last executing test programs: 51.122047168s ago: executing program 1 (id=6518): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x4, 0x101, 0x2, {0x6, @sdr={0x50424752, 0x3ff}}, 0xfffffe01}) 51.022970039s ago: executing program 1 (id=6521): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001a80)={0x9, @meta={0x54505356, 0x3b0284d4, 0xd6d9, 0x650c, 0x2206fb50}}) 50.906741867s ago: executing program 1 (id=6524): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 50.776107594s ago: executing program 1 (id=6527): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x42, 0x4) write$binfmt_format(r0, &(0x7f0000000a00)='1\x00', 0x2) 50.689301962s ago: executing program 1 (id=6529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}, [@nested={0xc, 0x3c, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 50.332190066s ago: executing program 1 (id=6534): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 41.947844102s ago: executing program 0 (id=6664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c8b00000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db2203a4000175730d16a4683f1aea4edab57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) 41.864759775s ago: executing program 3 (id=6666): r0 = fsopen(&(0x7f0000000240)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 41.807412931s ago: executing program 3 (id=6667): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x70bd2d, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 41.728116098s ago: executing program 2 (id=6668): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x2, 0x7, 0x9, 0xe, 0x8, 0x3, 0x5, 0x7, 0x6, [0x2, 0x5, 0x8, 0x55, 0x8000, 0x9, 0x1, 0x8]}}) 41.680722451s ago: executing program 0 (id=6669): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)={0x24, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) 41.643288696s ago: executing program 3 (id=6670): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 41.578708975s ago: executing program 2 (id=6671): r0 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 41.488755701s ago: executing program 2 (id=6672): syz_ublk_setup_io_uring(0x6751, &(0x7f00000004c0)={0x0, 0xf6ab, 0x80, 0x3, 0x32a}, &(0x7f0000000540), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 41.488575958s ago: executing program 0 (id=6673): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 41.203099233s ago: executing program 0 (id=6674): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000080)) 41.071666244s ago: executing program 2 (id=6675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) 35.844086004s ago: executing program 3 (id=6676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x6, 0x8001, 0x5, 0x1, 0x7, 0x5, 0x8, {0x0, @in={{0x2, 0x4e21, @local}}, 0x1, 0x0, 0xfff, 0xb, 0x2}}, &(0x7f0000000440)=0xb0) 35.843912041s ago: executing program 0 (id=6677): r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) 35.82536941s ago: executing program 2 (id=6678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x15, 0x0, &(0x7f0000000000)) 35.597719274s ago: executing program 3 (id=6679): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000010fbdbff250a01090000000100", @ANYRES32=0x0, @ANYBLOB="08001f"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 35.412203462s ago: executing program 0 (id=6680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000080)=0x80000001, 0x4) 35.411969955s ago: executing program 2 (id=6681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000930000480080001000000123414000280"], 0xb0}}, 0x0) 23.893508052s ago: executing program 3 (id=6682): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000cc0)="580000001400192340834b80040d8c560a1174360000000000010000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c1000ffffffa6224e0000", 0x58}], 0x1) 0s ago: executing program 32 (id=6680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000080)=0x80000001, 0x4) kernel console output (not intermixed with test programs): 666403][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 290.695383][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 290.721637][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 290.751858][ T30] pwc: Registered as video103. [ 290.754283][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 290.777897][ T30] usb 2-1: USB disconnect, device number 47 [ 291.240583][T15723] comedi comedi1: 8255: I/O base address not correctly aligned [ 291.479174][T15742] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 291.599426][T15751] random: crng reseeded on system resumption [ 291.771857][T15764] overlayfs: failed to resolve './file2': -2 [ 292.010187][T15783] netlink: 'syz.0.4822': attribute type 10 has an invalid length. [ 292.030977][T15783] .: (slave vlan0): Enslaving as an active interface with an up link [ 292.047610][ T989] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 292.174096][T15794] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4828'. [ 292.198136][ T989] usb 4-1: Using ep0 maxpacket: 8 [ 292.198848][ T989] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 292.199808][ T989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 292.202801][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.202825][ T989] usb 4-1: Product: syz [ 292.202840][ T989] usb 4-1: Manufacturer: syz [ 292.202855][ T989] usb 4-1: SerialNumber: syz [ 292.206186][ T989] usb 4-1: config 0 descriptor?? [ 292.215411][ T989] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 292.347665][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 292.426226][ T989] gspca_zc3xx: reg_w_i err -71 [ 292.497619][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 292.498610][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 292.499577][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.499599][ T10] usb 3-1: config 0 has no interface number 0 [ 292.502896][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.502920][ T10] usb 3-1: Product: syz [ 292.502934][ T10] usb 3-1: Manufacturer: syz [ 292.502949][ T10] usb 3-1: SerialNumber: syz [ 292.511020][ T10] usb 3-1: config 0 descriptor?? [ 292.524488][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 292.524595][ T10] usb 3-1: selecting invalid altsetting 1 [ 292.524612][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 292.528744][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 292.529160][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 292.529206][ T10] usb 3-1: media controller created [ 292.543315][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.766642][T15827] openvswitch: netlink: IPv6 tunnel dst address is zero [ 292.929009][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 292.986909][ T10] usb 3-1: USB disconnect, device number 54 [ 293.017689][ T989] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 293.017776][ T989] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 293.026083][ T989] usb 4-1: USB disconnect, device number 46 [ 293.180394][T15849] netlink: 42496 bytes leftover after parsing attributes in process `syz.1.4854'. [ 293.292649][T15858] netlink: zone id is out of range [ 293.292667][T15858] netlink: zone id is out of range [ 293.292676][T15858] netlink: zone id is out of range [ 293.292685][T15858] netlink: zone id is out of range [ 293.292692][T15858] netlink: zone id is out of range [ 293.292700][T15858] netlink: zone id is out of range [ 293.292708][T15858] netlink: zone id is out of range [ 293.877650][ T989] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 294.027633][ T989] usb 3-1: Using ep0 maxpacket: 8 [ 294.029789][ T989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.029836][ T989] usb 3-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=f6.6a [ 294.030786][ T989] usb 3-1: config 6 has an invalid interface number: 114 but max is 0 [ 294.030810][ T989] usb 3-1: config 6 has no interface number 0 [ 294.030839][ T989] usb 3-1: config 6 interface 114 has no altsetting 0 [ 294.033527][ T989] usb 3-1: string descriptor 0 read error: -22 [ 294.033658][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.050825][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 294.111145][ T989] gspca_main: spca501-2.14.0 probing 0506:00df [ 294.189714][T15918] capability: warning: `syz.3.4887' uses 32-bit capabilities (legacy support in use) [ 294.228485][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 294.229681][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.229703][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.229744][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.232156][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.232205][ T10] usb 2-1: Product: syz [ 294.232219][ T10] usb 2-1: Manufacturer: syz [ 294.232232][ T10] usb 2-1: SerialNumber: syz [ 294.252033][ T10] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 294.259026][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 294.323615][T15920] nvme_fabrics: no handler found for transport hoop. [ 294.410149][ T9] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 294.411536][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.411561][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.414443][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.414467][ T9] usb 1-1: Product: syz [ 294.414482][ T9] usb 1-1: Manufacturer: syz [ 294.414497][ T9] usb 1-1: SerialNumber: syz [ 294.457530][ T10] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 294.475322][ T989] gspca_spca501: reg write: error -71 [ 294.475339][ T989] spca501 3-1:6.114: Reg write failed for 0x00,0x02,0x01 [ 294.475441][ T989] spca501 3-1:6.114: probe with driver spca501 failed with error -22 [ 294.488370][ T989] usb 3-1: USB disconnect, device number 55 [ 294.629685][ T9] speedtch 1-1:1.0: speedtch_bind: data interface not found! [ 294.629708][ T9] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 294.662578][ T9] usb 2-1: USB disconnect, device number 48 [ 294.825748][T15934] random: crng reseeded on system resumption [ 294.836529][ T25] usb 1-1: USB disconnect, device number 55 [ 294.912352][T15939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4898'. [ 295.292050][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 295.305962][ T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 295.437500][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 295.438125][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.439299][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 295.441796][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.441820][ T9] usb 3-1: Product: syz [ 295.441834][ T9] usb 3-1: Manufacturer: syz [ 295.441848][ T9] usb 3-1: SerialNumber: syz [ 295.449442][ T9] usb 3-1: config 0 descriptor?? [ 295.454435][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.454471][ T9] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 295.525423][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 295.526410][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.526432][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.526474][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.572854][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.572882][ T25] usb 4-1: Product: syz [ 295.572896][ T25] usb 4-1: Manufacturer: syz [ 295.572910][ T25] usb 4-1: SerialNumber: syz [ 295.614534][ T25] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 295.728013][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 295.794379][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 295.794413][ T9] em28xx 3-1:0.0: board has no eeprom [ 295.812866][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 295.813206][ T25] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC error code control 1 on unit 3: -32 (exp. 1). [ 295.813271][ T25] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 295.819566][ T25] usb 4-1: USB disconnect, device number 47 [ 295.877560][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 295.877665][ T9] em28xx 3-1:0.0: dvb set to isoc mode. [ 295.878640][ T989] em28xx 3-1:0.0: Binding DVB extension [ 295.907990][ T9] usb 3-1: USB disconnect, device number 56 [ 295.919184][ T30] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 295.931408][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 295.951712][ T989] em28xx 3-1:0.0: Registering input extension [ 295.954358][ T9] em28xx 3-1:0.0: Closing input extension [ 295.985172][ T9] em28xx: Freeing device [ 295.997504][ T5756] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 296.069386][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 296.070183][ T30] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 296.071048][ T30] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 296.071071][ T30] usb 2-1: config 9 has no interface number 0 [ 296.071099][ T30] usb 2-1: config 9 interface 27 has no altsetting 0 [ 296.073147][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.073170][ T30] usb 2-1: Product: syz [ 296.073184][ T30] usb 2-1: Manufacturer: syz [ 296.073236][ T30] usb 2-1: SerialNumber: syz [ 296.147671][ T5756] usb 1-1: Using ep0 maxpacket: 8 [ 296.148368][ T5756] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 296.149284][ T5756] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 296.151364][ T5756] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 296.151387][ T5756] usb 1-1: Product: syz [ 296.151401][ T5756] usb 1-1: Manufacturer: syz [ 296.151414][ T5756] usb 1-1: SerialNumber: syz [ 296.283655][ T30] qmi_wwan 2-1:9.27: bogus CDC Union: master=0, slave=1 [ 296.283924][ T30] qmi_wwan 2-1:9.27: probe with driver qmi_wwan failed with error -22 [ 296.313946][ T30] usb 2-1: USB disconnect, device number 49 [ 296.366760][ T5756] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 296.366785][ T5756] usb 1-1: Handspring Visor / Palm OS: port 143, is for Remote File System use [ 296.366804][ T5756] usb 1-1: Handspring Visor / Palm OS: port 223, is for unknown use [ 296.366821][ T5756] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 296.502627][T16000] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4928'. [ 296.502664][T16000] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4928'. [ 296.502680][T16000] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4928'. [ 296.567754][ T5756] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 296.567833][ T5756] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 296.597054][ T5756] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 296.616727][ T5756] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 296.636914][ T5756] usb 1-1: USB disconnect, device number 56 [ 296.651352][ T5756] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 296.669021][ T5756] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 296.669803][ T5756] visor 1-1:1.0: device disconnected [ 297.036490][T16034] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4945'. [ 297.119791][T16038] XFS (nullb0): no-recovery mounts must be read-only. [ 297.177535][ T5756] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 297.314346][T16051] lo speed is unknown, defaulting to 1000 [ 297.324117][T16051] lo speed is unknown, defaulting to 1000 [ 297.327518][ T5756] usb 4-1: Using ep0 maxpacket: 16 [ 297.328322][ T5756] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 297.334402][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.334427][ T5756] usb 4-1: Product: syz [ 297.334442][ T5756] usb 4-1: Manufacturer: syz [ 297.334456][ T5756] usb 4-1: SerialNumber: syz [ 297.336117][T16051] lo speed is unknown, defaulting to 1000 [ 297.344293][ T5756] usb 4-1: config 0 descriptor?? [ 297.393848][ T5756] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 297.557532][ T30] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 297.566348][ T5756] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 297.566468][ T5756] visor 4-1:0.0: probe with driver visor failed with error -71 [ 297.596777][ T5756] usb 4-1: USB disconnect, device number 48 [ 297.653062][T16051] infiniband sz1: set active [ 297.653134][ T5692] lo speed is unknown, defaulting to 1000 [ 297.653642][T16051] infiniband sz1: added lo [ 297.674838][T16051] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 297.674876][T16051] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 297.674918][T16051] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 297.708485][T16051] RDS/IB: sz1: added [ 297.708536][T16051] smc: