb 5-1: config 0 descriptor?? [ 386.400225][ T9] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 387.263822][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 387.326619][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 387.326639][ T30] audit: type=1326 audit(1765608156.638:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.421090][ T30] audit: type=1326 audit(1765608156.668:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.460054][ T30] audit: type=1326 audit(1765608156.668:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.483858][ T30] audit: type=1326 audit(1765608156.668:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.487121][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 387.523080][ T30] audit: type=1326 audit(1765608156.668:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.574456][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.575987][ T30] audit: type=1326 audit(1765608156.668:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.621570][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.654597][ T30] audit: type=1326 audit(1765608156.668:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.664673][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 387.678979][ T30] audit: type=1326 audit(1765608156.668:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.714844][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 387.724560][ T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 387.789865][ T30] audit: type=1326 audit(1765608156.668:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.795764][ T24] usb 1-1: Manufacturer: syz [ 387.866655][ T24] usb 1-1: config 0 descriptor?? [ 387.876361][ T30] audit: type=1326 audit(1765608156.668:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 387.919431][T11843] netlink: 'syz.3.2366': attribute type 1 has an invalid length. [ 387.941834][T11843] netlink: 'syz.3.2366': attribute type 6 has an invalid length. [ 387.953314][T11843] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2366'. [ 388.228124][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.235644][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.312425][ T24] appleir 0003:05AC:8243.0046: unknown main item tag 0x0 [ 388.396142][ T24] appleir 0003:05AC:8243.0046: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 388.468001][T11852] binder: 11851:11852 ioctl c0306201 80001a80 returned -14 [ 388.524478][ T44] usb 5-1: USB disconnect, device number 47 [ 388.639749][ T9] usb 1-1: USB disconnect, device number 44 [ 388.714270][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.787659][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.856459][T11870] fido_id[11870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 389.389206][ T966] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.423071][ T966] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.462696][ T966] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.503048][ T966] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.343099][T11886] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 390.513116][T11886] usb 5-1: Using ep0 maxpacket: 8 [ 390.525948][T11886] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 390.545702][T11886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.563273][T11886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.583328][T11886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.614230][T11886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.663201][T11886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.682603][T11886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.927062][T11886] usb 5-1: usb_control_msg returned -32 [ 390.932741][T11886] usbtmc 5-1:16.0: can't read capabilities [ 391.297187][T11941] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 391.298859][ T9] usb 5-1: USB disconnect, device number 48 [ 391.926080][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 392.106770][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 392.117024][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 392.137647][ T9] usb 4-1: config 0 has no interface number 0 [ 392.163876][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 392.186651][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.262704][ T9] usb 4-1: Product: syz [ 392.273822][ T9] usb 4-1: Manufacturer: syz [ 392.278613][ T9] usb 4-1: SerialNumber: syz [ 392.309653][ T9] usb 4-1: config 0 descriptor?? [ 392.327854][ T9] smsc95xx v2.0.0 [ 393.083033][T11883] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 393.245187][T11883] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 393.255009][T11883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.279798][T11883] usb 5-1: config 0 descriptor?? [ 393.293355][T11883] cp210x 5-1:0.0: cp210x converter detected [ 393.339563][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 393.363689][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 393.384042][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 393.399808][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 393.414097][ T9] usb 4-1: USB disconnect, device number 45 [ 393.414477][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 393.523071][T11886] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 393.683732][T11886] usb 2-1: Using ep0 maxpacket: 8 [ 393.691032][T11886] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 393.700750][T11886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.711247][T11883] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 393.719185][T11886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.729970][T11886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.740576][T11886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.756281][T11886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.765719][T11886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.954683][T11883] usb 5-1: cp210x converter now attached to ttyUSB0 [ 394.045806][T11886] usb 2-1: usb_control_msg returned -32 [ 394.062684][T11886] usbtmc 2-1:16.0: can't read capabilities [ 394.146069][T11886] usb 5-1: USB disconnect, device number 49 [ 394.162483][T11886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.197269][T11886] cp210x 5-1:0.0: device disconnected [ 394.609937][T11886] usb 2-1: USB disconnect, device number 48 [ 394.757016][T12036] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 394.764693][T11883] IPVS: starting estimator thread 0... [ 394.873101][T12040] IPVS: using max 26 ests per chain, 62400 per kthread [ 395.062533][T12046] team0: Device gre1 is of different type [ 395.224249][ T9] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 395.394962][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 395.413464][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.440218][ T9] usb 5-1: config 0 descriptor?? [ 395.462825][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 395.693443][ T9] gp8psk: usb in 128 operation failed. [ 395.900947][ T9] gp8psk: usb in 146 operation failed. [ 395.929590][ T9] gp8psk: failed to get FW version [ 395.944767][ T9] gp8psk: FPGA Version = 200 [ 396.163797][ T9] gp8psk: usb in 138 operation failed. [ 396.194536][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 396.233058][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 396.258096][ T9] usb 5-1: USB disconnect, device number 50 [ 396.622683][T12091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2463'. [ 