last executing test programs: 19m35.565767614s ago: executing program 4 (id=3566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x10000000000000}, 0x38) 19m35.378216627s ago: executing program 4 (id=3570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000", @ANYRES32=r0], 0x50) 19m35.23648313s ago: executing program 4 (id=3574): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000003c0)={0xc, @output={0x1000, 0x0, {0x0, 0x10}, 0x2, 0xfffff800}}) 19m35.106702848s ago: executing program 4 (id=3577): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0xb7, 0x1000) 19m34.959936699s ago: executing program 4 (id=3579): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0xc82, 0xb4, 0x3, {0x2, @win={{0xd6, 0x5, 0x800, 0x4}, 0x2, 0x0, 0x0, 0x4, 0x0}}, 0xfff}) 19m34.800008396s ago: executing program 4 (id=3583): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000500)="ebbb18", 0x3}, {&(0x7f00000007c0)="17a772eb92d33e8a", 0x8}], 0x2) 19m19.655774514s ago: executing program 32 (id=3583): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000500)="ebbb18", 0x3}, {&(0x7f00000007c0)="17a772eb92d33e8a", 0x8}], 0x2) 3m20.646261048s ago: executing program 3 (id=17222): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xca, 0x5}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) 3m20.400223665s ago: executing program 3 (id=17226): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r1 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xff66}}, 0x1025) 3m20.263274452s ago: executing program 3 (id=17229): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xc094}], 0x2000000000000073, 0x0, 0x0, 0xffffffffffffff3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 3m20.117976071s ago: executing program 3 (id=17231): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 3m19.151049425s ago: executing program 3 (id=17240): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x24, 0x36, {0x36, 0x7, "ad6667e44bb2cd263ca19db35b64ef7517ef18a5c7f872b2a6ba743febfd81b6a5ceb58e9c8690a139a795dbb34c976e696cd965"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m18.732788549s ago: executing program 3 (id=17246): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) get_mempolicy(&(0x7f00000002c0), 0x0, 0xd366, &(0x7f00001cd000/0x1000)=nil, 0x2) 3m18.314031208s ago: executing program 33 (id=17246): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) get_mempolicy(&(0x7f00000002c0), 0x0, 0xd366, &(0x7f00001cd000/0x1000)=nil, 0x2) 10.921016308s ago: executing program 0 (id=18702): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) write$dsp(r0, &(0x7f0000000040)="c7", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 9.382736664s ago: executing program 0 (id=18712): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cf}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r1, 0x3514, 0x9141, 0x69, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x168}}], 0x1, 0x8000004) 8.127204079s ago: executing program 0 (id=18721): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1, 0xb3}) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x4cf5f0f5, 0x100000000}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000005, 0x4}) fcntl$lock(r0, 0x6, &(0x7f0000002400)={0x1, 0x0, 0x80000000, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, 0xa9de, 0x3ff}) 6.207121213s ago: executing program 0 (id=18744): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) read$dsp(r0, &(0x7f0000000400)=""/56, 0x38) 3.407480215s ago: executing program 0 (id=18769): memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x4a32, &(0x7f00000000c0)={0x0, 0x78a9, 0x8, 0x0, 0x87}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.153500471s ago: executing program 2 (id=18772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f0000000140)=[@clear_death], 0x0, 0x1000000000000, 0x0}) 2.939374703s ago: executing program 2 (id=18776): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="6766f30f09670f2386f9b6b580020f3036773e0f080f229d66b888000f00d00f060f00c2", 0x24}], 0x1, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2.900433386s ago: executing program 6 (id=18777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x940, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000b40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1) 2.763064483s ago: executing program 5 (id=18778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x2}}]}, 0x90}}, 0x20000000) 2.662911497s ago: executing program 2 (id=18779): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) pread64(r0, 0x0, 0x0, 0x8) write$ppp(r0, &(0x7f0000000140)="bc72d975fc9e12cb3121750e4ded6bd28544660b8cc1297d5f51636b2b6e663c8bd9", 0x22) 2.610371523s ago: executing program 6 (id=18780): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000280)={0x70, 0x101, 0x4, 0x595f314c, 0x19, "55f63400"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000340)='\t', 0x1, 0x600}]) 2.31399898s ago: executing program 6 (id=18781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="616302aaffcfe37680c09b2bb19ccccf84f531d9ec214627", 0x18) r1 = accept(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x810) recvmmsg$unix(r1, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)=""/67, 0x1d}, {&(0x7f00000004c0)=""/93, 0x5d}], 0x2}}], 0x1, 0x2, 0x0) 2.192788088s ago: executing program 5 (id=18782): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=@xfs_parent={0x1c, 0xf1, {0x4, 0x40000000, 0xfffffffffffffffd, 0x80}}, 0x8900) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x48}) 2.008763244s ago: executing program 5 (id=18783): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001180)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x9, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x5, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0x5, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x9, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x0, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x5}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) 1.934592579s ago: executing program 1 (id=18784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 1.905004669s ago: executing program 5 (id=18785): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000371f68000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r2, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 1.787529696s ago: executing program 1 (id=18786): unshare(0x6020400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000004c0)='g', 0x1) tee(r1, r0, 0x3, 0x0) 1.731849296s ago: executing program 5 (id=18787): unshare(0x42000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800dd8d00000000ffdbdf3502200004ff000006"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000200001002bbd7000fddbdf2502"], 0x38}}, 0x0) 1.625596429s ago: executing program 1 (id=18788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a, 0x0, 0x26}, 0xf0) 1.530010836s ago: executing program 2 (id=18789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32, @ANYBLOB="0000000000000000b7050000100000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0xffff1000, 0xf000, 0x9, 0x7f, 0x80, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0x2000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xe, 0x9, 0x5, 0x2, 0x3, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x3d, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0x4}, 0xa0000003, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) 1.334391844s ago: executing program 2 (id=18790): r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.290837655s ago: executing program 6 (id=18791): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) get_robust_list(r0, 0x0, 0x0) 720.652529ms ago: executing program 0 (id=18792): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "80e550"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 662.616908ms ago: executing program 1 (id=18793): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)="2bf7a2f8ec8aa43ed446845c3cf9fe0084f0face0611b263c1", 0x0, 0x80000000, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) 390.466328ms ago: executing program 1 (id=18794): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 333.410722ms ago: executing program 2 (id=18795): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004980)={0x2020}, 0x2020) inotify_rm_watch(r2, r1) 199.996381ms ago: executing program 6 (id=18796): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) 56.148464ms ago: executing program 1 (id=18797): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000300)={0x4001, 0xfffffe03, 0x201, 0x7, 0x2, 0x7c36, 0xfffffffffffffffe, 0x80000000004, 0x7ff, 0x1, 0xfffffffe, 0x1}) 35.543724ms ago: executing program 6 (id=18798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x8, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1, &(0x7f0000000200)=""/11, 0xb}, 0x3}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000009c0)=""/161, 0xa1}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x40000100, 0x0) 0s ago: executing program 5 (id=18799): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): id=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3467 comm="syz.0.16929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6f9c629 code=0x7ffc0000 [ 1308.584348][T31765] usb 4-1: Product: syz [ 1308.594736][T31765] usb 4-1: Manufacturer: syz [ 1308.617235][T31765] usb 4-1: SerialNumber: syz [ 1308.646900][ T29] audit: type=1326 audit(1771934757.670:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3467 comm="syz.0.16929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6f9c629 code=0x7ffc0000 [ 1308.716957][ T29] audit: type=1326 audit(1771934757.670:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3467 comm="syz.0.16929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f04a6f9c629 code=0x7ffc0000 [ 1308.801495][ T29] audit: type=1326 audit(1771934757.670:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3467 comm="syz.0.16929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a6f9c629 code=0x7ffc0000 [ 1308.877088][T19439] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1308.885107][T19439] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1308.903371][T31765] usb 4-1: 0:2 : does not exist [ 1308.983744][T19439] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1308.994109][T19439] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1309.028000][T31765] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1309.056627][T19439] usb 2-1: USB disconnect, device number 109 [ 1309.147165][T31765] usb 4-1: USB disconnect, device number 81 [ 1309.416814][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1309.916896][T31765] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1310.034427][ T3569] binder: 3568:3569 ioctl c0306201 2000000003c0 returned -14 [ 1310.081170][T31765] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1310.098548][T31765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.143885][T31765] usb 6-1: Product: syz [ 1310.150939][T31765] usb 6-1: Manufacturer: syz [ 1310.155572][T31765] usb 6-1: SerialNumber: syz [ 1310.180906][T31765] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1310.202968][ T1624] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.433831][ T3580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1310.456920][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1310.792277][ T3582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1311.147421][T26234] usb 6-1: USB disconnect, device number 124 [ 1311.252864][ T3599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16952'. [ 1311.306993][T31765] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1311.477024][T31765] usb 4-1: Using ep0 maxpacket: 32 [ 1311.485624][T31765] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1311.497297][T31765] usb 4-1: config 0 has no interface number 0 [ 1311.505515][T31765] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1311.514804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1311.528569][T31765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.536868][T31765] usb 4-1: Product: syz [ 1311.541415][T31765] usb 4-1: Manufacturer: syz [ 1311.546130][T31765] usb 4-1: SerialNumber: syz [ 1311.556057][T31765] usb 4-1: config 0 descriptor?? [ 1311.566509][T31765] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1311.779301][T31765] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1311.804254][T31765] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1311.907057][ T1624] usb 6-1: Service connection timeout for: 258 [ 1311.915656][ T1624] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1311.945385][ T1624] ath9k_htc: Failed to initialize the device [ 1311.961428][T26234] usb 6-1: ath9k_htc: USB layer deinitialized [ 1312.185748][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1312.200128][T31765] usb 4-1: USB disconnect, device number 82 [ 1312.237219][T31765] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1312.266125][T31765] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1312.287103][T26234] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1312.304656][T31765] quatech2 4-1:0.51: device disconnected [ 1312.447014][T26234] usb 6-1: Using ep0 maxpacket: 32 [ 1312.469011][T26234] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 1312.486882][T26234] usb 6-1: config 0 has no interface number 0 [ 1312.518897][T26234] usb 6-1: New USB device found, idVendor=d265, idProduct=baff, bcdDevice=57.f9 [ 1312.537124][T26234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.540980][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1312.555722][T26234] usb 6-1: Product: syz [ 1312.568140][T26234] usb 6-1: Manufacturer: syz [ 1312.587891][T26234] usb 6-1: SerialNumber: syz [ 1312.608039][T26234] usb 6-1: config 0 descriptor?? [ 1312.634614][T26234] usb-storage 6-1:0.72: USB Mass Storage device detected [ 1312.816917][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1312.903117][ T1624] usb 6-1: USB disconnect, device number 125 [ 1313.020318][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1313.048543][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1313.087061][ T24] usb 2-1: config 0 has no interface number 0 [ 1313.128882][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1313.147107][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.155356][ T24] usb 2-1: Product: syz [ 1313.186905][ T24] usb 2-1: Manufacturer: syz [ 1313.191544][ T24] usb 2-1: SerialNumber: syz [ 1313.213349][ T3692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1313.219077][ T24] usb 2-1: config 0 descriptor?? [ 1313.586966][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1314.063308][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1314.269772][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1314.301996][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1314.437288][ T24] usb 2-1: USB disconnect, device number 110 [ 1314.616919][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1315.207146][T31765] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1315.389523][T31765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.408156][T31765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1315.451150][T31765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1315.476961][ T1624] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1315.491313][T31765] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1315.531884][T31765] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1315.564021][T31765] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1315.578131][T31765] usb 6-1: Manufacturer: syz [ 1315.598307][T31765] usb 6-1: config 0 descriptor?? [ 1315.655890][ T1624] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1315.665109][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1315.697970][ T1624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.716237][ T1624] usb 2-1: Product: syz [ 1315.728579][ T1624] usb 2-1: Manufacturer: syz [ 1315.736459][ T1624] usb 2-1: SerialNumber: syz [ 1315.765895][ T1624] usb 2-1: config 0 descriptor?? [ 1315.908303][T31765] rc_core: IR keymap rc-hauppauge not found [ 1315.921496][T31765] Registered IR keymap rc-empty [ 1315.928904][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1315.959355][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1315.979644][T31765] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1316.013779][T31765] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input132 [ 1316.051553][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.077457][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.112230][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.152805][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.197132][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.209967][ T3810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.231102][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.239015][ T3810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.254913][ T1624] usb 2-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (8) [ 1316.278782][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.321244][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.347242][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.371061][T31765] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1316.401985][T31765] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1316.415024][T31765] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1316.446978][T31765] usb 6-1: USB disconnect, device number 126 [ 1316.478353][ T1624] usb 2-1: failed to fetch extended address, random address set [ 1316.516482][ T1624] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1316.575953][ T1624] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1316.618572][ T1624] usb 2-1: USB disconnect, device number 111 [ 1316.706821][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1316.740697][ T3867] netlink: 100 bytes leftover after parsing attributes in process `syz.0.16997'. [ 1317.135375][ T3875] tipc: Enabling of bearer rejected, already enabled [ 1317.166108][ T3875] tipc: New replicast peer: 255.255.255.255 [ 1317.736813][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1318.776815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1318.798083][ T3941] ЊЊЊЊЊЊ: renamed from wg2 [ 1318.811585][ T3892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17008'. [ 1319.826842][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1320.856845][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1321.896966][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1322.107896][ T1624] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1322.276893][ T1624] usb 2-1: Using ep0 maxpacket: 32 [ 1322.284533][ T1624] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 1322.293250][ T1624] usb 2-1: config 0 has no interface number 0 [ 1322.301290][ T1624] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1322.317207][ T1624] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1322.326583][ T1624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.335596][T31765] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1322.346624][ T1624] usb 2-1: Product: syz [ 1322.351367][ T1624] usb 2-1: Manufacturer: syz [ 1322.358525][ T1624] usb 2-1: SerialNumber: syz [ 1322.368967][ T1624] usb 2-1: config 0 descriptor?? [ 1322.384292][ T4050] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1322.516898][T31765] usb 4-1: Using ep0 maxpacket: 32 [ 1322.526704][T31765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 31905, setting to 1024 [ 1322.541560][T31765] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1322.559320][T31765] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1322.570292][T31765] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1322.581212][T31765] usb 4-1: Product: syz [ 1322.585492][T31765] usb 4-1: Manufacturer: syz [ 1322.591549][T31765] usb 4-1: SerialNumber: syz [ 1322.602413][ T4050] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1322.615262][T31765] usb 4-1: config 0 descriptor?? [ 1322.627818][ T4065] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1322.642931][T31765] hub 4-1:0.0: bad descriptor, ignoring hub [ 1322.651077][T31765] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1322.936835][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1323.001034][ T10] usb 4-1: USB disconnect, device number 83 [ 1323.376903][ T10] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1323.436723][ T1624] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1323.462860][ T1624] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1323.547804][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1323.559246][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1323.569318][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.580047][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1323.595366][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1323.617462][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.625486][ T10] usb 6-1: Product: syz [ 1323.650251][ T1624] asix 2-1:0.191 eth1: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet, 78:c6:06:b7:cb:4a [ 1323.668708][ T10] usb 6-1: Manufacturer: syz [ 1323.677675][ T10] usb 6-1: SerialNumber: syz [ 1323.704410][ T1624] usb 2-1: USB disconnect, device number 112 [ 1323.723239][ T1624] asix 2-1:0.191 eth1: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet [ 1323.976875][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1324.120495][ T10] usb 6-1: 0:2 : does not exist [ 1324.418448][ T4127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17067'. [ 1324.752621][ T10] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1324.808827][ T4148] input: syz1 as /devices/virtual/input/input133 [ 1324.901229][ T10] usb 6-1: USB disconnect, device number 127 [ 1325.016846][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1325.399347][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1325.592667][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1325.616400][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.660609][ T10] usb 4-1: Product: syz [ 1325.686232][ T10] usb 4-1: Manufacturer: syz [ 1325.722484][ T10] usb 4-1: SerialNumber: syz [ 1325.750915][ T10] usb 4-1: config 0 descriptor?? [ 1325.768471][ T4195] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20001 [ 1325.779537][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 1326.056868][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1326.793141][ T10] usb 4-1: failed to send control message: -71 [ 1326.800705][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1326.835024][ T10] usb 4-1: USB disconnect, device number 84 [ 1326.859285][ T10] ch341 4-1:0.0: device disconnected [ 1326.876894][T31765] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1327.058261][T31765] usb 2-1: Using ep0 maxpacket: 16 [ 1327.078176][T31765] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1327.096816][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1327.105098][T31765] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1327.125690][T31765] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.161764][T31765] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1327.192745][T31765] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1327.232951][T31765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.269952][T31765] usb 2-1: Product: syz [ 1327.274162][T31765] usb 2-1: Manufacturer: syz [ 1327.299926][T31765] usb 2-1: SerialNumber: syz [ 1327.570554][T31765] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 113 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1327.826159][T31765] usb 2-1: USB disconnect, device number 113 [ 1327.858993][T31765] usblp0: removed [ 1328.136865][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1328.282756][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17099'. [ 1328.327007][ T4284] bond0: option updelay: invalid value (18446744071951403948) [ 1328.344937][ T4284] bond0: option updelay: allowed values 0 - 2147483647 [ 1328.867817][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1329.041374][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1329.051679][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.063511][ T10] usb 2-1: config 0 descriptor?? [ 1329.176839][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1329.257421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1329.701428][ T4322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1330.103620][ T10] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 1330.138674][ T10] usb 2-1: USB disconnect, device number 114 [ 1330.216984][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1330.276945][T31728] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1330.363236][ T29] audit: type=1326 audit(1771934779.940:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1330.427491][ T29] audit: type=1326 audit(1771934779.940:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1330.496887][T31728] usb 4-1: Using ep0 maxpacket: 8 [ 1330.504759][T31728] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1330.517375][ T29] audit: type=1326 audit(1771934779.940:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1330.557188][T31728] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1330.576474][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17116'. [ 1330.586936][T31728] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1330.599194][ T4347] netlink: 'syz.5.17116': attribute type 30 has an invalid length. [ 1330.616839][ T29] audit: type=1326 audit(1771934779.940:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1330.639677][T31728] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1330.677595][T31728] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1330.678951][ T4347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17116'. [ 1330.704526][T32451] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.707031][ T29] audit: type=1326 audit(1771934779.940:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5fb95cece code=0x7ffc0000 [ 1330.746941][T31728] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1330.756005][T31728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.756036][T32451] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.787239][ T4347] netlink: 'syz.5.17116': attribute type 30 has an invalid length. [ 1330.792583][ T29] audit: type=1326 audit(1771934779.970:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1330.818745][T32451] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.828653][T32451] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.848051][ T29] audit: type=1326 audit(1771934779.970:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1330.883169][ T29] audit: type=1326 audit(1771934779.980:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1330.940762][ T29] audit: type=1326 audit(1771934779.980:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4341 comm="syz.5.17115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fb99c629 code=0x7ffc0000 [ 1331.067006][T31728] usb 4-1: GET_CAPABILITIES returned 0 [ 1331.072528][T31728] usbtmc 4-1:16.0: can't read capabilities [ 1331.256860][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1331.289620][T31765] usb 4-1: USB disconnect, device number 85 [ 1331.936447][ T4386] input: syz0 as /devices/virtual/input/input134 [ 1332.126932][T31765] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1332.296814][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1332.350333][T31765] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1332.365711][T31765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.396610][T31765] usb 2-1: config 0 descriptor?? [ 1332.526067][ T4413] batadv_slave_1: entered promiscuous mode [ 1332.556406][ T4412] batadv_slave_1: left promiscuous mode [ 1332.652092][T31765] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1332.854640][T31765] [drm:udl_init] *ERROR* Selecting channel failed [ 1332.909812][T31765] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1332.917042][T31765] [drm] Initialized udl on minor 2 [ 1332.924742][T31765] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1332.940206][T31765] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1332.950488][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1332.960433][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1332.967400][T31765] usb 2-1: USB disconnect, device number 115 [ 1333.337056][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1333.936859][T31765] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1334.124135][ T4476] kvm: user requested TSC rate below hardware speed [ 1334.176936][T31765] usb 4-1: Using ep0 maxpacket: 8 [ 1334.195489][T31765] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1334.216287][T31765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.234478][T31765] usb 4-1: Product: syz [ 1334.239505][T31765] usb 4-1: Manufacturer: syz [ 1334.244187][T31765] usb 4-1: SerialNumber: syz [ 1334.268440][T31765] usb 4-1: config 0 descriptor?? [ 1334.289109][T31765] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1334.338139][ T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1334.387169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1334.507739][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1334.539329][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1334.539572][ T4490] batadv_slave_1: entered promiscuous mode [ 1334.578718][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1334.584618][ T4489] batadv_slave_1: left promiscuous mode [ 1334.617090][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1334.659414][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1334.677133][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.705938][ T24] usb 6-1: Product: syz [ 1334.716276][ T24] usb 6-1: Manufacturer: syz [ 1334.735374][ T24] usb 6-1: SerialNumber: syz [ 1334.769118][ T4474] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1334.790583][ T24] cdc_mbim 6-1:1.0: skipping garbage [ 1334.999780][ T4474] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1335.043468][ T4474] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1335.297087][T31765] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1335.306233][T31765] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 1335.335821][T31765] usb 4-1: USB disconnect, device number 86 [ 1335.416883][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1335.694288][ T4506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1335.702043][ T4474] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1335.710176][ T4474] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1335.724112][ T24] cdc_mbim 6-1:1.0: setting tx_max = 48 [ 1335.732058][ T24] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1335.791393][ T24] wwan wwan0: port wwan0mbim0 attached [ 1335.897490][ T24] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 7a:9a:4b:b8:73:70 [ 1335.950275][ T24] usb 6-1: USB disconnect, device number 2 [ 1335.968522][ T24] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1336.132490][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 1336.317047][T31765] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1336.468401][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1336.509984][T31765] usb 4-1: Using ep0 maxpacket: 8 [ 1336.518270][T31765] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 1336.534232][T31765] usb 4-1: config 0 has no interface number 0 [ 1336.569470][T31765] usb 4-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 1336.604393][T31765] usb 4-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1336.660351][T31765] usb 4-1: config 0 interface 101 has no altsetting 0 [ 1336.680260][T31765] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1336.708946][ T4571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.718065][T31765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.739728][T31765] usb 4-1: Product: syz [ 1336.780059][T31765] usb 4-1: Manufacturer: syz [ 1336.798656][T31765] usb 4-1: SerialNumber: syz [ 1336.828731][T31765] usb 4-1: config 0 descriptor?? [ 1337.062476][T31765] gspca_main: se401-2.14.0 probing 047d:5003 [ 1337.506886][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1337.726936][T31765] usb 4-1: reset high-speed USB device number 87 using dummy_hcd [ 1338.138633][ T4607] netlink: 'syz.5.17169': attribute type 12 has an invalid length. [ 1338.166909][ T4607] netlink: 'syz.5.17169': attribute type 29 has an invalid length. [ 1338.174867][ T4607] netlink: 148 bytes leftover after parsing attributes in process `syz.5.17169'. [ 1338.188252][ T4607] netlink: 'syz.5.17169': attribute type 1 has an invalid length. [ 1338.240761][ T4607] netlink: 'syz.5.17169': attribute type 2 has an invalid length. [ 1338.274799][ T4607] netlink: 11 bytes leftover after parsing attributes in process `syz.5.17169'. [ 1338.312892][T31765] gspca_se401: read req failed req 0x06 error -71 [ 1338.330881][T31765] se401 4-1:0.101: probe with driver se401 failed with error -71 [ 1338.353131][T31765] usb 4-1: USB disconnect, device number 87 [ 1338.547131][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1338.555116][T19439] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1338.707348][T19439] usb 