last executing test programs: 4m9.99657851s ago: executing program 3 (id=901): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 4m9.973467811s ago: executing program 3 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x86dd, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 4m9.378892159s ago: executing program 3 (id=909): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) 4m8.928806015s ago: executing program 3 (id=910): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) 4m8.916062291s ago: executing program 3 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x0) 4m7.753088583s ago: executing program 3 (id=921): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) 4m7.482164165s ago: executing program 32 (id=921): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) 3m21.213492027s ago: executing program 1 (id=1256): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00005d6000/0x4000)=nil, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() 3m20.698045276s ago: executing program 1 (id=1260): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 3m20.377917567s ago: executing program 1 (id=1264): syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xc, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x4, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x51, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x1, 0x49}, {0xb8, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x7f, '\x00', 0x4}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x3, 0x4, '\x00', 0xd}, {0x5, 0x1}, {0xfd, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xc, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}}) 3m19.69341626s ago: executing program 1 (id=1267): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) 3m19.513716389s ago: executing program 1 (id=1269): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x63ca922e063dc362, 0xffffffff, 0x0}) read$FUSE(r1, 0x0, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 3m18.417922717s ago: executing program 1 (id=1287): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 3m18.124058503s ago: executing program 33 (id=1287): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 32.941502147s ago: executing program 0 (id=2620): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0x10, 0x3, "03908e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.831538037s ago: executing program 0 (id=2653): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x300}) 28.878173624s ago: executing program 0 (id=2658): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 28.834898987s ago: executing program 0 (id=2659): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) syz_clone(0x82800000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 28.750355541s ago: executing program 0 (id=2660): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fc, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, 0x1c) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) 27.814383031s ago: executing program 0 (id=2669): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 27.507201386s ago: executing program 34 (id=2669): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 2.509887647s ago: executing program 5 (id=2791): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x401) read(r1, &(0x7f0000000080)=""/41, 0x29) 2.426893396s ago: executing program 4 (id=2792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x400, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_WIPHY_FREQ={0x5a, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x37}]}, 0x24}}, 0x20000010) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 2.235469673s ago: executing program 4 (id=2793): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000300)=0x8000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2.101879745s ago: executing program 4 (id=2795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 2.035475577s ago: executing program 6 (id=2796): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r2, 0x400, 0x0) 1.942725713s ago: executing program 4 (id=2798): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) 1.855066015s ago: executing program 6 (id=2799): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x1) 1.701444552s ago: executing program 6 (id=2800): setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x1002, 0x11, 0x8}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="5ec78db4854534bdf7a2172f3f1f30da", 0x10) 1.575577371s ago: executing program 2 (id=2803): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) 1.499529293s ago: executing program 6 (id=2804): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 1.47663491s ago: executing program 5 (id=2805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffa}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 1.265990954s ago: executing program 5 (id=2806): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 1.264049015s ago: executing program 2 (id=2814): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f1401002cbd7000fadbdf250c0045"], 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0xe) 981.777763ms ago: executing program 5 (id=2807): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 964.833935ms ago: executing program 2 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd27, 0x0, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x5fb8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}}, 0x44095) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 963.950443ms ago: executing program 4 (id=2816): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, 0x0}, 0x68) 793.565174ms ago: executing program 5 (id=2809): socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 648.204456ms ago: executing program 4 (id=2810): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1014408, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 645.889159ms ago: executing program 2 (id=2820): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x110, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe0, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xae, 0x6, 0x1, 0x0, "4d11713832439fb8cc4853bf5a0b8b0356ce189148d9b64d2b1b19c404f4e7b5b7eabd103368a75a5f8599f48abe4680fea8f2b6ca2432ece0d3fd377523350f830043c5bb1daca7063d259fdb5a562d43b06ffd6a194851ecfc28fd2775f3b6ff2c51b739fba2152672dda6c492861dbc7443626b9691ca336df6cb7685651908c0f23052f72145089f5a5583db16bd2029b8f5d0f6bca3557789e4d300b40b478e1e4d6df873133b31"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000}, 0x20000041) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="cf042c9d7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000500c200820000000800a4000300000034"], 0xa0}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) 294.055916ms ago: executing program 6 (id=2811): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76632cb010852f426072a", 0x2a}, {&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad7", 0x15}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 293.932234ms ago: executing program 2 (id=2812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa81002f0008"], 0x36) 256.71922ms ago: executing program 5 (id=2813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000100)={0x1, 0x2, 0x5192, 0x2, 0x5, 0x1}) 66.479885ms ago: executing program 2 (id=2815): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x469f, @remote}, 0x10, &(0x7f0000001dc0)=[{&(0x7f00000003c0)="ca388d8f0fae4c2eeb93488125f7ef69f4c70a67", 0x14}], 0x1}, 0x0) 0s ago: executing program 6 (id=2817): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0xa, 0x8, 0x500be, 0x8, 0xff8e, 0x7, 0x2800, 0xba, 0x8}) kernel console output (not intermixed with test programs): netdevsim0 [ 247.717060][ T8920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.857232][ T8920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.870351][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 247.873243][ T8920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.055732][ T9164] Trying to write to read-only block-device nullb0 [ 248.143781][ T8920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.147288][ T8920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.259989][ T8920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.728791][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.737664][ T9192] Bluetooth: MGMT ver 1.23 [ 248.925629][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.955823][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.955986][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.966067][ T9197] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 249.027616][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.060843][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.087644][ T5758] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 249.233831][ T5758] usb 3-1: Using ep0 maxpacket: 8 [ 249.239409][ T5758] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 249.239439][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 249.239458][ T5758] usb 3-1: Product: syz [ 249.239473][ T5758] usb 3-1: Manufacturer: syz [ 249.239486][ T5758] usb 3-1: SerialNumber: syz [ 249.264703][ T5758] usb 3-1: config 0 descriptor?? [ 249.276819][ T5758] gspca_main: sq905-2.14.0 probing 2770:9120 [ 249.415668][ T9209] input: syz0 as /devices/virtual/input/input22 [ 250.328609][ T5758] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 250.328699][ T5758] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 250.355921][ T5758] usb 3-1: USB disconnect, device number 28 [ 250.747542][ T8920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.640772][ T8920] veth0_vlan: entered promiscuous mode [ 251.701592][ T8920] veth1_vlan: entered promiscuous mode [ 251.788476][ T8920] veth0_macvtap: entered promiscuous mode [ 251.807080][ T8920] veth1_macvtap: entered promiscuous mode [ 251.868449][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.927953][ T8920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.073004][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.078928][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.080237][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.080274][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.143800][ T9275] syzkaller1: entered promiscuous mode [ 253.143825][ T9275] syzkaller1: entered allmulticast mode [ 253.320910][ T1375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.320931][ T1375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.009959][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.009980][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.952781][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1407'. [ 255.324451][ T1007] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 255.437673][ T9347] overlay: filesystem on ./file0 not supported as upperdir [ 255.486564][ T1007] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.486592][ T1007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.512301][ T1007] usb 3-1: config 0 descriptor?? [ 255.520153][ T1007] cp210x 3-1:0.0: cp210x converter detected [ 255.679320][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679466][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.932685][ T1007] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 255.971503][ T1007] usb 3-1: cp210x converter now attached to ttyUSB0 [ 255.988560][ T9353] netlink: 762 bytes leftover after parsing attributes in process `syz.4.1417'. [ 255.988617][ T9353] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0 [ 256.161239][ T37] usb 3-1: USB disconnect, device number 29 [ 256.231272][ T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 256.394801][ T37] cp210x 3-1:0.0: device disconnected [ 256.503453][ T5617] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 256.656129][ T5617] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 256.656182][ T5617] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 256.656206][ T5617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.726463][ T5617] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 256.953564][ T1007] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 257.103277][ T1007] usb 5-1: Using ep0 maxpacket: 16 [ 257.106500][ T1007] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 257.106530][ T1007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.111738][ T1007] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.111764][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.111784][ T1007] usb 5-1: Product: syz [ 257.111797][ T1007] usb 5-1: Manufacturer: syz [ 257.111811][ T1007] usb 5-1: SerialNumber: syz [ 257.181394][ T1007] usb 5-1: config 0 descriptor?? [ 257.196224][ T1007] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.196258][ T1007] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 257.260954][ T5615] Bluetooth: hci0: command 0x0405 tx timeout [ 257.626793][ T9385] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 257.742538][ T5617] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 257.742560][ T5617] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 257.751474][ T5617] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 257.813505][ T1007] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 257.815160][ T1007] em28xx 5-1:0.0: Config register raw data: 0x3a [ 257.815189][ T1007] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 257.815202][ T1007] em28xx 5-1:0.0: No AC97 audio processor [ 257.948831][ T9394] Invalid argument reading file caps for ./file0 [ 257.972253][ T5595] usb 6-1: USB disconnect, device number 2 [ 258.084742][ T1007] usb 5-1: USB disconnect, device number 9 [ 258.623553][ T9419] autofs: Bad value for 'fd' [ 259.528432][ T9458] syzkaller1: entered allmulticast mode [ 259.935521][ T9472] netlink: 'syz.2.1457': attribute type 58 has an invalid length. [ 260.105893][ T5691] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 260.285265][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.285296][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.285319][ T5691] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.285358][ T5691] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.285380][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.356591][ T5691] usb 6-1: config 0 descriptor?? [ 260.523782][ T5595] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 260.676475][ T5595] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 260.676511][ T5595] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 260.676561][ T5595] usb 3-1: config 150 has no interface number 0 [ 260.676596][ T5595] usb 3-1: config 150 interface 204 has no altsetting 0 [ 260.679315][ T5595] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 260.679343][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.679363][ T5595] usb 3-1: Product: syz [ 260.679376][ T5595] usb 3-1: Manufacturer: syz [ 260.679389][ T5595] usb 3-1: SerialNumber: syz [ 260.788742][ T5691] hid_parser_main: 11 callbacks suppressed [ 