396.924293][T12101] syzkaller1: entered promiscuous mode [ 396.930090][T12101] syzkaller1: entered allmulticast mode [ 397.218342][T11883] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 397.378836][T11883] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 397.408759][T11883] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 397.449327][T11883] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 397.482315][T11883] usb 1-1: config 220 has no interface number 2 [ 397.502178][T11883] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 397.528659][T11883] usb 1-1: config 220 interface 0 has no altsetting 0 [ 397.540051][T11883] usb 1-1: config 220 interface 76 has no altsetting 0 [ 397.547701][T11883] usb 1-1: config 220 interface 1 has no altsetting 0 [ 397.551812][T12118] netlink: 'syz.5.2477': attribute type 9 has an invalid length. [ 397.560581][T11883] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 397.572313][T11883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.581874][T11883] usb 1-1: Product: syz [ 397.587209][T11883] usb 1-1: Manufacturer: syz [ 397.591848][T11883] usb 1-1: SerialNumber: syz [ 397.841387][T11883] usb 1-1: selecting invalid altsetting 0 [ 397.855564][T11883] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 397.864034][T11883] uvcvideo 1-1:220.0: No valid video chain found. [ 397.882304][T11883] usb 1-1: selecting invalid altsetting 0 [ 397.893700][T11883] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 397.942894][T11883] usb 1-1: USB disconnect, device number 45 [ 398.366354][T12143] team0: Device gre1 is of different type [ 398.743784][T11860] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 398.767819][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 398.793253][T11859] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 398.912088][T11860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.934176][T11860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.944755][T11860] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 398.954592][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 398.962837][T11859] usb 1-1: Using ep0 maxpacket: 32 [ 398.970852][T11860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.981150][T11859] usb 1-1: config 0 interface 0 has no altsetting 0 [ 398.981423][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 398.998984][T12167] netlink: 'syz.5.2500': attribute type 3 has an invalid length. [ 399.000644][T11859] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 399.018344][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.027616][T11860] usb 5-1: config 0 descriptor?? [ 399.033621][T11859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.048034][T11859] usb 1-1: Product: syz [ 399.052347][T11859] usb 1-1: Manufacturer: syz [ 399.057521][T11859] usb 1-1: SerialNumber: syz [ 399.066116][ T9] usb 2-1: config 0 descriptor?? [ 399.077030][T11859] usb 1-1: config 0 descriptor?? [ 399.092545][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 399.457749][T11860] cm6533_jd 0003:0D8C:0022.0047: unknown main item tag 0x0 [ 399.473411][T11860] cm6533_jd 0003:0D8C:0022.0047: unknown main item tag 0x0 [ 399.504871][T11859] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 399.525192][T11860] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0047/input/input71 [ 399.573803][T11860] cm6533_jd 0003:0D8C:0022.0047: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 399.684195][T11883] usb 5-1: USB disconnect, device number 51 [ 399.708426][T12182] fido_id[12182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 399.906873][T11859] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 399.944280][T11859] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 400.104545][ T9] gspca_sq930x: ucbus_write failed -71 [ 400.117859][ T9] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 400.150711][ T9] usb 2-1: USB disconnect, device number 49 [ 400.214974][T11883] usb 1-1: USB disconnect, device number 46 [ 400.863136][T11883] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 401.031278][T11883] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 401.047625][T11883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.071985][T11883] usb 5-1: Product: syz [ 401.083555][T11883] usb 5-1: Manufacturer: syz [ 401.123158][T11883] usb 5-1: SerialNumber: syz [ 401.368310][T11883] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 401.414911][T11883] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 401.466390][T11883] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 401.515603][T11883] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 401.562298][T11883] usb 5-1: USB disconnect, device number 52 [ 401.660621][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 401.660642][ T30] audit: type=1326 audit(1765608170.968:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12230 comm="syz.1.2529" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 401.814098][T11886] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 401.985701][T11886] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 402.002807][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.026964][T11886] usb 4-1: config 0 descriptor?? [ 402.047649][T11886] cp210x 4-1:0.0: cp210x converter detected [ 402.451936][T11886] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 402.676243][T11886] usb 4-1: cp210x converter now attached to ttyUSB0 [ 402.795697][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 402.871628][T11859] usb 4-1: USB disconnect, device number 46 [ 402.896808][T11859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 402.918096][T11859] cp210x 4-1:0.0: device disconnected [ 402.983028][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 403.001067][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 403.023159][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.031255][ T9] usb 2-1: Product: syz [ 403.038955][ T9] usb 2-1: Manufacturer: syz [ 403.043722][ T9] usb 2-1: SerialNumber: syz [ 403.064033][ T9] usb 2-1: config 0 descriptor?? [ 403.077743][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 403.095519][ T9] usb 2-1: Detected FT232H [ 403.212497][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 403.221991][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 403.297265][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 403.343155][T11859] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 403.474644][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 403.513230][T11859] usb 6-1: Using ep0 maxpacket: 16 [ 403.523388][T11859] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 403.532086][T11859] usb 6-1: config 0 has no interface number 0 [ 403.549566][T11859] usb 6-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 403.560555][T11859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.568973][T11859] usb 6-1: Product: syz [ 403.574577][T11859] usb 6-1: Manufacturer: syz [ 403.579590][T11859] usb 6-1: SerialNumber: syz [ 403.588532][T11859] usb 6-1: config 0 descriptor?? [ 403.607407][T11859] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 403.726185][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 403.966068][T11886] usb 2-1: USB disconnect, device number 50 [ 403.989175][T11886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 404.009765][T11886] ftdi_sio 2-1:0.0: device disconnected [ 404.083793][T12320] delete_channel: no stack [ 404.173787][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 404.351880][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.382766][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.403719][ T9] usb 4-1: Product: syz [ 404.408028][ T9] usb 4-1: Manufacturer: syz [ 404.412717][ T9] usb 4-1: SerialNumber: syz [ 404.434083][T11859] gspca_stv06xx: I2C: Read error writing address: -71 [ 404.462393][T11859] usb 6-1: USB disconnect, device number 35 [ 404.484148][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 404.527611][ T5961] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 404.903556][T11880] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 404.946818][T11886] usb 4-1: USB disconnect, device number 47 [ 405.073030][T11880] usb 2-1: Using ep0 maxpacket: 8 [ 405.089517][T11880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 405.111396][T11880] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 405.136107][T11880] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 405.146550][T11880] usb 2-1: config 8 interface 0 has no altsetting 0 [ 405.156338][T11880] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 405.161655][T12341] loop5: detected capacity change from 0 to 7 [ 405.173132][T11880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.175905][T12341] Dev loop5: unable to read RDB block 7 [ 405.188847][T11880] usb 2-1: Product: syz [ 405.198102][T11880] usb 2-1: Manufacturer: syz [ 405.204388][T12341] loop5: unable to read partition table [ 405.213158][T11880] usb 2-1: SerialNumber: syz [ 405.214735][T12341] loop5: partition table beyond EOD, truncated [ 405.226064][T12341] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.227092][T12332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 405.465550][T12343] input: syz1 as /devices/virtual/input/input72 [ 405.519864][T11880] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.528160][T11880] usb 2-1: selecting invalid altsetting 0 [ 405.591304][T11880] usb 2-1: USB disconnect, device number 51 [ 405.600613][ T5961] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 405.630214][ T5961] ath9k_htc: Failed to initialize the device [ 405.649012][T11886] usb 4-1: ath9k_htc: USB layer deinitialized [ 405.696872][ T8268] udevd[8268]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.914984][T11859] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 406.075841][T11859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.093066][T11859] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 406.115419][T11859] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.169449][T11859] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 406.199817][T11859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.234278][T11859] usb 1-1: Product: syz [ 406.242678][T11859] usb 1-1: Manufacturer: syz [ 406.252808][T11859] usb 1-1: SerialNumber: syz [ 406.284232][T11859] hub 1-1:1.0: bad descriptor, ignoring hub [ 406.304058][T11859] hub 1-1:1.0: probe with driver hub failed with error -5 [ 406.491839][T11859] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 406.700079][T12381] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2595'. [ 406.803426][T11880] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 406.963037][T11880] usb 4-1: Using ep0 maxpacket: 8 [ 406.980198][T11880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.003559][T11880] usb 4-1: config 4 interface 0 has no altsetting 0 [ 407.028314][T11880] usb 4-1: string descriptor 0 read error: -22 [ 407.041265][T11880] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 407.071036][T11880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.108152][T11880] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 407.147899][T11880] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 407.180535][T11880] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 407.216757][T11880] usb 4-1: media controller created [ 407.249109][T11880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.496364][T12348] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 407.939311][ T5961] usb 1-1: USB disconnect, device number 47 [ 407.955709][ T5961] usblp0: removed [ 408.413492][T11880] usb 4-1: USB disconnect, device number 48 [ 408.620485][T12433] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2615'. [ 409.053631][ T5961] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 409.107554][T12451] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2623'. [ 409.117002][T12451] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2623'. [ 409.219004][ T5961] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 409.237870][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.262675][ T5961] usb 1-1: Product: syz [ 409.273206][ T5961] usb 1-1: Manufacturer: syz [ 409.281053][ T5961] usb 1-1: SerialNumber: syz [ 409.293126][T11880] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 409.303414][T12460] gre0: entered promiscuous mode [ 409.312184][T12460] gre0: entered allmulticast mode [ 409.460200][T11880] usb 5-1: Using ep0 maxpacket: 8 [ 409.470717][T11880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.481750][T11880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.492161][T11880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 409.506102][T11880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 409.517861][T11880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.523136][ T5961] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 409.531219][T11880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.553898][T11880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.563038][ T5961] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 409.576780][ T5961] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 409.589229][ T5961] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 409.644854][ T5961] usb 1-1: USB disconnect, device number 48 [ 409.813755][T11880] usb 5-1: GET_CAPABILITIES returned 0 [ 409.823150][T11880] usbtmc 5-1:16.0: can't read capabilities [ 410.087802][T11880] usb 5-1: USB disconnect, device number 53 [ 410.703064][ T30] audit: type=1326 audit(1765608179.998:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.0.2643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7fc00000 [ 410.999116][T12511] pimreg: entered allmulticast mode [ 411.015310][T12511] pimreg: left allmulticast mode [ 411.341127][ T30] audit: type=1326 audit(1765608180.648:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.0.2643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7fc00000 [ 412.486424][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2665'. [ 412.655319][T12560] loop8: detected capacity change from 0 to 8 [ 412.676672][T12560] Dev loop8: unable to read RDB block 8 [ 412.689382][T12560] loop8: unable to read partition table [ 412.699084][T12560] loop8: partition table beyond EOD, truncated [ 412.707304][T12560] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 413.383360][T11880] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 413.451738][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'. [ 413.543704][T11880] usb 5-1: Using ep0 maxpacket: 8 [ 413.553030][T11880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.563686][T11880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.574374][T11880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.594744][T11880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.623926][T11880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.646208][T11880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.895900][T11880] usb 