2-1: Using ep0 maxpacket: 32 [ 1338.725350][T19439] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1338.737942][T19439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.768839][T19439] usb 2-1: config 0 descriptor?? [ 1338.788764][T19439] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1339.235812][ T4649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17181'. [ 1339.435874][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17184'. [ 1339.576863][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1339.764998][ T4670] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.17189'. [ 1339.810065][T19439] gspca_vc032x: reg_w err -71 [ 1339.816179][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.832547][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.850310][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.869751][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.903140][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.926954][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.932278][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.956928][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.979680][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1339.996109][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.026541][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.036672][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.043120][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.085155][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.102859][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.120766][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.140404][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.166204][T19439] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.186473][T19439] gspca_vc032x: Unknown sensor... [ 1340.204461][T19439] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1340.237978][T19439] usb 2-1: USB disconnect, device number 116 [ 1340.361843][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17195'. [ 1340.435733][ T4693] bond_slave_0: entered promiscuous mode [ 1340.441968][ T4693] bond_slave_1: entered promiscuous mode [ 1340.466571][ T4698] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17196'. [ 1340.564414][ T4693] macvlan0: entered promiscuous mode [ 1340.575288][ T4704] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17199'. [ 1340.585062][ T4693] bond0: entered promiscuous mode [ 1340.602921][ T4693] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1340.626974][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1340.842514][ T4713] loop4: detected capacity change from 0 to 7 [ 1340.905048][ T4713] Dev loop4: unable to read RDB block 7 [ 1340.932980][ T4713] loop4: unable to read partition table [ 1340.947178][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17205'. [ 1340.958042][ T4713] loop4: partition table beyond EOD, truncated [ 1340.964250][ T4713] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 1341.197175][ T4732] sctp: [Deprecated]: syz.1.17208 (pid 4732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1341.197175][ T4732] Use struct sctp_sack_info instead [ 1341.657033][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1342.697173][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1343.590214][ T4826] Invalid argument reading file caps for ./file0 [ 1343.736906][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1344.711600][T32451] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.776998][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1344.912960][T32451] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.159108][T32451] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.335589][ T1363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1345.337104][T19439] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1345.354634][ T1363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1345.363489][ T1363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1345.372010][ T1363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1345.379819][ T1363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1345.387737][T32451] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1345.442692][T32451] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.537146][T19439] usb 6-1: Using ep0 maxpacket: 32 [ 1345.565665][T19439] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 1345.598291][T19439] usb 6-1: config 0 has no interface number 0 [ 1345.615409][T19439] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1345.671232][T19439] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1345.708785][T19439] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1345.746181][T19439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.781202][T19439] usb 6-1: Product: syz [ 1345.785397][T19439] usb 6-1: Manufacturer: syz [ 1345.816060][T19439] usb 6-1: SerialNumber: syz [ 1345.821127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1345.874130][T19439] usb 6-1: config 0 descriptor?? [ 1345.908838][T19439] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1346.080077][T32451] bridge_slave_1: left allmulticast mode [ 1346.096484][T32451] bridge_slave_1: left promiscuous mode [ 1346.102943][T32451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.193180][T32451] bridge_slave_0: left allmulticast mode [ 1346.199258][T32451] bridge_slave_0: left promiscuous mode [ 1346.205130][T32451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.726944][T19439] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input136 [ 1346.866985][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1346.935136][T32451] bond0 (unregistering): left promiscuous mode [ 1346.972085][T32451] bond_slave_0: left promiscuous mode [ 1346.989880][T32451] bond_slave_1: left promiscuous mode [ 1347.003840][ T10] usb 6-1: USB disconnect, device number 3 [ 1347.056996][T31728] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1347.111547][T32451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.154729][T32451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.171738][T32451] bond0 (unregistering): Released all slaves [ 1347.229432][T31728] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1347.274350][T31728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1347.280725][T32451] tipc: Disabling bearer [ 1347.293394][T32451] tipc: Left network mode [ 1347.327375][T31728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1347.385674][T31728] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1347.455219][T31728] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1347.455555][ T5021] loop8: detected capacity change from 0 to 8 [ 1347.489630][T31728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.493754][ T4908] chnl_net:caif_netlink_parms(): no params data found [ 1347.508851][T18248] Bluetooth: hci3: command tx timeout [ 1347.582763][T31728] usb 2-1: config 0 descriptor?? [ 1347.609467][ T5021] Dev loop8: unable to read RDB block 8 [ 1347.615431][ T5021] loop8: unable to read partition table [ 1347.658726][ T5021] loop8: partition table beyond EOD, truncated [ 1347.678999][ T5021] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 1347.853654][T32451] hsr_slave_0: left promiscuous mode [ 1347.893373][T32451] hsr_slave_1: left promiscuous mode [ 1347.901611][T32451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.909601][T32451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.929187][T32451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.936719][T32451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.959533][T32451] veth1_macvtap: left promiscuous mode [ 1347.965488][T32451] veth0_macvtap: left promiscuous mode [ 1348.043737][T31728] plantronics 0003:047F:FFFF.005C: ignoring exceeding usage max [ 1348.097826][T31728] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1348.643315][T32451] team0 (unregistering): Port device team_slave_1 removed [ 1348.713835][T32451] team0 (unregistering): Port device team_slave_0 removed [ 1349.131533][ T4908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.167571][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.182953][ T4908] bridge_slave_0: entered allmulticast mode [ 1349.192276][ T4908] bridge_slave_0: entered promiscuous mode [ 1349.206344][ T4908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.238991][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.255432][ T4908] bridge_slave_1: entered allmulticast mode [ 1349.284051][ T5137] loop8: detected capacity change from 0 to 7 [ 1349.293510][ T4908] bridge_slave_1: entered promiscuous mode [ 1349.315620][ T5137] Dev loop8: unable to read RDB block 7 [ 1349.346833][ T5137] loop8: unable to read partition table [ 1349.365074][ T5137] loop8: partition table beyond EOD, truncated [ 1349.412624][ T5137] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 1349.473999][ T4908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.586244][ T4908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.587661][T18248] Bluetooth: hci3: command tx timeout [ 1349.667067][T32451] IPVS: stop unused estimator thread 0... [ 1349.812088][ T4908] team0: Port device team_slave_0 added [ 1349.865350][ T4908] team0: Port device team_slave_1 added [ 1350.013670][ T4908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.064166][ T4908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.160276][ T4908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.217989][T19439] usb 2-1: USB disconnect, device number 117 [ 1350.265496][ T4908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.309239][ T4908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.364179][ T4908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.519009][ T4908] hsr_slave_0: entered promiscuous mode [ 1350.533712][ T4908] hsr_slave_1: entered promiscuous mode [ 1350.543045][ T4908] debugfs: 'hsr0' already exists in 'hsr' [ 1350.558393][ T4908] Cannot create hsr debugfs directory [ 1351.144545][ T4908] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1351.250976][ T4908] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1351.386859][ T4908] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1351.420731][ T4908] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1351.657041][T18248] Bluetooth: hci3: command tx timeout [ 1351.757081][ T4908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.816110][ T4908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.870458][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.877662][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.942194][T32451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.949404][T32451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.119982][ T4908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.255692][ T4908] veth0_vlan: entered promiscuous mode [ 1352.309761][ T4908] veth1_vlan: entered promiscuous mode [ 1352.422560][ T4908] veth0_macvtap: entered promiscuous mode [ 1352.458660][ T4908] veth1_macvtap: entered promiscuous mode [ 1352.538736][ T4908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.585144][ T4908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.670792][T32451] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.755992][T32451] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.791710][T32451] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.830292][T32451] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.115774][T32451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.167494][T32451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.274594][ T5420] netlink: 'syz.2.17284': attribute type 10 has an invalid length. [ 1353.302769][T32447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.325574][ T5427] netlink: 'syz.2.17284': attribute type 10 has an invalid length. [ 1353.333907][T32447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.419049][ T5420] team0: Port device dummy0 added [ 1353.519069][ T5427] team0: Port device dummy0 removed [ 1353.563856][ T5427] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1353.737122][T18248] Bluetooth: hci3: command tx timeout [ 1354.125161][ T5451] batadv_slave_0: entered promiscuous mode [ 1354.134884][ T5451] batadv_slave_0: left promiscuous mode [ 1354.268068][ T1624] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1354.489627][ T1624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.508257][ T1624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.520769][ T1624] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1354.557708][ T1624] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1354.577209][ T1624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.600234][ T1624] usb 2-1: config 0 descriptor?? [ 1355.049591][ T1624] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1356.137999][ T5514] syzkaller1: entered promiscuous mode [ 1356.158287][ T5514] syzkaller1: entered allmulticast mode [ 1357.140871][T31736] usb 2-1: USB disconnect, device number 118 [ 1357.567028][ T5532] input: syz1 as /devices/virtual/input/input137 [ 1357.632199][ T5562] netlink: 'syz.6.17310': attribute type 3 has an invalid length. [ 1357.671778][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17310'. [ 1357.855305][ T5567] netlink: 'syz.5.17311': attribute type 1 has an invalid length. [ 1358.304974][ T5567] bond2: entered promiscuous mode [ 1358.363768][ T5567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1358.568434][ T5640] Invalid argument reading file caps for ./file0 [ 1358.900174][ T5653] macvtap1: entered promiscuous mode [ 1358.947263][ T5653] macvtap1: entered allmulticast mode [ 1358.952683][ T5653] veth1_vlan: entered allmulticast mode [ 1359.082141][ T5659] macvtap2: entered promiscuous mode [ 1359.120958][ T5659] macvtap2: entered allmulticast mode [ 1361.586106][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.592621][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.526065][ T5817] Invalid argument reading file caps for ./file0 [ 1363.288715][ T5878] tmpfs: Unknown parameter 'rootmode' [ 1363.839807][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17373'. [ 1364.363681][ T5943] cifs: Unknown parameter 'f,' [ 1364.817425][ T1624] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1364.911409][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17387'. [ 1364.991946][ T1624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1365.003729][ T1624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1365.039712][ T1624] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1365.087692][ T1624] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1365.119492][ T1624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.144416][ T1624] usb 6-1: config 0 descriptor?? [ 1365.156612][ T5988] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1365.166984][T19439] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1365.180237][ T5955] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1365.337732][T19439] usb 2-1: Using ep0 maxpacket: 16 [ 1365.346671][T19439] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1365.386040][T19439] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1365.426524][T19439] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1365.451215][T19439] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1365.465961][T19439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1365.486927][T19439] usb 2-1: SerialNumber: syz [ 1365.507374][ T5960] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1365.658553][ T1624] plantronics 0003:047F:FFFF.005E: reserved main item tag 0xd [ 1365.753294][ T1624] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1365.798372][T19439] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1365.870375][T19439] usb 2-1: USB disconnect, device number 119 [ 1365.949960][ T1624] usb 6-1: USB disconnect, device number 4 [ 1366.039844][ T6018] fido_id[6018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1368.227547][ T6135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.777725][T19439] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1368.981773][T19439] usb 6-1: Using ep0 maxpacket: 32 [ 1369.015526][T19439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.048604][T19439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.079133][T19439] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1369.117208][T19439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.133651][T19439] usb 6-1: config 0 descriptor?? [ 1369.627937][T19439] savu 