260.788765][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788793][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788817][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788842][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788873][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788898][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788922][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788945][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.788978][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.789004][ T5691] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 260.895444][ T5691] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 260.954668][ T5595] xr_serial 3-1:150.204: skipping garbage [ 260.954701][ T5595] xr_serial 3-1:150.204: xr_serial converter detected [ 261.188244][ T5339] usb 6-1: USB disconnect, device number 3 [ 261.790759][ T5595] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 261.790833][ T5595] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 261.898471][ T5595] usb 3-1: USB disconnect, device number 30 [ 261.910509][ T5595] xr_serial 3-1:150.204: device disconnected [ 262.162260][ T9527] syzkaller1: entered promiscuous mode [ 262.162285][ T9527] syzkaller1: entered allmulticast mode [ 263.040569][ T9545] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 263.040613][ T9545] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 263.040650][ T9545] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 263.043361][ T5595] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 263.128649][ T9545] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 263.202489][ T9545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 263.227815][ T5595] usb 3-1: config 0 has no interfaces? [ 263.258398][ T5595] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 263.258428][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.258447][ T5595] usb 3-1: Product: syz [ 263.258462][ T5595] usb 3-1: Manufacturer: syz [ 263.258475][ T5595] usb 3-1: SerialNumber: syz [ 263.290655][ T5595] usb 3-1: config 0 descriptor?? [ 263.665213][ T5810] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 263.850655][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.850688][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.850724][ T5810] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.850746][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.945489][ T5617] usb 3-1: USB disconnect, device number 31 [ 263.990365][ T5810] usb 6-1: config 0 descriptor?? [ 264.072410][ T1375] smbdirect: ib_dev[syz2] removed [ 264.228177][ T9556] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1481'. [ 264.569796][ T9564] loop5: detected capacity change from 0 to 7 [ 264.674075][ T9564] Dev loop5: unable to read RDB block 7 [ 264.674166][ T9564] loop5: unable to read partition table [ 264.674391][ T9564] loop5: partition table beyond EOD, truncated [ 264.674426][ T9564] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 264.831967][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 264.836143][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 264.836577][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 264.836988][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 264.837125][ T5810] usb 6-1: string descriptor 0 read error: -32 [ 264.837494][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 264.838090][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 264.838308][ T5810] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 264.912583][ T5810] usb 6-1: USB disconnect, device number 4 [ 265.601219][ T9586] sctp: [Deprecated]: syz.0.1495 (pid 9586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.601219][ T9586] Use struct sctp_sack_info instead [ 266.311186][ T9610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.451345][ T9617] sock: sock_set_timeout: `syz.4.1510' (pid 9617) tries to set negative timeout [ 266.744426][ T5595] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 266.913238][ T5595] usb 3-1: Using ep0 maxpacket: 16 [ 266.915561][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 266.915594][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16451, setting to 1024 [ 266.915620][ T5595] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.915846][ T5595] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 266.915867][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.921021][ T5595] usb 3-1: config 0 descriptor?? [ 267.043209][ T5617] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 267.205608][ T5617] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 267.205641][ T5617] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 267.205723][ T5617] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 267.242586][ T5617] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 267.242616][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.242636][ T5617] usb 6-1: Product: syz [ 267.242690][ T5617] usb 6-1: Manufacturer: syz [ 267.242698][ T5617] usb 6-1: SerialNumber: syz [ 267.280907][ T5617] usb 6-1: config 0 descriptor?? [ 267.282195][ T9628] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 267.282316][ T9628] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 267.307052][ T5617] usb 6-1: ucan: probing device on interface #0 [ 267.340870][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 267.388454][ T5595] hid_parser_main: 5 callbacks suppressed [ 267.388471][ T5595] belkin 0003:1020:0006.0017: unknown main item tag 0x0 [ 267.388490][ T5595] belkin 0003:1020:0006.0017: unknown main item tag 0x0 [ 267.388505][ T5595] belkin 0003:1020:0006.0017: unknown main item tag 0x0 [ 267.388520][ T5595] belkin 0003:1020:0006.0017: unknown main item tag 0x0 [ 267.388535][ T5595] belkin 0003:1020:0006.0017: unknown main item tag 0x0 [ 267.388549][ T5595] belkin 0003:1020:0006.0017: unknown main item tag 0x0 [ 267.388738][ T5595] belkin 0003:1020:0006.0017: unknown global tag 0xd [ 267.388747][ T5595] belkin 0003:1020:0006.0017: item 0 1 1 13 parsing failed [ 267.390007][ T5595] belkin 0003:1020:0006.0017: parse failed [ 267.390373][ T5595] belkin 0003:1020:0006.0017: probe with driver belkin failed with error -22 [ 267.576200][ T5810] usb 3-1: USB disconnect, device number 32 [ 267.658215][ T9637] Bluetooth: MGMT ver 1.23 [ 267.706776][ T9639] loop9: detected capacity change from 0 to 7 [ 267.835530][ T9639] Dev loop9: unable to read RDB block 7 [ 267.835573][ T9639] loop9: unable to read partition table [ 267.835762][ T9639] loop9: partition table beyond EOD, truncated [ 267.835794][ T9639] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 268.110005][ T5617] ucan 6-1:0.0 can0: registered device [ 268.147791][ T9648] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 268.147813][ T9648] netlink: 'syz.4.1522': attribute type 8 has an invalid length. [ 268.147827][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 268.150194][ T5617] ucan 6-1:0.0 can0: firmware string: \· [ 268.375544][ T5617] usb 6-1: USB disconnect, device number 5 [ 268.415740][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 269.108990][ T9685] Invalid argument reading file caps for ./file0 [ 269.825908][ T1007] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 269.984386][ T1007] usb 6-1: Using ep0 maxpacket: 8 [ 269.988048][ T1007] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 269.988113][ T1007] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.988136][ T1007] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.988157][ T1007] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.988178][ T1007] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.988215][ T1007] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.988237][ T1007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.308388][ T5617] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 270.454791][ T5617] usb 3-1: Using ep0 maxpacket: 16 [ 270.464878][ T5617] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 270.464906][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.464924][ T5617] usb 3-1: Product: syz [ 270.464937][ T5617] usb 3-1: Manufacturer: syz [ 270.464958][ T5617] usb 3-1: SerialNumber: syz [ 270.475711][ T5617] usb 3-1: config 0 descriptor?? [ 270.490571][ T5617] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 270.586816][ T9702] usbtmc 6-1:16.0: simple control status returned 0 [ 270.793569][ T37] usb 6-1: USB disconnect, device number 6 [ 271.008890][ T9743] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1553'. [ 271.453604][ T1007] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 271.516118][ T5617] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 271.533830][ T5617] usb 3-1: USB disconnect, device number 33 [ 271.635354][ T1007] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.636451][ T1007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.636474][ T1007] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.638584][ T1007] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 271.638608][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.638618][ T1007] usb 5-1: Product: syz [ 271.638625][ T1007] usb 5-1: Manufacturer: syz [ 271.638650][ T1007] usb 5-1: SerialNumber: syz [ 271.654387][ T5616] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 271.654624][ T5616] Bluetooth: hci1: Injecting HCI hardware error event [ 271.655538][ T5616] Bluetooth: hci1: hardware error 0x00 [ 271.729827][ T1007] usb 5-1: selecting invalid altsetting 1 [ 271.730463][ T1007] usb 5-1: unit 6 not found! [ 272.470681][ T1007] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 272.493564][ T5617] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 272.582265][ T9766] loop8: detected capacity change from 0 to 7 [ 272.598856][ T9766] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 272.598896][ T9766] loop8: partition table partially beyond EOD, truncated [ 272.599106][ T9766] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 272.629155][ T9766] loop8: p2 start 516240762 is beyond EOD, truncated [ 272.643630][ T1007] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.652551][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.652582][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.652603][ T5617] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.652643][ T5617] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.652663][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.677907][ T5617] usb 3-1: config 0 descriptor?? [ 272.711552][ T1007] usb 5-1: USB disconnect, device number 10 [ 272.868976][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.951143][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 273.138446][ T5617] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 273.300895][ T9773] syzkaller1: entered promiscuous mode [ 273.300920][ T9773] syzkaller1: entered allmulticast mode [ 273.611620][ T9775] loop8: detected capacity change from 0 to 7 [ 273.625405][ T9775] Dev loop8: unable to read RDB block 7 [ 273.625437][ T9775] loop8: AHDI p1 p2 [ 273.625466][ T9775] loop8: partition table partially beyond EOD, truncated [ 273.625697][ T9775] loop8: p1 start 1702000233 is beyond EOD, truncated [ 273.815554][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 273.896902][ T5616] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 274.397056][ C0] plantronics 0003:047F:FFFF.0018: usb_submit_urb(ctrl) failed: -1 [ 274.415577][ T5617] usb 3-1: USB disconnect, device number 34 [ 274.864651][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 275.233213][ T37] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 275.394897][ T37] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 275.394951][ T37] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.394975][ T37] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.394999][ T37] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.395011][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.471094][ T37] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.480704][ T37] usb 6-1: invalid MIDI out EP 0 [ 276.424397][ T1007] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 276.426248][ T37] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 276.430446][ T37] usb 6-1: USB disconnect, device number 7 [ 276.593454][ T1007] usb 3-1: Using ep0 maxpacket: 32 [ 276.596309][ T1007] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 276.596338][ T1007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.636753][ T1007] usb 3-1: config 0 descriptor?? [ 276.655157][ T1007] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 277.773412][ T37] IPVS: starting estimator thread 0... [ 277.859158][ T1007] gspca_vc032x: reg_w err -71 [ 277.859186][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859196][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859203][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859210][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859218][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859226][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859234][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859242][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859250][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859258][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859267][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859275][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859283][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859292][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859305][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859313][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859321][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859329][ T1007] gspca_vc032x: I2c Bus Busy Wait 00 [ 277.859337][ T1007] gspca_vc032x: Unknown sensor... [ 277.859419][ T1007] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 277.917782][ T9871] IPVS: using max 9 ests per chain, 21600 per kthread [ 278.019230][ T9873] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1606'. [ 278.032533][ T1007] usb 3-1: USB disconnect, device number 35 [ 278.519164][ T9877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.568681][ T9875] kvm: MONITOR instruction emulated as NOP! [ 278.590480][ T57] IPVS: stop unused estimator thread 0... [ 278.791193][ T9884] Invalid ELF header magic: != ELF [ 278.839282][ T9886] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1612'. [ 278.839976][ T9886] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1612'. [ 279.041074][ T9896] netlink: 'syz.2.1617': attribute type 4 has an invalid length. [ 279.041088][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 279.203195][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 279.351720][ T9907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.353387][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 279.368623][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 279.368863][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.399873][ T10] usb 5-1: config 0 descriptor?? [ 279.411133][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 279.736639][ T9916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.411974][ T10] gspca_sonixj: reg_w1 err -71 [ 280.423282][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 280.443360][ T10] usb 5-1: USB disconnect, device number 11 [ 281.713199][ T5617] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 281.864349][ T5617] usb 5-1: Using ep0 maxpacket: 32 [ 281.872530][ T5617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.872557][ T5617] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.876796][ T5617] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 281.876825][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.876843][ T5617] usb 5-1: Product: syz [ 281.876857][ T5617] usb 5-1: Manufacturer: syz [ 281.876871][ T5617] usb 5-1: SerialNumber: syz [ 281.922564][ T5617] usb 5-1: config 0 descriptor?? [ 282.131732][ T1007] usb 5-1: USB disconnect, device number 12 [ 284.113698][ T1007] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 284.267373][ T1007] usb 3-1: Using ep0 maxpacket: 32 [ 284.284001][ T1007] usb 3-1: config 0 has no interfaces? [ 284.309218][ T1007] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 284.309247][ T1007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.309265][ T1007] usb 3-1: Product: syz [ 284.309280][ T1007] usb 3-1: Manufacturer: syz [ 284.309293][ T1007] usb 3-1: SerialNumber: syz [ 284.361245][ T1007] usb 3-1: config 0 descriptor?? [ 284.618702][ T5691] usb 3-1: USB disconnect, device number 36 [ 284.626556][ T1007] libceph: connect (1)[c::]:6789 error -101 [ 284.641633][ T1007] libceph: mon0 (1)[c::]:6789 connect error [ 284.706315][ T10] libceph: connect (1)[b::]:6789 error -101 [ 284.706554][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 284.980016][ T5691] libceph: connect (1)[b::]:6789 error -101 [ 284.980150][ T5691] libceph: mon0 (1)[b::]:6789 connect error [ 285.005808][ T9998] ceph: No mds server is up or the cluster is laggy [ 285.010486][ T9995] ceph: No mds server is up or the cluster is laggy [ 285.015893][ T5691] libceph: connect (1)[c::]:6789 error -101 [ 285.036845][ T5691] libceph: mon0 (1)[c::]:6789 connect error [ 285.490679][ T1007] libceph: connect (1)[b::]:6789 error -101 [ 285.490879][ T1007] libceph: mon0 (1)[b::]:6789 connect error [ 286.333175][ T5691] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 286.483749][ T5691] usb 3-1: Using ep0 maxpacket: 16 [ 286.485818][ T5691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.485871][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.485897][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 286.485917][ T5691] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 286.485937][ T5691] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.487636][ T5691] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 286.487661][ T5691] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.487680][ T5691] usb 3-1: Manufacturer: syz [ 286.495578][ T5691] usb 3-1: config 0 descriptor?? [ 286.793226][ T5691] rc_core: IR keymap rc-hauppauge not found [ 286.793245][ T5691] Registered IR keymap rc-empty [ 286.793399][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.813275][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.847991][ T5691] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 286.856532][ T5691] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 286.912131][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.934593][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.956604][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 286.983369][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.003573][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.033219][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.053305][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.073204][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.084632][ T5339] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 287.093581][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.113325][ T5691] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 287.135383][ T5691] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 287.135409][ T5691] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 287.141243][ T5691] usb 3-1: USB disconnect, device number 37 [ 287.163297][ T37] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 287.285579][ T5339] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.285615][ T5339] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.285630][ T5339] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.285661][ T5339] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 287.285673][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.292302][T10026] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 287.353142][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 287.363351][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.363395][ T37] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.363437][ T37] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.363461][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.416414][ T37] usb 6-1: config 0 descriptor?? [ 287.831680][ T37] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 287.851757][ T37] HID 045e:07da: Invalid code 65791 type 1 [ 287.851954][ T37] HID 045e:07da: Invalid code 768 type 1 [ 287.851962][ T37] HID 045e:07da: Invalid code 769 type 1 [ 287.851968][ T37] HID 045e:07da: Invalid code 770 type 1 [ 287.851975][ T37] HID 045e:07da: Invalid code 771 type 1 [ 287.851981][ T37] HID 045e:07da: Invalid code 772 type 1 [ 287.851987][ T37] HID 045e:07da: Invalid code 773 type 1 [ 287.851993][ T37] HID 045e:07da: Invalid code 774 type 1 [ 287.851999][ T37] HID 045e:07da: Invalid code 775 type 1 [ 287.852005][ T37] HID 045e:07da: Invalid code 776 type 1 [ 287.921124][ T37] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0019/input/input25 [ 288.029257][ T37] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 288.062297][ T37] usb 6-1: USB disconnect, device number 8 [ 288.098993][T10034] fido_id[10034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 288.670476][T10041] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1674'. [ 288.869496][ T5339] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 288.883636][ T5617] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 288.905391][ T5339] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input24 [ 289.009354][ T5339] usb 5-1: USB disconnect, device number 13 [ 289.009441][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 289.044808][ T5617] usb 6-1: too many configurations: 202, using maximum allowed: 8 [ 289.069425][ T5617] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.069458][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.069477][ T5617] usb 6-1: Product: syz [ 289.069491][ T5617] usb 6-1: Manufacturer: syz [ 289.069505][ T5617] usb 6-1: SerialNumber: syz [ 289.166807][ T5617] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 289.229043][ T37] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.809636][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1687'. [ 290.302832][ T5691] usb 6-1: USB disconnect, device number 9 [ 290.315341][ T5339] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 290.499606][ T5339] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 290.499640][ T5339] usb 3-1: config 1 interface 0 has no altsetting 0 [ 290.536430][ T5339] usb 3-1: string descriptor 0 read error: -22 [ 290.536611][ T5339] usb 3-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 290.536633][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.024230][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024275][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024302][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024330][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024355][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024381][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024406][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024431][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024456][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.024481][ T5339] apple 0003:05AC:021A.001A: unknown main item tag 0x0 [ 291.104068][ T37] usb 6-1: Service connection timeout for: 260 [ 291.104087][ T37] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 291.104694][ T37] ath9k_htc: Failed to initialize the device [ 291.106324][ T5691] usb 6-1: ath9k_htc: USB layer deinitialized [ 291.183290][ T5339] apple 0003:05AC:021A.001A: hidraw0: USB HID vff.7f Device [HID 05ac:021a] on usb-dummy_hcd.2-1/input0 [ 291.222237][ T5339] usb 3-1: USB disconnect, device number 38 [ 291.391375][T10092] fido_id[10092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 292.293352][ T5339] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 292.451752][ T5339] usb 5-1: config 1 interface 0 has no altsetting 0 [ 292.468972][ T5339] usb 5-1: string descriptor 0 read error: -22 [ 292.469109][ T5339] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.40 [ 292.469133][ T5339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.037616][T10130] netlink: 'syz.2.1711': attribute type 3 has an invalid length. [ 293.159795][ T5339] usb 5-1: USB disconnect, device number 14 [ 294.245856][ T5617] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5617 comm: kworker/1:5) [ 295.482387][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 295.681499][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 295.685435][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 295.685467][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 295.689596][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.689625][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.689705][ T10] usb 6-1: Product: syz [ 295.689721][ T10] usb 6-1: Manufacturer: syz [ 295.689734][ T10] usb 6-1: SerialNumber: syz [ 295.790679][ T10] usb 6-1: config 0 descriptor?? [ 295.811652][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.811684][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 296.421211][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 296.427524][ T10] em28xx 6-1:0.0: Config register raw data: 0x54 [ 296.661200][ T10] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 296.661222][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 296.661237][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 296.870172][ T5617] usb 6-1: USB disconnect, device number 10 [ 296.874264][ T5617] em28xx 6-1:0.0: Disconnecting em28xx [ 297.185721][ T5617] em28xx 6-1:0.0: Freeing device [ 297.260970][ T5339] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 297.410834][ T5339] usb 3-1: Using ep0 maxpacket: 32 [ 297.425577][ T5339] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 297.425608][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.425628][ T5339] usb 3-1: Product: syz [ 297.425641][ T5339] usb 3-1: Manufacturer: syz [ 297.425656][ T5339] usb 3-1: SerialNumber: syz [ 297.438836][ T5339] usb 3-1: config 0 descriptor?? [ 297.879485][ T5339] airspy 3-1:0.0: Board ID: 00 [ 297.879500][ T5339] airspy 3-1:0.0: Firmware version: [ 297.950372][ T5691] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 298.106768][ T5691] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 298.106797][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.112084][ T5691] usb 5-1: config 0 descriptor?? [ 298.138807][ T5691] cp210x 5-1:0.0: cp210x converter detected [ 298.483335][ T5339] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 298.522463][ T5339] airspy 3-1:0.0: Registered as swradio24 [ 298.522485][ T5339] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 298.547460][ T5691] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 298.547601][ T5339] usb 3-1: USB disconnect, device number 39 [ 298.818395][ T5691] usb 5-1: cp210x converter now attached to ttyUSB0 [ 298.853048][T10252] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 298.975387][ T10] usb 5-1: USB disconnect, device number 15 [ 298.999419][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.135657][T10261] tipc: Started in network mode [ 299.135676][T10261] tipc: Node identity fff, cluster identity 10 [ 299.135687][T10261] tipc: Node number set to 4095 [ 299.182074][ T10] cp210x 5-1:0.0: device disconnected [ 299.236577][T10264] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 300.064958][T10294] netlink: 'syz.5.1768': attribute type 21 has an invalid length. [ 300.064980][T10294] netlink: 'syz.5.1768': attribute type 22 has an invalid length. [ 300.180985][T10300] syzkaller1: entered promiscuous mode [ 300.181001][T10300] syzkaller1: entered allmulticast mode [ 300.279856][ T5595] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 300.380577][ T5617] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 300.416162][ T10] IPVS: starting estimator thread 0... [ 300.449258][ T5595] usb 3-1: Using ep0 maxpacket: 8 [ 300.471648][ T5595] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 300.471673][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.471684][ T5595] usb 3-1: Product: syz [ 300.471691][ T5595] usb 3-1: Manufacturer: syz [ 300.471698][ T5595] usb 3-1: SerialNumber: syz [ 300.488544][ T5595] usb 3-1: config 0 descriptor?? [ 300.517564][T10306] IPVS: using max 10 ests per chain, 24000 per kthread [ 300.518782][ T5595] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 300.579993][ T5617] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 300.580015][ T5617] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 300.581711][ T5617] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.581733][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 300.581743][ T5617] usb 5-1: SerialNumber: syz [ 300.634757][T10298] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 300.862570][T10298] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 301.311242][T10320] netlink: 'syz.0.1778': attribute type 11 has an invalid length. [ 301.602357][ T5617] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 301.740059][ T5595] gspca_sonixj: reg_w1 err -71 [ 301.751162][T10330] input: syz1 as /devices/virtual/input/input26 [ 301.820360][ T5595] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 301.855018][ T5595] usb 3-1: USB disconnect, device number 40 [ 303.380196][ T5339] usb 5-1: USB disconnect, device number 16 [ 303.417424][ T5339] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 304.498549][T10384] syz_tun: entered allmulticast mode [ 304.530412][T10384] syz_tun: left allmulticast mode [ 304.927393][ T5595] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 305.087227][ T5595] usb 3-1: Using ep0 maxpacket: 8 [ 305.089272][ T5595] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 305.089326][ T5595] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.089348][ T5595] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.090130][ T5595] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 305.090159][ T5595] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 305.090183][ T5595] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.090236][ T5595] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.090258][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.349198][ T5595] usb 3-1: usb_control_msg returned -32 [ 305.349248][ T5595] usbtmc 3-1:16.0: can't read capabilities [ 306.056949][T10428] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 306.281012][ T10] usb 3-1: USB disconnect, device number 41 [ 306.567865][ T5617] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 