5-1: GET_CAPABILITIES returned 0 [ 413.906712][T11880] usbtmc 5-1:16.0: can't read capabilities [ 413.929909][T12607] binder: 12605:12607 ioctl c0306201 800003c0 returned -14 [ 414.111790][T11880] usb 5-1: USB disconnect, device number 54 [ 414.333040][ T5961] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 414.483009][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 414.492348][ T5961] usb 2-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 414.515063][ T5961] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.545954][ T5961] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.563239][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.586677][ T5961] usb 2-1: Product: syz [ 414.590912][ T5961] usb 2-1: Manufacturer: syz [ 414.603037][ T5961] usb 2-1: SerialNumber: syz [ 415.030002][ T5961] usb 2-1: 0:2 : does not exist [ 415.237839][T12658] loop3: detected capacity change from 0 to 7 [ 415.247982][T12658] Dev loop3: unable to read RDB block 7 [ 415.254247][T12658] loop3: AHDI p3 p4 [ 415.258269][T12658] loop3: partition table partially beyond EOD, truncated [ 415.265680][T11880] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 415.273687][T12658] loop3: p3 start 1702000233 is beyond EOD, truncated [ 415.433270][T11880] usb 6-1: Using ep0 maxpacket: 8 [ 415.441187][T12661] sctp: [Deprecated]: syz.0.2713 (pid 12661) Use of int in max_burst socket option. [ 415.441187][T12661] Use struct sctp_assoc_value instead [ 415.441848][T11880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 415.461266][ T5961] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 415.477045][T11880] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 415.486789][T11880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.507218][T11880] usb 6-1: config 0 descriptor?? [ 415.515119][ T5961] usb 2-1: USB disconnect, device number 52 [ 415.539508][T11880] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input73 [ 415.580209][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.761735][ T5186] bcm5974 6-1:0.0: could not read from device [ 415.768363][ T5961] usb 6-1: USB disconnect, device number 36 [ 415.781658][ T8277] bcm5974 6-1:0.0: could not read from device [ 415.822024][ T8277] udevd[8277]: Error opening device "/dev/input/event4": No such file or directory [ 415.843357][ T8277] udevd[8277]: Unable to EVIOCGABS device "/dev/input/event4" [ 415.851333][ T8277] udevd[8277]: Unable to EVIOCGABS device "/dev/input/event4" [ 415.859512][ T8277] udevd[8277]: Unable to EVIOCGABS device "/dev/input/event4" [ 415.874797][ T8277] udevd[8277]: Unable to EVIOCGABS device "/dev/input/event4" [ 416.483339][ T5961] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 416.572636][T12690] input: syz1 as /devices/virtual/input/input74 [ 416.668108][ T5961] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.699030][ T5961] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.735052][ T5961] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.762976][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.813375][ T30] audit: type=1326 audit(1765608186.128:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 416.913115][ T30] audit: type=1326 audit(1765608186.158:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 416.944750][ T30] audit: type=1326 audit(1765608186.168:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 416.983102][ T30] audit: type=1326 audit(1765608186.168:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 417.031310][ T5961] usb 5-1: GET_CAPABILITIES returned 0 [ 417.053413][ T5961] usbtmc 5-1:16.0: can't read capabilities [ 417.055689][ T30] audit: type=1326 audit(1765608186.178:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 417.164766][ T30] audit: type=1326 audit(1765608186.178:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 417.201305][T12707] tmpfs: Unknown parameter '/dev/ptmx' [ 417.248284][ T30] audit: type=1326 audit(1765608186.178:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 417.319016][ T30] audit: type=1326 audit(1765608186.188:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 417.393084][ T30] audit: type=1326 audit(1765608186.188:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 417.493076][ T30] audit: type=1326 audit(1765608186.188:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.5.2732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 417.800375][ T5961] usb 5-1: USB disconnect, device number 55 [ 417.820838][T12724] netlink: 'syz.1.2743': attribute type 1 has an invalid length. [ 417.851357][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 417.959434][T12724] bond1: option mode: invalid value (48) [ 417.995374][T12724] bond1 (unregistering): Released all slaves [ 418.465244][T12743] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 418.917111][ T5961] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 419.105274][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.138713][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.153894][ T5961] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 419.175747][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.191692][ T5961] usb 1-1: config 0 descriptor?? [ 419.363347][T11880] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 419.525615][T11880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.543839][T11880] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 419.564873][T11880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.584510][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 419.596347][T11880] usb 2-1: config 0 descriptor?? [ 419.743098][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 419.755735][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 419.793390][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 419.812780][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.824163][ T9] usb 5-1: Product: syz [ 419.828440][ T9] usb 5-1: Manufacturer: syz [ 419.834494][ T9] usb 5-1: SerialNumber: syz [ 419.856850][ T9] usb 5-1: config 0 descriptor?? [ 420.028639][ T5961] hid-led 0003:27B8:01ED.0048: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 420.030120][T11880] lenovo 0003:17EF:6067.0049: unknown main item tag 0x4 [ 420.093579][T11880] lenovo 0003:17EF:6067.0049: item fetching failed at offset 4/5 [ 420.102314][T11880] lenovo 0003:17EF:6067.0049: hid_parse failed [ 420.119725][T11880] lenovo 0003:17EF:6067.0049: probe with driver lenovo failed with error -22 [ 420.128142][ T5961] hid-led 0003:27B8:01ED.0048: ThingM blink(1) initialized [ 420.266660][T11880] usb 2-1: USB disconnect, device number 53 [ 420.284554][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 420.292111][T11883] usb 1-1: USB disconnect, device number 49 [ 420.920897][T11883] usb 5-1: USB disconnect, device number 56 [ 422.303116][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 422.475518][ T9] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 422.493064][ T9] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 422.518580][ T9] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 422.546308][ T9] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 422.584791][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 