adding ib device sz1 with port count 1 [ 297.708554][T16051] smc: ib device sz1 port 1 has no pnetid [ 297.718011][ T9] lo speed is unknown, defaulting to 1000 [ 297.719083][T16051] lo speed is unknown, defaulting to 1000 [ 297.740281][ T30] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.762978][ T30] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.763025][ T30] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 297.763051][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 297.764101][ T30] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 297.764123][ T30] usb 1-1: Manufacturer: syz [ 297.788181][ T30] usb 1-1: config 0 descriptor?? [ 297.824206][ T30] igorplugusb 1-1:0.0: endpoint incorrect [ 297.978661][T16051] lo speed is unknown, defaulting to 1000 [ 298.013109][ T9] usb 1-1: USB disconnect, device number 57 [ 298.290748][T16051] lo speed is unknown, defaulting to 1000 [ 298.401195][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4969'. [ 298.554469][T16051] lo speed is unknown, defaulting to 1000 [ 298.886220][T16104] ubi0: attaching mtd0 [ 298.915292][T16104] ubi0: scanning is finished [ 298.915361][T16104] ubi0: empty MTD device detected [ 299.150995][T16104] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 299.151022][T16104] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 299.151040][T16104] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 299.151057][T16104] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 299.151074][T16104] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 299.151090][T16104] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 299.151107][T16104] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 147836111 [ 299.151126][T16104] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 299.151920][T16123] ubi0: background thread "ubi_bgt0d" started, PID 16123 [ 299.588750][ T5756] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 299.676926][T16151] random: crng reseeded on system resumption [ 299.738251][ T5756] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 299.739490][ T5756] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.739549][ T5756] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.739571][ T5756] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 299.741817][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.741840][ T5756] usb 4-1: Product: syz [ 299.741855][ T5756] usb 4-1: Manufacturer: syz [ 299.741875][ T5756] usb 4-1: SerialNumber: syz [ 300.031752][ T5756] snd-usb-caiaq 4-1:1.0: invalid EPs [ 300.031861][ T5756] usb 4-1: unable to init card! (ret=-22) [ 300.034110][ T5756] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 300.236245][ T9] usb 4-1: USB disconnect, device number 49 [ 300.267753][ T989] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 300.430371][ T989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 300.430424][ T989] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 300.431406][ T989] usb 2-1: config 247 has an invalid interface number: 20 but max is 0 [ 300.431430][ T989] usb 2-1: config 247 has no interface number 0 [ 300.431458][ T989] usb 2-1: config 247 interface 20 has no altsetting 0 [ 300.435377][ T989] usb 2-1: string descriptor 0 read error: -22 [ 300.435510][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.464458][ T989] go7007 2-1:247.20: probe with driver go7007 failed with error -12 [ 300.648736][ T989] usb 2-1: USB disconnect, device number 50 [ 300.687503][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 300.854716][ T9] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 300.857199][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 300.857226][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 300.857249][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 300.857270][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 300.861617][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.861640][ T9] usb 3-1: Product: syz [ 300.861654][ T9] usb 3-1: Manufacturer: syz [ 300.861667][ T9] usb 3-1: SerialNumber: syz [ 300.865894][ T9] usb 3-1: config 0 descriptor?? [ 300.873389][ T9] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 301.143464][ T9] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 301.259767][ T153] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 301.322133][ T9] usb 3-1: USB disconnect, device number 57 [ 301.957870][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 302.117485][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 302.118322][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 302.119311][ T9] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 302.119334][ T9] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 302.119388][ T9] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 302.121567][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.121593][ T9] usb 4-1: Product: syz [ 302.121608][ T9] usb 4-1: Manufacturer: syz [ 302.121623][ T9] usb 4-1: SerialNumber: syz [ 302.142426][ T9] usb 4-1: Fast Track Pro config OK [ 302.342546][ T9] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 302.342576][ T9] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 302.342593][ T9] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 302.354905][ T9] usb 4-1: 0:2 : does not exist [ 302.354981][ T9] usb 4-1: unit 5 not found! [ 302.354997][ T9] usb 4-1: unit 6 not found! [ 302.499368][ T9] usb 4-1: USB disconnect, device number 50 [ 302.547750][ T989] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 302.553785][T16320] netlink: 'syz.2.5081': attribute type 46 has an invalid length. [ 302.553805][T16320] netlink: 'syz.2.5081': attribute type 19 has an invalid length. [ 302.580694][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.699377][ T989] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 302.700646][ T989] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 302.700669][ T989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.700687][ T989] usb 2-1: config 0 has no interface number 0 [ 302.700724][ T989] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 302.700749][ T989] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 241, setting to 64 [ 302.700772][ T989] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.700797][ T989] usb 2-1: config 0 interface 52 has no altsetting 0 [ 302.702592][ T989] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 302.702616][ T989] usb 2-1: Manufacturer: syz [ 302.706822][ T989] usb 2-1: config 0 descriptor?? [ 302.723475][ T989] hub 2-1:0.52: bad descriptor, ignoring hub [ 302.723501][ T989] hub 2-1:0.52: probe with driver hub failed with error -5 [ 302.969143][ T989] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input56 [ 303.249848][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5088'. [ 303.267879][ T989] usb 2-1: USB disconnect, device number 51 [ 303.387544][ T5756] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 303.539937][ T5756] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 303.540895][ T5756] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 303.540920][ T5756] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 303.546747][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.546770][ T5756] usb 3-1: Product: syz [ 303.546785][ T5756] usb 3-1: Manufacturer: syz [ 303.546798][ T5756] usb 3-1: SerialNumber: syz [ 303.598790][ T5756] usb 3-1: config 0 descriptor?? [ 303.602303][ T5756] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 303.971251][T16351] netlink: 'syz.3.5095': attribute type 27 has an invalid length. [ 304.016611][ T5756] usb 3-1: USB disconnect, device number 58 [ 304.417007][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 304.417026][ T31] audit: type=1326 audit(1789131957.361:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1bb9e159 code=0x7ffc0000 [ 304.417153][ T31] audit: type=1326 audit(1789131957.361:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1bb9e159 code=0x7ffc0000 [ 304.450241][ T31] audit: type=1326 audit(1789131957.371:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f1bb5e98e code=0x7ffc0000 [ 304.450292][ T31] audit: type=1326 audit(1789131957.371:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f1bb9ddeb code=0x7ffc0000 [ 304.450328][ T31] audit: type=1326 audit(1789131957.371:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f1bb9ddeb code=0x7ffc0000 [ 304.450359][ T31] audit: type=1326 audit(1789131957.371:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f1bb9ddeb code=0x7ffc0000 [ 304.450395][ T31] audit: type=1326 audit(1789131957.371:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f1bb9ddeb code=0x7ffc0000 [ 304.556870][ T31] audit: type=1326 audit(1789131957.491:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f1bb9ddeb code=0x7ffc0000 [ 304.632687][ T31] audit: type=1326 audit(1789131957.561:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f1bb9ddeb code=0x7ffc0000 [ 304.678334][ T989] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 304.678857][ T31] audit: type=1326 audit(1789131957.631:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16367 comm="syz.1.5103" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f1bb9ddeb code=0x7ffc0000 [ 304.827516][ T989] usb 2-1: Using ep0 maxpacket: 8 [ 304.828689][T16377] kAFS: unable to lookup cell 'syze¤@Ės0' [ 304.830791][ T989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.830837][ T989] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 304.832507][ T989] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 304.832532][ T989] usb 2-1: config 1 has no interface number 0 [ 304.832570][ T989] usb 2-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 304.832590][ T989] usb 2-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 304.832613][ T989] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 304.832670][ T989] usb 2-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 304.832694][ T989] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.832716][ T989] usb 2-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.832742][ T989] usb 2-1: config 1 interface 8 has no altsetting 0 [ 304.844070][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.844093][ T989] usb 2-1: Product: syz [ 304.844106][ T989] usb 2-1: Manufacturer: syz [ 304.844120][ T989] usb 2-1: SerialNumber: syz [ 305.098375][ T989] cxacru 2-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 305.098554][ T989] cxacru 2-1:1.8: probe with driver cxacru failed with error -22 [ 305.111073][ T989] usb 2-1: USB disconnect, device number 52 [ 305.242491][T16397] netlink: 'syz.0.5125': attribute type 64 has an invalid length. [ 305.242514][T16397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5125'. [ 305.265686][ T5756] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 305.313542][T16401] program syz.0.5118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.313799][T16401] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 305.417484][ T5756] usb 4-1: Using ep0 maxpacket: 8 [ 305.418283][ T5756] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 305.419257][ T5756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.419306][ T5756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.423036][ T5756] usb 4-1: config 0 descriptor?? [ 305.433511][T16409] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 305.433554][T16409] UBIFS error (pid: 16409): cannot open "ubi0_0", error -19 [ 305.489448][T16412] netlink: 'syz.0.5122': attribute type 2 has an invalid length. [ 305.642488][ T5756] usb 4-1: string descriptor 0 read error: -71 [ 305.646666][ T5756] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 305.646747][ T5756] uvcvideo 4-1:0.0: No valid video chain found. [ 305.671296][ T5756] usb 4-1: USB disconnect, device number 51 [ 306.248277][T16453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5153'. [ 306.491914][T16462] overlayfs: missing 'workdir' [ 306.507625][ T5756] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 306.657546][ T5756] usb 4-1: Using ep0 maxpacket: 8 [ 306.658336][ T5756] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 306.659505][ T5756] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 306.661399][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.661422][ T5756] usb 4-1: Product: syz [ 306.661436][ T5756] usb 4-1: Manufacturer: syz [ 306.661448][ T5756] usb 4-1: SerialNumber: syz [ 306.770303][T16471] netlink: 'syz.0.5155': attribute type 10 has an invalid length. [ 306.861549][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.934687][ T989] usb 4-1: USB disconnect, device number 52 [ 306.977531][T16443] comedi comedi1: reset error (fatal) [ 307.209411][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5163'. [ 307.241110][T16489] rust_binder: 16488:16489 got reply transaction with no transaction stack [ 307.241150][T16489] rust_binder: 16488:16489 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 307.241596][ T30] rust_binder: 16488: undelivered TRANSACTION_ERROR: 29201 [ 307.274763][T16487] hsr_slave_0 (unregistering): left promiscuous mode [ 307.367770][T16495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5168'. [ 307.405932][T16497] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5167'. [ 307.612571][T16511] netlink: 'syz.0.5173': attribute type 1 has an invalid length. [ 307.742884][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5178'. [ 307.887833][ T30] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 307.989143][T16539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.037877][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 308.040097][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 308.040143][ T30] usb 3-1: New USB device found, idVendor=106c, idProduct=1a45, bcdDevice=56.66 [ 308.042143][ T30] usb 3-1: config 8 has an invalid interface number: 114 but max is 0 [ 308.042166][ T30] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 308.042183][ T30] usb 3-1: config 8 has no interface number 0 [ 308.042211][ T30] usb 3-1: config 8 interface 114 has no altsetting 0 [ 308.048852][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.048877][ T30] usb 3-1: Product: syz [ 308.048891][ T30] usb 3-1: Manufacturer: syz [ 308.048904][ T30] usb 3-1: SerialNumber: syz [ 308.257727][T16552] net_ratelimit: 9 callbacks suppressed [ 308.257747][T16552] openvswitch: netlink: Duplicate key (type 6). [ 308.293245][T16543] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 308.296752][T16543] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 308.339005][ T30] qmi_wwan 3-1:8.114: bogus CDC Union: master=0, slave=1 [ 308.340280][ T30] qmi_wwan 3-1:8.114: probe with driver qmi_wwan failed with error -22 [ 308.344098][ T30] usb 3-1: USB disconnect, device number 59 [ 308.559174][T16560] openvswitch: netlink: Key type 31 is not supported [ 309.184062][T16606] comedi comedi1: 8255: I/O base address not correctly aligned [ 309.329135][ T989] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 309.488405][ T989] usb 1-1: Using ep0 maxpacket: 8 [ 309.489325][ T989] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 309.493256][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.493281][ T989] usb 1-1: Product: syz [ 309.493296][ T989] usb 1-1: Manufacturer: syz [ 309.493310][ T989] usb 1-1: SerialNumber: syz [ 309.497827][ T989] usb 1-1: config 0 descriptor?? [ 309.514746][ T989] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 309.553159][T16631] netlink: 'syz.1.5234': attribute type 21 has an invalid length. [ 309.716004][ T989] gspca_sonixj: reg_w1 err -71 [ 309.716087][ T989] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 309.719239][ T5692] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 309.725681][ T989] usb 1-1: USB disconnect, device number 58 [ 309.868158][ T5692] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 309.869218][ T5692] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 309.869266][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.877662][ T5692] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 310.083448][T16665] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.5250'. [ 310.344089][T16685] 9pnet_fd: p9_fd_create_unix (16685): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 310.448615][ T989] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 310.534919][T16697] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5266'. [ 