0003:1E7D:2D5A.005F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1369.686531][ T6178] program syz.2.17422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1369.853224][T19439] usb 6-1: USB disconnect, device number 6 [ 1370.598283][ T6234] macvlan1: Caught tx_queue_len zero misconfig [ 1371.409103][T24884] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1371.603138][T24884] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1371.639542][T24884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.652571][T24884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1371.696808][T24884] usb 2-1: SerialNumber: syz [ 1372.403091][T24884] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1372.813241][ T1624] usb 2-1: USB disconnect, device number 120 [ 1372.828826][ T1624] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1373.575122][ T1624] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1373.758631][ T1624] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1373.770309][ T1624] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1373.803886][ T1624] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1373.836027][ T1624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.064145][ T1624] usb 6-1: usb_control_msg returned -32 [ 1374.077938][ T1624] usbtmc 6-1:16.0: can't read capabilities [ 1374.147805][ T1624] hid_parser_main: 28 callbacks suppressed [ 1374.147826][ T1624] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 1374.202687][ T1624] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1374.448965][ T6405] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1376.307821][ T1624] usb 6-1: USB disconnect, device number 7 [ 1377.133078][ T1624] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1377.299362][ T1624] usb 6-1: Using ep0 maxpacket: 16 [ 1377.314587][ T1624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.437203][ T1624] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1377.494928][ T1624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.539661][ T1624] usb 6-1: config 0 descriptor?? [ 1377.996932][T19439] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1378.080765][ T1624] input: HID 041e:3100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0061/input/input140 [ 1378.201154][T19439] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1378.223772][ T1624] creative-sb0540 0003:041E:3100.0061: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.5-1/input0 [ 1378.247352][T19439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.255384][T19439] usb 2-1: Product: syz [ 1378.278102][T19439] usb 2-1: Manufacturer: syz [ 1378.285548][ T1624] usb 6-1: USB disconnect, device number 8 [ 1378.306945][T19439] usb 2-1: SerialNumber: syz [ 1378.343785][T19439] usb 2-1: config 0 descriptor?? [ 1378.428271][ T6547] fido_id[6547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1378.433468][T19439] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1378.709776][ T6573] netlink: 35 bytes leftover after parsing attributes in process `syz.6.17489'. [ 1378.723597][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17489'. [ 1379.282912][ T6593] netlink: 'syz.6.17497': attribute type 1 has an invalid length. [ 1379.346824][ T6593] netlink: 'syz.6.17497': attribute type 2 has an invalid length. [ 1379.409378][T19439] gspca_sunplus: reg_r err -71 [ 1379.419127][T19439] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1379.474453][T19439] usb 2-1: USB disconnect, device number 121 [ 1380.733289][ T6659] kvm: kvm [6657]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1380.766282][ T6659] kvm: kvm [6657]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1381.535722][ T6694] input: syz1 as /devices/virtual/input/input141 [ 1381.863695][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17522'. [ 1381.907358][ T6706] netlink: 'syz.5.17522': attribute type 30 has an invalid length. [ 1382.520749][ T6730] loop2: detected capacity change from 0 to 7 [ 1382.562094][ T6730] Dev loop2: unable to read RDB block 7 [ 1382.579040][ T6730] loop2: AHDI p1 p2 p3 [ 1382.592137][ T6730] loop2: partition table partially beyond EOD, truncated [ 1382.633588][ T6730] loop2: p1 start 1634624559 is beyond EOD, truncated [ 1382.661721][ T6730] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1385.421485][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17558'. [ 1385.612960][T19439] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1385.779626][T19439] usb 2-1: Using ep0 maxpacket: 32 [ 1385.791355][T19439] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1385.806902][T19439] usb 2-1: config 0 has no interface number 0 [ 1385.820452][T19439] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1385.844121][T19439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.873132][T19439] usb 2-1: Product: syz [ 1385.888658][T19439] usb 2-1: Manufacturer: syz [ 1385.893287][T19439] usb 2-1: SerialNumber: syz [ 1385.932923][T19439] usb 2-1: config 0 descriptor?? [ 1385.954465][T19439] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1386.082300][ T6866] loop9: detected capacity change from 0 to 7 [ 1386.144821][ T6866] Dev loop9: unable to read RDB block 7 [ 1386.176657][ T6866] loop9: AHDI p2 p3 [ 1386.181102][T19439] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1386.194800][ T6866] loop9: partition table partially beyond EOD, truncated [ 1386.210298][T19439] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1386.226693][ T6866] loop9: p2 size 157513074 extends beyond EOD, truncated [ 1386.404892][T19817] udevd[19817]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1386.639660][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1386.652259][ T1624] usb 2-1: USB disconnect, device number 122 [ 1386.689615][ T1624] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1386.744593][ T1624] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1386.778572][ T1624] quatech2 2-1:0.51: device disconnected [ 1387.547500][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17580'. [ 1387.797391][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17584'. [ 1388.827217][T19439] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1388.947999][ T6983] syzkaller1: entered promiscuous mode [ 1388.953725][ T6983] syzkaller1: entered allmulticast mode [ 1389.026335][T19439] usb 6-1: Using ep0 maxpacket: 8 [ 1389.034514][T19439] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1389.056722][T19439] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1389.069775][T19439] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1389.081478][T19439] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1389.101093][T19439] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1389.117337][T19439] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1389.126595][T19439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.136793][ T10] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1389.357814][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1389.367601][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.378215][T19439] usb 6-1: GET_CAPABILITIES returned 0 [ 1389.383714][T19439] usbtmc 6-1:16.0: can't read capabilities [ 1389.397101][ T10] usb 2-1: config 0 has no interface number 0 [ 1389.426810][ T10] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1389.468746][ T10] usb 2-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.486920][ T10] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1389.506328][ T10] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1389.516611][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.538247][ T10] usb 2-1: Product: syz [ 1389.542448][ T10] usb 2-1: Manufacturer: syz [ 1389.556972][ T10] usb 2-1: SerialNumber: syz [ 1389.588017][ T10] usb 2-1: config 0 descriptor?? [ 1389.619276][T31736] usb 6-1: USB disconnect, device number 9 [ 1389.811835][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1390.029150][ T10] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 1390.043299][ T10] usb 2-1: USB disconnect, device number 123 [ 1390.075741][T22424] udevd[22424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1394.097305][ T7150] input: syz0 as /devices/virtual/input/input142 [ 1394.258195][ T7157] No such timeout policy "syz1" [ 1394.325833][ T7159] batadv_slave_1: entered promiscuous mode [ 1394.370313][ T7158] batadv_slave_1: left promiscuous mode [ 1395.252077][ T7194] kernel read not supported for file /net_prio.prioidx (pid: 7194 comm: syz.2.17638) [ 1395.330699][ T29] audit: type=1800 audit(1771934844.910:855): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17638" name="net_prio.prioidx" dev="mqueue" ino=159004 res=0 errno=0 [ 1396.098724][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17644'. [ 1396.125067][ T7214] bond0: ARP target 128.0.0.0 is already present [ 1396.136612][ T7214] bond0: option arp_ip_target: invalid value (128) [ 1397.797253][ T10] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1397.966956][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1397.984074][ T10] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.005103][ T10] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1398.056381][ T10] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1398.074118][ T10] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1398.114558][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1398.130531][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.161093][ T10] usb 2-1: Product: syz [ 1398.165381][ T10] usb 2-1: Manufacturer: syz [ 1398.192231][ T10] usb 2-1: SerialNumber: syz [ 1398.223945][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1398.242485][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input144 [ 1398.482260][ T10] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1398.507212][ T10] (id 0x00) [ 1398.646893][ T10] rc_core: IR keymap rc-imon-pad not found [ 1398.668304][ T10] Registered IR keymap rc-empty [ 1398.674551][ T10] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1398.695154][ T10] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1398.747626][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1398.761209][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input145 [ 1398.779803][ T10] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:124> initialized [ 1398.927133][T19439] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1398.975996][ T7278] imon:vfd_write: invalid payload size [ 1398.986724][ T10] usb 2-1: USB disconnect, device number 124 [ 1399.107072][T19439] usb 6-1: Using ep0 maxpacket: 8 [ 1399.118064][T19439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1399.129969][T19439] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1399.141603][T19439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.161377][T19439] usb 6-1: config 0 descriptor?? [ 1399.387108][T19439] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1399.592078][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.615012][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.844527][T24884] usb 6-1: USB disconnect, device number 10 [ 1400.968414][ T7401] loop5: detected capacity change from 0 to 7 [ 1400.987946][ T7401] Dev loop5: unable to read RDB block 7 [ 1400.993567][ T7401] loop5: unable to read partition table [ 1401.007334][ T7401] loop5: partition table beyond EOD, truncated [ 1401.036797][ T7401] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 1401.247425][T24884] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1401.422518][T24884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1401.440938][T24884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.453854][T24884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1401.491244][T24884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1401.507529][T24884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.529509][T24884] usb 2-1: config 0 descriptor?? [ 1402.001472][T24884] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1402.299301][T24884] usb 2-1: USB disconnect, device number 125 [ 1404.098645][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17720'. [ 1404.251693][ T7563] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.17723'. [ 1404.665004][ T7579] input: syz1 as /devices/virtual/input/input146 [ 1405.577642][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1405.759366][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.777495][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1405.798195][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1405.807718][T24884] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1405.818611][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1405.842474][ T10] usb 6-1: SerialNumber: syz [ 1405.986957][T24884] usb 2-1: Using ep0 maxpacket: 16 [ 1405.996646][T24884] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1406.015855][T24884] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1406.037018][T24884] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1406.086158][ T10] usb 6-1: 0:2 : does not exist [ 1406.091928][T24884] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1406.118692][T24884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1406.139573][T24884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.157111][T24884] usb 2-1: Product: syz [ 1406.161580][T24884] usb 2-1: Manufacturer: syz [ 1406.166193][T24884] usb 2-1: SerialNumber: syz [ 1406.192092][ T10] usb 6-1: USB disconnect, device number 11 [ 1406.419416][T24884] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 126 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1406.653010][T24884] usb 2-1: USB disconnect, device number 126 [ 1406.678627][T24884] usblp0: removed [ 1407.376979][T24884] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1407.549581][T24884] usb 6-1: Using ep0 maxpacket: 8 [ 1407.563588][T24884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.586577][T24884] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1407.608479][T24884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.623794][T24884] usb 6-1: config 0 descriptor?? [ 1407.643181][T24884] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1408.666292][T24884] gspca_vc032x: reg_r err -71 [ 1408.680306][T24884] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1408.706006][T24884] usb 6-1: USB disconnect, device number 12 [ 1409.184225][ T7748] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1409.240685][ T7748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1410.038489][T24884] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1410.229462][T24884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1410.248010][ T7787] overlayfs: missing 'lowerdir' [ 1410.257599][T24884] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1410.278488][T24884] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.295241][T24884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1410.310253][T24884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.329378][T24884] usb 2-1: Product: syz [ 1410.333747][T24884] usb 2-1: Manufacturer: syz [ 1410.338668][T24884] usb 2-1: SerialNumber: syz [ 1410.353395][T24884] hub 2-1:1.0: bad descriptor, ignoring hub [ 1410.380205][T24884] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1410.569121][T24884] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 127 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1410.583563][T19439] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1410.766980][T19439] usb 6-1: Using ep0 maxpacket: 8 [ 1410.797357][T19439] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1410.843652][T19439] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1410.884444][T19439] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1410.898924][T19439] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1410.912492][T19439] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1410.960084][T19439] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1410.988309][T19439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.122767][ T7773] usb 2-1: reset high-speed USB device number 127 using dummy_hcd [ 1411.232645][T19439] usb 6-1: usb_control_msg returned -32 [ 1411.244545][T19439] usbtmc 6-1:16.0: can't read capabilities [ 1411.321029][ T7773] usb 2-1: device firmware changed [ 1411.341458][ T10] usb 2-1: USB disconnect, device number 127 [ 1411.370019][ T10] usblp0: removed [ 