306.718349][ T5617] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 306.718374][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.721389][ T5617] usb 5-1: config 0 descriptor?? [ 306.726094][ T5810] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 306.730902][ T5617] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 306.896374][ T5810] usb 6-1: unable to get BOS descriptor or descriptor too short [ 306.898537][ T5810] usb 6-1: not running at top speed; connect to a high speed hub [ 306.900910][ T5810] usb 6-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.900940][ T5810] usb 6-1: config 1 interface 0 has no altsetting 0 [ 306.944439][ T5810] usb 6-1: string descriptor 0 read error: -22 [ 306.944568][ T5810] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.40 [ 306.944592][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.131435][ T5617] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 307.536286][ T5617] gspca_cpia1: usb_control_msg 02, error -71 [ 307.540674][ T5617] gspca_cpia1: usb_control_msg 05, error -71 [ 307.540702][ T5617] cpia1 5-1:0.0: unexpected systemstate: 00 [ 307.557363][ T5617] usb 5-1: USB disconnect, device number 17 [ 307.597228][ T5810] uclogic 0003:28BD:0075.001C: interface is invalid, ignoring [ 307.728527][ T5595] usb 6-1: USB disconnect, device number 11 [ 309.216661][T10485] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1830'. [ 311.253826][ T5617] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 311.410441][ T5617] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 311.410472][ T5617] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 311.410485][ T5617] usb 3-1: Product: syz [ 311.410499][ T5617] usb 3-1: Manufacturer: syz [ 311.410512][ T5617] usb 3-1: SerialNumber: syz [ 311.424655][ T5617] usb 3-1: config 0 descriptor?? [ 311.446423][ T5617] ch341 3-1:0.0: ch341-uart converter detected [ 312.294666][T10551] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 312.474464][ T5617] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 312.684948][ T5617] usb 3-1: USB disconnect, device number 42 [ 312.713140][ T5617] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 312.718040][ T5617] ch341 3-1:0.0: device disconnected [ 313.262784][ T5691] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 313.416206][ T5691] usb 6-1: config 1 interface 0 has no altsetting 0 [ 313.419483][ T5691] usb 6-1: string descriptor 0 read error: -22 [ 313.419593][ T5691] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 313.419607][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.602645][ T5810] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 313.762498][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 313.764553][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.764576][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.765695][ T5810] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50 [ 313.765714][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 313.765725][ T5810] usb 3-1: Product: syz [ 313.776016][ T5810] usb 3-1: config 0 descriptor?? [ 313.783873][ T5810] hub 3-1:0.0: USB hub found [ 313.890963][ T5691] hid_parser_main: 8022 callbacks suppressed [ 313.890981][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891000][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891015][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891030][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891076][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891091][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891105][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891119][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891134][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.891148][ T5691] lua 0003:1E7D:2C2E.001D: unknown main item tag 0x0 [ 313.999814][ T5691] lua 0003:1E7D:2C2E.001D: hidraw0: USB HID vff.7f Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0 [ 314.025274][ T5810] hub 3-1:0.0: 1 port detected [ 314.080706][ T5691] usb 6-1: USB disconnect, device number 12 [ 314.281552][ T37] kernel write not supported for file /input/event0 (pid: 37 comm: kworker/1:1) [ 314.446071][T10587] tls_set_device_offload_rx: netdev not found [ 314.470845][ T5810] usb 3-1: USB disconnect, device number 43 [ 314.954725][T10599] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1880'. [ 315.361746][ T5595] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 315.482859][T10608] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 315.511591][ T5595] usb 3-1: Using ep0 maxpacket: 16 [ 315.517189][ T5595] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.517215][ T5595] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.519437][ T5595] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.519465][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.519576][ T5595] usb 3-1: Product: syz [ 315.519590][ T5595] usb 3-1: Manufacturer: syz [ 315.519603][ T5595] usb 3-1: SerialNumber: syz [ 315.602474][ T5595] usb 3-1: 0:2 : does not exist [ 315.794291][ T5595] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 315.860304][ T5595] usb 3-1: USB disconnect, device number 44 [ 315.893006][ T5810] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 315.898532][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.043899][ T5810] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 316.043928][ T5810] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 316.043950][ T5810] usb 5-1: config 150 has no interface number 0 [ 316.043981][ T5810] usb 5-1: config 150 interface 204 has no altsetting 0 [ 316.046485][ T5810] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 316.046508][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.046519][ T5810] usb 5-1: Product: syz [ 316.046526][ T5810] usb 5-1: Manufacturer: syz [ 316.046534][ T5810] usb 5-1: SerialNumber: syz [ 316.308881][ T5810] xr_serial 5-1:150.204: skipping garbage [ 316.308935][ T5810] xr_serial 5-1:150.204: xr_serial converter detected [ 316.324732][T10615] Invalid ELF header magic: != ELF [ 316.325593][T10615] Invalid ELF header magic: != ELF [ 316.711953][T10623] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 317.107907][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.108059][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.152798][ T5810] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 317.353829][ T5617] usb 5-1: USB disconnect, device number 18 [ 317.384987][ T5617] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 317.399388][ T5617] xr_serial 5-1:150.204: device disconnected [ 317.620901][T10644] input: syz0 as /devices/virtual/input/input27 [ 318.710373][T10670] loop5: detected capacity change from 0 to 7 [ 318.712927][T10670] Dev loop5: unable to read RDB block 7 [ 318.712967][T10670] loop5: unable to read partition table [ 318.713150][T10670] loop5: partition table beyond EOD, truncated [ 318.713184][T10670] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 319.293647][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 319.293668][T10692] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1914'. [ 321.333027][ T5617] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 321.333050][ T5617] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 321.337276][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 321.741130][ T821] hid_parser_main: 4007 callbacks suppressed [ 321.741153][ T821] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 321.833320][ T821] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.877520][ T5617] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 323.877544][ T5617] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 323.877695][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 326.630241][T10887] TCP: TCP_TX_DELAY enabled [ 327.395854][ T37] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 327.545688][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 327.548043][ T37] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 327.548070][ T37] usb 6-1: config 0 has no interface number 0 [ 327.548113][ T37] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.548136][ T37] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 327.548164][ T37] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 327.548189][ T37] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 327.548215][ T37] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.552085][ T37] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 327.552110][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.552128][ T37] usb 6-1: Product: syz [ 327.552142][ T37] usb 6-1: Manufacturer: syz [ 327.552156][ T37] usb 6-1: SerialNumber: syz [ 327.672220][ T37] usb 6-1: config 0 descriptor?? [ 327.902610][ T37] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 328.234640][ T5810] usb 6-1: USB disconnect, device number 13 [ 328.664393][T10934] netlink: 'syz.2.1985': attribute type 11 has an invalid length. [ 328.664418][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 328.685215][ T37] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 328.835409][ T5617] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 328.835434][ T5617] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 328.837649][ T5615] Bluetooth: hci0: command 0x0405 tx timeout [ 328.838830][ T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.838879][ T37] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.838901][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.906914][ T37] usb 5-1: config 0 descriptor?? [ 328.923981][ T37] pwc: Askey VC010 type 2 USB webcam detected. [ 329.341259][ T37] pwc: recv_control_msg error -32 req 02 val 2b00 [ 329.342189][ T37] pwc: recv_control_msg error -32 req 02 val 2700 [ 329.362197][ T37] pwc: recv_control_msg error -32 req 02 val 2c00 [ 329.563611][ T37] pwc: recv_control_msg error -71 req 04 val 1300 [ 329.564097][ T37] pwc: recv_control_msg error -71 req 04 val 1400 [ 329.583476][ T37] pwc: recv_control_msg error -71 req 02 val 2000 [ 329.591186][ T37] pwc: recv_control_msg error -71 req 02 val 2100 [ 329.591690][ T37] pwc: recv_control_msg error -71 req 04 val 1500 [ 329.592194][ T37] pwc: recv_control_msg error -71 req 02 val 2500 [ 329.592967][ T37] pwc: recv_control_msg error -71 req 02 val 2400 [ 329.624069][ T37] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.631571][ T37] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.632065][ T37] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.637198][ T37] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.650266][ T37] pwc: recv_control_msg error -71 req 04 val 1200 [ 329.673123][ T37] pwc: Registered as video103. [ 329.692684][ T37] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 329.712359][ T37] usb 5-1: USB disconnect, device number 19 [ 330.282508][T10957] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2003'. [ 330.282536][T10957] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2003'. [ 330.825784][T10976] netlink: 'syz.2.2000': attribute type 21 has an invalid length. [ 330.825808][T10976] netlink: 'syz.2.2000': attribute type 22 has an invalid length. [ 330.825822][T10976] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2000'. [ 330.930473][T10981] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 331.264925][ T5810] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 331.343388][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2011'. [ 331.414535][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 331.421021][ T5810] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.421054][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 331.421087][ T5810] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 331.421109][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.442874][ T5810] usb 3-1: config 0 descriptor?? [ 331.916204][ T37] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 331.923157][ T5810] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 331.948295][ T37] hid-generic 0000:0000:0000.0020: hidraw1: HID v0.00 Device [syz1] on syz0 [ 331.988056][ T38] audit: type=1326 audit(1778028718.626:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11006 comm="syz.5.2015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cf61cdd9 code=0x7fc00000 [ 332.199452][ T5810] usb 3-1: USB disconnect, device number 45 [ 332.223918][T11017] fido_id[11017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1E71:2009.001F/report_descriptor': No such device [ 332.535837][ T38] audit: type=1326 audit(1778028719.157:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11006 comm="syz.5.2015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7cf61cdd9 code=0x7fc00000 [ 333.310519][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 335.117033][T11108] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 335.237931][T11116] input: syz0 as /devices/virtual/input/input29 [ 336.702067][ T5691] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 337.067838][ T5691] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.067869][ T5691] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.067907][ T5691] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.067928][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.372543][ T5691] usb 5-1: usb_control_msg returned -32 [ 337.372593][ T5691] usbtmc 5-1:16.0: can't read capabilities [ 339.489679][ T5595] usb 5-1: USB disconnect, device number 20 [ 339.748197][ T5810] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 340.091071][ T5810] usb 6-1: Using ep0 maxpacket: 8 [ 340.120551][ T5810] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 340.120583][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 340.120604][ T5810] usb 6-1: Product: syz [ 340.120618][ T5810] usb 6-1: Manufacturer: syz [ 340.120632][ T5810] usb 6-1: SerialNumber: syz [ 340.142626][ T5810] usb 6-1: config 0 descriptor?? [ 340.178185][ T5810] gspca_main: sq905-2.14.0 probing 2770:9120 [ 341.203957][ T5810] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 341.204048][ T5810] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 341.231839][ T5810] usb 6-1: USB disconnect, device number 14 [ 342.142922][T11202] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 342.142951][T11202] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 342.796768][T11224] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 342.796796][T11224] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 343.074608][T11236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2112'. [ 343.315847][T11247] netlink: 762 bytes leftover after parsing attributes in process `syz.5.2117'. [ 343.315873][T11247] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0 [ 343.530666][T11254] overlay: filesystem on ./file0 not supported as upperdir [ 343.577841][ T821] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 343.729763][ T821] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 343.729793][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.755138][ T821] usb 5-1: config 0 descriptor?? [ 343.766824][ T821] cp210x 5-1:0.0: cp210x converter detected [ 344.184202][ T821] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 344.277928][ T821] usb 