310.611010][ T989] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 310.612170][ T989] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 310.612193][ T989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.612212][ T989] usb 2-1: config 0 has no interface number 0 [ 310.612251][ T989] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 310.612275][ T989] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 310.612297][ T989] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.620162][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.620184][ T989] usb 2-1: Product: syz [ 310.620198][ T989] usb 2-1: Manufacturer: syz [ 310.620212][ T989] usb 2-1: SerialNumber: syz [ 310.626068][ T989] usb 2-1: config 0 descriptor?? [ 310.728367][T16707] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 310.728400][T16707] overlayfs: missing 'lowerdir' [ 310.777141][T16709] netlink: 'syz.3.5272': attribute type 17 has an invalid length. [ 310.992659][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 311.042683][ T989] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 311.060994][ T989] usb 2-1: USB disconnect, device number 53 [ 311.148686][ T5692] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 311.149046][ T5692] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 311.149064][ T5692] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 311.152182][ T5692] usb 3-1: USB disconnect, device number 60 [ 311.297985][T16739] netlink: 'syz.0.5286': attribute type 1 has an invalid length. [ 311.353773][T16743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.857536][ T989] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 312.007533][ T989] usb 4-1: Using ep0 maxpacket: 16 [ 312.008227][ T989] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 312.009454][ T989] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 312.009479][ T989] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 312.009498][ T989] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 312.009517][ T989] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 312.009537][ T989] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 312.010327][ T989] usb 4-1: config 0 has no interface number 0 [ 312.010368][ T989] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 312.010395][ T989] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 312.010417][ T989] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.010446][ T989] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.010473][ T989] usb 4-1: config 0 interface 125 has no altsetting 0 [ 312.010490][ T989] usb 4-1: config 0 interface 125 has no altsetting 2 [ 312.012597][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.012621][ T989] usb 4-1: Product: syz [ 312.012635][ T989] usb 4-1: Manufacturer: syz [ 312.012649][ T989] usb 4-1: SerialNumber: syz [ 312.015646][ T989] usb 4-1: config 0 descriptor?? [ 312.032334][ T989] usb 4-1: selecting invalid altsetting 2 [ 312.196273][T16794] netlink: 'syz.0.5314': attribute type 17 has an invalid length. [ 312.343044][ T5612] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 312.435364][ C0] usb 4-1: async_complete: urb error -71 [ 312.435441][ C0] usb 4-1: async_complete: urb error -71 [ 312.435504][ C0] usb 4-1: async_complete: urb error -71 [ 312.438871][ T989] get_1284_register: usb error -71 [ 312.463443][ T989] usb 4-1: USB disconnect, device number 53 [ 312.521702][T16816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.580176][T16820] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 312.580208][T16820] overlayfs: missing 'lowerdir' [ 312.892321][T16844] netlink: 'syz.1.5338': attribute type 1 has an invalid length. [ 312.942544][T16848] 9pnet_fd: p9_fd_create_unix (16848): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 313.104340][T16856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.432239][T16883] openvswitch: netlink: Duplicate key (type 6). [ 313.461191][T16884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.767576][ T989] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 313.929277][ T989] usb 1-1: Using ep0 maxpacket: 8 [ 313.930014][ T989] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 313.934109][ T989] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 313.937046][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.937077][ T989] usb 1-1: Product: syz [ 313.937092][ T989] usb 1-1: Manufacturer: syz [ 313.937106][ T989] usb 1-1: SerialNumber: syz [ 313.943723][ T989] usb 1-1: config 0 descriptor?? [ 313.954458][ T989] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 314.155341][ T989] gspca_zc3xx: reg_w_i err -71 [ 314.173899][T16934] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5382'. [ 314.173918][T16934] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5382'. [ 314.173927][T16934] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5382'. [ 314.332013][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 314.332104][ T31] audit: type=1400 audit(1789131967.281:224): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16944 comm="syz.2.5387" [ 314.377493][ T30] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 314.531046][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 314.531118][ T30] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 314.532259][ T30] usb 4-1: config 247 has an invalid interface number: 20 but max is 0 [ 314.532286][ T30] usb 4-1: config 247 has no interface number 0 [ 314.532314][ T30] usb 4-1: config 247 interface 20 has no altsetting 0 [ 314.535869][ T30] usb 4-1: string descriptor 0 read error: -22 [ 314.535998][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.607190][ T30] go7007 4-1:247.20: probe with driver go7007 failed with error -12 [ 314.724651][T16970] XFS (nullb0): no-recovery mounts must be read-only. [ 314.747508][ T989] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 314.747597][ T989] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 314.751712][ T989] usb 1-1: USB disconnect, device number 59 [ 314.812490][ T9] usb 4-1: USB disconnect, device number 54 [ 314.867041][T16976] openvswitch: netlink: Key type 31 is not supported [ 314.889752][T16978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.029695][ T5612] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 315.034004][ T5612] Bluetooth: hci2: Injecting HCI hardware error event [ 315.036218][ T4932] Bluetooth: hci2: hardware error 0x00 [ 315.136964][T16994] netlink: 'syz.0.5412': attribute type 29 has an invalid length. [ 315.701129][T17036] rust_binder: 17034:17036 got transaction to invalid handle 1 [ 315.701157][T17036] rust_binder: 17034:17036 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 315.701815][T17036] syz.1.5440 (17036) used greatest stack depth: 17456 bytes left [ 315.941474][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 316.098377][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 316.099175][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.099189][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.099212][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.100820][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.100834][ T9] usb 4-1: Product: syz [ 316.100842][ T9] usb 4-1: Manufacturer: syz [ 316.100849][ T9] usb 4-1: SerialNumber: syz [ 316.106527][ T9] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 316.109547][ T989] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 316.177795][ T5701] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 316.258036][ T989] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 316.258999][ T989] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.259012][ T989] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.260877][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.260890][ T989] usb 2-1: Product: syz [ 316.260898][ T989] usb 2-1: Manufacturer: syz [ 316.260921][ T989] usb 2-1: SerialNumber: syz [ 316.320895][ T9] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 316.327735][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 316.328542][ T5701] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 316.331160][ T5701] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.331207][ T5701] usb 1-1: config 0 has no interface number 0 [ 316.334979][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.335002][ T5701] usb 1-1: Product: syz [ 316.335016][ T5701] usb 1-1: Manufacturer: syz [ 316.335029][ T5701] usb 1-1: SerialNumber: syz [ 316.349934][ T5701] usb 1-1: config 0 descriptor?? [ 316.356984][ T5701] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 316.357011][ T5701] usb 1-1: selecting invalid altsetting 1 [ 316.357026][ T5701] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 316.382386][ T5701] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.385118][ T5701] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 316.385167][ T5701] usb 1-1: media controller created [ 316.390528][ T5612] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 316.390576][ T5612] Bluetooth: hci1: Injecting HCI hardware error event [ 316.392302][T10748] Bluetooth: hci1: hardware error 0x00 [ 316.403767][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.440278][ T10] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 316.481385][ T989] speedtch 2-1:1.0: speedtch_bind: data interface not found! [ 316.481407][ T989] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 316.527164][ T5692] usb 4-1: USB disconnect, device number 55 [ 316.589418][ T10] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 316.590300][ T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 316.590314][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.590325][ T10] usb 3-1: config 0 has no interface number 0 [ 316.590347][ T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 316.590361][ T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 316.590373][ T10] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.592218][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.592231][ T10] usb 3-1: Product: syz [ 316.592239][ T10] usb 3-1: Manufacturer: syz [ 316.592247][ T10] usb 3-1: SerialNumber: syz [ 316.594453][ T10] usb 3-1: config 0 descriptor?? [ 316.689500][ T989] usb 2-1: USB disconnect, device number 54 [ 316.757656][ T5701] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 316.789836][ T5701] usb 1-1: USB disconnect, device number 60 [ 317.009540][ T10] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 317.014778][ T10] usb 3-1: USB disconnect, device number 61 [ 317.113461][ T4932] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 317.113723][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.113771][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.447480][T17079] netlink: 'syz.3.5454': attribute type 46 has an invalid length. [ 317.447504][T17079] netlink: 'syz.3.5454': attribute type 19 has an invalid length. [ 317.557051][T17084] netlink: 'syz.3.5457': attribute type 2 has an invalid length. [ 317.684849][T17093] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 317.684898][T17093] UBIFS error (pid: 17093): cannot open "ubi0_0", error -19 [ 317.740340][T17095] rust_binder: 17094:17095 got reply transaction with no transaction stack [ 317.740369][T17095] rust_binder: 17094:17095 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 317.740766][ T10] rust_binder: 17094: undelivered TRANSACTION_ERROR: 29201 [ 317.741950][T17097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5462'. [ 317.782153][ T30] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 317.948654][ T30] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 317.949635][ T30] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 317.949661][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.949681][ T30] usb 1-1: config 0 has no interface number 0 [ 317.949719][ T30] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 317.949743][ T30] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 241, setting to 64 [ 317.949767][ T30] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.949790][ T30] usb 1-1: config 0 interface 52 has no altsetting 0 [ 317.950751][ T30] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 317.950773][ T30] usb 1-1: Manufacturer: syz [ 317.956558][ T30] usb 1-1: config 0 descriptor?? [ 318.060296][ T30] hub 1-1:0.52: bad descriptor, ignoring hub [ 318.060323][ T30] hub 1-1:0.52: probe with driver hub failed with error -5 [ 318.190866][ T30] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input60 [ 318.469683][T10748] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 318.487680][ T5692] usb 1-1: USB disconnect, device number 61 [ 319.350426][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5501'. [ 319.376849][T17158] hsr_slave_0 (unregistering): left promiscuous mode [ 319.426326][T17162] overlayfs: missing 'workdir' [ 319.527603][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 319.547865][ T25] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 319.677791][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 319.686148][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 319.687338][ T10] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 319.687360][ T10] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 319.687776][ T10] usb 2-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 319.691951][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.691974][ T10] usb 2-1: Product: syz [ 319.691987][ T10] usb 2-1: Manufacturer: syz [ 319.691999][ T10] usb 2-1: SerialNumber: syz [ 319.735364][ T10] usb 2-1: Fast Track Pro config OK [ 319.737651][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 319.764283][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.764332][ T25] usb 1-1: New USB device found, idVendor=106c, idProduct=1a45, bcdDevice=56.66 [ 319.765733][ T25] usb 1-1: config 8 has an invalid interface number: 114 but max is 0 [ 319.765758][ T25] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 319.765778][ T25] usb 1-1: config 8 has no interface number 0 [ 319.765806][ T25] usb 1-1: config 8 interface 114 has no altsetting 0 [ 319.777284][T17182] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5512'. [ 319.803453][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.803480][ T25] usb 1-1: Product: syz [ 319.803493][ T25] usb 1-1: Manufacturer: syz [ 319.803507][ T25] usb 1-1: SerialNumber: syz [ 319.927088][ T10] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 319.927115][ T10] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 319.927132][ T10] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 319.930736][ T10] usb 2-1: 0:2 : does not exist [ 319.930809][ T10] usb 2-1: unit 5 not found! [ 319.930825][ T10] usb 2-1: unit 6 not found! [ 319.979581][ T10] usb 2-1: USB disconnect, device number 55 [ 319.998394][ T5701] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 320.019690][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.068222][ T25] qmi_wwan 1-1:8.114: bogus CDC Union: master=0, slave=1 [ 320.069522][ T25] qmi_wwan 1-1:8.114: probe with driver qmi_wwan failed with error -22 [ 320.072278][ T25] usb 1-1: USB disconnect, device number 62 [ 320.148694][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 320.149293][ T5701] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 320.150441][ T5701] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 320.150466][ T5701] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 320.150486][ T5701] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 320.150503][ T5701] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 320.150522][ T5701] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.150541][ T5701] usb 3-1: config 0 has no interface number 0 [ 320.150578][ T5701] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 320.150603][ T5701] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 320.150624][ T5701] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.150654][ T5701] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.150680][ T5701] usb 3-1: config 0 interface 125 has no altsetting 0 [ 320.150698][ T5701] usb 3-1: config 0 interface 125 has no altsetting 2 [ 320.152810][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.152832][ T5701] usb 3-1: Product: syz [ 320.152846][ T5701] usb 3-1: Manufacturer: syz [ 320.152857][ T5701] usb 