last executing test programs: 2m43.882255123s ago: executing program 0 (id=919): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="cb8e363f2486d7bf4a8bc2f5e05a86875d8788e66617e2cfe55a2fcdc8c9b3cda2bcd2cb5f68b5c1fc763d40600b", 0x2e}, {&(0x7f0000000240)="954c", 0x2}], 0x2, 0x0, 0x0, 0x4004}], 0x1, 0x200048d1) 2m43.795438311s ago: executing program 0 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x135) 2m43.68451133s ago: executing program 0 (id=923): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x1}, &(0x7f00000005c0)=0x8) 2m43.633066134s ago: executing program 0 (id=925): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) 2m43.563072393s ago: executing program 0 (id=926): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2m42.903346356s ago: executing program 0 (id=934): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2m27.723117664s ago: executing program 32 (id=934): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.005866658s ago: executing program 1 (id=2250): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r2, 0xfffffffffffffc01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) tee(r0, r2, 0x60000000000, 0x0) 3.072553644s ago: executing program 1 (id=2256): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.409137308s ago: executing program 4 (id=2262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}], 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) write(r1, &(0x7f0000000580)="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", 0xfe0) 2.253800171s ago: executing program 4 (id=2263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x6}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb88a8400081"], 0x6e) 1.960179631s ago: executing program 4 (id=2265): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/19, 0x14}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.644150183s ago: executing program 3 (id=2269): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5422) 1.464482557s ago: executing program 3 (id=2272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x8, 0x0, 0x8e0, 0x0, 0xf4, 0xfffffffffffffff9, 0xfffffffffffffff9, 0x2, 0x8, 0x3e, 0xf63, 0x8000000000000000, 0x8796, 0x9adb, 0x3, 0x100000000], 0x3000, 0x4f642}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0x4000, 0x400fa, 0x7fffffff, 0x3ff, 0x0, [{0x88, 0x3, 0x77, '\x00', 0x7}, {0x4, 0x2, 0x8}, {0x3f, 0x5, 0x9, '\x00', 0x80}, {0x4, 0x0, 0x0, '\x00', 0xd}, {0x7, 0x6, 0x5, '\x00', 0x2}, {0x7, 0xfc, 0x74, '\x00', 0x2}, {0x9, 0x3, 0x3, '\x00', 0x11}, {0x4, 0x4, 0x4, '\x00', 0x2}, {0xf, 0x3, 0x0, '\x00', 0x27}, {0x5, 0x2, 0xff, '\x00', 0x5}, {0x6, 0x80, 0x3, '\x00', 0x9}, {0x6, 0x90, 0x7, '\x00', 0x1}, {0x14, 0x47, 0x53, '\x00', 0x2}, {0x9, 0x5f, 0x80, '\x00', 0xe}, {0x1, 0x3, 0xf, '\x00', 0x3}, {0x75, 0x99, 0x8, '\x00', 0x8}, {0x3, 0xff, 0xd2, '\x00', 0x81}, {0x3, 0x3, 0x2, '\x00', 0x8}, {0x0, 0x1, 0xc, '\x00', 0x7}, {0xe3, 0x9, 0x8, '\x00', 0x4d}, {0x3, 0x0, 0x1, '\x00', 0xff}, {0x1, 0x7, 0x10, '\x00', 0xfa}, {0x29, 0x8, 0x0, '\x00', 0x4}, {0x97, 0x0, 0x3b, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.148620815s ago: executing program 3 (id=2274): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) 982.174524ms ago: executing program 4 (id=2276): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r2, 0xee01, 0x0) 945.082616ms ago: executing program 3 (id=2277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009ff1f5a500aaaaaaaa88a8600081"], 0x3a) 796.638025ms ago: executing program 4 (id=2278): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) 756.686601ms ago: executing program 3 (id=2279): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) listen(r0, 0xa) landlock_restrict_self(r1, 0x0) listen(r0, 0x0) 732.376881ms ago: executing program 2 (id=2280): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) 590.835929ms ago: executing program 2 (id=2281): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x5422) 590.631199ms ago: executing program 3 (id=2282): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xba03, 0x7}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 506.456717ms ago: executing program 1 (id=2283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 387.531598ms ago: executing program 2 (id=2284): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r1], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 366.593356ms ago: executing program 1 (id=2285): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000001f00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1a000}, &(0x7f0000000640)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x10000000000001bc}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001e80)=[{0x0, 0x100000}], 0x1}}], 0x90}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 271.009592ms ago: executing program 2 (id=2286): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) 212.307745ms ago: executing program 1 (id=2287): bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x101) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x4, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x40, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x5800) 206.194258ms ago: executing program 4 (id=2288): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0x7, "381928dfb0e2db"}, 0x0, 0x0}) 102.025931ms ago: executing program 2 (id=2289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 65.00283ms ago: executing program 1 (id=2290): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x4004) recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000300)=""/20, 0x14}], 0x3}, 0x40}], 0x1, 0x40000100, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=2291): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x2}, &(0x7f0000000040)=0x8) kernel console output (not intermixed with test programs): T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 113.775226][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.799332][ T10] usb 4-1: Product: syz [ 113.803567][ T10] usb 4-1: Manufacturer: syz [ 113.820940][ T10] usb 4-1: SerialNumber: syz [ 113.839504][ T10] usb 4-1: config 0 descriptor?? [ 113.855339][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 113.887402][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 114.165510][ T30] audit: type=1326 audit(1752850537.908:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.1.271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67a658e9a9 code=0x0 [ 114.260140][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 114.634179][ T30] audit: type=1326 audit(1752850538.378:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231b38e9a9 code=0x7ffc0000 [ 114.673047][ T10] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 114.704897][ T10] em28xx 4-1:0.132: board has no eeprom [ 114.717116][ T30] audit: type=1326 audit(1752850538.388:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 114.740300][ T30] audit: type=1326 audit(1752850538.388:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 114.776410][ T30] audit: type=1326 audit(1752850538.388:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 114.798492][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 114.807626][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 114.830745][ T1072] em28xx 4-1:0.132: Registering V4L2 extension [ 114.867561][ T10] usb 4-1: USB disconnect, device number 5 [ 114.884902][ T30] audit: type=1326 audit(1752850538.388:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 114.940368][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 115.030051][ T30] audit: type=1326 audit(1752850538.388:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.137482][ T30] audit: type=1326 audit(1752850538.388:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.216976][ T30] audit: type=1326 audit(1752850538.388:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.242046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.304494][ T30] audit: type=1326 audit(1752850538.388:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.355616][ T1072] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 115.427374][ T1072] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 115.434548][ T1072] em28xx 4-1:0.132: No AC97 audio processor [ 115.472726][ T30] audit: type=1326 audit(1752850538.388:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.518310][ T1072] usb 4-1: Decoder not found [ 115.522960][ T1072] em28xx 4-1:0.132: failed to create media graph [ 115.581663][ T1072] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 115.597480][ T30] audit: type=1326 audit(1752850538.388:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.631466][ T1072] em28xx 4-1:0.132: Remote control support is not available for this card. [ 115.645639][ T10] em28xx 4-1:0.132: Closing input extension [ 115.652475][ T30] audit: type=1326 audit(1752850538.388:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.676637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.694141][ T10] em28xx 4-1:0.132: Freeing device [ 115.727554][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.751627][ T30] audit: type=1326 audit(1752850538.388:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.805966][ T30] audit: type=1326 audit(1752850538.388:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.829795][ T30] audit: type=1326 audit(1752850538.388:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.857223][ T30] audit: type=1326 audit(1752850538.388:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.0.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f231b32ab89 code=0x7ffc0000 [ 115.880144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 115.907739][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 115.920398][ T24] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 115.934851][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.026966][ T24] usb 3-1: config 0 descriptor?? [ 116.037719][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 117.248785][ T24] gspca_vc032x: reg_w err -71 [ 117.253599][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.260134][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.265467][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.271206][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.276521][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.282219][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.287785][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.293099][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.301125][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.317433][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.322766][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.328244][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.334999][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.344206][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.349741][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.355057][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.357903][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.361008][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.373273][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.378651][ T24] gspca_vc032x: Unknown sensor... [ 117.383866][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 117.402451][ T24] usb 3-1: USB disconnect, device number 6 [ 117.555876][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 117.578495][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 117.606996][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 117.637775][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 117.658221][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 117.672203][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 117.690739][ T10] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 117.713314][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.725160][ T10] usb 4-1: Product: syz [ 117.729816][ T10] usb 4-1: Manufacturer: syz [ 117.734550][ T10] usb 4-1: SerialNumber: syz [ 117.747527][ T10] usb 4-1: config 0 descriptor?? [ 118.083744][ T6629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.300'. [ 118.173613][ T10] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 118.186317][ T10] input input11: Device does not respond to id packet M [ 118.225170][ T10] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 118.235681][ T10] input input11: Device does not respond to id packet P [ 118.244526][ T10] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 118.256377][ T10] input input11: Device does not respond to id packet B [ 118.466142][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 118.473736][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 118.480788][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 118.487298][ T10] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 118.498552][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 118.535692][ T10] usb 4-1: USB disconnect, device number 6 [ 118.689073][ T1072] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.886993][ T1072] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.893731][ T6652] warning: `syz.0.311' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.904179][ T1072] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.942937][ T1072] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.958173][ T1072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.974717][ T1072] usb 3-1: SerialNumber: syz [ 119.040710][ T6656] evm: overlay not supported [ 119.203314][ T1072] usb 3-1: 0:2 : does not exist [ 119.251926][ T1072] usb 3-1: USB disconnect, device number 7 [ 119.335659][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.433589][ T6671] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.760190][ T6681] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 119.886150][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 121.191830][ T6734] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.345'. [ 121.917562][ T43] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 122.099526][ T43] usb 3-1: config 189 has an invalid interface number: 172 but max is 0 [ 122.120624][ T43] usb 3-1: config 189 has no interface number 0 [ 122.168085][ T43] usb 3-1: config 189 interface 172 altsetting 197 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 122.189687][ T43] usb 3-1: config 189 interface 172 has no altsetting 0 [ 122.191308][ T6774] input: syz0 as /devices/virtual/input/input12 [ 122.202018][ T43] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=29.81 [ 122.214213][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.223202][ T43] usb 3-1: Product: syz [ 122.228163][ T43] usb 3-1: Manufacturer: syz [ 122.232905][ T43] usb 3-1: SerialNumber: syz [ 122.299555][ T6777] input: syz0 as /devices/virtual/input/input13 [ 122.478857][ T43] usb 3-1: USB disconnect, device number 8 [ 123.079020][ T1072] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.253512][ T1072] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.265672][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.281842][ T1072] usb 4-1: config 0 descriptor?? [ 123.300874][ T1072] cp210x 4-1:0.0: cp210x converter detected [ 123.608170][ T6817] binder: 6816:6817 ioctl c0306201 2000000003c0 returned -14 [ 123.706382][ T1072] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 123.910251][ T6827] binder: 6826:6827 ioctl c0306201 2000000003c0 returned -14 [ 123.944571][ T1072] usb 4-1: cp210x converter now attached to ttyUSB0 [ 124.133911][ T1072] usb 4-1: USB disconnect, device number 7 [ 124.163488][ T1072] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.191203][ T1072] cp210x 4-1:0.0: device disconnected [ 125.115898][ T6879] mmap: syz.0.404 (6879) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.471517][ T6892] input: syz1 as /devices/virtual/input/input14 [ 125.868341][ T6903] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 125.868341][ T6903] C<+ [ 126.677524][ T1072] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.785468][ T6945] overlayfs: failed to clone upperpath [ 126.853347][ T1072] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.867636][ T1072] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 126.876734][ T1072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.890336][ T1072] usb 3-1: config 0 descriptor?? [ 127.223212][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 127.223231][ T30] audit: type=1326 audit(1752850550.968:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.0.434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f231b38e9a9 code=0x0 [ 127.422257][ T30] audit: type=1326 audit(1752850551.168:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6957 comm="syz.1.