5-1: cp210x converter now attached to ttyUSB0 [ 344.420373][ T5617] usb 5-1: USB disconnect, device number 21 [ 344.433471][ T5617] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 344.557581][ T5617] cp210x 5-1:0.0: device disconnected [ 344.984875][T11290] netlink: 'syz.4.2136': attribute type 4 has an invalid length. [ 345.085344][T11291] netlink: 'syz.4.2136': attribute type 4 has an invalid length. [ 345.325672][T11297] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 345.601421][T11303] Invalid argument reading file caps for ./file0 [ 345.646682][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 345.806568][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 345.815711][ T10] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.815743][ T10] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.815766][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 345.815798][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 345.815821][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.872790][ T10] usb 5-1: config 0 descriptor?? [ 346.216246][T11320] autofs: Bad value for 'fd' [ 346.313159][ T10] hid-corsair-void 0003:1B1C:1B25.0021: unknown main item tag 0x0 [ 346.313196][ T10] hid-corsair-void 0003:1B1C:1B25.0021: unknown main item tag 0x0 [ 346.313223][ T10] hid-corsair-void 0003:1B1C:1B25.0021: item fetching failed at offset 2/5 [ 346.326889][ T10] hid-corsair-void 0003:1B1C:1B25.0021: parse failed (reason: -22) [ 346.327002][ T10] hid-corsair-void 0003:1B1C:1B25.0021: probe with driver hid-corsair-void failed with error -22 [ 346.498994][ T5810] usb 5-1: USB disconnect, device number 22 [ 346.866118][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 346.955994][ T5810] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 347.041392][ T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.041447][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 347.041471][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.080934][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 347.118181][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 347.120915][ T5810] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 347.120946][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 347.123028][ T5810] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 347.123058][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.123069][ T5810] usb 6-1: Product: syz [ 347.123076][ T5810] usb 6-1: Manufacturer: syz [ 347.123083][ T5810] usb 6-1: SerialNumber: syz [ 347.137907][ T5810] usb 6-1: config 0 descriptor?? [ 347.148295][ T5810] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 347.148328][ T5810] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 347.829525][ T5810] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 347.830881][ T5810] em28xx 6-1:0.0: Config register raw data: 0x3a [ 347.830905][ T5810] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 347.830921][ T5810] em28xx 6-1:0.0: No AC97 audio processor [ 347.968868][T11358] netlink: 'syz.0.2167': attribute type 58 has an invalid length. [ 348.068932][ T5810] usb 6-1: USB disconnect, device number 15 [ 348.116533][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 348.116548][ T10] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 348.117102][ T10] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 348.230248][T11365] syzkaller1: entered allmulticast mode [ 348.323875][ T5595] usb 3-1: USB disconnect, device number 46 [ 348.867329][ T5595] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 349.031049][ T5595] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 349.031077][ T5595] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 349.031098][ T5595] usb 5-1: config 150 has no interface number 0 [ 349.031140][ T5595] usb 5-1: config 150 interface 204 has no altsetting 0 [ 349.034658][ T5595] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 349.034686][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.038880][ T5595] usb 5-1: Product: syz [ 349.038903][ T5595] usb 5-1: Manufacturer: syz [ 349.038917][ T5595] usb 5-1: SerialNumber: syz [ 349.244780][ T1007] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 349.301896][ T5595] xr_serial 5-1:150.204: skipping garbage [ 349.301957][ T5595] xr_serial 5-1:150.204: xr_serial converter detected [ 349.397227][ T1007] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 349.397261][ T1007] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 349.397286][ T1007] usb 6-1: config 1 interface 0 has no altsetting 0 [ 349.427862][ T1007] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 349.427892][ T1007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.427911][ T1007] usb 6-1: Product: syz [ 349.427924][ T1007] usb 6-1: Manufacturer: syz [ 349.427938][ T1007] usb 6-1: SerialNumber: syz [ 349.469572][T11383] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 349.470635][T11383] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 349.610550][T11397] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 349.610572][T11397] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 350.109220][ T5595] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 350.109280][ T5595] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 350.127187][ T5595] usb 5-1: USB disconnect, device number 23 [ 350.131295][ T5595] xr_serial 5-1:150.204: device disconnected [ 350.501200][ T1007] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7e:92:04:71:f1:83 [ 350.526477][ T1007] rtl8150 6-1:1.0: eth9: rtl8150 is detected [ 350.542041][ T1007] usb 6-1: USB disconnect, device number 16 [ 350.801931][T11409] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 350.801963][T11409] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 351.147320][T11415] loop5: detected capacity change from 0 to 7 [ 351.246638][T11415] Dev loop5: unable to read RDB block 7 [ 351.246681][T11415] loop5: unable to read partition table [ 351.251818][T11415] loop5: partition table beyond EOD, truncated [ 351.251856][T11415] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 351.485095][T11425] netlink: 762 bytes leftover after parsing attributes in process `syz.2.2196'. [ 351.485122][T11425] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0 [ 351.568981][T11430] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2199'. [ 352.223363][ T5617] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 352.343335][ T821] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 352.377563][ T5617] usb 5-1: config 0 has no interfaces? [ 352.380959][ T5617] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 352.380989][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.381009][ T5617] usb 5-1: Product: syz [ 352.381023][ T5617] usb 5-1: Manufacturer: syz [ 352.381037][ T5617] usb 5-1: SerialNumber: syz [ 352.397061][ T5617] usb 5-1: config 0 descriptor?? [ 352.537522][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.537564][ T821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 352.539916][ T821] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 352.539948][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.539969][ T821] usb 6-1: Product: syz [ 352.539983][ T821] usb 6-1: Manufacturer: syz [ 352.539997][ T821] usb 6-1: SerialNumber: syz [ 352.549050][ T821] usb 6-1: config 0 descriptor?? [ 352.607420][ T821] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 352.638374][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 352.640696][ T821] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 352.640753][ T821] usb 6-1: media controller created [ 352.699506][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.721074][ T1007] usb 5-1: USB disconnect, device number 24 [ 352.780690][ T821] DVB: Unable to find symbol tda10046_attach() [ 352.780700][ T821] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 352.780709][ T821] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 353.657712][ T821] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 353.699338][ T821] usb 6-1: USB disconnect, device number 17 [ 354.598089][T11471] sctp: [Deprecated]: syz.4.2216 (pid 11471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.598089][T11471] Use struct sctp_sack_info instead [ 354.752155][ T821] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 354.964772][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.964805][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.964841][ T821] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 354.964863][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.012872][ T821] usb 3-1: config 0 descriptor?? [ 355.603602][T11495] sock: sock_set_timeout: `syz.0.2229' (pid 11495) tries to set negative timeout [ 355.634840][T11497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.850778][ T821] usb 3-1: string descriptor 0 read error: -71 [ 355.851262][ T821] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71 [ 355.867229][ T821] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 355.867253][ T821] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71 [ 355.867306][ T821] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 355.867412][ T821] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 355.931006][ T821] usb 3-1: USB disconnect, device number 47 [ 356.479853][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2240'. [ 356.629595][T11523] block nbd0: NBD_DISCONNECT [ 356.629952][T11523] block nbd0: Send disconnect failed -32 [ 356.630223][T11523] block nbd0: Disconnected due to user request. [ 356.630239][T11523] block nbd0: shutting down sockets [ 356.813885][T11534] loop9: detected capacity change from 0 to 7 [ 356.832446][T11534] Dev loop9: unable to read RDB block 7 [ 356.832497][T11534] loop9: unable to read partition table [ 356.832700][T11534] loop9: partition table beyond EOD, truncated [ 356.832717][T11534] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.199243][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 357.434098][T11557] Invalid argument reading file caps for ./file0 [ 357.566703][T11563] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 357.566723][T11563] netlink: 'syz.0.2260': attribute type 8 has an invalid length. [ 357.566737][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'. [ 357.829085][ T1007] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 357.861620][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'. [ 357.900455][ T821] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 357.980424][ T1007] usb 6-1: Using ep0 maxpacket: 16 [ 357.983564][ T1007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 357.983598][ T1007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16451, setting to 1024 [ 357.983625][ T1007] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.983666][ T1007] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 357.983688][ T1007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.991316][ T1007] usb 6-1: config 0 descriptor?? [ 358.072726][ T821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 358.072758][ T821] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 358.072784][ T821] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 358.104823][ T821] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 358.104854][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.104873][ T821] usb 3-1: Product: syz [ 358.104886][ T821] usb 3-1: Manufacturer: syz [ 358.104898][ T821] usb 3-1: SerialNumber: syz [ 358.169684][ T821] usb 3-1: config 0 descriptor?? [ 358.185199][T11565] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 358.185732][T11565] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 358.202977][ T821] usb 3-1: ucan: probing device on interface #0 [ 358.444534][ T1007] belkin 0003:1020:0006.0023: unknown main item tag 0x0 [ 358.444573][ T1007] belkin 0003:1020:0006.0023: unknown main item tag 0x0 [ 358.444600][ T1007] belkin 0003:1020:0006.0023: unknown main item tag 0x0 [ 358.444626][ T1007] belkin 0003:1020:0006.0023: unknown main item tag 0x0 [ 358.444650][ T1007] belkin 0003:1020:0006.0023: unknown main item tag 0x0 [ 358.444676][ T1007] belkin 0003:1020:0006.0023: unknown main item tag 0x0 [ 358.444702][ T1007] belkin 0003:1020:0006.0023: unknown global tag 0xd [ 358.444716][ T1007] belkin 0003:1020:0006.0023: item 0 1 1 13 parsing failed [ 358.445397][ T1007] belkin 0003:1020:0006.0023: parse failed [ 358.445468][ T1007] belkin 0003:1020:0006.0023: probe with driver belkin failed with error -22 [ 358.656331][ T37] usb 6-1: USB disconnect, device number 18 [ 358.814995][ T821] ucan 3-1:0.0 can0: registered device [ 359.002503][ T821] ucan 3-1:0.0 can0: firmware string: \· [ 359.232955][ T5691] usb 3-1: USB disconnect, device number 48 [ 360.857790][T11657] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2287'. [ 361.188258][T11667] loop8: detected capacity change from 0 to 7 [ 361.223938][T11667] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 361.223984][T11667] loop8: partition table partially beyond EOD, truncated [ 361.224232][T11667] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 361.234497][T11667] loop8: p2 start 516240762 is beyond EOD, truncated [ 361.265396][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 361.291202][ T37] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 361.340947][ T5819] udevd[5819]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 361.418783][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 361.421279][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 361.421335][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.421359][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.421383][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.421406][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.421446][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.421468][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.451528][ T37] usb 6-1: unable to get BOS descriptor or descriptor too short [ 361.454733][ T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.454758][ T37] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.464081][ T37] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 361.464109][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.464128][ T37] usb 6-1: Product: syz [ 361.464141][ T37] usb 6-1: Manufacturer: syz [ 361.464155][ T37] usb 6-1: SerialNumber: syz [ 361.599780][ T37] usb 6-1: selecting invalid altsetting 1 [ 361.602016][ T37] usb 6-1: unit 6 not found! [ 361.728079][T11675] syzkaller1: entered promiscuous mode [ 361.728096][T11675] syzkaller1: entered allmulticast mode [ 361.946434][T11661] usbtmc 5-1:16.0: simple control status returned 0 [ 362.141948][T11680] loop8: detected capacity change from 0 to 7 [ 362.149754][ T5595] usb 5-1: USB disconnect, device number 25 [ 362.201126][T11680] Dev loop8: unable to read RDB block 7 [ 362.201146][T11680] loop8: AHDI p1 p2 [ 362.201169][T11680] loop8: partition table partially beyond EOD, truncated [ 362.214262][T11680] loop8: p1 start 1702000233 is beyond EOD, truncated [ 362.352605][ T5819] udevd[5819]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 362.386027][ T37] usb 6-1: 2:0: failed to get current value for ch 0 (-32) [ 362.503999][ T37] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 362.531592][ T37] usb 6-1: USB disconnect, device number 19 [ 362.574377][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.708174][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 362.864676][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 362.866873][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.866898][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.866909][ T10] usb 3-1: Product: syz [ 362.866916][ T10] usb 3-1: Manufacturer: syz [ 362.866923][ T10] usb 3-1: SerialNumber: syz [ 363.128472][T11684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.947123][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 363.958769][ T10] cdc_ncm 3-1:1.0: bind() failure [ 364.008106][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 364.008153][ T10] cdc_ncm 3-1:1.1: bind() failure [ 364.041899][ T10] usb 3-1: USB disconnect, device number 49 [ 365.416718][ T37] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 365.566776][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 365.569755][ T37] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 365.569784][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.585294][ T37] usb 5-1: config 0 descriptor?? [ 365.602786][ T37] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 365.949256][T11761] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2333'. [ 366.153600][ T10] IPVS: starting estimator thread 0... [ 366.246345][T11763] IPVS: using max 15 ests per chain, 36000 per kthread [ 366.588122][T11767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.787355][T11771] Invalid ELF header magic: != ELF [ 366.812322][ T37] gspca_vc032x: reg_w err -71 [ 366.812342][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812352][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812361][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812369][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812377][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812385][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812392][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812400][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812408][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812416][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812425][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812433][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812441][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812449][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812457][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812464][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812471][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812479][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 366.812485][ T37] gspca_vc032x: Unknown sensor... [ 366.812574][ T37] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 366.830527][ T37] usb 5-1: USB disconnect, device number 26 [ 367.084406][T11775] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2340'. [ 367.085030][T11775] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2340'. [ 367.216082][ T67] IPVS: stop unused estimator thread 0... [ 367.319574][T11786] netlink: 'syz.0.2343': attribute type 4 has an invalid length. [ 367.319588][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 367.630483][T11795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 367.723777][T11802] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2351'. [ 367.792475][T11800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 370.424246][ T37] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 370.504299][ T5617] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 370.575815][ T37] usb 5-1: too many configurations: 202, using maximum allowed: 8 [ 370.595916][ T37] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 370.595946][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.595966][ T37] usb 5-1: Product: syz [ 370.595979][ T37] usb 5-1: Manufacturer: syz [ 370.596011][ T37] usb 5-1: SerialNumber: syz [ 370.603232][ T37] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 370.647010][ T5595] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 370.654189][ T5617] usb 3-1: Using ep0 maxpacket: 16 [ 370.667531][ T5617] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 370.667559][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.685548][ T5617] usb 3-1: config 0 descriptor?? [ 370.733655][ T5617] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 372.617827][ T5595] usb 5-1: Service connection timeout for: 260 [ 372.617849][ T5595] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 372.622839][ T5617] gspca_sonixj: reg_w1 err -71 [ 372.654564][ T37] usb 5-1: USB disconnect, device number 27 [ 372.694258][ T5617] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 372.697201][ T5595] ath9k_htc: Failed to initialize the device [ 372.702494][ T37] usb 5-1: ath9k_htc: USB layer deinitialized [ 372.719101][ T5617] usb 3-1: USB disconnect, device number 50 [ 373.973280][ T37] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 374.033858][T11916] netlink: 'syz.5.2397': attribute type 11 has an invalid length. [ 374.122432][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 374.124317][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 374.124346][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.126508][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 374.126536][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.126547][ T37] usb 3-1: Product: syz [ 374.126555][ T37] usb 3-1: Manufacturer: syz [ 374.126562][ T37] usb 3-1: SerialNumber: syz [ 374.131411][ T37] usb 3-1: config 0 descriptor?? [ 374.156928][ T37] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 374.156962][ T37] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 374.770773][T11927] input: syz1 as /devices/virtual/input/input30 [ 374.817241][ T37] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 374.823742][ T37] em28xx 3-1:0.0: Config register raw data: 0x54 [ 375.041926][ T37] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 375.041947][ T37] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 375.041963][ T37] em28xx 3-1:0.0: No AC97 audio processor [ 375.237184][ T37] usb 3-1: USB disconnect, device number 51 [ 375.239897][ T37] em28xx 3-1:0.0: Disconnecting em28xx [ 375.335962][ T37] em28xx 3-1:0.0: Freeing device [ 375.832874][ T5691] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 375.988221][ T5691] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 375.988250][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.998804][ T5691] usb 6-1: config 0 descriptor?? [ 376.030519][ T5691] cp210x 6-1:0.0: cp210x converter detected [ 376.121416][ T5617] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 376.271249][ T5617] usb 5-1: Using ep0 maxpacket: 8 [ 376.277119][ T5617] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 376.277175][ T5617] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.277197][ T5617] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.277221][ T5617] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 376.277236][ T5617] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 376.277248][ T5617] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.277271][ T5617] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.277286][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.444551][ T5691] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 376.523792][ T5617] usb 5-1: usb_control_msg returned -32 [ 376.523839][ T5617] usbtmc 5-1:16.0: can't read capabilities [ 376.663250][ T5691] usb 6-1: cp210x converter now attached to ttyUSB0 [ 376.855581][ T5617] usb 6-1: USB disconnect, device number 20 [ 376.866250][ T5617] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.991502][ T5617] cp210x 6-1:0.0: device disconnected [ 377.238420][T11979] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 377.454682][ T37] usb 5-1: USB disconnect, device number 28 [ 377.463020][T11983] tipc: Started in network mode [ 377.463039][T11983] tipc: Node identity fff, cluster identity 10 [ 377.463050][T11983] tipc: Node number set to 4095 [ 377.678630][T11989] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2431'. [ 378.513373][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.521666][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.562561][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'. [ 378.725550][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 379.607558][T12036] syz_tun: entered allmulticast mode [ 379.608669][T12036] syz_tun: left allmulticast mode [ 380.479290][ T5617] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 380.631555][ T5617] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.631589][ T5617] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.631612][ T5617] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.631639][ T5617] usb 5-1: config 1 interface 0 has no altsetting 0 [ 380.636502][ T5617] usb 5-1: string descriptor 0 read error: -22 [ 380.636639][ T5617] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 380.636662][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.077191][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077230][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077255][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077283][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077307][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077332][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077358][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077382][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077465][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.077495][ T5617] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 381.212533][ T5617] lenovo 0003:17EF:6047.0024: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 381.257866][ T5617] lenovo 0003:17EF:6047.0024: Failed to switch F7/9/11 mode: -71 [ 381.258520][ T5617] lenovo 0003:17EF:6047.0024: Failed to switch middle button: -71 [ 381.261033][ T5617] lenovo 0003:17EF:6047.0024: Fn-lock setting failed: -71 [ 381.261541][ T5617] lenovo 0003:17EF:6047.0024: Sensitivity setting failed: -71 [ 381.283565][ T5617] usb 5-1: USB disconnect, device number 29 [ 381.374353][T12087] fido_id[12087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 381.488675][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 381.663160][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.663202][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 381.666821][ T10] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 381.666852][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.666873][ T10] usb 3-1: Product: syz [ 381.666888][ T10] usb 3-1: Manufacturer: syz [ 381.666902][ T10] usb 3-1: SerialNumber: syz [ 381.724057][ T10] usb 3-1: config 0 descriptor?? [ 381.740974][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 381.763454][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.764332][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 381.764386][ T10] usb 3-1: media controller created [ 381.807351][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.894760][ T10] DVB: Unable to find symbol tda10046_attach() [ 381.894776][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 381.894789][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 382.324738][T12099] IPv4: Oversized IP packet from 127.202.26.0 [ 382.941968][ T10] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 382.970690][ T10] usb 3-1: USB disconnect, device number 52 [ 384.377263][ T5758] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 384.527129][ T5758] usb 5-1: Using ep0 maxpacket: 32 [ 384.604721][ T5758] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 384.604746][ T5758] usb 5-1: config 0 has no interface number 0 [ 384.604782][ T5758] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.632809][ T5758] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 384.632838][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.632858][ T5758] usb 5-1: Product: syz [ 384.632872][ T5758] usb 5-1: Manufacturer: syz [ 384.632886][ T5758] usb 5-1: SerialNumber: syz [ 384.642615][ T5758] usb 5-1: config 0 descriptor?? [ 384.718517][ T5758] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 384.718554][ T5758] em28xx 5-1:0.132: Video interface 132 found: [ 385.151478][ T5758] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 385.834796][ T5758] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 385.834827][ T5758] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 385.834868][ T5758] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 385.898582][ T5758] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 385.898609][ T5758] em28xx 5-1:0.132: analog set to bulk mode. [ 385.901086][ T37] em28xx 5-1:0.132: Registering V4L2 extension [ 385.984504][ T5758] usb 5-1: USB disconnect, device number 30 [ 385.994882][ T5758] em28xx 5-1:0.132: Disconnecting em28xx [ 386.214734][ T37] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 386.214758][ T37] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 386.214771][ T37] em28xx 5-1:0.132: No AC97 audio processor [ 386.339355][ T37] usb 5-1: Decoder not found [ 386.339375][ T37] em28xx 5-1:0.132: failed to create media graph [ 386.339471][ T37] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 386.450902][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 386.672332][ T37] em28xx 5-1:0.132: Remote control support is not available for this card. [ 386.672430][ T5758] em28xx 5-1:0.132: Closing input extension [ 386.880282][ T5758] em28xx 5-1:0.132: Freeing device [ 388.335239][ T5691] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 388.499785][ T5691] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.499811][ T5691] usb 6-1: config 0 has no interface number 0 [ 388.499853][ T5691] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.499879][ T5691] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.499914][ T5691] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 388.499936][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.571380][ T5691] usb 6-1: config 0 descriptor?? [ 389.103186][ T5691] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0025/input/input31 [ 389.423134][ T5691] holtek_kbd 0003:04D9:A055.