3-1: SerialNumber: syz [ 320.154612][ T5701] usb 3-1: config 0 descriptor?? [ 320.161464][ T5701] usb 3-1: selecting invalid altsetting 2 [ 320.562940][ C0] usb 3-1: async_complete: urb error -71 [ 320.563040][ C0] usb 3-1: async_complete: urb error -71 [ 320.563127][ C0] usb 3-1: async_complete: urb error -71 [ 320.565842][ T5701] get_1284_register: usb error -71 [ 320.609729][ T5701] usb 3-1: USB disconnect, device number 62 [ 320.847898][ T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 320.977551][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 320.999102][ T25] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 321.000037][ T25] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 321.000071][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 321.000085][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 321.000966][ T25] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 321.000987][ T25] usb 4-1: Manufacturer: syz [ 321.002652][ T25] usb 4-1: config 0 descriptor?? [ 321.006273][ T25] igorplugusb 4-1:0.0: endpoint incorrect [ 321.160341][ T10] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 321.162733][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 321.162760][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 321.162784][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 321.162805][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 321.164787][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.164810][ T10] usb 1-1: Product: syz [ 321.164824][ T10] usb 1-1: Manufacturer: syz [ 321.164839][ T10] usb 1-1: SerialNumber: syz [ 321.225339][ T25] usb 4-1: USB disconnect, device number 56 [ 321.248615][ T10] usb 1-1: config 0 descriptor?? [ 321.253689][ T10] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 321.504955][ T10] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 321.553046][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5528'. [ 321.686824][ T25] usb 1-1: USB disconnect, device number 63 [ 321.728296][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5534'. [ 321.846340][T17251] random: crng reseeded on system resumption [ 321.868882][T17253] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.5540'. [ 322.084433][T17270] netlink: 'syz.2.5545': attribute type 7 has an invalid length. [ 322.440993][T17297] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5560'. [ 322.556080][T17302] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 323.426081][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5600'. [ 323.724738][T17380] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ē–½mŌ%AÆśĘ’AZųZ“”ąIĘŗ„ž ąų§% [ 323.887488][ T5701] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 323.938468][T17390] netlink: 'syz.1.5606': attribute type 7 has an invalid length. [ 324.038274][ T5701] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 324.039259][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.039283][ T5701] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.039323][ T5701] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.043528][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.043553][ T5701] usb 1-1: Product: syz [ 324.043567][ T5701] usb 1-1: Manufacturer: syz [ 324.043581][ T5701] usb 1-1: SerialNumber: syz [ 324.126929][ T5701] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 324.342349][ T5701] uvcvideo 1-1:1.0: Failed to query (GET_INFO) UVC error code control 1 on unit 3: -71 (exp. 1). [ 324.342458][ T5701] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 324.373440][ T5701] usb 1-1: USB disconnect, device number 64 [ 324.464039][T17421] rdma_rxe: rxe_newlink: failed to add lo [ 324.508985][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5630'. [ 324.669122][ T25] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 324.671939][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5628'. [ 324.818109][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 324.819020][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.819079][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.821474][ T25] usb 4-1: config 0 descriptor?? [ 324.825542][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 324.905607][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5632'. [ 324.935658][T17445] rdma_rxe: rxe_newlink: failed to add lo [ 325.113116][T17458] random: crng reseeded on system resumption [ 325.241607][ T25] pwc: recv_control_msg error -71 req 02 val 2b00 [ 325.242088][ T25] pwc: recv_control_msg error -71 req 02 val 2700 [ 325.242691][ T25] pwc: recv_control_msg error -71 req 02 val 2c00 [ 325.244786][ T25] pwc: recv_control_msg error -71 req 04 val 1000 [ 325.248145][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 325.251185][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 325.256591][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 325.257712][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 325.259484][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 325.260192][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 325.261107][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 325.262094][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 325.263746][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 325.264155][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 325.265604][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 325.266693][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 325.272114][ T25] pwc: Registered as video103. [ 325.278018][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 325.307568][ T25] usb 4-1: USB disconnect, device number 57 [ 325.890493][T17480] rdma_rxe: rxe_newlink: failed to add lo [ 326.132188][T17498] netlink: 'syz.1.5659': attribute type 1 has an invalid length. [ 326.235027][T17506] tmpfs: Bad value for 'mpol' [ 326.252304][T17508] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5663'. [ 326.257568][ T25] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 326.408677][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 326.409370][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 326.414950][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.414974][ T25] usb 1-1: Product: syz [ 326.414989][ T25] usb 1-1: Manufacturer: syz [ 326.415003][ T25] usb 1-1: SerialNumber: syz [ 326.417565][ T5692] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 326.425842][ T25] r8152-cfgselector 1-1: Unknown version 0x0000 [ 326.425863][ T25] r8152-cfgselector 1-1: config 0 descriptor?? [ 326.570223][ T5692] usb 4-1: not running at top speed; connect to a high speed hub [ 326.570264][ T5692] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 326.571452][ T5692] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 326.571476][ T5692] usb 4-1: config 1 has no interface number 0 [ 326.575090][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.575115][ T5692] usb 4-1: Product: syz [ 326.575130][ T5692] usb 4-1: Manufacturer: syz [ 326.575144][ T5692] usb 4-1: SerialNumber: syz [ 326.601879][ T5692] usb 4-1: selecting invalid altsetting 1 [ 326.799779][ T5692] dvb_ttusb_budget: ttusb_init_controller: error [ 326.799798][ T5692] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 326.854135][ T25] r8152-cfgselector 1-1: USB disconnect, device number 65 [ 326.891223][ T5692] DVB: Unable to find symbol cx22700_attach() [ 326.924278][T17545] syz.1.5679: vmalloc error: size 68719476738, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 326.924516][T17545] CPU: 1 UID: 0 PID: 17545 Comm: syz.1.5679 Not tainted syzkaller #0 PREEMPT(full) [ 326.924542][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.924559][T17545] Call Trace: [ 326.924571][T17545] [ 326.924580][T17545] dump_stack_lvl+0xe8/0x150 [ 326.924611][T17545] warn_alloc+0x24d/0x270 [ 326.924646][T17545] ? __pfx_warn_alloc+0x10/0x10 [ 326.924694][T17545] __vmalloc_node_range_noprof+0x12c/0x1690 [ 326.924730][T17545] ? __pfx___mutex_trylock_common+0x10/0x10 [ 326.924758][T17545] ? rcu_is_watching+0x16/0xb0 [ 326.924780][T17545] ? trace_contention_end+0x3d/0x140 [ 326.924804][T17545] ? __mutex_lock+0x305/0x15a0 [ 326.924831][T17545] ? tomoyo_path_number_perm+0x219/0x5f0 [ 326.924854][T17545] ? tomoyo_path_number_perm+0x219/0x5f0 [ 326.924873][T17545] ? dvb_dvr_do_ioctl+0x76/0x220 [ 326.924903][T17545] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 326.924936][T17545] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 326.924962][T17545] vmalloc_noprof+0xb2/0xe0 [ 326.924987][T17545] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 326.925014][T17545] dvb_dvr_do_ioctl+0x12b/0x220 [ 326.925044][T17545] dvb_usercopy+0x199/0x2e0 [ 326.925066][T17545] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 326.925090][T17545] ? __pfx_dvb_usercopy+0x10/0x10 [ 326.925122][T17545] ? __fget_files+0x3a2/0x420 [ 326.925147][T17545] ? __fget_files+0x2a/0x420 [ 326.925174][T17545] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 326.925200][T17545] dvb_dvr_ioctl+0x29/0x40 [ 326.925225][T17545] __se_sys_ioctl+0xfc/0x170 [ 326.925258][T17545] do_syscall_64+0x166/0x520 [ 326.925277][T17545] ? trace_irq_disable+0x3b/0x140 [ 326.925304][T17545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.925325][T17545] ? clear_bhb_loop+0x70/0xc0 [ 326.925349][T17545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.925369][T17545] RIP: 0033:0x7f3f1bb9e159 [ 326.925396][T17545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.925413][T17545] RSP: 002b:00007f3f1cab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.925435][T17545] RAX: ffffffffffffffda RBX: 00007f3f1be25fa0 RCX: 00007f3f1bb9e159 [ 326.925450][T17545] RDX: 0000001000000002 RSI: 0000000000006f2d RDI: 0000000000000003 [ 326.925463][T17545] RBP: 00007f3f1bc3503b R08: 0000000000000000 R09: 0000000000000000 [ 326.925476][T17545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.925488][T17545] R13: 00007f3f1be26038 R14: 00007f3f1be25fa0 R15: 00007fff07493e48 [ 326.925519][T17545] [ 326.925531][T17545] Mem-Info: [ 326.925540][T17545] active_anon:5844 inactive_anon:0 isolated_anon:0 [ 326.925540][T17545] active_file:0 inactive_file:59011 isolated_file:0 [ 326.925540][T17545] unevictable:0 dirty:164 writeback:0 [ 326.925540][T17545] slab_reclaimable:11350 slab_unreclaimable:98079 [ 326.925540][T17545] mapped:25161 shmem:523 pagetables:1175 [ 326.925540][T17545] sec_pagetables:0 bounce:0 [ 326.925540][T17545] kernel_misc_reclaimable:0 [ 326.925540][T17545] free:1278734 free_pcp:10590 free_cma:0 [ 326.929092][T17545] Node 0 active_anon:23376kB inactive_anon:0kB active_file:0kB inactive_file:235608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100456kB dirty:656kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11764kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 326.929152][T17545] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 326.929205][T17545] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.930554][T17545] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 326.930611][T17545] Node 0 DMA32 free:1190072kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23376kB inactive_anon:0kB active_file:0kB inactive_file:235608kB unevictable:0kB writepending:656kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:31812kB local_pcp:10892kB free_cma:0kB [ 326.930672][T17545] lowmem_reserve[]: 0 0 1 1 1 [ 326.930706][T17545] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 326.930769][T17545] lowmem_reserve[]: 0 0 0 0 0 [ 326.930803][T17545] Node 1 Normal free:3909504kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:436kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:10488kB local_pcp:248kB free_cma:0kB [ 326.930860][T17545] lowmem_reserve[]: 0 0 0 0 0 [ 326.930894][T17545] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 326.931015][T17545] Node 0 DMA32: 684*4kB (UM) 357*8kB (UME) 406*16kB (UM) 374*32kB (UME) 219*64kB (UME) 148*128kB (UM) 78*256kB (M) 34*512kB (ME) 18*1024kB (M) 14*2048kB (UME) 256*4096kB (M) = 1190072kB [ 326.931171][T17545] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 326.931265][T17545] Node 1 Normal: 0*4kB 0*8kB 2*16kB (UM) 3*32kB (U) 8*64kB (U) 6*128kB (U) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 951*4096kB (M) = 3909504kB [ 326.931405][T17545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.931421][T17545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 326.931437][T17545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.931453][T17545] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 326.931468][T17545] 59530 total pagecache pages [ 326.931479][T17545] 0 pages in swap cache [ 326.931486][T17545] Free swap = 124996kB [ 326.931493][T17545] Total swap = 124996kB [ 326.931501][T17545] 2097051 pages RAM [ 326.931508][T17545] 0 pages HighMem/MovableOnly [ 326.931515][T17545] 429554 pages reserved [ 326.931522][T17545] 0 pages cma reserved [ 327.016956][ T5692] DVB: Unable to find symbol tda10046_attach() [ 327.016971][ T5692] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 327.036187][ T5692] usb 4-1: USB disconnect, device number 58 [ 328.036128][T17576] netlink: 'syz.0.5694': attribute type 1 has an invalid length. [ 328.036152][T17576] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5694'. [ 328.036169][T17576] nbd: couldn't find a device at index 2147483646 [ 328.152022][T17585] netlink: 'syz.0.5699': attribute type 6 has an invalid length. [ 328.152045][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5699'. [ 328.711673][T17628] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5720'. [ 328.993580][T17649] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5729'. [ 328.997226][T17649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.263101][T17668] syz.3.5738 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.596540][T17690] netlink: 'syz.0.5748': attribute type 27 has an invalid length. [ 329.596563][T17690] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5748'. [ 329.617885][ T989] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 329.798196][ T989] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 329.799210][ T989] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 329.799255][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.812021][ T989] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 330.327608][ T5701] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 330.481165][ T5701] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 330.483076][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 330.483101][ T5701] usb 4-1: Product: syz [ 330.513164][ T5701] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected [ 330.525865][ T5701] usb 4-1: Detected FT4233HP [ 330.869034][ T989] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 330.892062][ T5701] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 330.895421][ T5701] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 330.913379][ T5701] usb 4-1: USB disconnect, device number 59 [ 330.924140][ T5701] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 330.924746][ T5701] ftdi_sio 4-1:5.0: device disconnected [ 331.069959][ T989] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 331.069983][ T989] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 331.071957][ T989] usb 2-1: USB disconnect, device number 56 [ 332.000021][ T5692] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 332.148234][ T5692] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 332.149290][ T5692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.149336][ T5692] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.149357][ T5692] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.149381][ T5692] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.149444][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.487170][T17776] netlink: 'syz.2.5790': attribute type 21 has an invalid length. [ 332.563619][ T5692] usb 1-1: USB disconnect, device number 66 [ 332.720700][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5797'. [ 332.928233][T17806] netlink: 'syz.2.5806': attribute type 58 has an invalid length. [ 332.996214][T17813] netlink: 'syz.2.5808': attribute type 2 has an invalid length. [ 332.996238][T17813] netlink: 'syz.2.5808': attribute type 7 has an invalid length. [ 333.023260][T17813] : entered promiscuous mode [ 333.502898][T17847] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 