422.606737][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.638804][T12851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 422.850990][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 422.869226][ T9] ath6kl: Failed to submit usb control message: -71 [ 422.883831][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 422.894855][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 422.901966][ T9] ath6kl: Unable to send get target info: -71 [ 422.944748][ T9] ath6kl: Failed to init ath6kl core: -71 [ 422.951938][ T9] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 423.004223][ T9] usb 1-1: USB disconnect, device number 50 [ 423.656768][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2810'. [ 423.668777][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2810'. [ 424.104023][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 424.273009][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 424.286445][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 424.312578][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.334708][ T9] usb 4-1: Product: syz [ 424.344845][ T9] usb 4-1: Manufacturer: syz [ 424.355109][ T9] usb 4-1: SerialNumber: syz [ 424.375135][ T9] usb 4-1: config 0 descriptor?? [ 424.627359][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.194864][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 425.194884][ T30] audit: type=1326 audit(1765608194.508:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.305518][ T30] audit: type=1326 audit(1765608194.508:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.334214][ T30] audit: type=1326 audit(1765608194.508:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.361784][ T30] audit: type=1326 audit(1765608194.508:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.439742][ T30] audit: type=1326 audit(1765608194.508:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.462815][ T30] audit: type=1326 audit(1765608194.508:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.470171][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 425.485266][ T30] audit: type=1326 audit(1765608194.508:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.519726][ T30] audit: type=1326 audit(1765608194.508:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.543252][ T30] audit: type=1326 audit(1765608194.508:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.582427][ T30] audit: type=1326 audit(1765608194.508:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.5.2833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf6ffd558 code=0x7ffc0000 [ 425.680024][ T9] usb 4-1: USB disconnect, device number 49 [ 425.687090][T12965] syzkaller1: entered promiscuous mode [ 425.715166][T12965] syzkaller1: entered allmulticast mode [ 426.378214][T12982] Invalid logical block size (7) [ 428.663339][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 428.813039][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 428.836669][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 428.858533][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 428.884003][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 428.893659][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.909705][ T9] usb 1-1: Product: syz [ 428.915177][ T9] usb 1-1: Manufacturer: syz [ 428.920648][ T9] usb 1-1: SerialNumber: syz [ 428.960897][ T9] usb 1-1: config 0 descriptor?? [ 428.994448][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 429.057650][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 429.605026][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 429.627539][ T9] em28xx 1-1:0.0: Config register raw data: 0x56 [ 429.828224][ T9] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 429.844534][ T9] em28xx 1-1:0.0: No AC97 audio processor [ 429.856011][ T9] usb 1-1: USB disconnect, device number 51 [ 429.872345][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 429.907139][ T9] em28xx 1-1:0.0: Freeing device [ 430.043740][ T5961] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 430.213108][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 430.221769][ T5961] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 430.230165][ T5961] usb 6-1: config 0 has no interface number 0 [ 430.236597][ T5961] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.248511][ T5961] usb 6-1: config 0 interface 85 has no altsetting 0 [ 430.257494][ T5961] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 430.266700][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.274804][ T5961] usb 6-1: Product: syz [ 430.279025][ T5961] usb 6-1: Manufacturer: syz [ 430.283703][ T5961] usb 6-1: SerialNumber: syz [ 430.290778][ T5961] usb 6-1: config 0 descriptor?? [ 430.303129][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 430.455529][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.465210][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 430.476371][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.487866][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 430.500115][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 430.518186][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.527730][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.536037][ T9] usb 2-1: Product: syz [ 430.540489][ T9] usb 2-1: Manufacturer: syz [ 430.551751][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 430.557606][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 430.565154][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 430.571154][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 430.920750][ T5961] appletouch 6-1:0.85: Geyser mode initialized. [ 430.949243][ T5961] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input75 [ 431.154317][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 431.179716][ T5961] usb 6-1: USB disconnect, device number 37 [ 431.204893][ T5961] appletouch 6-1:0.85: input: appletouch disconnected [ 431.356333][T11883] usb 2-1: USB disconnect, device number 54 [ 431.634872][T11880] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 431.713195][T11886] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 431.805690][T11880] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 431.816610][T11880] usb 5-1: config 0 has no interface number 0 [ 431.822762][T11880] usb 5-1: config 0 interface 255 has no altsetting 0 [ 431.840230][T11880] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 431.849799][T11880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.873032][T11886] usb 4-1: Using ep0 maxpacket: 16 [ 431.879164][T11880] usb 5-1: config 0 descriptor?? [ 431.888359][T11880] cp210x 5-1:0.255: cp210x converter detected [ 431.903103][T11886] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.915547][T11886] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 431.925962][T11886] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.939322][T11886] usb 4-1: config 1 interface 0 has no altsetting 0 [ 431.951859][T11886] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 431.966504][T11886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.993231][T11886] usb 4-1: Product: syz [ 432.003039][T11886] usb 4-1: Manufacturer: syz [ 432.013176][T11886] usb 4-1: SerialNumber: syz [ 432.026459][T13135] syzkaller1: entered promiscuous mode [ 432.038880][T13135] syzkaller1: entered allmulticast mode [ 432.242689][T11886] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 432.294882][T11880] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 