1411.557108][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1411.804196][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1411.815236][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1411.828254][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1411.846501][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1411.856397][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1411.866603][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.888406][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 1411.904922][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1412.100585][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1412.145945][ T7851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17777'. [ 1412.179544][ T10] usb 2-1: USB disconnect, device number 2 [ 1412.192356][ T10] usblp0: removed [ 1413.379941][ T10] usb 6-1: USB disconnect, device number 13 [ 1414.392449][ T7945] sctp: [Deprecated]: syz.6.17792 (pid 7945) Use of int in maxseg socket option. [ 1414.392449][ T7945] Use struct sctp_assoc_value instead [ 1416.975812][ T8003] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 2 out of range (1000000..45000000) [ 1418.114111][ T8046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1419.146640][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17830'. [ 1419.465797][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17832'. [ 1420.263130][ T8141] netlink: 244 bytes leftover after parsing attributes in process `syz.1.17840'. [ 1420.319254][T31728] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 1420.347463][T31728] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1423.024278][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.030662][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.980836][ T8255] netlink: 'syz.5.17873': attribute type 2 has an invalid length. [ 1424.313347][ T8273] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1424.745505][ T8285] syzkaller1: entered promiscuous mode [ 1424.762911][ T8285] syzkaller1: entered allmulticast mode [ 1425.434580][ T8317] ALSA: mixer_oss: invalid OSS volume '' [ 1425.440827][ T8317] ALSA: mixer_oss: invalid OSS volume 'cpu:' [ 1425.523559][ T8317] ALSA: mixer_oss: invalid OSS volume 'clock' [ 1425.531100][ T8317] ALSA: mixer_oss: invalid OSS volume '.base:' [ 1425.543549][ T8317] ALSA: mixer_oss: invalid OSS volume '.index:' [ 1426.179507][ T8346] loop8: detected capacity change from 0 to 7 [ 1426.208495][ T8346] Dev loop8: unable to read RDB block 7 [ 1426.229871][ T8346] loop8: unable to read partition table [ 1426.256233][ T8346] loop8: partition table beyond EOD, truncated [ 1426.283623][ T8346] loop_reread_partitions: partition scan of loop8 (ўшЂЋxќ^>бр– ) failed (rc=-5) [ 1428.050277][T24884] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1428.258770][T24884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.279362][T24884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.292312][T24884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1428.307780][T24884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1428.320118][ T8428] sctp: [Deprecated]: syz.1.17923 (pid 8428) Use of int in max_burst socket option deprecated. [ 1428.320118][ T8428] Use struct sctp_assoc_value instead [ 1428.335843][T24884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.355865][T24884] usb 6-1: config 0 descriptor?? [ 1428.686966][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1428.801711][T24884] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1428.878663][ T10] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1428.906112][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1428.923917][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1428.941944][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1428.965231][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1428.975957][ T10] usb 2-1: Product: syz [ 1428.981172][ T10] usb 2-1: Manufacturer: syz [ 1428.986052][ T10] usb 2-1: SerialNumber: syz [ 1429.011756][ T10] usb 2-1: config 0 descriptor?? [ 1429.035427][ T10] usb 2-1: selecting invalid altsetting 0 [ 1429.059218][T24884] usb 6-1: USB disconnect, device number 14 [ 1429.292133][ T8432] usb 2-1: cannot submit urb 0, error -90: internal error [ 1429.304958][ T8432] usb 2-1: cannot submit urb 0, error -90: internal error [ 1429.314302][ T8432] usb 2-1: cannot submit urb 0, error -90: internal error [ 1429.323784][ T8432] usb 2-1: cannot submit urb 0, error -90: internal error [ 1429.346551][ T8432] usb 2-1: cannot submit urb 0, error -90: internal error [ 1429.383337][T24884] usb 2-1: USB disconnect, device number 3 [ 1429.636264][ T8498] netlink: 212924 bytes leftover after parsing attributes in process `syz.5.17928'. [ 1429.871679][ T8510] trusted_key: syz.2.17930 sent an empty control message without MSG_MORE. [ 1429.989141][T24884] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1430.185186][T24884] usb 6-1: Using ep0 maxpacket: 32 [ 1430.219143][T24884] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1430.249775][T24884] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1430.266864][T24884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.286351][T24884] usb 6-1: Product: syz [ 1430.297757][T24884] usb 6-1: Manufacturer: syz [ 1430.319695][T24884] usb 6-1: SerialNumber: syz [ 1430.357825][T24884] usb 6-1: config 0 descriptor?? [ 1430.797663][T24884] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1431.217580][T24884] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1431.237293][T24884] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1431.456104][T24884] usb 6-1: USB disconnect, device number 15 [ 1433.194270][ T8595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1434.271832][ T8629] all (unregistering): Released all slaves [ 1434.457682][T24884] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1434.627236][T24884] usb 6-1: Using ep0 maxpacket: 32 [ 1434.644213][T24884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.658065][T24884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.677217][T24884] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1434.690773][T24884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.712014][T24884] usb 6-1: config 0 descriptor?? [ 1435.160496][T24884] savu 0003:1E7D:2D5A.0065: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1435.299842][ T8735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17969'. [ 1435.459893][T24884] usb 6-1: USB disconnect, device number 16 [ 1437.013032][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17983'. [ 1437.815603][ T8843] netlink: 'syz.5.17991': attribute type 16 has an invalid length. [ 1438.073531][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.080953][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.192114][ T8848] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17985'. [ 1438.669205][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17996'. [ 1438.758879][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17996'. [ 1439.547426][ T8893] loop3: detected capacity change from 0 to 7 [ 1439.588419][T21357] Dev loop3: unable to read RDB block 7 [ 1439.594041][T21357] loop3: AHDI p3 p4 [ 1439.606205][T21357] loop3: partition table partially beyond EOD, truncated [ 1439.611285][T18280] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.633200][T21357] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1439.690542][T18280] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.743546][T18280] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.802874][T18280] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.877241][ T8888] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.902583][ T8893] Dev loop3: unable to read RDB block 7 [ 1439.917175][ T8888] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.929525][ T8893] loop3: AHDI p3 p4 [ 1439.944490][ T8893] loop3: partition table partially beyond EOD, truncated [ 1439.974697][ T8888] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1439.993289][ T8893] loop3: p3 start 1702000233 is beyond EOD, truncated [ 1440.016947][ T8888] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.045577][ T8901] netlink: 'syz.5.18005': attribute type 12 has an invalid length. [ 1440.097189][ T8901] netlink: 'syz.5.18005': attribute type 29 has an invalid length. [ 1440.176276][ T8901] netlink: 148 bytes leftover after parsing attributes in process `syz.5.18005'. [ 1440.388225][ T8857] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1440.569135][ T8857] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1440.588689][ T8857] usb 2-1: config 0 has no interface number 0 [ 1440.631086][ T8857] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1440.666882][ T8857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.692565][ T8857] usb 2-1: Product: syz [ 1440.701891][ T8857] usb 2-1: Manufacturer: syz [ 1440.708827][ T8857] usb 2-1: SerialNumber: syz [ 1440.724954][ T8857] usb 2-1: config 0 descriptor?? [ 1441.757900][ T8857] asix 2-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 193 [ 1441.987206][T31736] usb 2-1: USB disconnect, device number 4 [ 1442.570990][ T9002] netlink: 9 bytes leftover after parsing attributes in process `syz.0.18023'. [ 1442.920041][ T9002] netlink: 9 bytes leftover after parsing attributes in process `syz.0.18023'. [ 1443.327144][ T8857] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1443.504213][ T8857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1443.540252][ T8857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1443.573361][ T8857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1443.616287][ T8857] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1443.639717][ T8857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.669624][ T8857] usb 2-1: Product: syz [ 1443.678268][ T8857] usb 2-1: Manufacturer: syz [ 1443.689508][ T8857] usb 2-1: SerialNumber: syz [ 1443.710720][ T8857] usb 2-1: config 0 descriptor?? [ 1443.941245][ T8857] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1444.168167][ T10] usb 2-1: USB disconnect, device number 5 [ 1444.394999][ T29] audit: type=1326 audit(1771934893.970:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c239c629 code=0x7ffc0000 [ 1444.546242][ T9080] ALSA: mixer_oss: invalid OSS volume 'veth1' [ 1444.568132][ T29] audit: type=1326 audit(1771934893.970:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c239c629 code=0x7ffc0000 [ 1444.672174][ T29] audit: type=1326 audit(1771934893.970:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c239c629 code=0x7ffc0000 [ 1444.715346][ T29] audit: type=1326 audit(1771934893.970:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c239c629 code=0x7ffc0000 [ 1444.823266][ T29] audit: type=1326 audit(1771934893.970:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c239c629 code=0x7ffc0000 [ 1444.887514][ T29] audit: type=1326 audit(1771934893.970:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c239c629 code=0x7ffc0000 [ 1444.925605][ T29] audit: type=1326 audit(1771934893.970:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f02c239c629 code=0x7ffc0000 [ 1445.009237][ T29] audit: type=1326 audit(1771934894.040:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02c235cece code=0x7ffc0000 [ 1445.106344][ T29] audit: type=1326 audit(1771934894.040:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02c235cece code=0x7ffc0000 [ 1445.306954][ T29] audit: type=1326 audit(1771934894.050:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9076 comm="syz.6.18044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02c235cece code=0x7ffc0000 [ 1446.286825][ T8857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1446.517399][ T8857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.548027][ T8857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.592564][ T8857] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1446.647928][ T8857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.681417][ T8857] usb 2-1: config 0 descriptor?? [ 1447.107774][ T8857] cm6533_jd 0003:0D8C:0022.0066: unknown main item tag 0x0 [ 1447.138180][ T8857] cm6533_jd 0003:0D8C:0022.0066: unknown main item tag 0x0 [ 1447.181106][ T8857] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0066/input/input147 [ 1447.283229][ T8857] cm6533_jd 0003:0D8C:0022.0066: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1447.379029][ T8857] usb 2-1: USB disconnect, device number 6 [ 1447.515292][ T9182] fido_id[9182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1451.621135][ T9291] syzkaller1: entered promiscuous mode [ 1451.658253][ T9291] syzkaller1: entered allmulticast mode [ 1453.295395][ T9369] input: syz0 as /devices/virtual/input/input148 [ 1453.476920][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1453.658108][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1453.668888][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.694489][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1453.726798][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1453.767975][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.798895][ T10] usb 6-1: config 0 descriptor?? [ 1454.223140][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.255957][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.319287][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.344784][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.372190][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.396798][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.422719][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.432787][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.440352][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.448174][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.455374][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.464049][ T10] cougar 0003:060B:500A.0067: unknown main item tag 0x0 [ 1454.509837][ T10] cougar 0003:060B:500A.0067: item 0 2 0 8 parsing failed [ 1454.519849][ T10] cougar 0003:060B:500A.0067: parse failed [ 1454.525859][ T10] cougar 0003:060B:500A.0067: probe with driver cougar failed with error -22 [ 1454.572957][ T10] usb 6-1: USB disconnect, device number 17 [ 1454.917092][ T8872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1455.106909][ T8872] usb 2-1: Using ep0 maxpacket: 8 [ 1455.140815][ T8872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1455.156807][ T8872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.164837][ T8872] usb 2-1: Product: syz [ 1455.196823][ T8872] usb 2-1: Manufacturer: syz [ 1455.217084][ T8872] usb 2-1: SerialNumber: syz [ 1455.237855][ T8872] usb 2-1: config 0 descriptor?? [ 1455.487134][ T8872] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1456.287071][ T8872] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1456.308987][ T8872] usb 2-1: USB disconnect, device number 7 [ 1456.524409][ T9490] geneve0: entered allmulticast mode [ 1456.918771][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.940818][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.010762][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.047826][ T9543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.546980][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1457.750124][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.762124][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.782275][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1457.803782][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1457.843711][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.868066][ T10] usb 2-1: config 0 descriptor?? [ 1458.315523][ T10] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1458.583346][ T10] usb 2-1: USB disconnect, device number 8 [ 1459.056888][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1459.207078][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1459.223360][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.234836][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.246269][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1459.254263][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1459.265291][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.278083][ T10] usb 6-1: config 0 descriptor?? [ 1459.837922][ T10] hid_parser_main: 831 callbacks suppressed [ 1459.837946][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.876800][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.883996][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.917262][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.934467][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.946944][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.964205][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.981570][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1459.996917][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1460.137409][ T10] cougar 0003:060B:500A.0069: unknown main item tag 0x0 [ 1460.159453][ T10] cougar 0003:060B:500A.0069: unexpected long global item [ 1460.168255][ T10] cougar 0003:060B:500A.0069: parse failed [ 1460.174176][ T10] cougar 0003:060B:500A.0069: probe with driver cougar failed with error -22 [ 1460.214378][ T10] usb 6-1: USB disconnect, device number 18 [ 1460.236965][ T8857] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1460.456890][ T8857] usb 2-1: Using ep0 maxpacket: 16 [ 1460.471961][ T8857] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1460.489144][ T8857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.524666][ T8857] usb 2-1: config 0 descriptor?? [ 1460.552791][ T8857] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1461.185179][ T9699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1461.264321][ T9687] binder: 9683:9687 ioctl c0306201 200000001a80 returned -14 [ 1461.618003][ T8857] gspca_sonixj: reg_w1 err -71 [ 1461.637593][ T8857] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1461.678874][ T8857] usb 2-1: USB disconnect, device number 9 [ 1462.777885][ T9746] netlink: 'syz.5.18180': attribute type 29 has an invalid length. [ 1462.807917][ T9746] netlink: 'syz.5.18180': attribute type 29 has an invalid length. [ 1462.849887][ T9746] netlink: 44 bytes leftover after parsing attributes in process `syz.5.18180'. [ 1464.700301][ T9813] Invalid argument reading file caps for ./file0 [ 1467.223288][ T9874] sctp: [Deprecated]: syz.1.18218 (pid 9874) Use of int in maxseg socket option. [ 1467.223288][ T9874] Use struct sctp_assoc_value instead [ 1467.248589][ T9872] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.18217'. [ 1467.368523][ T9876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1469.537046][ T9960] netlink: 35284 bytes leftover after parsing attributes in process `syz.1.18242'. [ 1469.661021][ T9963] syzkaller1: entered promiscuous mode [ 1469.666529][ T9963] syzkaller1: entered allmulticast mode [ 1470.236859][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1470.441716][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.476205][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.504639][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1470.540244][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1470.556894][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.577512][ T10] usb 2-1: config 0 descriptor?? [ 1470.801847][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18258'. [ 1470.860694][T10020] netlink: 'syz.5.18258': attribute type 1 has an invalid length. [ 1470.891466][T10020] netlink: 'syz.5.18258': attribute type 2 has an invalid length. [ 1471.042417][ T10] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1471.183519][ T1363] Bluetooth: hci3: command 0x0406 tx timeout [ 1471.238400][T10042] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1471.245962][T10042] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1471.267098][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1471.308517][T19439] usb 2-1: USB disconnect, device number 10 [ 1471.480023][ T10] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1471.495246][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.518013][ T10] usb 6-1: config 0 descriptor?? [ 1471.762522][ T10] kaweth 6-1:0.0: Firmware present in device. [ 1471.957658][ T10] kaweth 6-1:0.0: Statistics collection: 0 [ 1471.963720][ T10] kaweth 6-1:0.0: Multicast filter limit: 0 [ 1471.977127][ T10] kaweth 6-1:0.0: MTU: 0 [ 1471.981425][ T10] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1472.124832][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18269'. [ 1472.238512][T10084] netlink: 'syz.1.18271': attribute type 11 has an invalid length. [ 1472.246703][T10084] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18271'. [ 1472.567024][ T10] kaweth 6-1:0.0: Error setting receive filter [ 1472.584412][ T10] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 1472.632994][ T10] usb 6-1: USB disconnect, device number 19 [ 1473.246332][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18276'. [ 1475.638984][ T1624] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1475.799193][ T1624] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1475.808309][ T1624] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.824147][ T1624] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1475.834100][ T1624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.844312][ T1624] usb 6-1: Product: syz [ 1475.849462][ T1624] usb 6-1: Manufacturer: syz [ 1475.854070][ T1624] usb 6-1: SerialNumber: syz [ 1475.867619][ T1624] usb 6-1: config 0 descriptor?? [ 1475.880621][ T1624] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 1475.889560][ T1624] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 1475.948070][T19439] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1476.092271][ T1624] usb 6-1: USB disconnect, device number 20 [ 1476.117034][T19439] usb 2-1: Using ep0 maxpacket: 16 [ 1476.131564][T19439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.149158][T19439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1476.161785][T19439] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1476.173271][T19439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.182634][T19439] usb 2-1: Product: syz [ 1476.190862][T19439] usb 2-1: Manufacturer: syz [ 1476.195600][T19439] usb 2-1: SerialNumber: syz [ 1476.420709][T19439] usb 2-1: 0:2 : does not exist [ 1476.435198][T19439] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1476.557201][T19439] usb 2-1: USB disconnect, device number 11 [ 1476.616134][T21357] udevd[21357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1477.128442][T10238] sctp: [Deprecated]: syz.5.18294 (pid 10238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1477.128442][T10238] Use struct sctp_sack_info instead [ 1477.454816][T10250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18298'. [ 1479.420771][T10315] ip6tnl2: entered allmulticast mode [ 1479.703331][T10331] C: renamed from team_slave_0 (while UP) [ 1479.757998][T10331] netlink: 164 bytes leftover after parsing attributes in process `syz.2.18321'. [ 1481.366853][T19439] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1481.529472][T19439] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1481.546799][T19439] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1481.566101][T19439] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1481.597413][T19439] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1481.605615][T19439] usb 2-1: Product: syz [ 1481.654158][T19439] usb 2-1: Manufacturer: syz [ 1481.670534][T19439] usb 2-1: SerialNumber: syz [ 1481.696532][T19439] usb 2-1: config 0 descriptor?? [ 1481.752525][T19439] usb 2-1: selecting invalid altsetting 0 [ 1482.018472][ T1624] usb 2-1: USB disconnect, device number 12 [ 1482.068439][T19797] udevd[19797]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.227021][T19439] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1482.421908][T19439] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 1482.430653][T19439] usb 6-1: config 0 has no interface number 0 [ 1482.447391][T19439] usb 6-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 1482.466903][T19439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.488461][T19439] usb 6-1: config 0 descriptor?? [ 1482.516645][T19439] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 1482.545701][T19439] usb 6-1: setting power ON [ 1482.559459][T19439] dvb-usb: bulk message failed: -22 (2/0) [ 1482.816995][T19439] dvb-usb: bulk message failed: -22 (1/0) [ 1482.957707][T10446] syzkaller1: entered promiscuous mode [ 1482.970606][T19439] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1482.983851][T10446] syzkaller1: entered allmulticast mode [ 1482.987818][T19439] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 1482.998181][T19439] dvb_usb_cxusb 6-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 1483.009987][T19439] usb 6-1: USB disconnect, device number 21 [ 1483.382319][T10465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.474180][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.480581][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.741235][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18352'. [ 1485.887111][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1485.963485][ T8874] hid_parser_main: 457 callbacks suppressed [ 1485.963507][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1485.997316][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.026969][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.046998][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.062072][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1486.069394][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.071574][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1486.103915][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.112647][ T10] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1486.129335][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.145969][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1486.156420][ T10] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1486.159370][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.190938][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.216917][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.248059][ T10] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1486.249279][ T8874] hid-generic 0103:0004:0000.006B: unknown main item tag 0x0 [ 1486.278617][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1486.317186][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1486.333541][ T10] usb 6-1: media controller created [ 1486.341204][ T8874] hid-generic 0103:0004:0000.006B: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1486.376961][T19439] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1486.404987][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1486.548654][T10559] fido_id[10559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1486.569091][T19439] usb 2-1: Using ep0 maxpacket: 32 [ 1486.605894][T19439] usb 2-1: config 0 has no interfaces? [ 1486.638962][T19439] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1486.680158][T19439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.717938][T19439] usb 2-1: Product: syz [ 1486.738031][ T10] usb 6-1: USB disconnect, device number 22 [ 1486.766810][T19439] usb 2-1: Manufacturer: syz [ 1486.800040][T19439] usb 2-1: SerialNumber: syz [ 1486.830019][T19439] usb 2-1: config 0 descriptor?? [ 1487.173483][T19439] usb 2-1: USB disconnect, device number 13 [ 1488.922096][T10646] netlink: 176 bytes leftover after parsing attributes in process `syz.5.18375'. [ 1489.529148][T10686] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1489.666985][T19439] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1489.828116][T19439] usb 6-1: Using ep0 maxpacket: 16 [ 1489.834922][T19439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.860221][T19439] usb 6-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 1489.888747][T19439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.928320][T19439] usb 6-1: config 0 descriptor?? [ 1490.212564][T10700] netlink: 340 bytes leftover after parsing attributes in process `syz.6.18389'. [ 1490.361966][T19439] apple 0003:05AC:0250.006C: fixing up Magic Keyboard JIS report descriptor [ 1490.421638][T19439] apple 0003:05AC:0250.006C: hidraw0: USB HID v0.00 Device [HID 05ac:0250] on usb-dummy_hcd.5-1/input0 [ 1490.582713][T19439] usb 6-1: USB disconnect, device number 23 [ 1491.245412][T19439] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1491.464903][T19439] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1491.498924][T19439] usb 2-1: config 0 has no interface number 0 [ 1491.514691][T19439] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1491.539606][T19439] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1491.567320][T19439] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1491.589107][T19439] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1491.621855][T19439] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1491.646914][T19439] usb 2-1: Product: syz [ 1491.661000][T19439] usb 2-1: SerialNumber: syz [ 1491.680463][T19439] usb 2-1: config 0 descriptor?? [ 1491.700386][T19439] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1491.730688][T19439] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input151 [ 1491.983198][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1492.327615][ C0] cm109_urb_ctl_callback: 17 callbacks suppressed [ 1492.327641][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1492.342416][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1492.351181][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1492.358557][T19439] usb 2-1: USB disconnect, device number 14 [ 1492.366924][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1492.373892][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1492.418336][T19439] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1492.717479][T10808] cifs: Unknown parameter 'f,ЫјyЊм' [ 1493.390963][T10846] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1493.475472][T10854] overlay: Unknown parameter '\-' [ 1493.858960][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1494.036917][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1494.054966][ T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.087919][ T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1494.100018][ T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1494.114841][ T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1494.136494][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1494.165265][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.187195][ T10] usb 6-1: Product: syz [ 1494.191692][ T10] usb 6-1: Manufacturer: syz [ 1494.196297][ T10] usb 6-1: SerialNumber: syz [ 1494.226422][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1494.267119][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input152 [ 1494.457464][ T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1494.465753][ T10] (id 0x00) [ 1494.617485][ T10] rc_core: IR keymap rc-imon-pad not found [ 1494.623577][ T10] Registered IR keymap rc-empty [ 1494.634085][ T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1494.646891][ T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1494.690806][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 1494.729551][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input153 [ 1494.774721][ T10] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:24> initialized [ 1494.941388][T10862] imon:vfd_write: invalid payload size [ 1494.972409][ T8872] usb 6-1: USB disconnect, device number 24 [ 1497.149445][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1497.357070][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1497.375466][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1497.415179][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.467129][ T10] usb 2-1: config 0 descriptor?? [ 1497.510508][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1498.491460][ T10] gspca_sunplus: reg_w_riv err -71 [ 1498.508575][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1498.545802][ T10] usb 2-1: USB disconnect, device number 15 [ 1498.842991][T11025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1499.418570][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 1499.418589][ T29] audit: type=1326 audit(1771934949.000:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.6.18460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02c239c629 code=0x7fc00000 [ 1499.835666][T11061] pim6reg: entered allmulticast mode [ 1499.846391][T11061] pim6reg: left allmulticast mode [ 1500.025148][ T29] audit: type=1326 audit(1771934949.600:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.6.18460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02c233da19 code=0x7fc00000 [ 1500.047812][ T1624] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1500.230575][ T1624] usb 6-1: Using ep0 maxpacket: 32 [ 1500.240910][ T1624] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1500.260191][ T1624] usb 6-1: config 0 has no interface number 0 [ 1500.269972][ T1624] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1500.279297][ T1624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.288966][ T1624] usb 6-1: Product: syz [ 1500.293278][ T1624] usb 6-1: Manufacturer: syz [ 1500.299527][ T1624] usb 6-1: SerialNumber: syz [ 1500.310550][ T1624] usb 6-1: config 0 descriptor?? [ 1501.017855][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1501.187441][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1501.197908][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.211883][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.222170][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1501.232290][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.248734][ T10] usb 2-1: config 0 descriptor?? [ 1501.364794][ T1624] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1501.392178][ T1624] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1501.404478][ T1624] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1501.419129][ T1624] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1501.434136][ T1624] usb 6-1: USB disconnect, device number 25 [ 1501.606131][T11115] ip6gre2: entered promiscuous mode [ 1501.611870][T11115] ip6gre2: entered allmulticast mode [ 1501.686054][ T10] playstation 0003:054C:05C4.006D: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 1501.823808][T11123] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџfd' [ 1501.870324][ T10] playstation 0003:054C:05C4.006D: Invalid byte count transferred, expected 16 got 0 [ 1501.881075][ T10] playstation 0003:054C:05C4.006D: Failed to retrieve DualShock4 pairing info: -22 [ 1501.891985][ T10] playstation 0003:054C:05C4.006D: Failed to get MAC address from DualShock4 [ 1501.903339][ T10] playstation 0003:054C:05C4.006D: Failed to create dualshock4. [ 1501.931034][ T10] playstation 0003:054C:05C4.006D: probe with driver playstation failed with error -22 [ 1502.085151][ T10] usb 2-1: USB disconnect, device number 16 [ 1502.383052][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18486'. [ 1502.409235][T11154] syzkaller1: entered promiscuous mode [ 1502.414835][T11154] syzkaller1: entered allmulticast mode [ 1502.466998][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1502.572139][T11160] netlink: 'syz.2.18490': attribute type 4 has an invalid length. [ 1502.627319][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1502.637884][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.662157][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.707090][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1502.726435][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.738167][ T10] usb 6-1: config 0 descriptor?? [ 1503.043232][T11162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18489'. [ 1503.180465][ T10] savu 0003:1E7D:2D5A.006E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1503.459890][ T10] usb 6-1: USB disconnect, device number 26 [ 1504.911573][T11261] netlink: 'syz.6.18505': attribute type 1 has an invalid length. [ 1507.830298][T11353] bridge2: entered promiscuous mode [ 1507.856146][T11353] bridge2: entered allmulticast mode [ 1507.900084][T11353] team0: Port device bridge2 added [ 1507.906244][T11359] bridge0: port 3(team0) entered blocking state [ 1508.012093][T11359] bridge0: port 3(team0) entered disabled state [ 1508.027265][T11359] team0: entered allmulticast mode [ 1508.125955][T11359] team_slave_0: entered allmulticast mode [ 1508.131975][T11359] team_slave_1: entered allmulticast mode [ 1508.143551][T11359] team0: left allmulticast mode [ 1508.157150][T11359] team_slave_0: left allmulticast mode [ 1508.192753][T11359] team_slave_1: left allmulticast mode [ 1508.682885][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18536'. [ 1508.855090][T11394] netlink: 'syz.6.18537': attribute type 29 has an invalid length. [ 1508.904473][T11394] netlink: 'syz.6.18537': attribute type 29 has an invalid length. [ 1508.937977][T11394] netlink: 'syz.6.18537': attribute type 32 has an invalid length. [ 1508.988233][T11394] netlink: 500 bytes leftover after parsing attributes in process `syz.6.18537'. [ 1509.177419][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1509.356878][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1509.377029][ T10] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1509.394289][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1509.415647][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1509.465569][ T10] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1509.482024][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1509.538757][ T10] usb 6-1: config 0 has no interface number 0 [ 1509.631048][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1509.666387][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1509.703055][ T10] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1509.731599][ T10] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1509.775275][ T10] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1509.800730][ T10] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1509.814983][ T10] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1509.828371][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.837118][ T8874] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1509.839510][ T10] usb 6-1: Product: syz [ 1509.868851][ T10] usb 6-1: Manufacturer: syz [ 1509.880016][ T10] usb 6-1: SerialNumber: syz [ 1509.905539][ T10] usb 6-1: config 0 descriptor?? [ 1509.940286][ T10] usb 6-1: selecting invalid altsetting 2 [ 1510.020302][ T8874] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1510.047887][ T8874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1510.080415][ T8874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1510.121849][ T8874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1510.165911][ T8874] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1510.194966][ T8874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.226485][ T8874] usb 2-1: config 0 descriptor?? [ 1510.230057][T11446] syzkaller1: entered promiscuous mode [ 1510.244801][T11446] syzkaller1: entered allmulticast mode [ 1510.244973][T11417] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1510.729851][ T8874] hid_parser_main: 1258 callbacks suppressed [ 1510.729876][ T8874] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1510.780845][ T8874] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1510.807290][ T8874] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1510.835311][ T8874] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1510.854879][ T8874] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1510.883419][ T8874] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1510.907036][ T8874] plantronics 0003:047F:FFFF.006F: unknown main item tag 0x0 [ 1510.972230][ T8874] plantronics 0003:047F:FFFF.006F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1511.028841][ T8872] usb 6-1: USB disconnect, device number 27 [ 1511.042599][ T8874] usb 2-1: USB disconnect, device number 17 [ 1511.211141][T11509] fido_id[11509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1511.481149][T11523] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18558'. [ 1511.496577][T11523] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18558'. [ 1512.347423][T11544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18567'. [ 1515.372755][T11636] input: syz0 as /devices/virtual/input/input154 [ 1516.304752][T11656] vivid-001: disconnect [ 1516.339310][T11654] vivid-001: reconnect [ 1517.498105][T18248] Bluetooth: hci0: command 0x0406 tx timeout [ 1517.499733][ T8874] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1517.557035][ T8874] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1518.469848][T11701] vivid-000: ================= START STATUS ================= [ 1518.537978][T11701] vivid-000: Radio HW Seek Mode: Bounded [ 1518.576677][T11701] vivid-000: Radio Programmable HW Seek: false [ 1518.632350][T11701] vivid-000: RDS Rx I/O Mode: Block I/O [ 1518.747428][T11701] vivid-000: Generate RBDS Instead of RDS: false [ 1518.753951][T11701] vivid-000: RDS Reception: true [ 1518.763223][T11701] vivid-000: RDS Program Type: 0 inactive [ 1518.790866][T11701] vivid-000: RDS PS Name: inactive [ 1518.816950][T11701] vivid-000: RDS Radio Text: inactive [ 1518.842280][T11701] vivid-000: RDS Traffic Announcement: false inactive [ 1518.867698][T11701] vivid-000: RDS Traffic Program: false inactive [ 1518.874085][T11701] vivid-000: RDS Music: false inactive [ 1518.906586][T11701] vivid-000: ================== END STATUS ================== [ 1519.145707][T11712] loop4: detected capacity change from 0 to 7 [ 1519.171974][T11712] Dev loop4: unable to read RDB block 7 [ 1519.192134][T11712] loop4: AHDI p1 p2 p3 [ 1519.205219][T11712] loop4: partition table partially beyond EOD, truncated [ 1519.237586][T11712] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1519.265807][T11712] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1519.656962][ T8874] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1519.662303][T18248] Bluetooth: hci2: command 0x0406 tx timeout [ 1519.676943][ T8874] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1520.348352][T11748] loop4: detected capacity change from 0 to 7 [ 1520.388274][T11748] Dev loop4: unable to read RDB block 7 [ 1520.393885][T11748] loop4: unable to read partition table [ 1520.441379][T11748] loop4: partition table beyond EOD, truncated [ 1520.467526][T11748] loop_reread_partitions: partition scan of loop4 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 1520.725093][T11756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1521.738957][T18248] Bluetooth: hci1: command 0x0406 tx timeout [ 1521.739454][ T8874] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1521.793065][ T8874] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1522.208090][T11827] syzkaller1: entered promiscuous mode [ 1522.228601][T11827] syzkaller1: entered allmulticast mode [ 1522.588050][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18635'. [ 1522.841280][T11862] pim6reg1: entered promiscuous mode [ 1522.858416][T11862] pim6reg1: entered allmulticast mode [ 1523.896916][T18248] Bluetooth: hci5: command 0x0406 tx timeout [ 1523.897364][ T8874] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1523.926887][ T8874] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1524.586696][T11951] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 1525.488119][T11990] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.18666'. [ 1525.528060][ T1624] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1525.701121][ T1624] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1525.712487][ T1624] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1525.749032][ T1624] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1525.783876][ T1624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.803519][T12002] netlink: 'syz.6.18671': attribute type 1 has an invalid length. [ 1525.827098][T12002] netlink: 68 bytes leftover after parsing attributes in process `syz.6.18671'. [ 1526.046034][ T1624] usb 6-1: usb_control_msg returned -32 [ 1526.052891][ T1624] usbtmc 6-1:16.0: can't read capabilities [ 1526.066790][ T8874] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1526.068483][T18248] Bluetooth: hci3: command 0x0406 tx timeout [ 1526.072880][ T8874] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1526.106925][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1526.267756][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1526.286193][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.304440][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.326108][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1526.358388][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1526.374340][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.397960][ T10] usb 2-1: config 0 descriptor?? [ 1526.507180][T31736] psmouse serio6: Failed to reset mouse on : -5 [ 1526.849895][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.864205][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.875713][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.884531][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.892490][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.901355][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.909841][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.919490][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.927903][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.935569][ T10] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 1526.984461][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0070/input/input156 [ 1527.026382][ T10] microsoft 0003:045E:07DA.0070: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1527.072653][ T10] usb 2-1: USB disconnect, device number 18 [ 1527.185801][T12057] fido_id[12057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1528.296286][ T10] usb 6-1: USB disconnect, device number 28 [ 1528.740699][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1528.908906][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1528.923541][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1528.943845][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1528.965869][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1528.992521][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1529.025854][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1529.061287][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1529.095305][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.364334][ T10] usb 6-1: usb_control_msg returned -32 [ 1529.375808][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1530.279986][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18694'. [ 1530.305495][T12143] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18694'. [ 1530.317017][T31736] misc userio: Buffer overflowed, userio client isn't keeping up [ 1530.492330][T12142] bridge0: left promiscuous mode [ 1530.503097][T12142] bridge0: left allmulticast mode [ 1530.869940][T12142] vlan0: left allmulticast mode [ 1530.880586][T12142] veth0_vlan: left allmulticast mode [ 1531.099415][T12142] ip6erspan0: left promiscuous mode [ 1531.129813][T12142] geneve2: left promiscuous mode [ 1531.145450][T12142] geneve2: left allmulticast mode [ 1531.189081][T12142] ip6tnl2: left allmulticast mode [ 1531.200237][T18280] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.223117][T18280] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1531.258040][T18280] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.294729][T18280] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1531.333228][T18280] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.362539][T18280] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1531.372086][T31736] input: PS/2 Generic Mouse as /devices/serio6/input/input155 [ 1531.389926][T18280] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.417755][T18280] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1531.647319][T31736] psmouse serio6: Failed to enable mouse on [ 1532.785980][T12187] input: syz0 as /devices/virtual/input/input157 [ 1535.191563][T12140] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 1535.257270][T31736] usb 6-1: USB disconnect, device number 29 [ 1538.239084][T12376] kvm: Disabled LAPIC found during irq injection [ 1539.392644][T12426] input: syz0 as /devices/virtual/input/input158 [ 1541.472715][T12526] ip6gre2: entered allmulticast mode [ 1541.927072][ T1624] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1542.107963][ T1624] usb 6-1: Using ep0 maxpacket: 16 [ 1542.117364][ T1624] usb 6-1: config 0 has no interfaces? [ 1542.128653][ T1624] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1542.150198][ T1624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.172845][ T1624] usb 6-1: Product: syz [ 1542.186885][ T1624] usb 6-1: Manufacturer: syz [ 1542.200467][ T1624] usb 6-1: SerialNumber: syz [ 1542.227642][ T1624] usb 6-1: config 0 descriptor?? [ 1542.625630][T12533] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18787'. [ 1542.670693][ T1624] usb 6-1: USB disconnect, device number 30 [ 1543.396042][T12611] [ 1543.398406][T12611] ===================================================== [ 1543.405338][T12611] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1543.412808][T12611] syzkaller #0 Tainted: G L [ 1543.418783][T12611] ----------------------------------------------------- [ 1543.425712][T12611] syz.5.18799/12611 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1543.433522][T12611] ffff8880768d0de0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1543.442248][T12611] [ 1543.442248][T12611] and this task is already holding: [ 1543.449619][T12611] ffff88802918b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1543.459415][T12611] which would create a new lock dependency: [ 1543.465307][T12611] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1543.473424][T12611] [ 1543.473424][T12611] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1543.482873][T12611] (&dev->event_lock#2){..