333.502939][T17847] CIFS: VFS: Malformed UNC in devname [ 333.740513][T17864] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 333.793657][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5833'. [ 334.087511][ T5701] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 334.144516][T17894] netlink: 'syz.0.5845': attribute type 5 has an invalid length. [ 334.250810][ T5701] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 334.251815][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 334.251858][ T5701] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 334.251884][ T5701] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 334.251908][ T5701] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 334.251943][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.264084][T17870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.272935][ T5701] ims_pcu 4-1:1.0: Second endpoint on data interface is not BULK IN [ 334.272983][ T5701] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -22 [ 334.478133][T17914] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 334.478173][T17914] CIFS: VFS: Malformed UNC in devname [ 334.482400][ T989] usb 4-1: USB disconnect, device number 60 [ 334.877797][ T25] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 335.028704][ T25] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 335.030262][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.030290][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 335.033824][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.033848][ T25] usb 2-1: Product: syz [ 335.033862][ T25] usb 2-1: Manufacturer: syz [ 335.033876][ T25] usb 2-1: SerialNumber: syz [ 335.096259][ T25] etas_es58x 2-1:1.0: Starting syz syz (Serial Number syz) [ 335.139503][T17958] netlink: 'syz.0.5875': attribute type 2 has an invalid length. [ 335.139526][T17958] netlink: 'syz.0.5875': attribute type 7 has an invalid length. [ 335.306130][ T25] etas_es58x 2-1:1.0: could not parse product info: 'Š‘' [ 335.433521][T17974] comedi comedi1: adq12b: I/O base address or length out of range [ 335.473737][T17979] netlink: 'syz.3.5887': attribute type 2 has an invalid length. [ 335.473759][T17979] netlink: 'syz.3.5887': attribute type 7 has an invalid length. [ 335.503358][T17979] : entered promiscuous mode [ 335.531686][ T25] usb 2-1: USB disconnect, device number 57 [ 335.536070][ T25] etas_es58x 2-1:1.0: Disconnecting syz syz [ 335.632945][T17986] netlink: 'syz.2.5897': attribute type 5 has an invalid length. [ 336.067762][ T5692] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 336.145726][T18020] netlink: 'syz.2.5901': attribute type 21 has an invalid length. [ 336.145806][T18020] netlink: 'syz.2.5901': attribute type 1 has an invalid length. [ 336.221273][ T5692] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 336.223448][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 336.223472][ T5692] usb 1-1: Product: syz [ 336.258668][ T5692] ftdi_sio 1-1:5.0: FTDI USB Serial Device converter detected [ 336.262199][ T5692] usb 1-1: Detected FT4233HP [ 336.431530][T18033] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 336.666426][ T5692] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 336.683836][ T5692] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 336.713507][ T5692] usb 1-1: USB disconnect, device number 67 [ 336.729448][ T5692] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 336.730098][ T5692] ftdi_sio 1-1:5.0: device disconnected [ 336.743266][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5913'. [ 337.581123][T18094] netlink: 'syz.0.5930': attribute type 21 has an invalid length. [ 337.581151][T18094] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.581232][T18094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.581242][T18094] IPv6: NLM_F_CREATE should be set when creating new route [ 337.581279][T18094] IPv6: NLM_F_CREATE should be set when creating new route [ 337.581303][T18094] IPv6: NLM_F_CREATE should be set when creating new route [ 337.618925][ T5701] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 337.760802][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 337.761285][ T5701] usb 4-1: not running at top speed; connect to a high speed hub [ 337.761315][ T5701] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 337.762376][ T5701] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 337.762399][ T5701] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 337.765825][ T5701] usb 4-1: string descriptor 0 read error: -22 [ 337.765960][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.992146][T18117] netlink: 4816 bytes leftover after parsing attributes in process `syz.1.5942'. [ 337.993093][ T5701] snd-usb-6fire 4-1:2.0: unknown device firmware state received from device: [ 337.993114][ T5701] eb 2e 87 4b 9a 05 e6 5e [ 337.993184][ T5701] snd-usb-6fire 4-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 338.047486][ T989] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 338.110753][T18124] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5946'. [ 338.202863][ T5701] usb 4-1: USB disconnect, device number 61 [ 338.211859][ T989] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 338.217293][ T989] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 338.217342][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.243226][ T989] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 338.707560][ T5701] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 338.858812][ T5701] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 338.859947][ T5701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 338.859973][ T5701] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 338.862427][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.862450][ T5701] usb 3-1: Product: syz [ 338.862463][ T5701] usb 3-1: Manufacturer: syz [ 338.862476][ T5701] usb 3-1: SerialNumber: syz [ 338.876856][ T5701] etas_es58x 3-1:1.0: Starting syz syz (Serial Number syz) [ 339.003753][T18168] netlink: 4816 bytes leftover after parsing attributes in process `syz.3.5968'. [ 339.092183][ T5701] etas_es58x 3-1:1.0: could not parse product info: 'Š‘' [ 339.199075][T18178] netlink: 4816 bytes leftover after parsing attributes in process `syz.3.5972'. [ 339.271522][ T989] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 339.331799][ T5701] usb 3-1: USB disconnect, device number 63 [ 339.341360][ T5701] etas_es58x 3-1:1.0: Disconnecting syz syz [ 339.472357][ T989] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 339.472380][ T989] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 339.494606][ T989] usb 1-1: USB disconnect, device number 68 [ 340.450143][T18255] No source specified [ 340.518338][ T989] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 340.670079][ T989] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.40 [ 340.671079][ T989] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 340.671109][ T989] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.671135][ T989] usb 3-1: config 1 interface 0 has no altsetting 0 [ 340.673822][ T989] usb 3-1: string descriptor 0 read error: -22 [ 340.673965][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.687714][T18242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.870799][T18279] PKCS8: Unsupported PKCS#8 version [ 340.917674][ T989] usbhid 3-1:1.0: can't add hid device: -71 [ 340.917771][ T989] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 340.928080][ T989] usb 3-1: USB disconnect, device number 64 [ 341.408663][T18319] No source specified [ 341.477777][ T989] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 341.632865][ T989] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.633942][ T989] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.633966][ T989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.633983][ T989] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.634025][ T989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.634049][ T989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.635640][ T989] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.635664][ T989] usb 4-1: Product: syz [ 341.635679][ T989] usb 4-1: Manufacturer: syz [ 341.645024][ T989] cdc_wdm 4-1:1.0: skipping garbage [ 341.645040][ T989] cdc_wdm 4-1:1.0: skipping garbage [ 341.660593][ T989] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 341.662234][ T989] cdc_wdm 4-1:1.0: Unknown control protocol [ 341.760342][T18337] PKCS8: Unsupported PKCS#8 version [ 341.794605][T18339] netlink: 'syz.0.6035': attribute type 27 has an invalid length. [ 341.794627][T18339] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6035'. [ 341.880387][T18305] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 341.884652][ T989] usb 4-1: USB disconnect, device number 62 [ 341.887150][T18345] program syz.2.6042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.911326][T18345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 342.209598][T18367] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6052'. [ 343.082806][T18435] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6084'. [ 343.186189][T18443] netlink: 'syz.2.6089': attribute type 27 has an invalid length. [ 343.186213][T18443] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6089'. [ 343.414913][T18458] program syz.3.6095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.415114][T18458] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 343.514041][T18467] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 343.567559][ T5692] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 343.657529][ T25] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 343.717573][ T30] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 343.718512][ T5692] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 343.719442][ T5692] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 343.719470][ T5692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 343.719491][ T5692] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 343.719521][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.721918][T18453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.818564][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 343.818602][ T25] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 343.819430][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.819501][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.826188][ T25] gspca_main: spca501-2.14.0 probing 0000:0000 [ 343.847684][ T5701] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 343.880983][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.881031][ T30] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 343.882190][ T30] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 343.882213][ T30] usb 3-1: config 64 has no interface number 0 [ 343.882251][ T30] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 343.882301][ T30] usb 3-1: config 64 interface 44 has no altsetting 0 [ 343.884710][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.884733][ T30] usb 3-1: Product: syz [ 343.884747][ T30] usb 3-1: Manufacturer: syz [ 343.884761][ T30] usb 3-1: SerialNumber: syz [ 343.992558][ T5701] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.40 [ 343.993792][ T5701] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 343.993822][ T5701] usb 4-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.993848][ T5701] usb 4-1: config 1 interface 0 has no altsetting 0 [ 343.997199][ T5701] usb 4-1: string descriptor 0 read error: -22 [ 343.997383][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.002647][T18473] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 344.113540][ T30] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 344.128519][ T30] usb 3-1: USB disconnect, device number 65 [ 344.137037][T10748] Bluetooth: hci4: Reading Intel version command failed (-71) [ 344.143473][ T989] usb 2-1: USB disconnect, device number 58 [ 344.216410][ T5701] usbhid 4-1:1.0: can't add hid device: -71 [ 344.216510][ T5701] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 344.223523][ T5701] usb 4-1: USB disconnect, device number 63 [ 344.330300][ T25] gspca_spca501: reg write: error -110 [ 344.330314][ T25] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 344.330359][ T25] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 344.331090][ T25] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 344.331781][ T25] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 344.332052][ T25] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 344.332103][ T25] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 344.339768][ T25] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -5 [ 344.836924][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6111'. [ 344.987632][T18498] comedi comedi1: dt2814: I/O base address not correctly aligned [ 345.044183][ T30] usb 1-1: USB disconnect, device number 69 [ 345.193397][T18513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6123'. [ 345.193425][T18513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6123'. [ 345.391741][T18527] netlink: 'syz.1.6130': attribute type 21 has an invalid length. [ 345.391825][T18527] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6130'. [ 345.679203][T18548] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 345.776581][T18552] netlink: 'syz.0.6141': attribute type 21 has an invalid length. [ 345.776642][T18552] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6141'. [ 345.802805][T18558] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6143'. [ 345.919312][T18567] netlink: 'syz.0.6146': attribute type 21 has an invalid length. [ 345.919337][T18567] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6146'. [ 346.339541][ T989] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 346.487571][ T989] usb 2-1: Using ep0 maxpacket: 16 [ 346.488293][ T989] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 346.488742][ T30] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 346.489614][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.489634][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.489645][ T989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.489668][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.491586][ T989] usb 2-1: config 0 descriptor?? [ 346.530647][ T989] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input64 [ 346.582827][ T4968] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.583229][ T4968] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.587211][ T4968] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.587903][ T25] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 346.589757][ T4968] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.602852][ T4968] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.623286][ T5627] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.641378][ T5692] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 346.655127][ T4968] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.656097][ T4968] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.659386][ T30] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 346.660452][ T30] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 346.660474][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.660492][ T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 346.660532][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.660556][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.662275][ T30] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 346.662296][ T30] usb 3-1: Product: syz [ 346.662310][ T30] usb 3-1: Manufacturer: syz [ 346.668077][ T30] cdc_wdm 3-1:1.0: skipping garbage [ 346.668092][ T30] cdc_wdm 3-1:1.0: skipping garbage [ 346.673359][ T30] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 346.673377][ T30] cdc_wdm 3-1:1.0: Unknown control protocol [ 346.721385][T18577] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 346.736316][ T30] usb 2-1: USB disconnect, device number 59 [ 346.751574][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 346.759896][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.764778][ T25] usb 1-1: config 0 descriptor?? [ 346.773236][ T25] cp210x 1-1:0.0: cp210x converter detected [ 346.798995][ T5692] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.800227][ T5692] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 346.801441][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 346.801462][ T5692] usb 4-1: SerialNumber: syz [ 346.875362][T18589] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 346.876480][ T989] usb 3-1: USB disconnect, device number 66 [ 347.173269][ T25] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 347.174090][ T25] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 347.174165][ T25] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 347.184949][ T25] usb 1-1: cp210x converter now attached to ttyUSB0 [ 347.195795][ T25] usb 1-1: USB disconnect, device number 70 [ 347.203851][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 347.204429][ T25] cp210x 1-1:0.0: device disconnected [ 347.227782][ T5692] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 347.235261][ T5692] usb 4-1: USB disconnect, device number 64 [ 347.707565][ T989] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 347.789114][ T5692] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 347.820794][T18625] nvme_fabrics: missing parameter 'traddr=%s' [ 347.862110][ T989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 347.862159][ T989] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 347.863209][ T989] usb 2-1: config 64 has an invalid interface number: 44 but max is 0 [ 347.863234][ T989] usb 2-1: config 64 has no interface number 0 [ 347.863272][ T989] usb 2-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 347.863298][ T989] usb 2-1: config 64 interface 44 has no altsetting 0 [ 347.866089][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.866113][ T989] usb 2-1: Product: syz [ 347.866128][ T989] usb 2-1: Manufacturer: syz [ 347.866142][ T989] usb 2-1: SerialNumber: syz [ 347.951311][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 347.953184][ T5692] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 347.954324][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.954612][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.954636][ T5692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.954678][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.968235][ T5692] usb 3-1: config 0 descriptor?? [ 347.978889][ T5692] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input65 [ 347.982563][ T4968] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.021446][ T4968] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.047803][ T4968] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.058757][ T4968] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.140991][ T5625] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.161848][ T4968] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.162697][ T4968] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.201430][ T989] iowarrior 2-1:64.44: no interrupt-out endpoint found [ 348.205037][ T989] usb 2-1: USB disconnect, device number 60 [ 348.225900][T18619] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 348.230941][ T5692] usb 3-1: USB disconnect, device number 67 [ 348.395115][T18632] infiniband syz1: set active [ 348.395130][T18632] infiniband syz1: added syz_tun [ 348.413782][T18632] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 348.413811][T18632] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 348.413851][T18632] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 348.471783][T18632] RDS/IB: syz1: added [ 348.471834][T18632] smc: adding ib device syz1 with port count 1 [ 348.471853][T18632] smc: ib device syz1 port 1 has no pnetid [ 349.171899][T18661] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6195'. [ 349.435151][T18671] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 350.250733][T18730] netlink: 'syz.1.6224': attribute type 3 has an invalid length. [ 350.320388][T18732] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6226'. [ 350.433049][T18739] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6228'. [ 351.007211][T18772] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 351.014077][T18775] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6248'. [ 351.326289][T18794] netdevsim netdevsim3: Firmware load for './cgroup/../file0/file0' refused, path contains '..' component [ 351.624942][ T5701] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 351.663939][T18819] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6257'. [ 351.789438][ T5701] usb 3-1: not running at top speed; connect to a high speed hub [ 351.789461][ T5701] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 351.790359][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.790418][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.841405][ T5701] gspca_main: spca501-2.14.0 probing 0000:0000 [ 352.347750][ T5701] gspca_spca501: reg write: error -110 [ 352.347771][ T5701] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 352.347850][ T5701] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 352.348686][ T5701] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 352.349238][ T5701] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 352.349513][ T5701] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 352.349553][ T5701] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 352.349949][ T5701] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -5 [ 353.009933][ T25] usb 3-1: USB disconnect, device number 68 [ 353.568386][T18837] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6262'. [ 353.772656][T18851] kAFS: unable to lookup cell 'Žyz0' [ 353.792101][T18853] netlink: 'syz.2.6270': attribute type 10 has an invalid length. [ 353.792126][T18853] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6270'. [ 353.797542][ T5701] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 353.951481][ T5701] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.952621][ T5701] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 353.953597][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.953619][ T5701] usb 2-1: SerialNumber: syz [ 354.424596][ T5701] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 354.447369][ T5701] usb 2-1: USB disconnect, device number 61 [ 354.753256][T18918] UBIFS error (pid: 18918): cannot open "ubi:0", error -19 [ 355.077512][ T5692] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 355.207864][T18954] netlink: 'syz.1.6320': attribute type 21 has an invalid length. [ 355.207925][T18954] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6320'. [ 355.235375][ T5692] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 355.250149][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.250175][ T5692] usb 4-1: Product: syz [ 355.250189][ T5692] usb 4-1: Manufacturer: syz [ 355.250211][ T5692] usb 4-1: SerialNumber: syz [ 355.479534][ T5692] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 355.479755][ T5692] kalmia 4-1:1.0: probe with driver kalmia failed with error -71 [ 355.486010][ T5692] usb 4-1: USB disconnect, device number 65 [ 355.556946][T18975] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 355.556973][T18975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.560450][T18975] vhci_hcd vhci_hcd.0: Device attached [ 355.564676][T18975] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 355.564696][T18975] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 355.564769][T18975] vhci_hcd vhci_hcd.0: Device attached [ 355.565058][T18978] vhci_hcd: connection closed [ 355.565444][ T83] vhci_hcd vhci_hcd.0: stop threads [ 355.565466][ T83] vhci_hcd vhci_hcd.0: release socket [ 355.565484][ T83] vhci_hcd vhci_hcd.0: disconnect device [ 355.565644][T18976] vhci_hcd: connection closed [ 355.567073][ T83] vhci_hcd vhci_hcd.0: stop threads [ 355.567090][ T83] vhci_hcd vhci_hcd.0: release socket [ 355.567107][ T83] vhci_hcd vhci_hcd.0: disconnect device [ 355.578015][ T9] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 355.728161][ T9] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 355.729098][ T9] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.730470][ T9] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 355.730493][ T9] usb 2-1: Manufacturer: syz [ 355.730502][ T9] usb 2-1: SerialNumber: syz [ 355.944261][ T9] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 355.949735][ T9] usb 2-1: USB disconnect, device number 62 [ 356.269451][T19019] dvmrp12: entered allmulticast mode [ 356.278688][ T5692] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 356.307549][ T25] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 356.437636][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 356.438358][ T5692] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 356.438395][ T5692] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 356.460225][ T5692] usb 3-1: string descriptor 0 read error: -71 [ 356.460349][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.466140][ T5692] r8152-cfgselector 3-1: Unknown version 0x0000 [ 356.466162][ T5692] r8152-cfgselector 3-1: rejected 8 configurations due to insufficient available bus power [ 356.466180][ T5692] r8152-cfgselector 3-1: no configuration chosen from 8 choices [ 356.471421][ T5692] r8152-cfgselector 3-1: USB disconnect, device number 69 [ 356.487040][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.487687][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 356.487716][ T25] usb 4-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 356.492420][ T25] usb 4-1: config 4 has an invalid interface number: 106 but max is 0 [ 356.492442][ T25] usb 4-1: config 4 has no interface number 0 [ 356.492469][ T25] usb 4-1: config 4 interface 106 has no altsetting 0 [ 356.498997][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.499019][ T25] usb 4-1: Product: syz [ 356.499033][ T25] usb 4-1: Manufacturer: syz [ 356.499047][ T25] usb 4-1: SerialNumber: syz [ 356.756353][ T25] uvcvideo 4-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 356.756383][ T25] uvcvideo 4-1:4.106: Forcing UVC version to 1.0a [ 356.756402][ T25] uvcvideo 4-1:4.106: No valid video chain found. [ 356.762175][ T25] usb 4-1: USB disconnect, device number 66 [ 356.851890][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6363'. [ 357.203321][T19070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6375'. [ 357.207680][ T25] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 357.227671][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 357.371091][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.371149][ T25] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 357.372115][ T25] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 357.372140][ T25] usb 1-1: config 114 has no interface number 0 [ 357.372179][ T25] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 357.372204][ T25] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 357.372229][ T25] usb 1-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 357.372251][ T25] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 357.372276][ T25] usb 1-1: config 114 interface 240 has no altsetting 0 [ 357.376894][ T25] usb 1-1: string descriptor 0 read error: -22 [ 357.377022][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.388179][T19052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 357.391311][ T25] ir_usb 1-1:114.240: IR Dongle converter detected [ 357.402302][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.443393][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 357.454310][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.454347][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 357.454369][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.454411][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.570242][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.571154][ T9] usb 2-1: invalid MIDI out EP 0 [ 357.607969][ T25] usb 1-1: IRDA class descriptor not found, device not bound [ 357.818878][ T5692] usb 1-1: USB disconnect, device number 71 [ 357.834593][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 357.850921][ T9] usb 2-1: USB disconnect, device number 63 [ 357.937596][ T25] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 358.087566][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 358.089912][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 358.089955][ T25] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 358.090842][ T25] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 358.090865][ T25] usb 4-1: config 1 has no interface number 0 [ 358.090889][ T25] usb 4-1: config 1 interface 151 has no altsetting 0 [ 358.093441][ T25] usb 4-1: string descriptor 0 read error: -22 [ 358.093545][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.162875][ T25] gspca_main: pac7311-2.14.0 probing 093a:260e [ 358.176438][T19105] netlink: 'syz.2.6391': attribute type 1 has an invalid length. [ 358.508927][ T25] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 358.509014][ T25] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71 [ 358.515571][ T25] usb 4-1: USB disconnect, device number 67 [ 358.542246][ T5692] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 358.588328][T19129] netlink: 495 bytes leftover after parsing attributes in process `syz.1.6402'. [ 358.690576][ T5692] usb 3-1: unable to get BOS descriptor or descriptor too short [ 358.691060][ T5692] usb 3-1: not running at top speed; connect to a high speed hub [ 358.691091][ T5692] usb 3-1: New USB device found, idVendor=0547, idProduct=0080, bcdDevice=2a.0d [ 358.693648][ T5692] usb 3-1: config 5 has an invalid interface number: 193 but max is 0 [ 358.693673][ T5692] usb 3-1: config 5 has no interface number 0 [ 358.693700][ T5692] usb 3-1: config 5 interface 193 has no altsetting 0 [ 358.695604][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.695626][ T5692] usb 3-1: Product: syz [ 358.695640][ T5692] usb 3-1: Manufacturer: syz [ 358.695653][ T5692] usb 3-1: SerialNumber: syz [ 358.978183][ T5692] usbtest 3-1:5.193: EZ-USB device [ 358.978206][ T5692] usbtest 3-1:5.193: full-speed {control bulk-in bulk-out} tests (+alt) [ 358.980051][ T5692] usb 3-1: USB disconnect, device number 70 [ 359.007507][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 359.075108][T19155] netlink: 'syz.3.6416': attribute type 5 has an invalid length. [ 359.161152][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 359.163571][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.163620][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.168061][ T9] usb 1-1: config 0 descriptor?? [ 359.580850][ T9] ath6kl: Failed to read usb control message: -71 [ 359.580900][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 359.580915][ T9] ath6kl: Unable to recv target info: -71 [ 359.597063][ T9] ath6kl: Failed to init ath6kl core: -71 [ 359.597945][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 359.603562][ T9] usb 1-1: USB disconnect, device number 72 [ 359.734364][T19198] netlink: 'syz.1.6436': attribute type 21 has an invalid length. [ 359.734387][T19198] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6436'. [ 359.734434][T19198] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6436'. [ 359.855678][T19206] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 360.303500][T19234] netlink: 'syz.0.6455': attribute type 4 has an invalid length. [ 360.303522][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6455'. [ 360.483028][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6460'. [ 360.536532][ T30] logitech-hidpp-device 0003:046D:C082.0001: item fetching failed at offset 0/2 [ 360.549412][ T30] logitech-hidpp-device 0003:046D:C082.0001: hidpp_probe:parse failed [ 360.549513][ T30] logitech-hidpp-device 0003:046D:C082.0001: probe with driver logitech-hidpp-device failed with error -22 [ 360.587771][ T5701] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 360.738728][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 360.739418][ T5701] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.741070][ T5701] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 360.741119][ T5701] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.741141][ T5701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.741165][ T5701] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.741187][ T5701] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.741227][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.808714][T19268] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6472'. [ 