432.320106][T13142] binder: 13141:13142 ioctl 4018620d 0 returned -22 [ 432.509882][T11880] cp210x 5-1:0.255: GPIO initialisation failed: -19 [ 432.519846][T11880] usb 5-1: cp210x converter now attached to ttyUSB0 [ 432.700540][ T5961] usb 4-1: USB disconnect, device number 50 [ 432.710402][ T5961] usblp0: removed [ 432.730252][T11886] usb 5-1: USB disconnect, device number 57 [ 432.742070][T11886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 432.753921][T11886] cp210x 5-1:0.255: device disconnected [ 432.833279][T11880] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 432.983051][T11880] usb 1-1: Using ep0 maxpacket: 8 [ 432.991083][T11880] usb 1-1: config 0 has no interfaces? [ 433.000028][T11880] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.009274][T11880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.018062][T11880] usb 1-1: Product: syz [ 433.022569][T11880] usb 1-1: Manufacturer: syz [ 433.039447][T11880] usb 1-1: SerialNumber: syz [ 433.059465][T11880] usb 1-1: config 0 descriptor?? [ 433.324679][T11880] usb 1-1: USB disconnect, device number 52 [ 433.347363][T13156] binder: 13155:13156 ioctl 40046205 0 returned -22 [ 433.519035][T13167] [ 433.521429][T13167] ===================================================== [ 433.528400][T13167] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 433.535913][T13167] syzkaller #0 Tainted: G L [ 433.541925][T13167] ----------------------------------------------------- [ 433.548991][T13167] syz.5.2921/13167 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 433.556864][T13167] ffff888075aaa2b8 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 433.565668][T13167] [ 433.565668][T13167] and this task is already holding: [ 433.573057][T13167] ffff888071777028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 433.582911][T13167] which would create a new lock dependency: [ 433.588808][T13167] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 433.596943][T13167] [ 433.596943][T13167] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 433.606398][T13167] (&client->buffer_lock){..-.}-{3:3} [ 433.606428][T13167] [ 433.606428][T13167] ... which became SOFTIRQ-irq-safe at: [ 433.619540][T13167] lock_acquire+0x117/0x340 [ 433.624146][T13167] _raw_spin_lock+0x2e/0x40 [ 433.628757][T13167] evdev_pass_values+0xb9/0xbd0 [ 433.633733][T13167] evdev_events+0x1e6/0x340 [ 433.638339][T13167] input_pass_values+0x288/0x890 [ 433.643377][T13167] input_event_dispose+0x3e5/0x6b0 [ 433.648591][T13167] input_event+0x89/0xe0 [ 433.652936][T13167] hidinput_hid_event+0x145e/0x1e50 [ 433.658239][T13167] hid_process_event+0x4be/0x620 [ 433.663286][T13167] hid_report_raw_event+0xe91/0x1720 [ 433.668671][T13167] hid_input_report+0x44b/0x580 [ 433.673618][T13167] hid_irq_in+0x47e/0x6d0 [ 433.678070][T13167] __usb_hcd_giveback_urb+0x376/0x540 [ 433.683546][T13167] dummy_timer+0x85f/0x45b0 [ 433.688174][T13167] __hrtimer_run_queues+0x51c/0xc30 [ 433.693488][T13167] hrtimer_run_softirq+0x187/0x2b0 [ 433.698708][T13167] handle_softirqs+0x27d/0x850 [ 433.703565][T13167] __irq_exit_rcu+0xca/0x1f0 [ 433.708251][T13167] irq_exit_rcu+0x9/0x30 [ 433.712681][T13167] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 433.718423][T13167] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.724499][T13167] __sanitizer_cov_trace_const_cmp8+0x31/0x90 [ 433.730674][T13167] folio_add_file_rmap_ptes+0x1d2/0xe60 [ 433.736341][T13167] set_pte_range+0x52e/0x8a0 [ 433.741035][T13167] filemap_map_pages+0xfcd/0x1fd0 [ 433.746157][T13167] do_pte_missing+0x20b0/0x3330 [ 433.751106][T13167] handle_mm_fault+0x1b26/0x32b0 [ 433.756154][T13167] do_user_addr_fault+0xa7c/0x1380 [ 433.761372][T13167] exc_page_fault+0x82/0x100 [ 433.766112][T13167] asm_exc_page_fault+0x26/0x30 [ 433.771053][T13167] [ 433.771053][T13167] to a SOFTIRQ-irq-unsafe lock: [ 433.778179][T13167] (tasklist_lock){.+.+}-{3:3} [ 433.778210][T13167] [ 433.778210][T13167] ... which became SOFTIRQ-irq-unsafe at: [ 433.790850][T13167] ... [ 433.790859][T13167] lock_acquire+0x117/0x340 [ 433.798085][T13167] _raw_read_lock+0x36/0x50 [ 433.802706][T13167] __do_wait+0xde/0x740 [ 433.806968][T13167] do_wait+0x1e8/0x4f0 [ 433.811226][T13167] kernel_wait+0xab/0x170 [ 433.815870][T13167] call_usermodehelper_exec_work+0xbe/0x230 [ 433.821894][T13167] process_scheduled_works+0xad1/0x1770 [ 433.827994][T13167] worker_thread+0x8a0/0xda0 [ 433.832712][T13167] kthread+0x711/0x8a0 [ 433.837035][T13167] ret_from_fork+0x599/0xb30 [ 433.841733][T13167] ret_from_fork_asm+0x1a/0x30 [ 433.846616][T13167] [ 433.846616][T13167] other info that might help us debug this: [ 433.846616][T13167] [ 433.856932][T13167] Chain exists of: [ 433.856932][T13167] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 433.856932][T13167] [ 433.870289][T13167] Possible interrupt unsafe locking scenario: [ 433.870289][T13167] [ 433.878648][T13167] CPU0 CPU1 [ 433.884272][T13167] ---- ---- [ 433.889835][T13167] lock(tasklist_lock); [ 433.894093][T13167] local_irq_disable(); [ 433.900853][T13167] lock(&client->buffer_lock); [ 433.908237][T13167] lock(&new->fa_lock); [ 433.915017][T13167] [ 433.918473][T13167] lock(&client->buffer_lock); [ 433.923592][T13167] [ 433.923592][T13167] *** DEADLOCK *** [ 433.923592][T13167] [ 433.931739][T13167] 7 locks held by syz.5.2921/13167: [ 433.936936][T13167] #0: ffff888029dac118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 433.946134][T13167] #1: ffff88801d368230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 433.956266][T13167] #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 433.965949][T13167] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 433.975558][T13167] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 433.984728][T13167] #5: ffff888071777028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 433.995018][T13167] #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 434.004099][T13167] [ 434.004099][T13167] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 434.014511][T13167] -> (&client->buffer_lock){..-.}-{3:3} { [ 434.020261][T13167] IN-SOFTIRQ-W at: [ 434.024247][T13167] lock_acquire+0x117/0x340 [ 434.030429][T13167] _raw_spin_lock+0x2e/0x40 [ 434.036616][T13167] evdev_pass_values+0xb9/0xbd0 [ 434.043143][T13167] evdev_events+0x1e6/0x340 [ 434.049311][T13167] input_pass_values+0x288/0x890 [ 434.055944][T13167] input_event_dispose+0x3e5/0x6b0 [ 434.062751][T13167] input_event+0x89/0xe0 [ 434.068654][T13167] hidinput_hid_event+0x145e/0x1e50 [ 434.075523][T13167] hid_process_event+0x4be/0x620 [ 434.082139][T13167] hid_report_raw_event+0xe91/0x1720 [ 434.089082][T13167] hid_input_report+0x44b/0x580 [ 434.095678][T13167] hid_irq_in+0x47e/0x6d0 [ 434.101676][T13167] __usb_hcd_giveback_urb+0x376/0x540 [ 434.108743][T13167] dummy_timer+0x85f/0x45b0 [ 434.114907][T13167] __hrtimer_run_queues+0x51c/0xc30 [ 434.121782][T13167] hrtimer_run_softirq+0x187/0x2b0 [ 434.128563][T13167] handle_softirqs+0x27d/0x850 [ 434.134990][T13167] __irq_exit_rcu+0xca/0x1f0 [ 434.141240][T13167] irq_exit_rcu+0x9/0x30 [ 434.147139][T13167] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 434.154435][T13167] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.162074][T13167] __sanitizer_cov_trace_const_cmp8+0x31/0x90 [ 434.169807][T13167] folio_add_file_rmap_ptes+0x1d2/0xe60 [ 434.177019][T13167] set_pte_range+0x52e/0x8a0 [ 434.183289][T13167] filemap_map_pages+0xfcd/0x1fd0 [ 