-.}-{3:3} [ 1543.482916][T12611] [ 1543.482916][T12611] ... which became SOFTIRQ-irq-safe at: [ 1543.495895][T12611] lock_acquire+0xf0/0x2e0 [ 1543.500416][T12611] _raw_spin_lock_irqsave+0x40/0x60 [ 1543.505706][T12611] input_inject_event+0xa5/0x340 [ 1543.510727][T12611] led_trigger_event+0x138/0x210 [ 1543.515744][T12611] kbd_bh+0x1f3/0x300 [ 1543.519797][T12611] tasklet_action_common+0x2da/0x4b0 [ 1543.525161][T12611] handle_softirqs+0x22a/0x870 [ 1543.530009][T12611] __irq_exit_rcu+0x5f/0x150 [ 1543.534687][T12611] irq_exit_rcu+0x9/0x30 [ 1543.539022][T12611] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1543.544747][T12611] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1543.550811][T12611] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1543.556525][T12611] evdev_write+0x325/0x4c0 [ 1543.561016][T12611] vfs_write+0x29a/0xb90 [ 1543.565331][T12611] ksys_write+0x150/0x270 [ 1543.569731][T12611] do_syscall_64+0x14d/0xf80 [ 1543.574402][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.580368][T12611] [ 1543.580368][T12611] to a SOFTIRQ-irq-unsafe lock: [ 1543.587367][T12611] (tasklist_lock){.+.+}-{3:3} [ 1543.587392][T12611] [ 1543.587392][T12611] ... which became SOFTIRQ-irq-unsafe at: [ 1543.599988][T12611] ... [ 1543.599996][T12611] lock_acquire+0xf0/0x2e0 [ 1543.607058][T12611] _raw_read_lock+0x36/0x50 [ 1543.611642][T12611] __do_wait+0xde/0x740 [ 1543.615869][T12611] do_wait+0x1e7/0x540 [ 1543.620009][T12611] kernel_wait+0xd6/0x1c0 [ 1543.624410][T12611] call_usermodehelper_exec_work+0xbe/0x230 [ 1543.630381][T12611] process_scheduled_works+0xb02/0x1830 [ 1543.636003][T12611] worker_thread+0xa50/0xfc0 [ 1543.640670][T12611] kthread+0x388/0x470 [ 1543.644815][T12611] ret_from_fork+0x51e/0xb90 [ 1543.649481][T12611] ret_from_fork_asm+0x1a/0x30 [ 1543.654321][T12611] [ 1543.654321][T12611] other info that might help us debug this: [ 1543.654321][T12611] [ 1543.664532][T12611] Chain exists of: [ 1543.664532][T12611] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1543.664532][T12611] [ 1543.678090][T12611] Possible interrupt unsafe locking scenario: [ 1543.678090][T12611] [ 1543.686391][T12611] CPU0 CPU1 [ 1543.691739][T12611] ---- ---- [ 1543.697085][T12611] lock(tasklist_lock); [ 1543.701321][T12611] local_irq_disable(); [ 1543.708057][T12611] lock(&dev->event_lock#2); [ 1543.715248][T12611] lock(&client->buffer_lock); [ 1543.722609][T12611] [ 1543.726045][T12611] lock(&dev->event_lock#2); [ 1543.730888][T12611] [ 1543.730888][T12611] *** DEADLOCK *** [ 1543.730888][T12611] [ 1543.739015][T12611] 7 locks held by syz.5.18799/12611: [ 1543.744281][T12611] #0: ffff88802bad3118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1543.753417][T12611] #1: ffff88801d322230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1543.763513][T12611] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1543.773166][T12611] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1543.782725][T12611] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1543.791854][T12611] #5: ffff88802918b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1543.802022][T12611] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1543.811060][T12611] [ 1543.811060][T12611] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1543.821447][T12611] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1543.827094][T12611] IN-SOFTIRQ-W at: [ 1543.831150][T12611] lock_acquire+0xf0/0x2e0 [ 1543.837381][T12611] _raw_spin_lock_irqsave+0x40/0x60 [ 1543.844397][T12611] input_inject_event+0xa5/0x340 [ 1543.851167][T12611] led_trigger_event+0x138/0x210 [ 1543.857921][T12611] kbd_bh+0x1f3/0x300 [ 1543.863718][T12611] tasklet_action_common+0x2da/0x4b0 [ 1543.870817][T12611] handle_softirqs+0x22a/0x870 [ 1543.877393][T12611] __irq_exit_rcu+0x5f/0x150 [ 1543.883797][T12611] irq_exit_rcu+0x9/0x30 [ 1543.889850][T12611] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1543.897307][T12611] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1543.905117][T12611] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1543.912577][T12611] evdev_write+0x325/0x4c0 [ 1543.918810][T12611] vfs_write+0x29a/0xb90 [ 1543.924869][T12611] ksys_write+0x150/0x270 [ 1543.931009][T12611] do_syscall_64+0x14d/0xf80 [ 1543.937418][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.945401][T12611] INITIAL USE at: [ 1543.949385][T12611] lock_acquire+0xf0/0x2e0 [ 1543.955550][T12611] _raw_spin_lock_irqsave+0x40/0x60 [ 1543.962754][T12611] input_inject_event+0xa5/0x340 [ 1543.969437][T12611] kbd_led_trigger_activate+0xbc/0x100 [ 1543.976627][T12611] led_trigger_set+0x535/0x960 [ 1543.983126][T12611] led_trigger_set_default+0x260/0x2a0 [ 1543.990320][T12611] led_classdev_register_ext+0x787/0x9c0 [ 1543.997766][T12611] input_leds_connect+0x517/0x790 [ 1544.004514][T12611] input_register_device+0xd00/0x1160 [ 1544.011611][T12611] atkbd_connect+0x731/0xa50 [ 1544.017934][T12611] serio_driver_probe+0x82/0xd0 [ 1544.024508][T12611] really_probe+0x267/0xaf0 [ 1544.030733][T12611] __driver_probe_device+0x18c/0x320 [ 1544.037738][T12611] driver_probe_device+0x4f/0x240 [ 1544.044486][T12611] __driver_attach+0x3e7/0x710 [ 1544.050973][T12611] bus_for_each_dev+0x23b/0x2c0 [ 1544.057552][T12611] serio_handle_event+0x20a/0xdd0 [ 1544.064304][T12611] process_scheduled_works+0xb02/0x1830 [ 1544.071576][T12611] worker_thread+0xa50/0xfc0 [ 1544.077893][T12611] kthread+0x388/0x470 [ 1544.083684][T12611] ret_from_fork+0x51e/0xb90 [ 1544.090013][T12611] ret_from_fork_asm+0x1a/0x30 [ 1544.096525][T12611] } [ 1544.099097][T12611] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1544.108238][T12611] -> (&client->buffer_lock){....}-{3:3} { [ 1544.113970][T12611] INITIAL USE at: [ 1544.117942][T12611] lock_acquire+0xf0/0x2e0 [ 1544.123917][T12611] _raw_spin_lock+0x2e/0x40 [ 1544.129975][T12611] evdev_handle_get_val+0x70/0x9f0 [ 1544.136640][T12611] evdev_ioctl_handler+0x127b/0x1fe0 [ 1544.143483][T12611] __se_sys_ioctl+0xfc/0x170 [ 1544.149627][T12611] do_syscall_64+0x14d/0xf80 [ 1544.155778][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.163226][T12611] } [ 1544.165707][T12611] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1544.173846][T12611] ... acquired at: [ 1544.177630][T12611] _raw_spin_lock+0x2e/0x40 [ 1544.182336][T12611] evdev_handle_get_val+0x70/0x9f0 [ 1544.187609][T12611] evdev_ioctl_handler+0x127b/0x1fe0 [ 1544.193055][T12611] __se_sys_ioctl+0xfc/0x170 [ 1544.197803][T12611] do_syscall_64+0x14d/0xf80 [ 1544.202560][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.208616][T12611] [ 1544.210929][T12611] [ 1544.210929][T12611] the dependencies between the lock to be acquired [ 1544.210937][T12611] and SOFTIRQ-irq-unsafe lock: [ 1544.224437][T12611] -> (tasklist_lock){.+.+}-{3:3} { [ 1544.229733][T12611] HARDIRQ-ON-R at: [ 1544.233879][T12611] lock_acquire+0xf0/0x2e0 [ 1544.240320][T12611] _raw_read_lock+0x36/0x50 [ 1544.246816][T12611] __do_wait+0xde/0x740 [ 1544.252954][T12611] do_wait+0x1e7/0x540 [ 1544.259004][T12611] kernel_wait+0xd6/0x1c0 [ 1544.265318][T12611] call_usermodehelper_exec_work+0xbe/0x230 [ 1544.273196][T12611] process_scheduled_works+0xb02/0x1830 [ 1544.280744][T12611] worker_thread+0xa50/0xfc0 [ 1544.287338][T12611] kthread+0x388/0x470 [ 1544.293405][T12611] ret_from_fork+0x51e/0xb90 [ 1544.299987][T12611] ret_from_fork_asm+0x1a/0x30 [ 1544.306748][T12611] SOFTIRQ-ON-R at: [ 1544.310894][T12611] lock_acquire+0xf0/0x2e0 [ 1544.317322][T12611] _raw_read_lock+0x36/0x50 [ 1544.323812][T12611] __do_wait+0xde/0x740 [ 1544.329948][T12611] do_wait+0x1e7/0x540 [ 1544.335998][T12611] kernel_wait+0xd6/0x1c0 [ 1544.342308][T12611] call_usermodehelper_exec_work+0xbe/0x230 [ 1544.350201][T12611] process_scheduled_works+0xb02/0x1830 [ 1544.357749][T12611] worker_thread+0xa50/0xfc0 [ 1544.364332][T12611] kthread+0x388/0x470 [ 1544.370386][T12611] ret_from_fork+0x51e/0xb90 [ 1544.376971][T12611] ret_from_fork_asm+0x1a/0x30 [ 1544.383733][T12611] INITIAL USE at: [ 1544.387788][T12611] lock_acquire+0xf0/0x2e0 [ 1544.394104][T12611] _raw_write_lock_irq+0x3d/0x50 [ 1544.400947][T12611] copy_process+0x247a/0x3cf0 [ 1544.407531][T12611] kernel_clone+0x248/0x8e0 [ 1544.413956][T12611] user_mode_thread+0x110/0x180 [ 1544.420715][T12611] rest_init+0x23/0x300 [ 1544.426782][T12611] start_kernel+0x385/0x3d0 [ 1544.433196][T12611] x86_64_start_reservations+0x24/0x30 [ 1544.440555][T12611] x86_64_start_kernel+0x143/0x1c0 [ 1544.447562][T12611] common_startup_64+0x13e/0x147 [ 1544.454395][T12611] INITIAL READ USE at: [ 1544.458882][T12611] lock_acquire+0xf0/0x2e0 [ 1544.465631][T12611] _raw_read_lock+0x36/0x50 [ 1544.472472][T12611] __do_wait+0xde/0x740 [ 1544.478961][T12611] do_wait+0x1e7/0x540 [ 1544.485360][T12611] kernel_wait+0xd6/0x1c0 [ 1544.492058][T12611] call_usermodehelper_exec_work+0xbe/0x230 [ 1544.500285][T12611] process_scheduled_works+0xb02/0x1830 [ 1544.508166][T12611] worker_thread+0xa50/0xfc0 [ 1544.515089][T12611] kthread+0x388/0x470 [ 1544.521487][T12611] ret_from_fork+0x51e/0xb90 [ 1544.528414][T12611] ret_from_fork_asm+0x1a/0x30 [ 1544.535514][T12611] } [ 1544.538170][T12611] ... key at: [] tasklist_lock+0x18/0x40 [ 1544.546132][T12611] ... acquired at: [ 1544.550091][T12611] _raw_read_lock+0x36/0x50 [ 1544.554757][T12611] send_sigio+0x101/0x370 [ 1544.559255][T12611] kill_fasync+0x24d/0x4d0 [ 1544.563830][T12611] sock_wake_async+0x137/0x160 [ 1544.568751][T12611] sock_def_readable+0x3c1/0x580 [ 1544.573848][T12611] unix_stream_sendmsg+0x8a3/0xe80 [ 1544.579117][T12611] ____sys_sendmsg+0xa68/0xad0 [ 1544.584053][T12611] ___sys_sendmsg+0x2a5/0x360 [ 1544.588895][T12611] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1544.594004][T12611] do_syscall_64+0x14d/0xf80 [ 1544.598759][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.604811][T12611] [ 1544.607119][T12611] -> (&f_owner->lock){....}-{3:3} { [ 1544.612414][T12611] INITIAL USE at: [ 1544.616387][T12611] lock_acquire+0xf0/0x2e0 [ 1544.622553][T12611] _raw_write_lock_irq+0x3d/0x50 [ 1544.629218][T12611] __f_setown+0x67/0x370 [ 1544.635180][T12611] tun_chr_fasync+0x127/0x1a0 [ 1544.641583][T12611] do_fcntl+0x1201/0x1a20 [ 1544.647633][T12611] __se_sys_fcntl+0xc8/0x150 [ 1544.653963][T12611] do_syscall_64+0x14d/0xf80 [ 1544.660283][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.667897][T12611] INITIAL READ USE at: [ 1544.672296][T12611] lock_acquire+0xf0/0x2e0 [ 1544.678868][T12611] _raw_read_lock_irq+0x45/0x60 [ 1544.685882][T12611] f_getown+0x54/0x2a0 [ 1544.692105][T12611] sock_ioctl+0x586/0x7f0 [ 1544.698591][T12611] __se_sys_ioctl+0xfc/0x170 [ 1544.705336][T12611] do_syscall_64+0x14d/0xf80 [ 1544.712087][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.720136][T12611] } [ 1544.722711][T12611] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1544.731633][T12611] ... acquired at: [ 1544.735509][T12611] _raw_read_lock_irqsave+0x48/0x60 [ 1544.740873][T12611] send_sigio+0x38/0x370 [ 1544.745273][T12611] kill_fasync+0x24d/0x4d0 [ 1544.749845][T12611] sock_wake_async+0x137/0x160 [ 1544.754769][T12611] sock_def_readable+0x3c1/0x580 [ 1544.759866][T12611] unix_stream_sendmsg+0x8a3/0xe80 [ 1544.765136][T12611] ____sys_sendmsg+0xa68/0xad0 [ 1544.770064][T12611] ___sys_sendmsg+0x2a5/0x360 [ 1544.774906][T12611] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1544.780008][T12611] do_syscall_64+0x14d/0xf80 [ 1544.784764][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.790812][T12611] [ 1544.793118][T12611] -> (&new->fa_lock){....}-{3:3} { [ 1544.798233][T12611] INITIAL USE at: [ 1544.802109][T12611] lock_acquire+0xf0/0x2e0 [ 1544.808076][T12611] _raw_write_lock_irq+0x3d/0x50 [ 1544.814565][T12611] fasync_remove_entry+0xf1/0x1c0 [ 1544.821138][T12611] tun_chr_fasync+0x87/0x1a0 [ 1544.827280][T12611] __fput+0x8a5/0xa70 [ 1544.832815][T12611] task_work_run+0x1d9/0x270 [ 1544.838954][T12611] exit_to_user_mode_loop+0xed/0x480 [ 1544.845787][T12611] do_syscall_64+0x32d/0xf80 [ 1544.851933][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.859374][T12611] INITIAL READ USE at: [ 1544.863688][T12611] lock_acquire+0xf0/0x2e0 [ 1544.870090][T12611] _raw_read_lock_irqsave+0x48/0x60 [ 1544.877277][T12611] kill_fasync+0x199/0x4d0 [ 1544.883678][T12611] pipe_release+0x19c/0x330 [ 1544.890165][T12611] __fput+0x44f/0xa70 [ 1544.896134][T12611] task_work_run+0x1d9/0x270 [ 1544.902707][T12611] exit_to_user_mode_loop+0xed/0x480 [ 1544.909978][T12611] do_syscall_64+0x32d/0xf80 [ 1544.916646][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.924537][T12611] } [ 1544.927033][T12611] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1544.935707][T12611] ... acquired at: [ 1544.939507][T12611] _raw_read_lock_irqsave+0x48/0x60 [ 1544.944886][T12611] kill_fasync+0x199/0x4d0 [ 1544.949468][T12611] evdev_pass_values+0x627/0xbd0 [ 1544.954571][T12611] evdev_events+0x1e6/0x340 [ 1544.959237][T12611] input_pass_values+0x288/0x890 [ 1544.964334][T12611] input_event_dispose+0x330/0x6b0 [ 1544.969610][T12611] input_inject_event+0x1dd/0x340 [ 1544.974802][T12611] evdev_write+0x325/0x4c0 [ 1544.979398][T12611] vfs_write+0x29a/0xb90 [ 1544.983797][T12611] ksys_write+0x150/0x270 [ 1544.988302][T12611] do_syscall_64+0x14d/0xf80 [ 1544.993056][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.999105][T12611] [ 1545.001411][T12611] [ 1545.001411][T12611] stack backtrace: [ 1545.007288][T12611] CPU: 0 UID: 0 PID: 12611 Comm: syz.5.18799 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.007312][T12611] Tainted: [L]=SOFTLOCKUP [ 1545.007318][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1545.007329][T12611] Call Trace: [ 1545.007338][T12611] [ 1545.007347][T12611] dump_stack_lvl+0xe8/0x150 [ 1545.007370][T12611] __lock_acquire+0x2a94/0x2cf0 [ 1545.007397][T12611] lock_acquire+0xf0/0x2e0 [ 1545.007415][T12611] ? kill_fasync+0x199/0x4d0 [ 1545.007433][T12611] _raw_read_lock_irqsave+0x48/0x60 [ 1545.007454][T12611] ? kill_fasync+0x199/0x4d0 [ 1545.007469][T12611] kill_fasync+0x199/0x4d0 [ 1545.007484][T12611] ? kill_fasync+0x53/0x4d0 [ 1545.007498][T12611] evdev_pass_values+0x627/0xbd0 [ 1545.007519][T12611] ? evdev_pass_values+0x5d1/0xbd0 [ 1545.007539][T12611] evdev_events+0x1e6/0x340 [ 1545.007555][T12611] ? evdev_events+0x79/0x340 [ 1545.007577][T12611] ? input_pass_values+0x8d/0x890 [ 1545.007593][T12611] input_pass_values+0x288/0x890 [ 1545.007613][T12611] ? input_handle_event+0x70c/0xf30 [ 1545.007636][T12611] input_event_dispose+0x330/0x6b0 [ 1545.007659][T12611] input_inject_event+0x1dd/0x340 [ 1545.007682][T12611] ? input_inject_event+0xb6/0x340 [ 1545.007704][T12611] evdev_write+0x325/0x4c0 [ 1545.007724][T12611] ? __pfx_evdev_write+0x10/0x10 [ 1545.007742][T12611] ? bpf_lsm_file_permission+0x9/0x20 [ 1545.007760][T12611] ? security_file_permission+0x75/0x260 [ 1545.007784][T12611] ? rw_verify_area+0x255/0x4d0 [ 1545.007798][T12611] ? __pfx_evdev_write+0x10/0x10 [ 1545.007817][T12611] vfs_write+0x29a/0xb90 [ 1545.007833][T12611] ? __pfx_vfs_write+0x10/0x10 [ 1545.007848][T12611] ? __fget_files+0x2a/0x420 [ 1545.007870][T12611] ? __fget_files+0x2a/0x420 [ 1545.007889][T12611] ? __fget_files+0x3a0/0x420 [ 1545.007908][T12611] ? __fget_files+0x2a/0x420 [ 1545.007931][T12611] ksys_write+0x150/0x270 [ 1545.007946][T12611] ? __pfx_ksys_write+0x10/0x10 [ 1545.007964][T12611] do_syscall_64+0x14d/0xf80 [ 1545.007985][T12611] ? trace_irq_disable+0x3b/0x150 [ 1545.008006][T12611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.008022][T12611] ? clear_bhb_loop+0x40/0x90 [ 1545.008038][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.008054][T12611] RIP: 0033:0x7fd5fb99c629 [ 1545.008070][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.008085][T12611] RSP: 002b:00007fd5fc89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1545.008103][T12611] RAX: ffffffffffffffda RBX: 00007fd5fbc15fa0 RCX: 00007fd5fb99c629 [ 1545.008115][T12611] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 1545.008125][T12611] RBP: 00007fd5fba32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1545.008135][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1545.008145][T12611] R13: 00007fd5fbc16038 R14: 00007fd5fbc15fa0 R15: 00007fd5fbd3fa48 [ 1545.008162][T12611] [ 1545.899524][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.905864][ T1301] ieee802154 phy1 wpan1: encryption failed: -22