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x0 [ 127.915709][ T1072] video4linux radio48: keene_cmd_set failed (-71) [ 127.924956][ T1072] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 127.934359][ T1072] usb 3-1: USB disconnect, device number 9 [ 128.092545][ T6965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.438'. [ 128.333499][ T6973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.512840][ T7013] KVM: debugfs: duplicate directory 7013-5 [ 129.777464][ T1072] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.947648][ T1072] usb 3-1: Using ep0 maxpacket: 16 [ 129.955331][ T1072] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.970186][ T1072] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.986869][ T1072] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.002320][ T1072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.010624][ T1072] usb 3-1: Product: syz [ 130.014913][ T1072] usb 3-1: Manufacturer: syz [ 130.022983][ T1072] usb 3-1: SerialNumber: syz [ 130.117445][ T927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.243061][ T1072] usb 3-1: 0:2 : does not exist [ 130.267510][ T1072] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 130.270323][ T927] usb 2-1: Using ep0 maxpacket: 32 [ 130.294240][ T927] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.311284][ T927] usb 2-1: config 0 has no interface number 0 [ 130.322666][ T1072] usb 3-1: USB disconnect, device number 10 [ 130.325554][ T927] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.347227][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.368436][ T927] usb 2-1: Product: syz [ 130.372672][ T927] usb 2-1: Manufacturer: syz [ 130.390691][ T927] usb 2-1: SerialNumber: syz [ 130.412081][ T927] usb 2-1: config 0 descriptor?? [ 130.433539][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.436137][ T927] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.662227][ T927] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.703325][ T927] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.998078][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 131.226549][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.236238][ T24] usb 2-1: USB disconnect, device number 3 [ 131.270598][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.331633][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.356034][ T24] quatech2 2-1:0.51: device disconnected [ 131.472625][ T7065] tipc: Started in network mode [ 131.477875][ T7065] tipc: Node identity 7365725f69643d3, cluster identity 4711 [ 131.485429][ T7065] tipc: Enabling of bearer rejected, failed to enable media [ 131.537502][ T5932] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.549144][ T927] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.697759][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 131.709824][ T927] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.710433][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.727777][ T927] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.733963][ T5932] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 131.753665][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.757602][ T927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.767260][ T5932] usb 3-1: config 0 descriptor?? [ 131.790024][ T5932] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 131.793654][ T927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.824267][ T927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.876768][ T927] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.885996][ T927] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.904355][ T927] usb 4-1: Product: syz [ 131.908929][ T927] usb 4-1: Manufacturer: syz [ 131.927850][ T927] cdc_wdm 4-1:1.0: skipping garbage [ 131.933293][ T927] cdc_wdm 4-1:1.0: skipping garbage [ 131.948151][ T927] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 131.954243][ T927] cdc_wdm 4-1:1.0: Unknown control protocol [ 132.158665][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 132.165456][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 132.171838][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 132.178472][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 132.184825][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 132.191450][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 132.199048][ T927] usb 4-1: USB disconnect, device number 8 [ 132.205209][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 132.211841][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 132.217938][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 132.912730][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920874][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.041260][ T5932] gspca_vc032x: reg_w err -71 [ 133.048106][ T5932] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 133.081626][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.097831][ T5932] usb 3-1: USB disconnect, device number 11 [ 134.247509][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.407827][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 134.422745][ T43] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 134.431705][ T43] usb 3-1: config 0 has no interface number 0 [ 134.438959][ T43] usb 3-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 134.449563][ T43] usb 3-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.471842][ T43] usb 3-1: config 0 interface 251 has no altsetting 0 [ 134.482507][ T43] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 134.495246][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.506472][ T43] usb 3-1: Product: syz [ 134.511052][ T43] usb 3-1: Manufacturer: syz [ 134.515679][ T43] usb 3-1: SerialNumber: syz [ 134.522938][ T43] usb 3-1: config 0 descriptor?? [ 134.529291][ T7137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.536906][ T7137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.752025][ T7137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.759721][ T7137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.377739][ T43] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 135.411272][ T43] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 135.444986][ T43] asix 3-1:0.251: probe with driver asix failed with error -71 [ 135.466244][ T43] usb 3-1: USB disconnect, device number 12 [ 135.547171][ T7183] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 135.555464][ T7183] netlink: 'syz.1.538': attribute type 4 has an invalid length. [ 135.563795][ T7183] netlink: 'syz.1.538': attribute type 8 has an invalid length. [ 135.572100][ T7183] netlink: 44 bytes leftover after parsing attributes in process `syz.1.538'. [ 136.107902][ T5898] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.284677][ T5898] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 136.295460][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.351850][ T5898] usb 2-1: config 0 descriptor?? [ 136.873666][ T7219] netlink: 240 bytes leftover after parsing attributes in process `syz.3.551'. [ 137.445623][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 137.589264][ T5898] usb 2-1: Cannot set autoneg [ 137.597651][ T5898] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 137.657478][ T5898] usb 2-1: USB disconnect, device number 4 [ 137.702023][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.857429][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 137.864592][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.887425][ T43] usb 4-1: config 0 has no interface number 0 [ 137.893598][ T43] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.916767][ T43] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.926317][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.938051][ T43] usb 4-1: config 0 descriptor?? [ 137.953280][ T43] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 138.426024][ T1072] usb 4-1: USB disconnect, device number 9 [ 138.973473][ T7290] netlink: 176 bytes leftover after parsing attributes in process `syz.2.575'. [ 139.013401][ T7290] netlink: 176 bytes leftover after parsing attributes in process `syz.2.575'. [ 139.030441][ T7290] Zero length message leads to an empty skb [ 139.731240][ T7329] netlink: 64 bytes leftover after parsing attributes in process `syz.3.586'. [ 140.261822][ T7350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.498423][ T7357] pim6reg: entered allmulticast mode [ 141.740442][ T7408] overlayfs: failed to clone upperpath [ 142.728172][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.841234][ T7452] binder: 7451:7452 ioctl c018620c 200000000580 returned -1 [ 142.896123][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 142.926684][ T5898] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 142.935904][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.944563][ T5898] usb 2-1: Product: syz [ 142.957463][ T5898] usb 2-1: Manufacturer: syz [ 142.962118][ T5898] usb 2-1: SerialNumber: syz [ 143.319874][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.381326][ T5898] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 143.415057][ T5898] usb 2-1: USB disconnect, device number 5 [ 143.450772][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.103778][ T7481] netlink: 176 bytes leftover after parsing attributes in process `syz.0.649'. [ 144.970795][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 145.168000][ T927] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 145.330947][ T927] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.346632][ T927] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.363579][ T927] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.385257][ T7509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.663'. [ 145.393310][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.641382][ T927] usb 4-1: usb_control_msg returned -32 [ 145.648080][ T927] usbtmc 4-1:16.0: can't read capabilities [ 146.419232][ T927] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 146.590185][ T927] usb 3-1: Using ep0 maxpacket: 16 [ 146.604006][ T927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.615552][ T927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.647640][ T927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.656739][ T927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.669894][ T927] usb 3-1: Product: syz [ 146.678900][ T927] usb 3-1: Manufacturer: syz [ 146.684883][ T927] usb 3-1: SerialNumber: syz [ 146.712998][ T7553] input: syz1 as /devices/virtual/input/input15 [ 146.904950][ T927] usb 3-1: 0:2 : does not exist [ 146.925796][ T927] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 146.960664][ T927] usb 3-1: USB disconnect, device number 13 [ 147.028255][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.954214][ T43] usb 4-1: USB disconnect, device number 10 [ 148.027698][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.199836][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.217968][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.233050][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.241553][ T5932] usb 2-1: Product: syz [ 148.245932][ T5932] usb 2-1: Manufacturer: syz [ 148.254940][ T5932] usb 2-1: SerialNumber: syz [ 148.316947][ T7605] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x4) [ 148.682791][ T7615] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 148.720713][ T7615] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 148.741191][ T7615] netlink: 500 bytes leftover after parsing attributes in process `syz.0.710'. [ 149.072949][ T7628] pim6reg: entered allmulticast mode [ 149.128091][ T927] libceph: connect (1)[c::]:6789 error -101 [ 149.134585][ T927] libceph: mon0 (1)[c::]:6789 connect error [ 149.176915][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 149.185419][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 149.304741][ T5932] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 149.312861][ T5932] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 149.323396][ T5932] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 149.439905][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 149.446869][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 149.457086][ T927] libceph: connect (1)[c::]:6789 error -101 [ 149.467770][ T927] libceph: mon0 (1)[c::]:6789 connect error [ 149.513453][ T5932] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 149.542795][ T5932] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 149.571614][ T5932] usb 2-1: USB disconnect, device number 6 [ 149.588984][ T5932] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 149.831914][ T5898] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 149.918580][ T7630] ceph: No mds server is up or the cluster is laggy [ 149.929494][ T7634] ceph: No mds server is up or the cluster is laggy [ 149.993198][ T5898] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 150.010307][ T5898] usb 4-1: config 0 has no interface number 0 [ 150.032207][ T5898] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 150.052381][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.065003][ T5898] usb 4-1: Product: syz [ 150.071283][ T5898] usb 4-1: Manufacturer: syz [ 150.075927][ T5898] usb 4-1: SerialNumber: syz [ 150.084283][ T5898] usb 4-1: config 0 descriptor?? [ 150.518253][ T5898] usb 4-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 150.605482][ T1072] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 150.719537][ T5898] usb 4-1: no permanent extended address found, random address set [ 150.797402][ T1072] usb 3-1: Using ep0 maxpacket: 16 [ 150.810823][ T1072] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 150.820245][ T1072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.832985][ T1072] usb 3-1: Product: syz [ 150.837196][ T1072] usb 3-1: Manufacturer: syz [ 150.841869][ T1072] usb 3-1: SerialNumber: syz [ 150.947580][ T5898] usb 4-1: USB disconnect, device number 11 [ 151.100692][ T1072] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.123513][ T1072] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 151.135139][ T1072] usb 3-1: USB disconnect, device number 14 [ 151.153207][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.147132][ T7714] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 152.165227][ T7714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 152.188029][ T7714] overlayfs: failed to get uuid (146/file1, err=-13); falling back to uuid=null. [ 152.279440][ T7719] dvmrp0: entered allmulticast mode [ 152.408142][ T7724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.754'. [ 153.222693][ T7763] netlink: 36 bytes leftover after parsing attributes in process `syz.2.770'. [ 154.664360][ T7801] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 154.695123][ T7801] netlink: 'syz.2.784': attribute type 29 has an invalid length. [ 154.718195][ T7801] netlink: 500 bytes leftover after parsing attributes in process `syz.2.784'. [ 157.017479][ T5898] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 157.190151][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.207028][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.246114][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.271673][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.507743][ T5898] usb 3-1: usb_control_msg returned -32 [ 157.513395][ T5898] usbtmc 3-1:16.0: can't read capabilities [ 158.080000][ T5932] usb 3-1: USB disconnect, device number 15 [ 158.125046][ T7892] TCP: TCP_TX_DELAY enabled [ 160.143130][ T7948] Invalid/unusable pipe [ 161.323199][ T8000] kvm: Disabled LAPIC found during irq injection [ 161.377481][ T5932] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.527450][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 161.548385][ T5932] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 161.567423][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.575689][ T5932] usb 2-1: Product: syz [ 161.583642][ T5932] usb 2-1: Manufacturer: syz [ 161.588989][ T5932] usb 2-1: SerialNumber: syz [ 161.611833][ T5932] usb 2-1: config 0 descriptor?? [ 161.865349][ T5932] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 162.382924][ T8046] veth1_to_bridge: entered promiscuous mode [ 162.394154][ T8046] veth1_to_bridge: left promiscuous mode [ 162.472137][ T8052] 9pnet: p9_errstr2errno: server reported unknown error E#}HQ [ 162.485210][ T5932] usb write operation failed. (-71) [ 162.517757][ T5932] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 162.529170][ T5932] dvbdev: DVB: registering new adapter (Terratec H7) [ 162.560148][ T5932] usb 2-1: media controller created [ 162.568190][ T5932] usb read operation failed. (-71) [ 162.576961][ T8056] overlayfs: failed to clone lowerpath [ 162.584356][ T5932] usb write operation failed. (-71) [ 162.599911][ T5932] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 162.619794][ T5932] usb 2-1: USB disconnect, device number 7 [ 163.041902][ T8075] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 163.041902][ T8075] [ 163.310414][ T8087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.592859][ T8101] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 163.601090][ T8101] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.920'. [ 163.687916][ T927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 163.847410][ T927] usb 3-1: Using ep0 maxpacket: 16 [ 163.861714][ T927] usb 3-1: config 0 has no interfaces? [ 163.877476][ T927] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 163.896146][ T927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.915396][ T927] usb 3-1: config 0 descriptor?? [ 164.150560][ T927] usb 3-1: USB disconnect, device number 16 [ 164.226627][ T8126] trusted_key: syz.3.930 sent an empty control message without MSG_MORE. [ 166.653766][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 166.679735][ T8165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.947'. [ 166.723929][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 167.698272][ T8198] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 169.311960][ T8241] netlink: 176 bytes leftover after parsing attributes in process `syz.3.982'. [ 169.596567][ T8249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.814454][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 169.847890][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 170.135868][ T8271] veth1_to_bridge: entered allmulticast mode [ 170.145653][ T8271] veth1_to_bridge: left allmulticast mode [ 171.136610][ T8293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.170197][ T8293] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 172.501271][ T8320] syzkaller1: entered promiscuous mode [ 172.506806][ T8320] syzkaller1: entered allmulticast mode [ 172.517541][ T5898] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.681219][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 172.707621][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.735856][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.773155][ T5898] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.788049][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.807056][ T5898] usb 4-1: Product: syz [ 172.821255][ T5898] usb 4-1: Manufacturer: syz [ 172.825940][ T5898] usb 4-1: SerialNumber: syz [ 173.177679][ T5898] usb 4-1: 0:2 : does not exist [ 173.221093][ T5898] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 173.279870][ T5898] usb 4-1: USB disconnect, device number 12 [ 173.346426][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.723914][ T8338] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1024'. [ 173.901039][ T1072] libceph: connect (1)[c::]:6789 error -101 [ 173.907175][ T1072] libceph: mon0 (1)[c::]:6789 connect error [ 174.197892][ T1072] libceph: connect (1)[c::]:6789 error -101 [ 174.209592][ T1072] libceph: mon0 (1)[c::]:6789 connect error [ 174.685219][ T8342] ceph: No mds server is up or the cluster is laggy [ 175.107533][ T1072] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 175.293544][ T1072] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.319284][ T1072] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.350323][ T1072] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.368747][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.397619][ T1072] usb 4-1: Product: syz [ 175.405629][ T1072] usb 4-1: Manufacturer: syz [ 175.417508][ T1072] usb 4-1: SerialNumber: syz [ 175.657633][ T1072] usb 4-1: 0:2 : does not exist [ 175.681916][ T1072] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 175.767455][ T1072] usb 4-1: USB disconnect, device number 13 [ 175.824450][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.072875][ T8381] binder: 8380:8381 ioctl c0306201 200000000040 returned -22 [ 177.355332][ T8389] binder: 8388:8389 unknown command 0 [ 177.369266][ T8389] binder: 8388:8389 ioctl c0306201 200000000080 returned -22 [ 178.089303][ T8402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.395866][ T8411] netlink: 'syz.2.1055': attribute type 4 has an invalid length. [ 178.418563][ T8411] netlink: 'syz.2.1055': attribute type 4 has an invalid length. [ 180.137432][ T5898] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.307433][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 180.322972][ T5898] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 180.332418][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.356056][ T5898] usb 4-1: Product: syz [ 180.367678][ T5898] usb 4-1: Manufacturer: syz [ 180.372340][ T5898] usb 4-1: SerialNumber: syz [ 180.392379][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.402186][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.405570][ T5898] usb 4-1: config 0 descriptor?? [ 180.417548][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.430162][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.445217][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.452246][ T5898] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 180.497570][ T927] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.658347][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 180.677221][ T927] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 180.687552][ T927] usb 2-1: config 0 has no interface number 0 [ 180.694040][ T927] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 180.704962][ T927] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 180.715709][ T927] usb 2-1: config 0 interface 41 has no altsetting 0 [ 180.729491][ T927] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 180.757484][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.765596][ T927] usb 2-1: Product: syz [ 180.777379][ T927] usb 2-1: Manufacturer: syz [ 180.782085][ T927] usb 2-1: SerialNumber: syz [ 180.808915][ T927] usb 2-1: config 0 descriptor?? [ 180.814673][ T8450] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.840013][ T8450] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.893022][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 180.894256][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 181.043038][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.054170][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.069281][ T8450] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.071910][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.081952][ T8452] bridge_slave_0: entered allmulticast mode [ 181.089524][ T8450] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.096710][ T8452] bridge_slave_0: entered promiscuous mode [ 181.111979][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.119252][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.126488][ T8452] bridge_slave_1: entered allmulticast mode [ 181.134505][ T8452] bridge_slave_1: entered promiscuous mode [ 181.143350][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.166785][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.178038][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.202807][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.227625][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.256079][ T24] usb 3-1: Manufacturer: syz [ 181.288439][ T24] usb 3-1: config 0 descriptor?? [ 181.304598][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.335181][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.431321][ T8452] team0: Port device team_slave_0 added [ 181.444368][ T8452] team0: Port device team_slave_1 added [ 181.516251][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.527022][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.554942][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.572125][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.579515][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.609469][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.715672][ T5898] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 181.758913][ T24] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 181.767263][ T927] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 181.817453][ T5898] usb 4-1: USB disconnect, device number 14 [ 181.837768][ T24] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 181.897095][ T8452] hsr_slave_0: entered promiscuous mode [ 181.921850][ T8452] hsr_slave_1: entered promiscuous mode [ 181.939301][ T8452] debugfs: 'hsr0' already exists in 'hsr' [ 181.968061][ T8452] Cannot create hsr debugfs directory [ 181.996557][ T927] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 182.016634][ T927] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 182.048132][ T927] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 182.079276][ T927] usb 2-1: USB disconnect, device number 8 [ 182.276257][ T5932] usb 3-1: USB disconnect, device number 17 [ 182.449704][ T8452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.473142][ T8452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.494015][ T8452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.511675][ T5853] Bluetooth: hci4: command tx timeout [ 182.563956][ T8452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.866425][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.019699][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.063996][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.071224][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.140649][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.147860][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.745289][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.565126][ T8452] veth0_vlan: entered promiscuous mode [ 184.588027][ T5853] Bluetooth: hci4: command tx timeout [ 184.626071][ T8452] veth1_vlan: entered promiscuous mode [ 184.745465][ T8452] veth0_macvtap: entered promiscuous mode [ 184.753638][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 184.792673][ T8452] veth1_macvtap: entered promiscuous mode [ 184.851449][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.901827][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.938497][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.970510][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.008777][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.038434][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.348537][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.356988][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.543185][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.578711][ T8544] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1097'. [ 185.580880][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.668615][ T5853] Bluetooth: hci4: command tx timeout [ 188.377508][ T5932] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 188.557632][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 188.595126][ T5932] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 188.639606][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.665973][ T5932] usb 3-1: Product: syz [ 188.693993][ T5932] usb 3-1: Manufacturer: syz [ 188.699697][ T5932] usb 3-1: SerialNumber: syz [ 188.726118][ T5932] usb 3-1: config 0 descriptor?? [ 188.748247][ T5853] Bluetooth: hci4: command tx timeout [ 188.991086][ T5932] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 189.702716][ T1072] libceph: connect (1)[c::]:6789 error -101 [ 189.726474][ T1072] libceph: mon0 (1)[c::]:6789 connect error [ 189.772176][ T1072] libceph: connect (1)[c::]:6789 error -101 [ 189.794054][ T1072] libceph: mon0 (1)[c::]:6789 connect error [ 190.005618][ T5932] gspca_sunplus: reg_w_riv err -71 [ 190.015158][ T5932] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 