434.190178][T13167] do_pte_missing+0x20b0/0x3330 [ 434.196785][T13167] handle_mm_fault+0x1b26/0x32b0 [ 434.203415][T13167] do_user_addr_fault+0xa7c/0x1380 [ 434.210205][T13167] exc_page_fault+0x82/0x100 [ 434.216488][T13167] asm_exc_page_fault+0x26/0x30 [ 434.223000][T13167] INITIAL USE at: [ 434.226921][T13167] lock_acquire+0x117/0x340 [ 434.233083][T13167] _raw_spin_lock+0x2e/0x40 [ 434.239254][T13167] evdev_pass_values+0xb9/0xbd0 [ 434.245789][T13167] evdev_events+0x1e6/0x340 [ 434.251974][T13167] input_pass_values+0x288/0x890 [ 434.258577][T13167] input_event_dispose+0x330/0x6b0 [ 434.265262][T13167] input_inject_event+0x1dd/0x340 [ 434.271861][T13167] evdev_write+0x2fc/0x480 [ 434.277866][T13167] vfs_write+0x27e/0xb30 [ 434.283688][T13167] ksys_write+0x145/0x250 [ 434.289584][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 434.296447][T13167] do_fast_syscall_32+0x34/0x80 [ 434.302874][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.310784][T13167] } [ 434.313400][T13167] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 434.321585][T13167] [ 434.321585][T13167] the dependencies between the lock to be acquired [ 434.321601][T13167] and SOFTIRQ-irq-unsafe lock: [ 434.335153][T13167] -> (tasklist_lock){.+.+}-{3:3} { [ 434.340561][T13167] HARDIRQ-ON-R at: [ 434.344721][T13167] lock_acquire+0x117/0x340 [ 434.351232][T13167] _raw_read_lock+0x36/0x50 [ 434.357747][T13167] __do_wait+0xde/0x740 [ 434.363915][T13167] do_wait+0x1e8/0x4f0 [ 434.369997][T13167] kernel_wait+0xab/0x170 [ 434.376339][T13167] call_usermodehelper_exec_work+0xbe/0x230 [ 434.384690][T13167] process_scheduled_works+0xad1/0x1770 [ 434.392258][T13167] worker_thread+0x8a0/0xda0 [ 434.399122][T13167] kthread+0x711/0x8a0 [ 434.405214][T13167] ret_from_fork+0x599/0xb30 [ 434.411812][T13167] ret_from_fork_asm+0x1a/0x30 [ 434.418617][T13167] SOFTIRQ-ON-R at: [ 434.422794][T13167] lock_acquire+0x117/0x340 [ 434.429315][T13167] _raw_read_lock+0x36/0x50 [ 434.435940][T13167] __do_wait+0xde/0x740 [ 434.442122][T13167] do_wait+0x1e8/0x4f0 [ 434.448239][T13167] kernel_wait+0xab/0x170 [ 434.454602][T13167] call_usermodehelper_exec_work+0xbe/0x230 [ 434.462524][T13167] process_scheduled_works+0xad1/0x1770 [ 434.470189][T13167] worker_thread+0x8a0/0xda0 [ 434.476788][T13167] kthread+0x711/0x8a0 [ 434.482881][T13167] ret_from_fork+0x599/0xb30 [ 434.489507][T13167] ret_from_fork_asm+0x1a/0x30 [ 434.496301][T13167] INITIAL USE at: [ 434.500397][T13167] lock_acquire+0x117/0x340 [ 434.506828][T13167] _raw_write_lock_irq+0xa2/0xf0 [ 434.513709][T13167] copy_process+0x2185/0x3950 [ 434.520307][T13167] kernel_clone+0x21e/0x820 [ 434.526820][T13167] user_mode_thread+0xdd/0x140 [ 434.533507][T13167] rest_init+0x23/0x300 [ 434.539672][T13167] start_kernel+0x3a7/0x400 [ 434.546097][T13167] x86_64_start_reservations+0x24/0x30 [ 434.553483][T13167] x86_64_start_kernel+0x143/0x1c0 [ 434.560523][T13167] common_startup_64+0x13e/0x147 [ 434.567383][T13167] INITIAL READ USE at: [ 434.571916][T13167] lock_acquire+0x117/0x340 [ 434.578780][T13167] _raw_read_lock+0x36/0x50 [ 434.585737][T13167] __do_wait+0xde/0x740 [ 434.592256][T13167] do_wait+0x1e8/0x4f0 [ 434.598685][T13167] kernel_wait+0xab/0x170 [ 434.605385][T13167] call_usermodehelper_exec_work+0xbe/0x230 [ 434.613637][T13167] process_scheduled_works+0xad1/0x1770 [ 434.621538][T13167] worker_thread+0x8a0/0xda0 [ 434.628485][T13167] kthread+0x711/0x8a0 [ 434.634914][T13167] ret_from_fork+0x599/0xb30 [ 434.641859][T13167] ret_from_fork_asm+0x1a/0x30 [ 434.648998][T13167] } [ 434.651686][T13167] ... key at: [] tasklist_lock+0x18/0x40 [ 434.659604][T13167] ... acquired at: [ 434.663594][T13167] _raw_read_lock+0x36/0x50 [ 434.668294][T13167] send_sigurg+0x12b/0x420 [ 434.672905][T13167] sk_send_sigurg+0x6c/0x2e0 [ 434.677693][T13167] queue_oob+0x420/0x4f0 [ 434.682185][T13167] unix_stream_sendmsg+0xc32/0xde0 [ 434.687487][T13167] __sock_sendmsg+0x21c/0x270 [ 434.692352][T13167] ____sys_sendmsg+0x52d/0x820 [ 434.697296][T13167] ___sys_sendmsg+0x21f/0x2a0 [ 434.702151][T13167] __sys_sendmmsg+0x28e/0x430 [ 434.707010][T13167] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 434.712758][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 434.718151][T13167] do_fast_syscall_32+0x34/0x80 [ 434.723455][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.729983][T13167] [ 434.732315][T13167] -> (&f_owner->lock){....}-{3:3} { [ 434.737831][T13167] INITIAL USE at: [ 434.741825][T13167] lock_acquire+0x117/0x340 [ 434.748163][T13167] _raw_write_lock_irq+0xa2/0xf0 [ 434.754952][T13167] __f_setown+0x67/0x370 [ 434.761048][T13167] fcntl_dirnotify+0x3fa/0x6a0 [ 434.767562][T13167] do_fcntl+0x745/0x1a50 [ 434.773562][T13167] do_compat_fcntl64+0x477/0x720 [ 434.780259][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 434.787291][T13167] do_fast_syscall_32+0x34/0x80 [ 434.793975][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.802064][T13167] INITIAL READ USE at: [ 434.806486][T13167] lock_acquire+0x117/0x340 [ 434.813255][T13167] _raw_read_lock_irqsave+0xaf/0x100 [ 434.820813][T13167] send_sigio+0x38/0x370 [ 434.827258][T13167] dnotify_handle_event+0x169/0x440 [ 434.834649][T13167] fsnotify+0x180b/0x1ab0 [ 434.841165][T13167] fsnotify_create+0x122/0x180 [ 434.848105][T13167] vfs_symlink+0x2c3/0x2d0 [ 434.854703][T13167] do_symlinkat+0x1f5/0x3c0 [ 434.861390][T13167] __ia32_sys_symlink+0x79/0x90 [ 434.869030][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 434.876420][T13167] do_fast_syscall_32+0x34/0x80 [ 434.883562][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.892430][T13167] } [ 434.895051][T13167] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 434.904525][T13167] ... acquired at: [ 434.908528][T13167] _raw_read_lock_irqsave+0xaf/0x100 [ 434.914075][T13167] send_sigio+0x38/0x370 [ 434.919355][T13167] kill_fasync+0x24d/0x4d0 [ 434.924088][T13167] lease_break_callback+0x26/0x30 [ 434.930042][T13167] __break_lease+0x730/0x1620 [ 434.935112][T13167] do_dentry_open+0x73a/0x1420 [ 434.940081][T13167] vfs_open+0x3b/0x340 [ 434.944349][T13167] path_openat+0x340e/0x3dd0 [ 434.949571][T13167] do_filp_open+0x1fa/0x410 [ 434.954284][T13167] do_sys_openat2+0x121/0x200 [ 434.959163][T13167] __ia32_compat_sys_open+0x117/0x140 [ 434.964730][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 434.970115][T13167] do_fast_syscall_32+0x34/0x80 [ 434.975162][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.981680][T13167] [ 434.984012][T13167] -> (&new->fa_lock){...