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 389.471561][ T5691] usb 6-1: USB disconnect, device number 21 [ 389.543960][T12257] fido_id[12257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 389.963809][T12269] input: syz0 as /devices/virtual/input/input32 [ 390.438551][T12284] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 390.438581][T12284] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 390.834013][ T37] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 390.996095][ T37] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 390.996149][ T37] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 390.996172][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.025460][ T37] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 391.170329][T12306] 9p: Unknown uid 00000000004294967295 [ 391.507618][T12314] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 391.507637][T12314] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 392.297166][ T37] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 392.297188][ T37] stv0680 6-1:4.0: Could not get descriptor 0200 [ 392.298748][ T37] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 392.298768][ T37] stv0680 6-1:4.0: last error: 77, command = 0x22 [ 392.336396][T12327] syzkaller1: entered promiscuous mode [ 392.336420][T12327] syzkaller1: entered allmulticast mode [ 392.347754][ T37] usb 6-1: USB disconnect, device number 22 [ 392.708357][T12340] input: syz1 as /devices/virtual/input/input33 [ 393.139485][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2578'. [ 393.216323][ T38] audit: type=1326 audit(1778028779.877:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.2.2575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420a3ecdd9 code=0x7fc00000 [ 393.559801][T12370] syzkaller1: entered promiscuous mode [ 393.559826][T12370] syzkaller1: entered allmulticast mode [ 393.792792][ T38] audit: type=1326 audit(1778028780.467:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.2.2575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f420a3ecdd9 code=0x7fc00000 [ 396.201323][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 396.375788][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 396.388847][ T10] usb 5-1: string descriptor 0 read error: -22 [ 396.388993][ T10] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 396.389016][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.827899][ T10] hid_parser_main: 4007 callbacks suppressed [ 396.827923][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.827953][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.827987][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.828009][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.828035][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.828061][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.828088][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.828114][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.828141][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.828168][ T10] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 396.916556][ T10] hid_mf 0003:0079:1801.0026: hidraw0: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.4-1/input0 [ 396.916588][ T10] hid_mf 0003:0079:1801.0026: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 397.030012][ T5595] usb 5-1: USB disconnect, device number 31 [ 397.069935][ T1007] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 397.252064][ T1007] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.252106][ T1007] usb 6-1: config 0 interface 0 has no altsetting 0 [ 397.254696][ T1007] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 397.254725][ T1007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.254745][ T1007] usb 6-1: Product: syz [ 397.254759][ T1007] usb 6-1: Manufacturer: syz [ 397.254773][ T1007] usb 6-1: SerialNumber: syz [ 397.262684][ T1007] usb 6-1: config 0 descriptor?? [ 397.268632][ T1007] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 397.301271][ T1007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.302777][ T1007] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 397.302831][ T1007] usb 6-1: media controller created [ 397.390734][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 397.405715][ T1007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.457403][ T1007] DVB: Unable to find symbol tda10046_attach() [ 397.457415][ T1007] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 397.457423][ T1007] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 397.560707][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 397.565536][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.565883][ T10] usb 3-1: config 0 has no interfaces? [ 397.565925][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 397.565957][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.579399][ T10] usb 3-1: config 0 descriptor?? [ 397.796796][ T10] usb 3-1: USB disconnect, device number 53 [ 398.324444][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 398.324465][T12466] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2621'. [ 398.508707][ T1007] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 398.546416][ T1007] usb 6-1: USB disconnect, device number 23 [ 399.245988][T12498] Invalid ELF header magic: != ELF [ 399.246867][T12498] Invalid ELF header magic: != ELF [ 399.579650][ T5595] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 399.729580][ T5595] usb 5-1: Using ep0 maxpacket: 16 [ 399.731539][ T5595] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 399.731571][ T5595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.734046][ T5595] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.734131][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.734150][ T5595] usb 5-1: Product: syz [ 399.734163][ T5595] usb 5-1: Manufacturer: syz [ 399.734344][ T5595] usb 5-1: SerialNumber: syz [ 399.747863][ T5595] usb 5-1: config 0 descriptor?? [ 399.759325][ T5595] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 399.759733][ T5595] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 400.417532][ T5595] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 400.418388][ T5595] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 400.627063][ T5595] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 400.627085][ T5595] em28xx 5-1:0.0: No AC97 audio processor [ 400.633408][T12520] input: syz1 as /devices/virtual/input/input34 [ 400.666229][ T5595] usb 5-1: USB disconnect, device number 32 [ 400.668697][ T5595] em28xx 5-1:0.0: Disconnecting em28xx [ 400.766347][ T5595] em28xx 5-1:0.0: Freeing device [ 401.400915][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 401.558623][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 401.570424][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 401.570454][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.570599][ T10] usb 3-1: Product: syz [ 401.570618][ T10] usb 3-1: Manufacturer: syz [ 401.570630][ T10] usb 3-1: SerialNumber: syz [ 401.580423][ T10] usb 3-1: config 0 descriptor?? [ 401.786818][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.001657][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 402.027058][ T10] usb 3-1: USB disconnect, device number 54 [ 402.628351][T12560] input: syz0 as /devices/virtual/input/input35 [ 403.166545][T12575] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2666'. [ 403.219284][T12578] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2666'. [ 403.266840][T12575] gretap0: entered promiscuous mode [ 403.401444][T12578] 0ªî{X¹¦: renamed from gretap0 [ 403.417713][ T5691] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 403.445866][T12578] 0ªî{X¹¦: left promiscuous mode [ 403.445890][T12578] 0ªî{X¹¦: entered allmulticast mode [ 403.475740][T12578] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 403.575976][ T5691] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 403.576008][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.598829][ T5691] usb 3-1: config 0 descriptor?? [ 404.238571][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.302075][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.321793][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.323359][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.324149][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.399471][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.633373][ T5595] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 404.843880][ T5595] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.843906][ T5595] usb 5-1: config 0 has no interfaces? [ 404.893854][ T5691] usb 3-1: Cannot set autoneg [ 404.893986][ T5595] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 404.894010][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.894029][ T5595] usb 5-1: Product: syz [ 404.894042][ T5595] usb 5-1: Manufacturer: syz [ 404.894054][ T5595] usb 5-1: SerialNumber: syz [ 404.894134][ T5691] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 405.064862][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.098168][ T5595] usb 5-1: config 0 descriptor?? [ 405.103938][ T5691] usb 3-1: USB disconnect, device number 55 [ 405.119421][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.136812][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.187142][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.190095][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.426735][ T5758] usb 5-1: USB disconnect, device number 33 [ 405.636276][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.809597][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.866452][ T5691] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 406.033735][ T5691] usb 6-1: Using ep0 maxpacket: 32 [ 406.040563][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.040612][ T5691] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 406.040634][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.059009][ T5691] usb 6-1: config 0 descriptor?? [ 406.064887][ T5691] hub 6-1:0.0: USB hub found [ 406.291104][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 406.312527][ T5691] hub 6-1:0.0: 1 port detected [ 406.361493][ T13] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.041895][T12626] syzkaller1: entered promiscuous mode [ 407.041921][T12626] syzkaller1: entered allmulticast mode [ 407.078425][T12628] netlink: 'syz.2.2684': attribute type 21 has an invalid length. [ 407.078449][T12628] netlink: 'syz.2.2684': attribute type 22 has an invalid length. [ 407.339507][ T5691] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 407.339632][ T5691] usb 6-1-port1: connect-debounce failed [ 407.360770][ T5758] usb 6-1: USB disconnect, device number 24 [ 407.525904][ T5615] Bluetooth: hci3: command tx timeout [ 407.989064][T12641] netlink: 'syz.2.2688': attribute type 1 has an invalid length. [ 408.827286][ T5691] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 409.007539][ T5691] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.008113][ T5691] usb 5-1: not running at top speed; connect to a high speed hub [ 409.009890][ T5691] usb 5-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.009922][ T5691] usb 5-1: config 1 interface 0 has no altsetting 0 [ 409.013853][ T5691] usb 5-1: string descriptor 0 read error: -22 [ 409.013978][ T5691] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.40 [ 409.013991][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.127028][ T13] bridge_slave_1: left allmulticast mode [ 409.127085][ T13] bridge_slave_1: left promiscuous mode [ 409.136076][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.197194][ T13] bridge_slave_0: left allmulticast mode [ 409.197231][ T13] bridge_slave_0: left promiscuous mode [ 409.248638][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.558275][ T5691] uclogic 0003:28BD:0075.0027: interface is invalid, ignoring [ 409.598026][ T5615] Bluetooth: hci3: command tx timeout [ 409.713288][ T5691] usb 5-1: USB disconnect, device number 34 [ 410.510706][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.590560][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.637813][ T13] bond0 (unregistering): Released all slaves [ 411.005756][T12586] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.006046][T12586] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.006309][T12586] bridge_slave_0: entered allmulticast mode [ 411.009490][T12586] bridge_slave_0: entered promiscuous mode [ 411.035308][ T37] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 411.100317][T12586] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.100629][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.100943][T12586] bridge_slave_1: entered allmulticast mode [ 411.104497][T12586] bridge_slave_1: entered promiscuous mode [ 411.164720][ T1007] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 411.243873][ T37] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 411.243903][ T37] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 411.243922][ T37] usb 6-1: Product: syz [ 411.243935][ T37] usb 6-1: Manufacturer: syz [ 411.243947][ T37] usb 6-1: SerialNumber: syz [ 411.247994][ T37] usb 6-1: config 0 descriptor?? [ 411.251387][ T37] ch341 6-1:0.0: ch341-uart converter detected [ 411.374035][ T1007] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.374067][ T1007] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.374109][ T1007] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.374131][ T1007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.612298][ T1007] usb 3-1: usb_control_msg returned -32 [ 411.612343][ T1007] usbtmc 3-1:16.0: can't read capabilities [ 411.676018][ T5615] Bluetooth: hci3: command tx timeout [ 411.911925][T12586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.973944][T12586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.171688][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 412.316836][T12586] team0: Port device team_slave_0 added [ 412.336763][ T37] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 412.457491][T12586] team0: Port device team_slave_1 added [ 412.540540][ T1007] usb 6-1: USB disconnect, device number 25 [ 412.561312][ T1007] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 412.562016][ T1007] ch341 6-1:0.0: device disconnected [ 412.623110][ T13] hsr_slave_0: left promiscuous mode [ 412.663061][ T13] hsr_slave_1: left promiscuous mode [ 412.664017][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.664034][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.700389][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.700411][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.785017][ T13] veth1_macvtap: left promiscuous mode [ 412.785079][ T13] veth0_macvtap: left promiscuous mode [ 412.785242][ T13] veth1_vlan: left promiscuous mode [ 412.785363][ T13] veth0_vlan: left promiscuous mode [ 413.317388][ T37] IPVS: starting estimator thread 0... [ 413.412889][T12720] IPVS: using max 12 ests per chain, 28800 per kthread [ 413.764180][ T5615] Bluetooth: hci3: command tx timeout [ 413.894968][ T9] usb 3-1: USB disconnect, device number 56 [ 414.143552][ T13] team0 (unregistering): Port device team_slave_1 removed [ 414.183084][ T13] team0 (unregistering): Port device team_slave_0 removed [ 414.374747][T12586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.374760][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.374774][T12586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.489434][T12586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.489446][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.489475][T12586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.867951][T12586] hsr_slave_0: entered promiscuous mode [ 414.879195][T12586] hsr_slave_1: entered promiscuous mode [ 415.029463][T12745] netlink: 'syz.2.2723': attribute type 4 has an invalid length. [ 415.082203][T12748] netlink: 'syz.2.2723': attribute type 4 has an invalid length. [ 415.366723][T12757] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 