190.043618][ T8651] loop8: detected capacity change from 0 to 16384 [ 190.050735][ T5932] usb 3-1: USB disconnect, device number 18 [ 190.090110][ T9] libceph: connect (1)[c::]:6789 error -101 [ 190.096249][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 190.288196][ T8652] loop8: detected capacity change from 16384 to 0 [ 190.300695][ C1] I/O error, dev loop8, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 190.333358][ C1] I/O error, dev loop8, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 190.499036][ T8643] ceph: No mds server is up or the cluster is laggy [ 191.533462][ T8678] netlink: 'syz.3.1149': attribute type 4 has an invalid length. [ 191.896503][ T8692] 9p: Unknown uid 00000000004294967295 [ 192.162718][ T8698] Invalid ELF header magic: != ELF [ 192.679559][ T8715] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ [ 193.110620][ T8733] netlink: 'syz.3.1172': attribute type 6 has an invalid length. [ 193.118754][ T8733] netlink: 'syz.3.1172': attribute type 7 has an invalid length. [ 193.127114][ T8733] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.1172'. [ 193.284032][ T8738] 9pnet: p9_errstr2errno: server reported unknown error [ 193.449807][ T927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.547487][ T5898] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 193.617498][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 193.637648][ T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.657435][ T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.678222][ T927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.696257][ T927] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.707766][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 193.723499][ T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.733142][ T5898] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.745751][ T5898] usb 3-1: config 0 has no interface number 0 [ 193.767096][ T927] usb 2-1: config 0 descriptor?? [ 193.774855][ T5898] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.790272][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.815405][ T5898] usb 3-1: Product: syz [ 193.820582][ T5898] usb 3-1: Manufacturer: syz [ 193.826525][ T5898] usb 3-1: SerialNumber: syz [ 193.880586][ T5898] usb 3-1: config 0 descriptor?? [ 193.900217][ T5898] smsc95xx v2.0.0 [ 194.214827][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.236227][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.273473][ T927] HID 045e:07da: Invalid code 65791 type 1 [ 194.311523][ T8765] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1186'. [ 194.312929][ T927] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input16 [ 194.337668][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 194.380548][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386980][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.404236][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.435430][ T927] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 194.703655][ T24] usb 2-1: USB disconnect, device number 9 [ 194.737414][ T8768] fido_id[8768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 195.000239][ T8777] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 195.069842][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 195.081248][ T5898] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 195.133006][ T5898] usb 3-1: USB disconnect, device number 19 [ 195.397087][ T8783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 195.580005][ T43] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 195.743042][ T43] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 195.760114][ T43] usb 4-1: config 0 has no interface number 0 [ 195.808673][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 195.827368][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.847370][ T43] usb 4-1: Product: syz [ 195.851595][ T43] usb 4-1: Manufacturer: syz [ 195.887260][ T43] usb 4-1: SerialNumber: syz [ 195.902334][ T43] usb 4-1: config 0 descriptor?? [ 195.917195][ T43] yurex 4-1:0.50: Could not find endpoints [ 196.034139][ T8801] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 196.176729][ T8803] syzkaller1: entered promiscuous mode [ 196.200243][ T8803] syzkaller1: entered allmulticast mode [ 196.532682][ T5932] usb 4-1: USB disconnect, device number 15 [ 196.554082][ T8811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.070414][ T5932] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 197.227551][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 197.234763][ T5932] usb 3-1: config 0 has no interfaces? [ 197.245246][ T5932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.258959][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.267207][ T5932] usb 3-1: SerialNumber: syz [ 197.294955][ T5932] usb 3-1: config 0 descriptor?? [ 197.546560][ T5932] usb 3-1: USB disconnect, device number 20 [ 198.157602][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.307401][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 198.320433][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.346130][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.389156][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.438566][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.468374][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.518041][ T43] usb 4-1: config 0 descriptor?? [ 198.955938][ T43] HID 045e:07da: Invalid code 65791 type 1 [ 198.995985][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input17 [ 199.101056][ T43] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 199.254077][ T5932] usb 4-1: USB disconnect, device number 16 [ 199.394255][ T8847] fido_id[8847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 199.511176][ T8850] Invalid ELF header magic: != ELF [ 199.958925][ T5898] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.137410][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 200.142222][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 200.165950][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 200.186482][ T5898] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 200.197474][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.217196][ T5898] usb 5-1: Product: syz [ 200.222473][ T5898] usb 5-1: Manufacturer: syz [ 200.232381][ T5898] usb 5-1: SerialNumber: syz [ 200.252618][ T5898] usb 5-1: config 0 descriptor?? [ 200.264218][ T8853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.273174][ T8853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.329865][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.367452][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.405901][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.418777][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.437512][ T9] usb 4-1: Product: syz [ 200.445120][ T9] usb 4-1: Manufacturer: syz [ 200.458332][ T9] usb 4-1: SerialNumber: syz [ 200.547899][ T8853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.568478][ T8853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.698947][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.724033][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.768379][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 200.809998][ T9] usb 4-1: USB disconnect, device number 17 [ 201.263117][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 201.531033][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 201.587205][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 201.595717][ T24] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 201.606946][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.661126][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.671138][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 201.684538][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.707873][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.726815][ T5898] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 201.747468][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.756577][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.781096][ T5898] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 201.834623][ T5898] usb 5-1: USB disconnect, device number 2 [ 201.872256][ T5898] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 202.017642][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 202.087724][ T24] usb 4-1: usb_control_msg returned -71 [ 202.093375][ T24] usbtmc 4-1:16.0: can't read capabilities [ 202.110237][ T24] usbtmc 4-1:16.0: Failed to submit iin_urb [ 202.116292][ T24] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 202.143137][ T24] usb 4-1: USB disconnect, device number 18 [ 202.216963][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.229619][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 202.267691][ T9] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 202.276816][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.297385][ T9] usb 3-1: Product: syz [ 202.305943][ T9] usb 3-1: Manufacturer: syz [ 202.316110][ T9] usb 3-1: SerialNumber: syz [ 202.359739][ T9] usb 3-1: config 0 descriptor?? [ 202.396184][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 202.436860][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.457567][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 202.466286][ T9] usb 3-1: media controller created [ 202.555348][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.708978][ T9] DVB: Unable to find symbol tda10046_attach() [ 202.715479][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 202.744607][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 203.267034][ T8816] Set syz1 is full, maxelem 65536 reached [ 203.530224][ T9] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 203.578913][ T9] usb 3-1: USB disconnect, device number 21 [ 203.938002][ T8898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.086653][ T8901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.116095][ T8903] loop2: detected capacity change from 0 to 1 [ 204.154563][ T8903] Dev loop2: unable to read RDB block 1 [ 204.167806][ T8903] loop2: unable to read partition table [ 204.173706][ T8903] loop2: partition table beyond EOD, truncated [ 204.197865][ T8903] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 204.598602][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 204.767775][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 204.790330][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 204.807400][ T24] usb 3-1: config 0 has no interface number 0 [ 204.813753][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 204.836800][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 204.847361][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.866939][ T24] usb 3-1: Product: syz [ 204.877063][ T24] usb 3-1: Manufacturer: syz [ 204.898119][ T24] usb 3-1: SerialNumber: syz [ 204.906659][ T24] usb 3-1: config 0 descriptor?? [ 206.174625][ T24] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 206.194150][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 206.205323][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 206.227722][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 206.247836][ T24] usb 3-1: USB disconnect, device number 22 [ 206.317591][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.487482][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 206.502635][ T5898] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.513477][ T5898] usb 2-1: config 0 has no interface number 0 [ 206.523413][ T5898] usb 2-1: config 0 interface 184 has no altsetting 0 [ 206.534839][ T5898] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.551119][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.563342][ T5898] usb 2-1: Product: syz [ 206.570327][ T5898] usb 2-1: Manufacturer: syz [ 206.575102][ T5898] usb 2-1: SerialNumber: syz [ 206.585866][ T5898] usb 2-1: config 0 descriptor?? [ 206.611775][ T5898] smsc75xx v1.0.0 [ 207.858922][ T5898] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 207.927135][ T5898] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 207.969628][ T5898] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 207.988393][ T5898] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 208.007362][ T5898] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 208.037366][ T5898] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 208.072001][ T5898] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 208.124585][ T5898] usb 2-1: USB disconnect, device number 10 [ 210.517714][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 210.558222][ T9057] loop6: detected capacity change from 0 to 64 [ 210.588411][ T9057] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.631571][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.659150][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.689728][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.697985][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 210.714119][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.726604][ T9060] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.736525][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.750343][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.759909][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.780535][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.798325][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.807600][ T9057] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.815678][ T9057] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.840981][ T9] usb 4-1: config 0 descriptor?? [ 210.870414][ T9] hub 4-1:0.0: USB hub found [ 210.876806][ T9057] Buffer I/O error on dev loop6, logical block 0, async page read [ 211.083249][ T9] hub 4-1:0.0: 1 port detected [ 211.702883][ T9] hub 4-1:0.0: activate --> -90 [ 211.790552][ T9045] Bluetooth: hci0: command 0x0406 tx timeout [ 211.797631][ T9045] Bluetooth: hci2: command 0x0406 tx timeout [ 211.803915][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 211.817434][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 211.887587][ T9073] netlink: 'syz.4.1310': attribute type 27 has an invalid length. [ 212.000204][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.008992][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.106911][ T9] usb 4-1-port1: cannot reset (err = -71) [ 212.110975][ T5898] usb 4-1: USB disconnect, device number 19 [ 212.142208][ T9] usb 4-1-port1: attempt power cycle [ 212.249800][ T9073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.265484][ T9073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.507163][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.540348][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.579161][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.599934][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.823180][ T9080] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1312'. [ 213.263457][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 213.607456][ T5898] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 