360.858956][T19268] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.864219][T19268] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.872599][T19268] . (unregistering): Released all slaves [ 361.034223][T19279] qrtr: Invalid version 0 [ 361.078861][T19281] comedi comedi1: 8255: I/O base address not correctly aligned [ 361.169473][ T5701] usb 4-1: USB disconnect, device number 68 [ 361.303238][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6485'. [ 361.351985][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6486'. [ 361.506676][T19311] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 362.082609][T19354] __nla_validate_parse: 2 callbacks suppressed [ 362.082628][T19354] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6513'. [ 362.457486][ T30] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 362.607479][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 362.608296][ T30] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 362.609316][ T30] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 362.611389][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.611412][ T30] usb 3-1: Product: syz [ 362.611426][ T30] usb 3-1: Manufacturer: syz [ 362.611441][ T30] usb 3-1: SerialNumber: syz [ 362.675115][ T30] r8152-cfgselector 3-1: Unknown version 0x0000 [ 362.675143][ T30] r8152-cfgselector 3-1: config 0 descriptor?? [ 362.715500][ T5610] cgroup: fork rejected by pids controller in /syz1 [ 362.850332][ T4932] Bluetooth: latency 521 > 499 [ 363.111490][ T30] r8152-cfgselector 3-1: USB disconnect, device number 71 [ 363.156719][ T3699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.156753][ T3699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.256939][ T3699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.256975][ T3699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.335951][T19416] cgroup: Name too long [ 363.421837][T10748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.423945][T10748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.424655][T10748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.425544][T10748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.427333][T10748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.548496][ T3699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.548533][ T3699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.697056][ T3699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.697093][ T3699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.022300][ T3699] bridge_slave_1: left allmulticast mode [ 364.022350][ T3699] bridge_slave_1: left promiscuous mode [ 364.024187][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.055272][ T3699] bridge_slave_0: left allmulticast mode [ 364.055297][ T3699] bridge_slave_0: left promiscuous mode [ 364.055483][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.312611][ T31] audit: type=1400 audit(1789132017.261:225): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=19462 comm="syz.3.6556" [ 364.605656][ T3699] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.622490][ T3699] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.626077][ T3699] . (unregistering): Released all slaves [ 364.869660][T10748] Bluetooth: hci3: command 0x2016 tx timeout [ 364.956246][T19494] random: crng reseeded on system resumption [ 364.984203][T19492] bridge0: port 3(veth0_to_bridge) entered blocking state [ 364.984357][T19492] bridge0: port 3(veth0_to_bridge) entered disabled state [ 364.984575][T19492] veth0_to_bridge: entered allmulticast mode [ 364.986756][T19492] veth0_to_bridge: entered promiscuous mode [ 364.987012][T19492] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.002151][T19492] bridge0: port 3(veth0_to_bridge) entered blocking state [ 365.002242][T19492] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 365.507841][T10748] Bluetooth: hci0: command tx timeout [ 365.792865][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 366.051403][T19418] lo speed is unknown, defaulting to 1000 [ 366.647515][ T5701] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 366.797890][ T5701] usb 1-1: Using ep0 maxpacket: 8 [ 366.798696][ T5701] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.799899][ T5701] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 366.799924][ T5701] usb 1-1: config 179 has no interface number 0 [ 366.799966][ T5701] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 366.799992][ T5701] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 366.800019][ T5701] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 366.800044][ T5701] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 366.800071][ T5701] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.800111][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.808030][T19558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 366.947906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.948040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.949111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.949434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.949712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.950011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.950309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.950608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.950756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.950900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.161571][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 367.304087][ T30] usb 1-1: USB disconnect, device number 73 [ 367.304185][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 367.304232][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 367.587933][T10748] Bluetooth: hci0: command tx timeout [ 367.735354][T19611] ±’: renamed from hsr0 (while UP) [ 368.255094][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 368.442992][T19642] AppArmor: change_hat: Invalid input '0' [ 368.592120][T19648] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 368.777184][T19655] netlink: 'syz.0.6621': attribute type 21 has an invalid length. [ 368.777207][T19655] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6621'. [ 368.828279][ T3699] hsr_slave_0: left promiscuous mode [ 368.830548][ T3699] hsr_slave_1: left promiscuous mode [ 368.831568][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.831604][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.836071][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.836091][ T3699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.917018][ T3699] veth1_macvtap: left promiscuous mode [ 368.917181][ T3699] veth1_vlan: left promiscuous mode [ 368.917275][ T3699] veth0_vlan: left promiscuous mode [ 369.641741][ T1120] smc: removing ib device sz1 [ 369.667658][T10748] Bluetooth: hci0: command tx timeout [ 369.701894][T19655] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6621'. [ 369.734393][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 369.743213][ T9] infiniband sz1: ib_query_port failed (-19) [ 369.813634][ T1120] smbdirect: ib_dev[sz1] removed [ 369.982772][T19418] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.982867][T19418] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.982997][T19418] bridge_slave_0: entered allmulticast mode [ 369.998626][T19418] bridge_slave_0: entered promiscuous mode [ 370.013292][T19418] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.016753][T19418] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.016913][T19418] bridge_slave_1: entered allmulticast mode [ 370.036491][T19418] bridge_slave_1: entered promiscuous mode [ 370.125668][T19710] netlink: 'syz.2.6640': attribute type 1 has an invalid length. [ 370.125691][T19710] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6640'. [ 370.332402][T19418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.354543][T19418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.369249][T19719] program syz.0.6643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.624304][T19418] team0: Port device team_slave_0 added [ 370.627137][T19418] team0: Port device team_slave_1 added [ 370.716801][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6652'. [ 370.857987][T19418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.858006][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.858032][T19418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.863085][T19418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.863101][T19418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.863127][T19418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.049563][T19749] mmap: syz.0.6659 (19749) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 371.109366][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6660'. [ 371.136407][T19418] hsr_slave_0: entered promiscuous mode [ 371.143392][T19418] hsr_slave_1: entered promiscuous mode [ 371.518603][T19763] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6664'. [ 371.749742][T10748] Bluetooth: hci0: command tx timeout [ 372.010396][ T30] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 372.703589][ T30] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 377.571558][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.571585][ T30] usb 4-1: Product: syz [ 377.839177][ T30] usb 4-1: config 0 descriptor?? [ 377.864706][ T30] usb 4-1: can't set config #0, error -71 [ 378.009462][ T30] usb 4-1: USB disconnect, device number 69 [ 378.914360][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.944696][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.906704][ C0] sched: DL replenish lagged too much [ 442.472048][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.537300][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.354339][ T4932] Bluetooth: hci0: command 0x0406 tx timeout [ 501.844399][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.854777][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.153841][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.164945][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.401772][ T32] INFO: task kworker/u8:10:3699 blocked for more than 154 seconds. [ 574.401800][ T32] Not tainted syzkaller #0 [ 574.401811][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.401820][ T32] task:kworker/u8:10 state:D stack:22568 pid:3699 tgid:3699 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 574.401879][ T32] Workqueue: netns cleanup_net [ 574.401916][ T32] Call Trace: [ 574.401927][ T32] [ 574.401940][ T32] __schedule+0x17dd/0x5940 [ 574.401990][ T32] ? wq_worker_running+0x9f/0x210 [ 574.402019][ T32] ? __pfx___schedule+0x10/0x10 [ 574.402055][ T32] ? schedule+0x90/0x2b0 [ 574.402083][ T32] schedule+0x164/0x2b0 [ 574.402112][ T32] schedule_preempt_disabled+0x13/0x30 [ 574.402138][ T32] __mutex_lock+0x7c4/0x15a0 [ 574.402158][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 574.402180][ T32] ? netdev_run_todo+0x781/0x1060 [ 574.402207][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 574.402227][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 574.402258][ T32] ? rcu_barrier+0x424/0x530 [ 574.402290][ T32] netdev_run_todo+0x781/0x1060 [ 574.402320][ T32] ? __pfx_netdev_run_todo+0x10/0x10 [ 574.402343][ T32] ? unregister_netdevice_queue+0x17d/0x340 [ 574.402371][ T32] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 574.402405][ T32] default_device_exit_batch+0x6d4/0x760 [ 574.402429][ T32] ? __pfx_default_device_exit_batch+0x10/0x10 [ 574.402461][ T32] ? __pfx_default_device_exit_batch+0x10/0x10 [ 574.402480][ T32] ops_undo_list+0x4d7/0x8f0 [ 574.402505][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 574.402527][ T32] ? idr_destroy+0x218/0x290 [ 574.402553][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 574.402581][ T32] cleanup_net+0x572/0x810 [ 574.402603][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 574.402634][ T32] ? rcu_is_watching+0x16/0xb0 [ 574.402656][ T32] ? process_scheduled_works+0x97a/0x1630 [ 574.402679][ T32] process_scheduled_works+0xc3d/0x1630 [ 574.402731][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.402761][ T32] ? assign_work+0x3cf/0x5d0 [ 574.402788][ T32] worker_thread+0xa47/0xfb0 [ 574.402824][ T32] ? __kthread_parkme+0x71/0x1f0 [ 574.402858][ T32] kthread+0x38b/0x480 [ 574.402885][ T32] ? __pfx_worker_thread+0x10/0x10 [ 574.402907][ T32] ? __pfx_kthread+0x10/0x10 [ 574.402934][ T32] ret_from_fork+0x514/0xb70 [ 574.402965][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 574.402991][ T32] ? __switch_to+0xc89/0x1420 [ 574.403017][ T32] ? __pfx_kthread+0x10/0x10 [ 574.403046][ T32] ret_from_fork_asm+0x1a/0x30 [ 574.403088][ T32] [ 574.403143][ T32] [ 574.403143][ T32] Showing all locks held in the system: [ 574.403152][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 574.403166][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403218][ T32] #1: ffffc900000e7c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403267][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 574.403314][ T32] locks held by kworker/u8:0/12: 5, last CPU#1: [ 574.403329][ T32] #0: ffff888058bb1140 ((wq_completion)krds_cp_wq#1/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403378][ T32] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403426][ T32] #2: ffff8880597f3380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 574.403476][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.403530][ T32] #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 574.403579][ T32] locks held by kworker/1:0/25: 3, on CPU#1: [ 574.403592][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403647][ T32] #1: ffffc900001f7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403697][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 574.403752][ T32] locks held by kworker/1:1/30: 2, last CPU#1: [ 574.403766][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403815][ T32] #1: ffffc90000a57c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403867][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 574.403880][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.403929][ T32] locks held by kworker/u8:2/42: 3, on CPU#0: [ 574.403943][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.403993][ T32] #1: ffffc90000b27c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404042][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 574.404093][ T32] locks held by kworker/u8:3/50: 2, last CPU#1: [ 574.404106][ T32] #0: ffff88813fe03940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404156][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404207][ T32] locks held by kworker/u8:4/59: 3, last CPU#1: [ 574.404221][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404271][ T32] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404321][ T32] #2: ffff888067d707a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 574.404378][ T32] locks held by kworker/u8:5/83: 4, last CPU#1: [ 574.404392][ T32] #0: ffff88807eaf0940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404447][ T32] #1: ffffc900024dfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404497][ T32] #2: ffff8880126cd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 574.404551][ T32] #3: ffff88807ce38330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 574.404606][ T32] locks held by kworker/u8:6/153: 3, last CPU#1: [ 574.404620][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404675][ T32] #1: ffffc90002ecfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404726][ T32] #2: ffff88807b570258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 574.404786][ T32] locks held by kworker/u8:7/1120: 3, last CPU#1: [ 574.404800][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404849][ T32] #1: ffffc90005117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.404899][ T32] #2: ffff888067ed07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 574.404960][ T32] locks held by kworker/R-ipv6_/3194: 3, on CPU#0: [ 574.404974][ T32] #0: ffff888030335140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405024][ T32] #1: ffffc9000de2fc20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405074][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 574.405131][ T32] locks held by kworker/R-bat_e/3225: 2, last CPU#1: [ 574.405145][ T32] #0: ffff88803173d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405195][ T32] #1: ffffc9000e09fc20 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405245][ T32] locks held by kworker/u8:8/3668: 4, last CPU#0: [ 574.405259][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405308][ T32] #1: ffffc9000e9ffc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405357][ T32] #2: ffff888067c107a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 574.405409][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 574.405463][ T32] locks held by kworker/u8:9/3690: 3, last CPU#1: [ 574.405477][ T32] #0: ffff88803496d140 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405526][ T32] #1: ffffc9000eabfc40 ((work_completion)(&cp->cp_down_w)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405576][ T32] #2: ffff88802a8d45e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 574.405624][ T32] locks held by kworker/u8:10/3699: 4, on CPU#1: [ 574.405643][ T32] #0: ffff88801bebe140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405693][ T32] #1: ffffc9000e81fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.405742][ T32] #2: ffffffff9045c4e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 574.405787][ T32] #3: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x781/0x1060 [ 574.405839][ T32] locks held by udevd/4983: 2, last CPU#1: [ 574.405852][ T32] #0: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 574.405897][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.405951][ T32] locks held by getty/5371: 2, on CPU#1: [ 574.405964][ T32] #0: ffff88803284e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.406019][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 574.406071][ T32] locks held by syz-executor/5600: 4, last CPU#1: [ 574.406085][ T32] #0: ffff888078acc378 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 574.406138][ T32] #1: ffff8880351aa558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fd/0x12c0 [ 574.406192][ T32] #2: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.406245][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 574.406293][ T32] locks held by syz-executor/5614: 1, last CPU#1: [ 574.406307][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.406360][ T32] locks held by syz-executor/5615: 2, last CPU#1: [ 574.406374][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.406427][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 574.406474][ T32] locks held by kworker/1:3/5692: 2, last CPU#1: [ 574.406488][ T32] #0: ffff88813ff41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.406538][ T32] #1: ffffc90003f0fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.406588][ T32] locks held by kworker/0:5/5701: 4, last CPU#0: [ 574.406601][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.406657][ T32] #1: ffffc90003f9fc40 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.406705][ T32] #2: ffffffff8ef62b68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 574.406754][ T32] #3: ffffffff8ee11160 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x90/0x2b0 [ 574.406808][ T32] locks held by kworker/1:5/5756: 3, on CPU#1: [ 574.406821][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.406869][ T32] #1: ffffc9000424fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.406917][ T32] #2: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 574.406966][ T32] locks held by kworker/u8:11/16259: 3, last CPU#0: [ 574.406980][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.407030][ T32] #1: ffffc9000a85fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.407079][ T32] #2: ffff888067fd07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 574.407131][ T32] locks held by syz-executor/19418: 10, last CPU#1: [ 574.407145][ T32] #0: ffff888031326460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 574.407202][ T32] #1: ffff888034b05480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 574.501019][ T32] #2: ffff888028124d28 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 574.501093][ T32] #3: ffffffff8fce2540 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 574.501148][ T32] #4: ffff888075ca2128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 574.501202][ T32] #5: ffff88807ca6a258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 574.501248][ T32] #6: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 574.501301][ T32] #7: ffffffff9b153a88 (&net->mpls.platform_mutex){+.+.}-{4:4}, at: mpls_dev_notify+0x82/0xd30 [ 574.501347][ T32] #8: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.501402][ T32] #9: ffff8880b853bd60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 574.501458][ T32] locks held by kworker/u8:12/19785: 3, last CPU#1: [ 574.501473][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.501522][ T32] #1: ffffc900082efc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.513843][ T32] #2: ffff888067d007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 574.513914][ T32] locks held by kworker/u8:13/19787: 4, last CPU#1: [ 574.513928][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.513980][ T32] #1: ffffc90004d8fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514030][ T32] #2: ffff888067f807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 574.514082][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 574.514130][ T32] locks held by sed/19811: 3, last CPU#1: [ 574.514144][ T32] #0: ffffffff8f6f2998 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 574.514191][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.514247][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 574.514293][ T32] locks held by kworker/u8:14/19812: 4, last CPU#1: [ 574.514308][ T32] #0: ffff88807be0c140 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514361][ T32] #1: ffffc900070d7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514412][ T32] #2: ffff888076f9d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 574.514467][ T32] #3: ffff88807ce3aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 574.514521][ T32] locks held by kworker/u8:15/19813: 2, last CPU#1: [ 574.514535][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514584][ T32] #1: ffffc9000c60fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514641][ T32] locks held by kworker/u8:16/19814: 3, last CPU#1: [ 574.514656][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514705][ T32] #1: ffffc90005597c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514756][ T32] #2: ffff88807ef74258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 574.514813][ T32] locks held by syz-executor/19815: 2, last CPU#1: [ 574.514828][ T32] #0: ffff888065af5cf8 (&mm->mmap_lock){++++}-{4:4}, at: setup_arg_pages+0x30e/0xbd0 [ 574.514880][ T32] #1: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.514934][ T32] locks held by kworker/u8:17/19817: 4, last CPU#1: [ 574.514949][ T32] #0: ffff888058bb7940 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.514998][ T32] #1: ffffc90003b6fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 574.515047][ T32] #2: ffff8880597f3980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 574.515096][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 574.515150][ T32] [ 574.515156][ T32] ============================================= [ 574.515156][ T32] [ 574.515165][ T32] NMI backtrace for cpu 1 [ 574.515195][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 574.515217][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.515229][ T32] Call Trace: [ 574.515237][ T32] [ 574.515245][ T32] dump_stack_lvl+0xe8/0x150 [ 574.515271][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 574.515296][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.515325][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 574.515352][ T32] sys_info+0x135/0x170 [ 574.515374][ T32] watchdog+0x1058/0x10d0 [ 574.515408][ T32] ? watchdog+0x209/0x10d0 [ 574.515440][ T32] kthread+0x38b/0x480 [ 574.515467][ T32] ? __pfx_watchdog+0x10/0x10 [ 574.515491][ T32] ? __pfx_kthread+0x10/0x10 [ 574.515518][ T32] ret_from_fork+0x514/0xb70 [ 574.515548][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 574.515574][ T32] ? __switch_to+0xc89/0x1420 [ 574.515603][ T32] ? __pfx_kthread+0x10/0x10 [ 574.515631][ T32] ret_from_fork_asm+0x1a/0x30 [ 574.515670][ T32] [ 574.515678][ T32] Sending NMI from CPU 1 to CPUs 0: [ 574.515714][ C0] NMI backtrace for cpu 0 [ 574.515727][ C0] CPU: 0 UID: 0 PID: 3668 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 574.515748][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.515760][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 574.515784][ C0] RIP: 0010:rcu_is_watching+0x69/0xb0 [ 574.515805][ C0] Code: f7 e8 0b 9f 8b 00 48 c7 c3 18 8a bd 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d e7 c0 0f 12 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 5f 06 [ 574.515820][ C0] RSP: 0018:ffffc90000006e60 EFLAGS: 00000082 [ 574.515835][ C0] RAX: 00000000000fd1d4 RBX: ffff8880b8433a18 RCX: 8000000000000302 [ 574.515849][ C0] RDX: 0000000000000000 RSI: ffffffff8c6f0560 RDI: ffffffff8c6f0520 [ 574.515863][ C0] RBP: ffffc900000070c0 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 574.515876][ C0] R10: dffffc0000000000 R11: fffffbfff2137670 R12: ffff88807b526910 [ 574.515890][ C0] R13: dffffc0000000000 R14: ffffffff8e8747d0 R15: dffffc0000000000 [ 574.515904][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 574.515919][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.515932][ C0] CR2: 00007f1b90bed158 CR3: 000000000ed48000 CR4: 00000000003526f0 [ 574.515948][ C0] Call Trace: [ 574.515955][ C0] [ 574.515962][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 574.515986][ C0] trace_irq_disable+0x3b/0x140 [ 574.516012][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 574.516035][ C0] __local_bh_enable_ip+0x72/0x140 [ 574.516055][ C0] ip6t_do_table+0x13c4/0x15b0 [ 574.516090][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 574.516121][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 574.516148][ C0] ? lock_acquire+0x115/0x350 [ 574.516174][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 574.516199][ C0] nf_hook_slow+0xc5/0x220 [ 574.516223][ C0] ? NF_HOOK+0xa2/0x6e0 [ 574.516243][ C0] NF_HOOK+0x560/0x6e0 [ 574.516266][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 574.516284][ C0] ? net_generic+0x1e/0x240 [ 574.516305][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 574.516328][ C0] ? net_generic+0x1e/0x240 [ 574.516347][ C0] ? net_generic+0x1e/0x240 [ 574.516369][ C0] br_nf_forward_ip+0x7eb/0xa30 [ 574.516390][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 574.516413][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 574.516435][ C0] nf_hook_slow+0xc5/0x220 [ 574.516458][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.516478][ C0] NF_HOOK+0x23e/0x3f0 [ 574.516497][ C0] ? NF_HOOK+0xa2/0x3f0 [ 574.516514][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 574.516533][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.516551][ C0] ? nbp_switchdev_allowed_egress+0xd9/0x1d0 [ 574.516577][ C0] ? br_handle_vlan+0x5e/0x530 [ 574.516605][ C0] __br_forward+0x397/0x540 [ 574.516622][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.516642][ C0] br_handle_frame_finish+0x11a0/0x1950 [ 574.516664][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 574.516688][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.516715][ C0] ? nf_hook_slow+0x176/0x220 [ 574.516740][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.516761][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 574.516787][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 574.516809][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.516831][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 574.516852][ C0] ? lock_acquire+0x115/0x350 [ 574.516879][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 574.516901][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.516925][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 574.516948][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 574.516971][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 574.516995][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 574.517017][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 574.517042][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 574.517062][ C0] br_handle_frame+0x127f/0x1510 [ 574.517088][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 574.517115][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.517134][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 574.517159][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 574.517187][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 574.517207][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 574.517242][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 574.517265][ C0] ? ip6_rcv_finish+0x265/0x280 [ 574.517285][ C0] ? NF_HOOK+0x336/0x3c0 [ 574.517306][ C0] ? lock_acquire+0x115/0x350 [ 574.517342][ C0] ? process_backlog+0x3de/0x18b0 [ 574.517366][ C0] ? process_backlog+0x3de/0x18b0 [ 574.517392][ C0] process_backlog+0x727/0x18b0 [ 574.517420][ C0] ? process_backlog+0x3de/0x18b0 [ 574.517450][ C0] __napi_poll+0xaa/0x330 [ 574.517475][ C0] net_rx_action+0x61d/0xf50 [ 574.517507][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 574.517532][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 574.517562][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 574.517595][ C0] handle_softirqs+0x226/0x860 [ 574.517617][ C0] ? do_softirq+0x77/0xd0 [ 574.517640][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1e92/0x2c40 [ 574.517670][ C0] do_softirq+0x77/0xd0 [ 574.517688][ C0] [ 574.517694][ C0] [ 574.517701][ C0] __local_bh_enable_ip+0x100/0x140 [ 574.517721][ C0] ieee80211_ibss_rx_queued_mgmt+0x1e92/0x2c40 [ 574.517754][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 574.517778][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf10/0x2c40 [ 574.517805][ C0] ? __lock_acquire+0x747/0x2de0 [ 574.517830][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 574.517869][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 574.517890][ C0] ? kcov_remote_start+0x9c/0x7e0 [ 574.517920][ C0] ? kcov_remote_start+0x1a6/0x7e0 [ 574.517948][ C0] ieee80211_iface_work+0x78a/0x1010 [ 574.517974][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 574.517999][ C0] ? process_scheduled_works+0x97a/0x1630 [ 574.518020][ C0] process_scheduled_works+0xc3d/0x1630 [ 574.518058][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.518082][ C0] ? assign_work+0x3cf/0x5d0 [ 574.518111][ C0] worker_thread+0xa47/0xfb0 [ 574.518148][ C0] kthread+0x38b/0x480 [ 574.518172][ C0] ? __pfx_worker_thread+0x10/0x10 [ 574.518192][ C0] ? __pfx_kthread+0x10/0x10 [ 574.518217][ C0] ret_from_fork+0x514/0xb70 [ 574.518242][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 574.518267][ C0] ? __switch_to+0xc89/0x1420 [ 574.518290][ C0] ? __pfx_kthread+0x10/0x10 [ 574.518315][ C0] ret_from_fork_asm+0x1a/0x30 [ 574.518348][ C0] [ 578.701140][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 580.727260][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 580.736380][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.746444][ T32] Call Trace: [ 580.749733][ T32] [ 580.752670][ T32] vpanic+0x56d/0xa70 [ 580.756670][ T32] ? __pfx___schedule+0x10/0x10 [ 580.761534][ T32] ? __pfx_vpanic+0x10/0x10 [ 580.766064][ T32] panic+0xc5/0xd0 [ 580.769803][ T32] ? __pfx_panic+0x10/0x10 [ 580.774235][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 580.779720][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 580.785131][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 580.791300][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 580.797469][ T32] watchdog+0x10cc/0x10d0 [ 580.801822][ T32] ? watchdog+0x209/0x10d0 [ 580.806264][ T32] kthread+0x38b/0x480 [ 580.810345][ T32] ? __pfx_watchdog+0x10/0x10 [ 580.815121][ T32] ? __pfx_kthread+0x10/0x10 [ 580.819725][ T32] ret_from_fork+0x514/0xb70 [ 580.824348][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 580.829560][ T32] ? __switch_to+0xc89/0x1420 [ 580.834245][ T32] ? __pfx_kthread+0x10/0x10 [ 580.838854][ T32] ret_from_fork_asm+0x1a/0x30 [ 580.843643][ T32] [ 580.847114][ T32] Kernel Offset: disabled [ 580.851433][ T32] Rebooting in 86400 seconds..