-}-{3:3} { [ 434.989152][T13167] IN-SOFTIRQ-R at: [ 434.993135][T13167] lock_acquire+0x117/0x340 [ 434.999295][T13167] _raw_read_lock_irqsave+0xaf/0x100 [ 435.006246][T13167] kill_fasync+0x199/0x4d0 [ 435.012336][T13167] sock_wake_async+0x137/0x160 [ 435.018763][T13167] sock_def_readable+0x3c1/0x530 [ 435.025361][T13167] tcp_data_queue+0x1e14/0x5e30 [ 435.031877][T13167] tcp_rcv_established+0xf57/0x2580 [ 435.038742][T13167] tcp_v4_do_rcv+0xa90/0x1430 [ 435.045094][T13167] tcp_v4_rcv+0x2675/0x2f20 [ 435.051258][T13167] ip_protocol_deliver_rcu+0x221/0x440 [ 435.058474][T13167] ip_local_deliver_finish+0x3bb/0x6f0 [ 435.065635][T13167] NF_HOOK+0x30c/0x3a0 [ 435.071366][T13167] NF_HOOK+0x30c/0x3a0 [ 435.077103][T13167] __netif_receive_skb+0x143/0x380 [ 435.083878][T13167] process_backlog+0x622/0x1500 [ 435.090394][T13167] __napi_poll+0xae/0x320 [ 435.096387][T13167] net_rx_action+0x672/0xe50 [ 435.102649][T13167] handle_softirqs+0x27d/0x850 [ 435.109070][T13167] do_softirq+0xec/0x180 [ 435.115062][T13167] __local_bh_enable_ip+0x17d/0x1c0 [ 435.122181][T13167] sk_stream_wait_memory+0x71f/0xf70 [ 435.129141][T13167] tcp_sendmsg_locked+0x1dfb/0x5520 [ 435.136452][T13167] tcp_sendmsg+0x2f/0x50 [ 435.142451][T13167] __sock_sendmsg+0x19c/0x270 [ 435.148793][T13167] __sys_sendto+0x3bd/0x520 [ 435.155056][T13167] __ia32_sys_sendto+0xdd/0x100 [ 435.161592][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 435.168450][T13167] do_fast_syscall_32+0x34/0x80 [ 435.174959][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.182950][T13167] INITIAL USE at: [ 435.186864][T13167] lock_acquire+0x117/0x340 [ 435.193024][T13167] _raw_write_lock_irq+0xa2/0xf0 [ 435.199545][T13167] fasync_remove_entry+0xf1/0x1c0 [ 435.206152][T13167] sock_fasync+0x85/0xf0 [ 435.212057][T13167] __fput+0x8a2/0xa70 [ 435.217627][T13167] task_work_run+0x1d4/0x260 [ 435.223794][T13167] exit_to_user_mode_loop+0xff/0x4f0 [ 435.230849][T13167] __do_fast_syscall_32+0x3cb/0x570 [ 435.237643][T13167] do_fast_syscall_32+0x34/0x80 [ 435.244083][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.252008][T13167] INITIAL READ USE at: [ 435.256357][T13167] lock_acquire+0x117/0x340 [ 435.262865][T13167] _raw_read_lock_irqsave+0xaf/0x100 [ 435.270181][T13167] kill_fasync+0x199/0x4d0 [ 435.276641][T13167] sock_wake_async+0x137/0x160 [ 435.283432][T13167] sock_def_error_report+0x332/0x390 [ 435.290733][T13167] sk_error_report+0x48/0x270 [ 435.297428][T13167] unix_dgram_connect+0x96b/0xc20 [ 435.304478][T13167] __sys_connect+0x316/0x440 [ 435.311086][T13167] __ia32_sys_connect+0x7a/0x90 [ 435.317953][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 435.325157][T13167] do_fast_syscall_32+0x34/0x80 [ 435.332012][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.340349][T13167] } [ 435.342855][T13167] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 435.351544][T13167] ... acquired at: [ 435.355345][T13167] _raw_read_lock_irqsave+0xaf/0x100 [ 435.360816][T13167] kill_fasync+0x199/0x4d0 [ 435.365432][T13167] evdev_pass_values+0x627/0xbd0 [ 435.370561][T13167] evdev_events+0x1e6/0x340 [ 435.375258][T13167] input_pass_values+0x288/0x890 [ 435.380415][T13167] input_event_dispose+0x330/0x6b0 [ 435.385714][T13167] input_inject_event+0x1dd/0x340 [ 435.391006][T13167] evdev_write+0x2fc/0x480 [ 435.395796][T13167] vfs_write+0x27e/0xb30 [ 435.400222][T13167] ksys_write+0x145/0x250 [ 435.404990][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 435.410371][T13167] do_fast_syscall_32+0x34/0x80 [ 435.415400][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.421909][T13167] [ 435.424239][T13167] [ 435.424239][T13167] stack backtrace: [ 435.430156][T13167] CPU: 0 UID: 0 PID: 13167 Comm: syz.5.2921 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.430183][T13167] Tainted: [L]=SOFTLOCKUP [ 435.430189][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.430208][T13167] Call Trace: [ 435.430217][T13167] [ 435.430226][T13167] dump_stack_lvl+0x189/0x250 [ 435.430253][T13167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.430274][T13167] ? __pfx__printk+0x10/0x10 [ 435.430304][T13167] __lock_acquire+0x2a95/0x2cf0 [ 435.430332][T13167] ? kill_fasync+0x199/0x4d0 [ 435.430359][T13167] lock_acquire+0x117/0x340 [ 435.430375][T13167] ? kill_fasync+0x199/0x4d0 [ 435.430406][T13167] _raw_read_lock_irqsave+0xaf/0x100 [ 435.430432][T13167] ? kill_fasync+0x199/0x4d0 [ 435.430458][T13167] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 435.430482][T13167] ? do_raw_spin_lock+0x121/0x290 [ 435.430510][T13167] kill_fasync+0x199/0x4d0 [ 435.430536][T13167] ? kill_fasync+0x53/0x4d0 [ 435.430564][T13167] evdev_pass_values+0x627/0xbd0 [ 435.430595][T13167] ? evdev_pass_values+0x661/0xbd0 [ 435.430625][T13167] evdev_events+0x1e6/0x340 [ 435.430650][T13167] ? evdev_events+0x79/0x340 [ 435.430675][T13167] ? input_pass_values+0x8d/0x890 [ 435.430700][T13167] input_pass_values+0x288/0x890 [ 435.430727][T13167] ? input_handle_event+0x70c/0xf30 [ 435.430749][T13167] input_event_dispose+0x330/0x6b0 [ 435.430771][T13167] input_inject_event+0x1dd/0x340 [ 435.430792][T13167] ? input_inject_event+0xb6/0x340 [ 435.430818][T13167] evdev_write+0x2fc/0x480 [ 435.430847][T13167] ? __pfx_evdev_write+0x10/0x10 [ 435.430874][T13167] ? bpf_lsm_file_permission+0x9/0x20 [ 435.430894][T13167] ? security_file_permission+0x75/0x290 [ 435.430920][T13167] ? rw_verify_area+0x255/0x4d0 [ 435.430937][T13167] ? __pfx_evdev_write+0x10/0x10 [ 435.430964][T13167] vfs_write+0x27e/0xb30 [ 435.430983][T13167] ? __pfx_vfs_write+0x10/0x10 [ 435.431000][T13167] ? __fget_files+0x2a/0x420 [ 435.431023][T13167] ? __fget_files+0x2a/0x420 [ 435.431045][T13167] ? __fget_files+0x3a0/0x420 [ 435.431067][T13167] ? __fget_files+0x2a/0x420 [ 435.431093][T13167] ksys_write+0x145/0x250 [ 435.431110][T13167] ? __pfx_ksys_write+0x10/0x10 [ 435.431128][T13167] ? __do_fast_syscall_32+0xbe/0x570 [ 435.431147][T13167] __do_fast_syscall_32+0x1f7/0x570 [ 435.431164][T13167] ? lockdep_hardirqs_on+0x98/0x140 [ 435.431190][T13167] ? do_fast_syscall_32+0x34/0x80 [ 435.431206][T13167] ? irqentry_exit+0x10f/0x660 [ 435.431234][T13167] do_fast_syscall_32+0x34/0x80 [ 435.431250][T13167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.431277][T13167] RIP: 0023:0xf6ffd539 [ 435.431299][T13167] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 435.431316][T13167] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 435.431335][T13167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 435.431348][T13167] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.431358][T13167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.431369][T13167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 435.431380][T13167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.431397][T13167] [ 435.913108][ T5961] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 436.053020][T11880] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 436.084480][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.095486][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.105339][ T5961] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 436.114585][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.123972][ T5961] usb 2-1: config 0 descriptor?? [ 436.204574][T11880] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 436.216958][T11880] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 436.227083][T11880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.235331][T11880] usb 5-1: Product: syz [ 436.239609][T11880] usb 5-1: Manufacturer: syz [ 436.244427][T11880] usb 5-1: SerialNumber: syz [ 436.257073][T11880] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 436.660043][T13169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.669748][T13169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.675816][T11880] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 436.689580][T11880] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 436.698342][T11880] usb 5-1: media controller created [ 436.710856][T11880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.775896][T11880] usb 5-1: USB disconnect, device number 58 [ 436.941497][ T5961] hid-led 0003:27B8:01ED.004A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 436.955618][ T5961] hid-led 0003:27B8:01ED.004A: ThingM blink(1) v1 initialized [ 437.152799][T11880] usb 2-1: USB disconnect, device number 55