213.779201][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 213.792081][ T5898] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 213.810898][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.831274][ T5898] usb 4-1: config 0 descriptor?? [ 213.854043][ T5898] gspca_main: sunplus-2.14.0 probing 041e:400b [ 214.865060][ T24] libceph: connect (1)[c::]:6789 error -101 [ 214.872578][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 214.882944][ T24] libceph: connect (1)[c::]:6789 error -101 [ 214.913196][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 214.921669][ T43] libceph: connect (1)[c::]:6789 error -101 [ 214.950401][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 215.094164][ T5898] gspca_sunplus: reg_w_riv err -71 [ 215.107822][ T5898] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 215.142512][ T5898] usb 4-1: USB disconnect, device number 24 [ 215.228454][ T43] libceph: connect (1)[c::]:6789 error -101 [ 215.241947][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 215.253151][ T24] libceph: connect (1)[c::]:6789 error -101 [ 215.266613][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 215.655098][ T9132] ceph: No mds server is up or the cluster is laggy [ 215.661284][ T9128] ceph: No mds server is up or the cluster is laggy [ 215.780140][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 215.786270][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 215.794724][ T24] libceph: connect (1)[c::]:6789 error -101 [ 215.819779][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 216.004361][ T12] Bluetooth: (null): Invalid header checksum [ 216.027516][ T12] Bluetooth: (null): Invalid header checksum [ 216.965548][ T9191] input: syz0 as /devices/virtual/input/input18 [ 217.977775][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 218.171363][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 218.180823][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.225054][ T24] usb 4-1: config 0 descriptor?? [ 218.259850][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 218.495797][ T24] gspca_spca508: reg_read err -32 [ 218.512064][ T24] gspca_spca508: reg_read err -32 [ 218.554063][ T24] gspca_spca508: reg_read err -32 [ 218.765034][ T24] gspca_spca508: reg_read err -71 [ 218.789683][ T24] gspca_spca508: reg write: error -71 [ 218.817198][ T24] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 218.850806][ T24] usb 4-1: USB disconnect, device number 25 [ 219.020165][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 219.147395][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 219.147569][ T5169] Bluetooth: hci0: command 0x0406 tx timeout [ 219.153723][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 219.247519][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 219.287543][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.330742][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.380844][ T5913] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 219.427416][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.448528][ T5913] usb 5-1: config 0 descriptor?? [ 219.697478][ T5898] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 219.877477][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 219.882221][ T5913] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 219.891420][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.922687][ T5898] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 219.939382][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.958674][ T5898] usb 4-1: Product: syz [ 219.963333][ T5898] usb 4-1: Manufacturer: syz [ 219.969134][ T5898] usb 4-1: SerialNumber: syz [ 219.988892][ T5898] usb 4-1: config 0 descriptor?? [ 220.000326][ T5898] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 220.082174][ T5913] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 220.101538][ T5913] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -32 [ 220.138367][ T5913] usb 5-1: USB disconnect, device number 3 [ 220.214657][ T5898] gspca_sunplus: reg_r err -32 [ 221.228172][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 221.228753][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 221.257675][ T5898] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 221.271411][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 221.840719][ T9306] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 222.548145][ T9] usb 4-1: USB disconnect, device number 26 [ 223.166208][ T9345] syzkaller1: entered promiscuous mode [ 223.181746][ T9345] syzkaller1: entered allmulticast mode [ 223.387793][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 223.407612][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 223.413754][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 224.851869][ T9398] kvm: emulating exchange as write [ 224.918173][ T5913] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 225.097582][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 225.148040][ T5913] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 225.186915][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.206509][ T5913] usb 3-1: Product: syz [ 225.215760][ T5913] usb 3-1: Manufacturer: syz [ 225.236000][ T5913] usb 3-1: SerialNumber: syz [ 225.258206][ T5913] usb 3-1: config 0 descriptor?? [ 225.290063][ T5913] gspca_main: se401-2.14.0 probing 047d:5003 [ 225.468017][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 225.469181][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 225.550282][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 225.703254][ T5913] gspca_se401: ExtraFeatures: 255 [ 225.724805][ T5913] gspca_se401: Frame size: 2314x9695 bayer [ 225.744729][ T5913] gspca_se401: Frame size: 285x9 bayer [ 225.769482][ T5913] gspca_se401: Frame size: 80x32786 bayer [ 225.783193][ T5913] gspca_se401: Frame size: 76x33016 bayer [ 225.805739][ T5913] gspca_se401: Frame size: 20x51 bayer [ 225.822044][ T5913] gspca_se401: Frame size: 0x0 1/16th janggu [ 225.840841][ T5913] gspca_se401: Frame size: 0x0 1/16th janggu [ 225.864361][ T5913] gspca_se401: Frame size: 0x255 bayer [ 225.910643][ T5913] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 225.978774][ T5913] usb 3-1: USB disconnect, device number 23 [ 226.394748][ T9427] loop4: detected capacity change from 0 to 2560 [ 226.435684][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 226.466994][ T9427] buffer_io_error: 1055 callbacks suppressed [ 226.467015][ T9427] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 226.487789][ T9427] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 226.496399][ T9427] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 226.512359][ T9427] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 226.537435][ T9427] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 226.556302][ T9427] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 226.622815][ T9427] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 226.666558][ T9427] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 226.725717][ T9427] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 226.737776][ T9435] input: syz0 as /devices/virtual/input/input20 [ 226.767529][ T9427] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 227.850955][ T30] audit: type=1326 audit(1752850651.588:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9453 comm="syz.4.1418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f818b38e9a9 code=0x0 [ 228.268213][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 228.274359][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 228.279053][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.771527][ T9529] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 232.595698][ T9556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.931302][ T9566] batadv_slave_0: entered promiscuous mode [ 232.981186][ T9566] batadv_slave_0: left promiscuous mode [ 233.313452][ T9577] block nbd1: Device being setup by another task [ 233.337156][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 233.347500][ T9574] block nbd1: NBD_DISCONNECT [ 233.353315][ T9574] block nbd1: Send disconnect failed -22 [ 233.388424][ T9573] block nbd1: Disconnected due to user request. [ 233.423148][ T9573] block nbd1: shutting down sockets [ 235.248591][ T5898] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.430540][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.447518][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.477513][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.497698][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 235.528471][ T5898] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 235.537924][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.556505][ T9646] capability: warning: `syz.4.1498' uses 32-bit capabilities (legacy support in use) [ 235.578429][ T5898] usb 2-1: config 0 descriptor?? [ 236.012517][ T5898] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 236.064406][ T5898] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input21 [ 236.201560][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.241582][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.250233][ T5898] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 236.320453][ T5898] usb 2-1: USB disconnect, device number 11 [ 236.438759][ T9662] fido_id[9662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 238.132612][ T30] audit: type=1326 audit(1752850661.878:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.3.1523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa638e9a9 code=0x0 [ 238.637755][ T5932] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.797472][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 238.814267][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.840283][ T5932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.869807][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.891540][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.911230][ T5932] usb 2-1: Product: syz [ 238.915449][ T5932] usb 2-1: Manufacturer: syz [ 238.932630][ T5932] usb 2-1: SerialNumber: syz [ 238.954100][ T5932] usb 2-1: selecting invalid altsetting 1 [ 239.444293][ T10] Process accounting resumed [ 239.565093][ T5932] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 239.588920][ T5932] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 239.617433][ T5932] usb 2-1: selecting invalid altsetting 1 [ 239.623334][ T5932] cdc_ncm 2-1:1.0: bind() failure [ 239.657740][ T5932] usb 2-1: USB disconnect, device number 12 [ 240.124726][ T9750] tls_set_device_offload_rx: netdev not found [ 241.687014][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 242.420137][ T9802] loop1: detected capacity change from 0 to 7 [ 242.456732][ T9802] Dev loop1: unable to read RDB block 7 [ 242.477464][ T9802] loop1: unable to read partition table [ 242.492433][ T9802] loop1: partition table beyond EOD, truncated [ 242.533806][ T9802] loop_reread_partitions: partition scan of loop1 (被xڬdƤݡ [ 242.533806][ T9802] ) failed (rc=-5) [ 242.619652][ T5219] Dev loop1: unable to read RDB block 7 [ 242.625300][ T5219] loop1: unable to read partition table [ 242.649045][ T5219] loop1: partition table beyond EOD, truncated [ 245.437586][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 245.614093][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 245.661578][ T24] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 245.702315][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.727766][ T24] usb 5-1: Product: syz [ 245.739927][ T24] usb 5-1: Manufacturer: syz [ 245.757790][ T24] usb 5-1: SerialNumber: syz [ 245.793238][ T24] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 246.037042][ T9882] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 246.133762][ T9882] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 246.727601][ T5932] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 246.845787][ T24] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 246.987949][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.027604][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.053341][ T24] usb 5-1: USB disconnect, device number 4 [ 247.059612][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.107498][ T5932] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.147595][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.164355][ T5932] usb 3-1: config 0 descriptor?? [ 247.642355][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.673696][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.727450][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.734927][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.777942][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.785901][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.803514][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.831166][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.860630][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.899010][ T5932] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 247.945465][ T5932] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 248.003799][ T5932] usb 3-1: USB disconnect, device number 24 [ 248.174791][ T9902] fido_id[9902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 250.392761][ T9952] syzkaller1: entered promiscuous mode [ 250.407392][ T9952] syzkaller1: entered allmulticast mode [ 250.487344][ T24] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 250.675047][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 250.687423][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.717023][ T24] usb 4-1: config 0 descriptor?? [ 250.975800][ T9964] batadv_slave_1: entered promiscuous mode [ 250.992292][ T9963] batadv_slave_1: left promiscuous mode [ 251.439627][ T5898] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 251.653999][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.675378][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.718823][ T5898] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.740188][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.783542][ T5898] usb 3-1: config 0 descriptor?? [ 251.810973][ T5898] hub 3-1:0.0: USB hub found [ 251.953047][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.970332][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 251.998030][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 252.017883][ T5898] hub 3-1:0.0: 1 port detected [ 252.047542][ T24] usb 4-1: USB disconnect, device number 27 [ 252.635093][ T5898] hub 3-1:0.0: activate --> -90 [ 253.038931][ T1072] usb 3-1: USB disconnect, device number 25 [ 253.047554][ T5898] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 253.061818][ T5898] usb 3-1-port1: connect-debounce failed [ 253.106472][ T9999] 9pnet: p9_errstr2errno: server reported unknown error [ 253.228251][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 253.399721][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 253.415088][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.425584][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 