415.366745][T12757] netlink: 'syz.2.2726': attribute type 4 has an invalid length. [ 415.366758][T12757] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2726'. [ 415.371767][ T37] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 415.521654][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 415.524075][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.524107][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.525440][ T37] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50 [ 415.525467][ T37] usb 6-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 415.525487][ T37] usb 6-1: Product: syz [ 415.582771][ T37] usb 6-1: config 0 descriptor?? [ 415.587180][ T37] hub 6-1:0.0: USB hub found [ 415.681865][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 415.790681][ T37] hub 6-1:0.0: 1 port detected [ 415.941906][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 415.941936][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.941956][ T9] usb 5-1: Product: syz [ 415.941970][ T9] usb 5-1: Manufacturer: syz [ 415.941982][ T9] usb 5-1: SerialNumber: syz [ 416.231615][ T13] IPVS: stop unused estimator thread 0... [ 416.235103][ T37] usb 6-1: USB disconnect, device number 26 [ 416.417907][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 416.536315][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 416.536378][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 417.153730][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 417.153801][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 417.279612][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 417.317595][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 417.353882][ T9] usb 5-1: USB disconnect, device number 35 [ 417.440845][ T5691] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 417.596315][ T5691] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 417.596347][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.609314][ T5691] usb 6-1: config 0 descriptor?? [ 417.618329][ T5691] cp210x 6-1:0.0: cp210x converter detected [ 417.754011][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 418.001003][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 418.022475][ T5691] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 418.153359][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 418.159323][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.159353][ T10] usb 3-1: config 0 has no interface number 0 [ 418.166211][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 418.166239][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.166258][ T10] usb 3-1: Product: syz [ 418.166271][ T10] usb 3-1: Manufacturer: syz [ 418.166284][ T10] usb 3-1: SerialNumber: syz [ 418.229397][ T10] usb 3-1: config 0 descriptor?? [ 418.322717][ T5691] usb 6-1: cp210x converter now attached to ttyUSB0 [ 418.343983][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 418.506579][ T5691] usb 6-1: USB disconnect, device number 27 [ 418.702568][ T5691] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 418.911818][ T5691] cp210x 6-1:0.0: device disconnected [ 419.143311][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 419.381442][ T5691] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 419.495720][ T10] gspca_spca1528: reg_w err -71 [ 419.495819][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 419.541184][ T10] usb 3-1: USB disconnect, device number 57 [ 419.559559][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 419.562368][ T5691] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 419.562393][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.564532][ T5691] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 419.564551][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.564562][ T5691] usb 6-1: Product: syz [ 419.564570][ T5691] usb 6-1: Manufacturer: syz [ 419.564577][ T5691] usb 6-1: SerialNumber: syz [ 419.637345][ T5691] usb 6-1: config 0 descriptor?? [ 419.687908][ T5691] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 419.687930][ T5691] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 419.987951][T12586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 420.210172][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.244163][T12586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 420.263442][ T5691] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 420.270787][ T5691] em28xx 6-1:0.0: Config register raw data: 0xe1 [ 420.270808][ T5691] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 420.270823][ T5691] em28xx 6-1:0.0: No AC97 audio processor [ 420.313378][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.330882][T12586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 420.534216][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.556648][T12586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 420.742717][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.775414][ T5691] usb 6-1: USB disconnect, device number 28 [ 421.093010][T12586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.151019][T12586] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.189679][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.189838][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.277075][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.277325][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.447700][ T821] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 423.520116][ T37] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 423.574137][T12586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.617896][ T821] usb 6-1: Using ep0 maxpacket: 8 [ 423.625487][ T821] usb 6-1: config 0 has no interfaces? [ 423.634506][ T821] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 423.634537][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.634558][ T821] usb 6-1: Product: syz [ 423.634572][ T821] usb 6-1: Manufacturer: syz [ 423.634587][ T821] usb 6-1: SerialNumber: syz [ 423.673512][ T821] usb 6-1: config 0 descriptor?? [ 423.690656][ T37] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.690687][ T37] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.690729][ T37] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.690751][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.909814][ T37] usb 5-1: usb_control_msg returned -32 [ 423.909863][ T37] usbtmc 5-1:16.0: can't read capabilities [ 423.990699][ T10] usb 6-1: USB disconnect, device number 29 [ 424.348090][T12586] veth0_vlan: entered promiscuous mode [ 424.422938][T12586] veth1_vlan: entered promiscuous mode [ 424.507903][T12586] veth0_macvtap: entered promiscuous mode [ 424.551146][T12586] veth1_macvtap: entered promiscuous mode [ 424.624635][T12586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.653331][T12586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.707545][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.707592][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.707626][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.707651][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.687341][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.687361][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.025737][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.025752][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.369768][ T9] usb 5-1: USB disconnect, device number 36 [ 427.327285][T12973] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2774'. [ 427.384678][ T37] kernel write not supported for file /input/event0 (pid: 37 comm: kworker/1:1) [ 428.037561][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2778'. [ 428.369973][T12992] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 428.939934][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 429.311610][T13020] input: syz0 as /devices/virtual/input/input36 [ 430.319881][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'. [ 430.685621][T13059] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 430.685642][T13059] netlink: 'syz.2.2820': attribute type 8 has an invalid length. [ 430.685656][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 431.022903][T13071] loop8: detected capacity change from 0 to 7 [ 431.080479][T13071] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 431.080508][T13071] loop8: partition table partially beyond EOD, truncated [ 431.080652][T13071] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 431.087442][T13071] loop8: p2 start 516240762 is beyond EOD, truncated [ 431.297725][ T1007] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 431.314858][ T5819] udevd[5819]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 431.343767][ T5691] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 431.343791][ T5691] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 431.344082][ C1] ------------[ cut here ]------------ [ 431.344090][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 431.344119][ C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd67/0x1010, CPU#1: ktimers/1/30 [ 431.344147][ C1] Modules linked in: [ 431.344171][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.344188][ C1] Tainted: [L]=SOFTLOCKUP [ 431.344192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.344203][ C1] RIP: 0010:__queue_work+0xd87/0x1010 [ 431.344219][ C1] Code: 01 00 00 4c 8d 35 e9 f4 21 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 431.344230][ C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010046 [ 431.344241][ C1] RAX: 1ffff110064fc153 RBX: 0000000000000008 RCX: ffff88801dec9ec0 [ 431.344250][ C1] RDX: ffff888041094168 RSI: ffffffff8a263ab0 RDI: ffffffff8faf76e0 [ 431.344259][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 431.344267][ C1] R10: dffffc0000000000 R11: ffffffff818d8870 R12: dffffc0000000000 [ 431.344280][ C1] R13: ffff8880327e0a98 R14: ffffffff8faf76e0 R15: ffff888041094168 [ 431.344292][ C1] FS: 0000000000000000(0000) GS:ffff888125dcd000(0000) knlGS:0000000000000000 [ 431.344302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.344311][ C1] CR2: 00007f0443376e90 CR3: 0000000028980000 CR4: 00000000003526f0 [ 431.344326][ C1] Call Trace: [ 431.344334][ C1] [ 431.344342][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 431.344366][ C1] call_timer_fn+0x192/0x5e0 [ 431.344380][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 431.344395][ C1] ? call_timer_fn+0xd4/0x5e0 [ 431.344407][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 431.344427][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 431.344442][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 431.344460][ C1] __run_timer_base+0x764/0x9f0 [ 431.344490][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 431.344511][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 431.344535][ C1] run_timer_softirq+0xb7/0x170 [ 431.344553][ C1] handle_softirqs+0x1de/0x6d0 [ 431.344575][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 431.344591][ C1] run_ktimerd+0x69/0x100 [ 431.344607][ C1] smpboot_thread_fn+0x541/0xa50 [ 431.344625][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 431.344648][ C1] kthread+0x388/0x470 [ 431.344667][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 431.344690][ C1] ? __pfx_kthread+0x10/0x10 [ 431.344710][ C1] ret_from_fork+0x514/0xb70 [ 431.344728][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 431.344744][ C1] ? __switch_to+0xc79/0x1410 [ 431.344760][ C1] ? __pfx_kthread+0x10/0x10 [ 431.344779][ C1] ret_from_fork_asm+0x1a/0x30 [ 431.344809][ C1] [ 431.344823][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 431.344834][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.344852][ C1] Tainted: [L]=SOFTLOCKUP [ 431.344856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.344864][ C1] Call Trace: [ 431.344869][ C1] [ 431.344874][ C1] vpanic+0x56c/0xa60 [ 431.344893][ C1] ? __pfx__printk+0x10/0x10 [ 431.344906][ C1] ? __pfx_vpanic+0x10/0x10 [ 431.344922][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 431.344942][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 431.344966][ C1] panic+0xc5/0xd0 [ 431.344983][ C1] ? __pfx_panic+0x10/0x10 [ 431.345008][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 431.345031][ C1] __warn+0x315/0x4c0 [ 431.345048][ C1] ? __queue_work+0xd67/0x1010 [ 431.345065][ C1] ? __queue_work+0xd67/0x1010 [ 431.345081][ C1] __report_bug+0x29a/0x540 [ 431.345094][ C1] ? call_timer_fn+0x192/0x5e0 [ 431.345106][ C1] ? __run_timer_base+0x764/0x9f0 [ 431.345122][ C1] ? run_timer_softirq+0xb7/0x170 [ 431.345143][ C1] ? __queue_work+0xd67/0x1010 [ 431.345158][ C1] ? __pfx___report_bug+0x10/0x10 [ 431.345171][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 431.345188][ C1] ? register_lock_class+0x31/0x2e0 [ 431.345210][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 431.345230][ C1] report_bug_entry+0x19a/0x290 [ 431.345244][ C1] ? __queue_work+0xd87/0x1010 [ 431.345258][ C1] ? __queue_work+0xd8c/0x1010 [ 431.345273][ C1] handle_bug+0xce/0x200 [ 431.345289][ C1] exc_invalid_op+0x1a/0x50 [ 431.345305][ C1] asm_exc_invalid_op+0x1a/0x20 [ 431.345318][ C1] RIP: 0010:__queue_work+0xd87/0x1010 [ 431.345334][ C1] Code: 01 00 00 4c 8d 35 e9 f4 21 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 431.345345][ C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010046 [ 431.345357][ C1] RAX: 1ffff110064fc153 RBX: 0000000000000008 RCX: ffff88801dec9ec0 [ 431.345367][ C1] RDX: ffff888041094168 RSI: ffffffff8a263ab0 RDI: ffffffff8faf76e0 [ 431.345376][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 431.345384][ C1] R10: dffffc0000000000 R11: ffffffff818d8870 R12: dffffc0000000000 [ 431.345394][ C1] R13: ffff8880327e0a98 R14: ffffffff8faf76e0 R15: ffff888041094168 [ 431.345407][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 431.345427][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 431.345445][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 431.345467][ C1] call_timer_fn+0x192/0x5e0 [ 431.345480][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 431.345495][ C1] ? call_timer_fn+0xd4/0x5e0 [ 431.345507][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 431.345527][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 431.345542][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 431.345560][ C1] __run_timer_base+0x764/0x9f0 [ 431.345589][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 431.345611][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 431.345634][ C1] run_timer_softirq+0xb7/0x170 [ 431.345653][ C1] handle_softirqs+0x1de/0x6d0 [ 431.345674][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 431.345698][ C1] run_ktimerd+0x69/0x100 [ 431.345715][ C1] smpboot_thread_fn+0x541/0xa50 [ 431.345732][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 431.345755][ C1] kthread+0x388/0x470 [ 431.345773][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 431.345788][ C1] ? __pfx_kthread+0x10/0x10 [ 431.345808][ C1] ret_from_fork+0x514/0xb70 [ 431.345827][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 431.345843][ C1] ? __switch_to+0xc79/0x1410 [ 431.345858][ C1] ? __pfx_kthread+0x10/0x10 [ 431.345878][ C1] ret_from_fork_asm+0x1a/0x30 [ 431.345908][ C1] [ 431.347085][ C1] Kernel Offset: disabled