253.441010][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 253.454369][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 253.482338][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.505755][ T10] usb 2-1: Product: syz [ 253.507443][ T5898] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 253.515904][ T10] usb 2-1: Manufacturer: syz [ 253.533371][ T10] usb 2-1: SerialNumber: syz [ 253.559930][ T10] usb 2-1: config 0 descriptor?? [ 253.707776][ T5898] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 253.717370][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.725403][ T5898] usb 4-1: Product: syz [ 253.760375][ T5898] usb 4-1: Manufacturer: syz [ 253.765054][ T5898] usb 4-1: SerialNumber: syz [ 253.804407][ T5898] usb 4-1: config 0 descriptor?? [ 253.817639][ T10] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 253.825487][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 254.007417][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 254.044419][ T9997] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 254.183204][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.196676][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.210815][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 254.221046][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.238775][ T24] usb 5-1: config 0 descriptor?? [ 254.698660][ T24] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 254.761158][ T5932] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 254.930454][ T5932] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 254.941576][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.958059][ T5932] usb 3-1: config 0 descriptor?? [ 254.972329][ T5932] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 255.052919][ T5898] gspca_sunplus: reg_r err -71 [ 255.069748][ T5898] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 255.089118][ T5898] usb 4-1: USB disconnect, device number 28 [ 255.172335][ T5932] gp8psk: usb in 128 operation failed. [ 255.183717][ T5932] gp8psk: usb in 137 operation failed. [ 255.191486][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.207817][ T5932] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 255.216793][ T5932] usb 3-1: media controller created [ 255.256607][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.307829][ T5932] gp8psk_fe: Frontend attached [ 255.319301][ T5932] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 255.331892][ T5932] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 255.491652][ T24] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 255.503868][ T24] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 255.520311][ T24] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71 [ 255.539649][ T24] usb 5-1: USB disconnect, device number 5 [ 255.542562][ T5932] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 255.565603][ T5932] gp8psk: found Genpix USB device pID = 203 (hex) [ 255.774972][ T24] usb 3-1: USB disconnect, device number 26 [ 255.792407][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799085][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.945829][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 256.041109][ T5932] usb 2-1: USB disconnect, device number 13 [ 257.798199][ T5932] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 257.967469][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 257.982224][ T5932] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 257.999592][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.028974][ T5932] usb 3-1: Product: syz [ 258.043584][ T5932] usb 3-1: Manufacturer: syz [ 258.053739][ T5932] usb 3-1: SerialNumber: syz [ 258.075106][ T5932] usb 3-1: config 0 descriptor?? [ 258.093364][ T5932] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 258.846629][T10113] input: syz1 as /devices/virtual/input/input22 [ 258.857762][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.038964][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 259.061706][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 259.077673][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 259.095563][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 259.105852][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.129433][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.140825][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'. [ 259.150531][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.184370][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 259.204611][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.241523][ T10] usb 2-1: config 0 descriptor?? [ 259.324820][ T5932] gspca_ov534_9: reg_w failed -71 [ 259.503476][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 259.576567][ T10] usb 2-1: USB disconnect, device number 14 [ 259.600031][ T10] usblp0: removed [ 259.627581][ T5932] gspca_ov534_9: Unknown sensor 0000 [ 259.627670][ T5932] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 259.668817][ T5932] usb 3-1: USB disconnect, device number 27 [ 259.678872][T10128] input: syz0 as /devices/virtual/input/input23 [ 260.007716][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 260.188140][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 260.196782][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 260.237402][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 260.246478][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.297337][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 260.331428][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 260.331649][T10145] netlink: 'syz.3.1708': attribute type 12 has an invalid length. [ 260.364919][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 260.395596][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.430318][ T10] usb 2-1: config 0 descriptor?? [ 260.436548][T10107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.689691][ T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 260.914104][ C0] usblp0: nonzero read bulk status received: -71 [ 260.934405][ T5932] usb 2-1: USB disconnect, device number 15 [ 260.965324][ T5932] usblp0: removed [ 261.396241][T10164] batadv_slave_0: entered promiscuous mode [ 261.429853][T10163] batadv_slave_0: left promiscuous mode [ 262.107916][T10186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.402371][T10193] overlayfs: missing 'lowerdir' [ 262.432757][T10193] overlayfs: missing 'lowerdir' [ 263.385619][T10225] netlink: 'syz.2.1741': attribute type 29 has an invalid length. [ 263.479960][T10225] netlink: 'syz.2.1741': attribute type 29 has an invalid length. [ 263.505998][T10230] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1741'. [ 263.672266][T10233] tipc: Started in network mode [ 263.679765][T10233] tipc: Node identity de791712887f, cluster identity 4711 [ 263.731780][T10233] tipc: Enabled bearer , priority 0 [ 263.823265][T10232] tipc: Disabling bearer [ 265.337773][ T43] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 265.523678][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.543927][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.576455][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.596118][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.836734][ T43] usb 4-1: usb_control_msg returned -32 [ 265.851890][ T43] usbtmc 4-1:16.0: can't read capabilities [ 266.879984][T10304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 267.090958][T10309] IPv4: Oversized IP packet from 172.20.20.24 [ 267.100225][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 267.106990][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 268.389639][ T10] usb 4-1: USB disconnect, device number 29 [ 268.457738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.477957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.486453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.495306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 269.177816][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 269.362473][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 269.395450][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.422200][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.472097][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.501973][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.534356][ T10] usb 4-1: config 0 descriptor?? [ 269.999795][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 270.052231][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input24 [ 270.123085][ T10] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 270.528776][T10359] block nbd1: NBD_DISCONNECT [ 270.538102][T10359] block nbd1: Disconnected due to user request. [ 270.544877][T10359] block nbd1: shutting down sockets [ 270.821414][ T10] usb 4-1: USB disconnect, device number 30 [ 271.259374][T10380] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 272.237527][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 272.437359][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 272.465798][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.486704][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 272.528335][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.557720][ T43] usb 5-1: config 0 descriptor?? [ 272.599937][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 273.783606][ T43] gspca_vc032x: reg_w err -71 [ 273.797119][ T43] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 273.831183][ T43] usb 5-1: USB disconnect, device number 6 [ 275.135880][T10435] dvmrp0: left allmulticast mode [ 275.415245][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 275.857536][T10454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.363725][T10469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 277.093857][T10498] syz.1.1852(10498): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 277.407755][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 277.593135][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 277.617461][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.651820][ T10] usb 5-1: Product: syz [ 277.656045][ T10] usb 5-1: Manufacturer: syz [ 277.672069][ T10] usb 5-1: SerialNumber: syz [ 277.692395][ T10] usb 5-1: config 0 descriptor?? [ 277.846664][T10494] syz.2.1849 (10494) used greatest stack depth: 19304 bytes left [ 277.931333][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.265234][T10520] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1860'. [ 278.933919][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 278.950980][ T10] usb 5-1: USB disconnect, device number 7 [ 282.239878][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1891'. [ 283.069394][T10634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.101212][T10634] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 283.140008][T10634] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 284.566404][T10664] vxcan1: entered allmulticast mode [ 284.804027][T10667] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 285.839956][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 286.016035][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.038016][ T10] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 286.062397][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.097514][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.123907][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 286.168259][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.190383][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.209359][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.235785][ T10] usb 3-1: Product: syz [ 286.248281][ T10] usb 3-1: Manufacturer: syz [ 286.270929][T10694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.290113][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 286.295406][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 286.324024][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 286.332845][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 286.541522][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.548204][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.556177][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.562824][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.577528][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.584201][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.591442][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.592772][T10713] loop6: detected capacity change from 0 to 524287999 [ 286.598142][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.598765][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.618154][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.625858][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.632510][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.642173][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.648829][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.655522][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.662161][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.668932][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.675571][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.682007][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 286.688635][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 286.704201][ T10] usb 3-1: USB disconnect, device number 28 [ 286.710242][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 286.747905][ T927] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 286.952260][ T927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.979654][ T927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.008534][ T927] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.029079][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.058125][ T927] usb 5-1: Product: syz [ 287.064404][ T927] usb 5-1: Manufacturer: syz [ 287.077522][ T927] usb 5-1: SerialNumber: syz [ 287.303706][ T927] usb 5-1: 0:2 : does not exist [ 287.324390][ T927] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 287.425110][ T927] usb 5-1: USB disconnect, device number 8 [ 287.511890][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.376160][T10740] netlink: 'syz.4.1953': attribute type 2 has an invalid length. [ 288.400572][T10740] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1953'. [ 288.737397][ T927] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 288.775988][T10751] raw_sendmsg: syz.4.1956 forgot to set AF_INET. Fix it! [ 288.917679][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 288.926258][ T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 288.960456][ T927] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.984519][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.012762][ T927] usb 2-1: Product: syz [ 289.027557][ T927] usb 2-1: Manufacturer: syz [ 289.041256][ T927] usb 2-1: SerialNumber: syz [ 289.069808][ T927] usb 2-1: config 0 descriptor?? [ 289.100204][ T927] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 289.123800][ T927] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 289.227323][ T30] audit: type=1326 audit(1752850712.968:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10738 comm="syz.3.1952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5fa6385967 code=0x0 [ 289.705098][ T927] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 290.360750][ T927] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 290.386946][ T927] em28xx 2-1:0.0: board has no eeprom [ 290.477711][ T927] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 290.496333][ T927] em28xx 2-1:0.0: dvb set to bulk mode. [ 290.513504][ T43] em28xx 2-1:0.0: Binding DVB extension [ 290.539395][ T927] usb 2-1: USB disconnect, device number 16 [ 290.576422][ T927] em28xx 2-1:0.0: Disconnecting em28xx [ 290.634437][ T43] em28xx 2-1:0.0: Registering input extension [ 290.665681][ T927] em28xx 2-1:0.0: Closing input extension [ 290.721393][ T927] em28xx 2-1:0.0: Freeing device [ 291.133010][T10787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 291.524288][T10797] tipc: Failed to remove unknown binding: 66,1,1/0:79033794/79033796 [ 291.535894][T10797] tipc: Failed to remove unknown binding: 66,1,1/0:79033794/79033796 [ 291.680228][T10805] input: syz1 as /devices/virtual/input/input26 [ 291.690253][T10804] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1980'. [ 291.883521][T10812] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1982'. [ 291.903694][T10813] loop6: detected capacity change from 0 to 524287999 [ 292.087418][ T927] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 292.260330][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 292.275108][ T927] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 292.310311][ T927] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.330274][ T927] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.364901][ T927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.398457][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.406566][ T927] usb 2-1: Product: syz [ 292.447506][ T927] usb 2-1: Manufacturer: syz [ 292.452178][ T927] usb 2-1: SerialNumber: syz [ 292.882200][ T927] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 293.492482][T10828] tipc: Failed to remove unknown binding: 66,1,1/0:1995705255/1995705257 [ 293.502031][T10828] tipc: Failed to remove unknown binding: 66,1,1/0:1995705255/1995705257 [ 293.800536][ T927] usb 2-1: current rate 9354877 is different from the runtime rate 9338507 [ 294.014824][T10836] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1992'. [ 294.060494][ T927] usb 2-1: USB disconnect, device number 17 [ 294.264042][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.109330][T10884] input: syz1 as /devices/virtual/input/input27 [ 297.847920][T10939] pim6reg1: entered promiscuous mode [ 297.865928][T10939] pim6reg1: entered allmulticast mode [ 298.554524][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805af0d000: rx timeout, send abort [ 298.565868][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805af0d000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 298.740616][T10966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.869823][T10972] pim6reg1: entered promiscuous mode [ 298.875319][T10972] pim6reg1: entered allmulticast mode [ 299.208981][ T5898] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 299.377620][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 299.392009][ T5898] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 299.404820][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.413910][ T5898] usb 3-1: Product: syz [ 299.418425][ T5898] usb 3-1: Manufacturer: syz [ 299.423233][ T5898] usb 3-1: SerialNumber: syz [ 299.431398][ T5898] usb 3-1: config 0 descriptor?? [ 299.440353][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 299.976143][T10994] netlink: 'syz.3.2056': attribute type 5 has an invalid length. [ 299.986965][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 300.868774][ T5898] gspca_sonixj: i2c_w8 err -71 [ 300.908713][ T5898] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 300.940555][ T5898] usb 3-1: USB disconnect, device number 29 [ 301.114861][T11020] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 301.147548][ T5169] Bluetooth: hci5: command 0xfc11 tx timeout [ 301.155221][ T5847] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 301.863341][T11041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.914122][T11045] syzkaller1: entered promiscuous mode [ 301.932827][T11045] syzkaller1: entered allmulticast mode [ 302.348543][ T5932] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 302.547349][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 302.564727][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 302.596943][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 302.634268][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 302.647117][T11060] IPv4: Oversized IP packet from 172.20.20.24 [ 302.653885][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 302.660312][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 302.712957][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 302.737336][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 302.774213][ T5932] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 302.803833][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.826067][ T5932] usb 4-1: Product: syz [ 302.836209][ T5932] usb 4-1: Manufacturer: syz [ 302.846334][ T5932] usb 4-1: SerialNumber: syz [ 302.863791][ T5932] usb 4-1: config 0 descriptor?? [ 303.168259][T11073] netlink: 'syz.1.2091': attribute type 1 has an invalid length. [ 303.206715][T11073] netlink: 'syz.1.2091': attribute type 4 has an invalid length. [ 303.240345][T11073] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2091'. [ 303.283972][ T5932] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 303.294787][ T5932] input input28: Device does not respond to id packet M [ 303.318271][ T5932] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 303.331187][ T5932] input input28: Device does not respond to id packet P [ 303.557943][ T5932] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 303.568240][ T5932] input input28: Device does not respond to id packet N [ 303.582164][ T5932] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 303.591945][ T5932] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 303.615777][ T5932] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 303.635758][ T5932] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 303.653632][ T5932] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 303.708349][ T5932] usb 4-1: USB disconnect, device number 31 [ 304.779972][T11107] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 304.806671][T11107] netlink: 'syz.3.2104': attribute type 4 has an invalid length. [ 304.817504][T11107] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2104'. [ 304.836521][ T30] audit: type=1326 audit(1752850728.568:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 304.882213][ T30] audit: type=1326 audit(1752850728.568:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 304.944746][ T30] audit: type=1326 audit(1752850728.568:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 304.975565][ T30] audit: type=1326 audit(1752850728.568:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 305.047649][ T30] audit: type=1326 audit(1752850728.568:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 305.091505][ T30] audit: type=1326 audit(1752850728.568:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 305.127576][ T5898] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 305.155599][ T30] audit: type=1326 audit(1752850728.568:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 305.239177][ T30] audit: type=1326 audit(1752850728.568:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 305.295476][ T30] audit: type=1326 audit(1752850728.568:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 305.332667][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.344460][ T5898] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.390801][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.407349][ T30] audit: type=1326 audit(1752850728.568:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a658e9a9 code=0x7fc00000 [ 305.444800][ T5898] usb 5-1: config 0 descriptor?? [ 305.463464][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 305.639790][T11123] netlink: 'syz.3.2113': attribute type 10 has an invalid length. [ 305.709082][T11123] veth0_vlan: left promiscuous mode [ 305.716736][T11123] veth0_vlan: entered promiscuous mode [ 305.775814][T11123] team0: Device veth0_vlan failed to register rx_handler [ 305.870215][ T5898] pwc: recv_control_msg error -32 req 02 val 2b00 [ 305.885402][ T5898] pwc: recv_control_msg error -32 req 02 val 2700 [ 305.901338][ T5898] pwc: recv_control_msg error -32 req 02 val 2c00 [ 305.909414][ T5898] pwc: recv_control_msg error -32 req 04 val 1000 [ 305.937935][ T1072] libceph: connect (1)[c::]:6789 error -101 [ 305.944074][ T1072] libceph: mon0 (1)[c::]:6789 connect error [ 305.946545][T11129] ceph: No mds server is up or the cluster is laggy [ 306.120214][ T5898] pwc: recv_control_msg error -71 req 04 val 1400 [ 306.151172][ T5898] pwc: recv_control_msg error -71 req 02 val 2000 [ 306.171058][ T5898] pwc: recv_control_msg error -71 req 02 val 2100 [ 306.190134][ T5898] pwc: recv_control_msg error -71 req 04 val 1500 [ 306.208279][ T5898] pwc: recv_control_msg error -71 req 02 val 2500 [ 306.217857][ T5898] pwc: recv_control_msg error -71 req 02 val 2400 [ 306.237691][ T5898] pwc: recv_control_msg error -71 req 02 val 2600 [ 306.244786][ T5898] pwc: recv_control_msg error -71 req 02 val 2900 [ 306.256146][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 306.264275][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 306.273121][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 306.299499][ T5898] pwc: Registered as video103. [ 306.325807][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 306.391243][ T5898] usb 5-1: USB disconnect, device number 9 [ 306.826197][T11154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2122'. [ 307.541560][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 307.737534][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 307.759407][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 307.781755][ T43] usb 4-1: config 0 has no interface number 0 [ 307.793776][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 307.813752][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 307.829972][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.861057][ T43] usb 4-1: Product: syz [ 307.865292][ T43] usb 4-1: Manufacturer: syz [ 307.890975][ T43] usb 4-1: SerialNumber: syz [ 307.913231][ T43] usb 4-1: config 0 descriptor?? [ 307.940743][ T43] smsc75xx v1.0.0 [ 308.178246][ T5898] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 308.687363][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 308.702583][ T5898] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 308.722238][ T5898] usb 3-1: config 0 has no interface number 0 [ 308.739829][ T5898] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 308.764638][ T5898] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 308.788837][ T5898] usb 3-1: config 0 interface 41 has no altsetting 0 [ 308.809592][ T5898] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 308.930003][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.947689][ T5898] usb 3-1: Product: syz [ 308.953259][ T5898] usb 3-1: Manufacturer: syz [ 308.958504][ T5898] usb 3-1: SerialNumber: syz [ 308.971946][ T5898] usb 3-1: config 0 descriptor?? [ 309.006692][T11178] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.017973][T11178] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.255872][T11178] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.278552][T11178] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.509164][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 309.529020][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 309.555760][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 309.576962][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 309.599834][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 309.647359][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 309.685675][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 309.714537][ T5898] Error reading MAC address [ 309.720436][ T43] usb 4-1: USB disconnect, device number 32 [ 309.732207][T11178] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 309.740084][T11178] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 310.427054][ T5898] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, d6:2e:d9:6f:2e:b1 [ 310.463268][ T5898] usb 3-1: USB disconnect, device number 30 [ 310.502488][ T5898] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 311.004567][T11233] Bluetooth: Invalid esc byte 0x40 [ 314.674204][T11322] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 314.813848][T11324] Invalid ELF header len 16 [ 317.250346][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.101533][T11402] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 319.574069][T11414] syzkaller0: entered promiscuous mode [ 319.591917][T11414] syzkaller0: entered allmulticast mode [ 319.646402][T11414] syzkaller0 (unregistering): left promiscuous mode [ 319.666089][T11414] syzkaller0 (unregistering): left allmulticast mode [ 319.900061][ T5932] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 320.147397][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.168141][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.205961][ T5932] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 320.242384][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.271761][ T5932] usb 4-1: SerialNumber: syz [ 320.276645][T11428] syzkaller0: entered allmulticast mode [ 320.292769][T11428] syzkaller0 (unregistering): left allmulticast mode [ 320.559059][ T5932] usb 4-1: 0:2 : does not exist [ 320.579328][ T5932] usb 4-1: unit 255 not found! [ 320.598502][ T5932] usb 4-1: 5:0: cannot get min/max values for control 1 (id 5) [ 320.621471][ T5932] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 320.667428][ T1072] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 320.688024][ T5932] usb 4-1: USB disconnect, device number 33 [ 320.808838][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.857834][ T1072] usb 5-1: Using ep0 maxpacket: 8 [ 320.898111][ T1072] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 320.907213][ T1072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.953744][ T1072] usb 5-1: Product: syz [ 320.972056][ T1072] usb 5-1: Manufacturer: syz [ 321.006015][ T1072] usb 5-1: SerialNumber: syz [ 321.026108][ T1072] usb 5-1: config 0 descriptor?? [ 321.180787][T11443] syzkaller0: entered promiscuous mode [ 321.197520][T11443] syzkaller0: entered allmulticast mode [ 321.223512][T11443] syzkaller0 (unregistering): left promiscuous mode [ 321.237480][T11443] syzkaller0 (unregistering): left allmulticast mode [ 321.257508][ T1072] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 321.488599][ T1072] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 321.531155][ T1072] usb 5-1: USB disconnect, device number 10 [ 322.631271][ T927] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 322.828003][ T927] usb 5-1: Using ep0 maxpacket: 32 [ 322.868892][ T927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 322.897471][ T927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 322.927784][ T927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 322.968140][ T927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 323.023514][ T927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 323.040408][ T927] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 323.054531][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.063934][ T927] usb 5-1: Product: syz [ 323.072181][ T927] usb 5-1: Manufacturer: syz [ 323.076936][ T927] usb 5-1: SerialNumber: syz [ 323.093742][ T927] usb 5-1: config 0 descriptor?? [ 323.518643][ T927] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 323.524865][ T927] input input30: Device does not respond to id packet M [ 323.547964][ T927] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 323.554066][ T927] input input30: Device does not respond to id packet P [ 323.593024][ T927] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 323.601384][ T927] input input30: Device does not respond to id packet B [ 323.636365][ T927] input input30: Limiting number of effects to 32 (device reports 108) [ 323.834214][T11493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.838748][ T927] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 323.859415][ T927] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 323.866056][ T927] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 323.878236][ T927] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 323.886734][ T927] iforce 5-1:0.0: usb_submit_urb failed -90 [ 323.904946][ T927] iforce 5-1:0.0: usb_submit_urb failed -90 [ 323.926501][ T927] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 323.974406][ T5204] iforce 5-1:0.0: usb_submit_urb failed -90 [ 323.988090][ T5204] iforce 5-1:0.0: usb_submit_urb failed -90 [ 324.017894][ T927] usb 5-1: USB disconnect, device number 11 [ 324.029478][ T5204] iforce 5-1:0.0: usb_submit_urb failed -19 [ 324.053264][ T5204] iforce 5-1:0.0: usb_submit_urb failed -19 [ 324.085161][ T5204] iforce 5-1:0.0: usb_submit_urb failed -19 [ 324.125138][ T5204] iforce 5-1:0.0: usb_submit_urb failed -19 [ 324.619144][ T927] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 324.817592][ T927] usb 2-1: Using ep0 maxpacket: 8 [ 324.841708][ T927] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 324.857292][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.865324][ T927] usb 2-1: Product: syz [ 324.881551][ T927] usb 2-1: Manufacturer: syz [ 324.897812][ T927] usb 2-1: SerialNumber: syz [ 324.909404][ T927] usb 2-1: config 0 descriptor?? [ 324.921827][ T927] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 326.047214][T11542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 326.157985][ T927] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 326.190395][T11545] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 326.201393][T11545] netlink: 1343 bytes leftover after parsing attributes in process `syz.2.2273'. [ 326.358466][ T1072] usb 2-1: USB disconnect, device number 18 [ 326.964901][T11568] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2283'. [ 327.091199][T11570] 9pnet: p9_errstr2errno: server reported unknown error aaaaaa [ 327.482251][ T31] INFO: task syz.0.934:8134 blocked for more than 143 seconds. [ 327.494912][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 327.503124][ T927] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 327.512877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.526333][ T31] task:syz.0.934 state:D stack:26856 pid:8134 tgid:8134 ppid:5844 task_flags:0x400040 flags:0x00004004 [ 327.540138][ T31] Call Trace: [ 327.543583][ T31] [ 327.546643][ T31] __schedule+0x1737/0x4d30 [ 327.552087][ T31] ? __lock_acquire+0xab9/0xd20 [ 327.557095][ T31] ? schedule+0x165/0x360 [ 327.565941][ T31] ? __lock_acquire+0xab9/0xd20 [ 327.575501][ T31] ? __pfx___schedule+0x10/0x10 [ 327.584959][ T31] ? schedule+0x91/0x360 [ 327.589902][ T31] schedule+0x165/0x360 [ 327.604753][ T31] schedule_preempt_disabled+0x13/0x30 [ 327.611361][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 327.621527][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 327.632552][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 327.638926][ T31] ? __lock_acquire+0xab9/0xd20 [ 327.643853][ T31] ? userfaultfd_release_all+0x15a/0x5e0 [ 327.653415][ T31] down_write+0x1ab/0x1f0 [ 327.657894][ T31] ? __pfx_down_write+0x10/0x10 [ 327.662846][ T31] ? locks_remove_file+0x344/0xea0 [ 327.668261][ T31] userfaultfd_release_all+0x15a/0x5e0 [ 327.677498][ T31] ? ima_file_free+0x150/0x460 [ 327.682324][ T31] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 327.688595][ T31] userfaultfd_release+0xe7/0x1b0 [ 327.693706][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 327.699558][ T31] ? evm_file_release+0x108/0x1e0 [ 327.704631][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 327.714881][ T927] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 327.717312][ T31] __fput+0x449/0xa70 [ 327.734960][ T31] task_work_run+0x1d4/0x260 [ 327.738091][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.739974][ T31] ? __pfx_task_work_run+0x10/0x10 [ 327.763357][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 327.765296][ T927] usb 5-1: Product: syz [ 327.769319][ T31] exit_to_user_mode_loop+0xec/0x110 [ 327.777533][ T927] usb 5-1: Manufacturer: syz [ 327.778812][ T31] do_syscall_64+0x2bd/0x3b0 [ 327.783153][ T927] usb 5-1: SerialNumber: syz [ 327.788233][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.804507][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.811222][ T31] ? clear_bhb_loop+0x60/0xb0 [ 327.814678][ T927] usb 5-1: config 0 descriptor?? [ 327.816156][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.833343][ T31] RIP: 0033:0x7f231b38e9a9 [ 327.838205][ T31] RSP: 002b:00007ffe290bc2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 327.847542][ T31] RAX: 0000000000000000 RBX: 00007f231b5b7ba0 RCX: 00007f231b38e9a9 [ 327.855737][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 327.864283][ T31] RBP: 00007f231b5b7ba0 R08: 0000000000000060 R09: 00000006290bc5ef [ 327.873915][ T31] R10: 00007f231b5b7ac0 R11: 0000000000000246 R12: 00000000000285ec [ 327.886284][ T31] R13: 00007ffe290bc3f0 R14: ffffffffffffffff R15: 00007ffe290bc410 [ 327.894721][ T31] [ 327.901982][ T31] [ 327.901982][ T31] Showing all locks held in the system: [ 327.914481][ T31] 1 lock held by khungtaskd/31: [ 327.925901][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 327.936466][ T31] 5 locks held by kworker/1:2/927: [ 327.946281][ T31] #0: ffff88801e29b148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 327.962914][ T31] #1: ffffc900035cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 327.975435][ T31] #2: ffff888027f3f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 327.985852][ T31] #3: ffff88802882f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 327.995784][ T31] #4: ffff888027562160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 328.005532][ T31] 2 locks held by getty/5609: [ 328.014853][ T31] #0: ffff88803389c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.026145][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 328.041529][ T31] 4 locks held by udevd/5858: [ 328.046337][ T31] #0: ffff88804b352790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 328.055830][ T31] #1: ffff88804f806488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 328.069558][ T31] #2: ffff888050318788 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 328.080189][ T31] #3: ffff88802882f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 328.093332][ T31] 1 lock held by syz.0.934/8134: [ 328.100405][ T31] #0: ffff88807ac40ca0 (&mm->mmap_lock){++++}-{4:4}, at: userfaultfd_release_all+0x15a/0x5e0 [ 328.113916][ T31] 1 lock held by syz.0.934/8135: [ 328.119022][ T31] [ 328.121495][ T31] ============================================= [ 328.121495][ T31] [ 328.143196][ T31] NMI backtrace for cpu 0 [ 328.143226][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 328.143248][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.143261][ T31] Call Trace: [ 328.143269][ T31] [ 328.143277][ T31] dump_stack_lvl+0x189/0x250 [ 328.143322][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.143350][ T31] ? __pfx__printk+0x10/0x10 [ 328.143391][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 328.143420][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 328.143449][ T31] ? __pfx__printk+0x10/0x10 [ 328.143482][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.143509][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 328.143537][ T31] watchdog+0xf93/0xfe0 [ 328.143565][ T31] ? watchdog+0x1de/0xfe0 [ 328.143593][ T31] kthread+0x70e/0x8a0 [ 328.143626][ T31] ? __pfx_watchdog+0x10/0x10 [ 328.143647][ T31] ? __pfx_kthread+0x10/0x10 [ 328.143677][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.143704][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.143731][ T31] ? __pfx_kthread+0x10/0x10 [ 328.143762][ T31] ret_from_fork+0x3f9/0x770 [ 328.143790][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.143822][ T31] ? __switch_to_asm+0x39/0x70 [ 328.143839][ T31] ? __switch_to_asm+0x33/0x70 [ 328.143856][ T31] ? __pfx_kthread+0x10/0x10 [ 328.143887][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.143923][ T31] [ 328.143935][ T31] Sending NMI from CPU 0 to CPUs 1: [ 328.292633][ C1] NMI backtrace for cpu 1 [ 328.292655][ C1] CPU: 1 UID: 0 PID: 11583 Comm: syz.2.2291 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 328.292677][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.292688][ C1] RIP: 0010:lock_is_held_type+0xbf/0x190 [ 328.292718][ C1] Code: 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 78 02 00 00 85 c0 75 2a 49 ff c7 49 63 85 e8 0a 00 00 48 83 c3 28 49 39 c7 7c d8 11 48 c7 c7 50 eb 40 8e 4c 89 fe e8 20 3c 86 f9 eb cb 31 db eb [ 328.292734][ C1] RSP: 0018:ffffc90004157818 EFLAGS: 00000046 [ 328.292750][ C1] RAX: 0000000000000002 RBX: ffff88802b974740 RCX: 4a143087becf0c00 [ 328.292762][ C1] RDX: 0000000000000000 RSI: ffffffff8e53d960 RDI: ffff88802b974718 [ 328.292774][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff819be975 [ 328.292785][ C1] R10: dffffc0000000000 R11: ffffed100572e781 R12: 0000000000000046 [ 328.292801][ C1] R13: ffff88802b973c00 R14: ffffffff8e53d960 R15: 0000000000000002 [ 328.292814][ C1] FS: 0000555585507500(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 328.292828][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.292844][ C1] CR2: 0000001b3361bff8 CR3: 00000000756fc000 CR4: 00000000003526f0 [ 328.292859][ C1] Call Trace: [ 328.292865][ C1] [ 328.292875][ C1] rcu_read_lock_sched_held+0x89/0x100 [ 328.292899][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 328.292922][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 328.292941][ C1] ? __set_next_task_fair+0x135/0x390 [ 328.292966][ C1] task_psi_group+0x50/0x1a0 [ 328.292989][ C1] psi_account_irqtime+0x23b/0x750 [ 328.293022][ C1] __schedule+0x871/0x4d30 [ 328.293052][ C1] ? ktime_get+0x3e/0x1f0 [ 328.293076][ C1] ? schedule+0x165/0x360 [ 328.293102][ C1] ? __lock_acquire+0xab9/0xd20 [ 328.293120][ C1] ? __pfx___schedule+0x10/0x10 [ 328.293155][ C1] ? schedule+0x91/0x360 [ 328.293177][ C1] schedule+0x165/0x360 [ 328.293200][ C1] do_nanosleep+0x1c7/0x600 [ 328.293221][ C1] ? do_nanosleep+0x7f/0x600 [ 328.293241][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 328.293261][ C1] ? __hrtimer_setup+0x187/0x210 [ 328.293281][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 328.293304][ C1] hrtimer_nanosleep+0x169/0x360 [ 328.293327][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 328.293357][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 328.293386][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 328.293403][ C1] ? lapic_next_event+0x11/0x20 [ 328.293429][ C1] __se_sys_clock_nanosleep+0x2f1/0x380 [ 328.293451][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 328.293469][ C1] ? rcu_is_watching+0x15/0xb0 [ 328.293495][ C1] ? do_syscall_64+0xbe/0x3b0 [ 328.293526][ C1] do_syscall_64+0xfa/0x3b0 [ 328.293551][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.293568][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.293585][ C1] ? clear_bhb_loop+0x60/0xb0 [ 328.293604][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.293620][ C1] RIP: 0033:0x7f3735bc1265 [ 328.293635][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 328.293649][ C1] RSP: 002b:00007ffea2ca89d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 328.293674][ C1] RAX: ffffffffffffffda RBX: 00007f3735db5fa0 RCX: 00007f3735bc1265 [ 328.293687][ C1] RDX: 00007ffea2ca8a10 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.293697][ C1] RBP: 00007f3735db7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 328.293709][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000050245 [ 328.293719][ C1] R13: 00007f3735db6080 R14: ffffffffffffffff R15: 00007ffea2ca8b50 [ 328.293739][ C1] [ 328.301378][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 328.301405][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 328.301437][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.301451][ T31] Call Trace: [ 328.301462][ T31] [ 328.301475][ T31] dump_stack_lvl+0x99/0x250 [ 328.301514][ T31] ? __asan_memcpy+0x40/0x70 [ 328.301551][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.301584][ T31] ? __pfx__printk+0x10/0x10 [ 328.301632][ T31] vpanic+0x281/0x750 [ 328.301664][ T31] ? __pfx_vpanic+0x10/0x10 [ 328.301688][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 328.301725][ T31] ? preempt_schedule+0xae/0xc0 [ 328.733082][ T31] ? preempt_schedule_common+0x83/0xd0 [ 328.738570][ T31] panic+0xb9/0xc0 [ 328.742401][ T31] ? __pfx_panic+0x10/0x10 [ 328.746848][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 328.752247][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 328.758411][ T31] watchdog+0xfd2/0xfe0 [ 328.762577][ T31] ? watchdog+0x1de/0xfe0 [ 328.766925][ T31] kthread+0x70e/0x8a0 [ 328.771012][ T31] ? __pfx_watchdog+0x10/0x10 [ 328.775701][ T31] ? __pfx_kthread+0x10/0x10 [ 328.780307][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.785518][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.790736][ T31] ? __pfx_kthread+0x10/0x10 [ 328.795343][ T31] ret_from_fork+0x3f9/0x770 [ 328.799947][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.805082][ T31] ? __switch_to_asm+0x39/0x70 [ 328.809857][ T31] ? __switch_to_asm+0x33/0x70 [ 328.814630][ T31] ? __pfx_kthread+0x10/0x10 [ 328.819244][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.824051][ T31] [ 328.827554][ T31] Kernel Offset: disabled [ 328.831894][ T31] Rebooting in 86400 seconds..