last executing test programs: 3m54.231155276s ago: executing program 1 (id=9): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) 3m54.11876492s ago: executing program 1 (id=11): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x40800) 3m54.007238025s ago: executing program 1 (id=12): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1, 0x9}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) 3m53.917778918s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8bf81a, 0x0) 3m53.834132621s ago: executing program 1 (id=14): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xa, r2, 0x0, r3}) 3m53.576721461s ago: executing program 1 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1f0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m53.279667042s ago: executing program 32 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1f0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xb0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m6.908680018s ago: executing program 3 (id=480): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m4.714910347s ago: executing program 3 (id=514): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x800, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c) 3m4.60838474s ago: executing program 3 (id=515): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x40000000000000c0}) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m4.454576878s ago: executing program 3 (id=518): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 3m4.388199457s ago: executing program 3 (id=519): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) file_getattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300), 0x18, 0x1000) close(r0) 3m4.063646411s ago: executing program 3 (id=525): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3m3.733056347s ago: executing program 33 (id=525): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.377090045s ago: executing program 0 (id=2369): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 3.803722472s ago: executing program 4 (id=2413): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.591137591s ago: executing program 0 (id=2419): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)="829a21", 0x3}], 0x1}}], 0x1, 0x4604c880) sendto$inet6(r0, &(0x7f0000000440)='\x00\x00', 0x1b, 0x20003bc4, 0x0, 0x0) 3.449022752s ago: executing program 0 (id=2420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x10, 0x117, 0x4, 0x9}], 0x18}], 0x1, 0x20000000) 3.35910178s ago: executing program 0 (id=2421): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0xfffffffffffffd1d, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x0, 0x9, 0x4, "28571090"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0xb, 0x2, "919e"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x9}, 0x0, 0x0, 0x0}) 3.311622191s ago: executing program 5 (id=2422): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 2.446541062s ago: executing program 5 (id=2423): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000b44000/0x2000)=nil, 0x2000}, 0x1}) 2.379657501s ago: executing program 5 (id=2424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.301243409s ago: executing program 5 (id=2425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40000) 2.300855455s ago: executing program 2 (id=2426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 2.222824834s ago: executing program 5 (id=2427): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040411215500000000000010902240001000000c609040007020300010009210000050122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.168578413s ago: executing program 2 (id=2428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.118392777s ago: executing program 2 (id=2429): socket(0x28, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 2.027063739s ago: executing program 2 (id=2430): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') 2.018523097s ago: executing program 2 (id=2431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000c00)={0xaaaaaaaaaaaab93, 0x0, [{0x7, 0x1fade15c, 0x0, 0x6, 0x75f7}, {0xc0000000, 0x80000001, 0x300, 0xffbffffb, 0x7}]}) 1.699795826s ago: executing program 4 (id=2432): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.495564396s ago: executing program 4 (id=2433): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.364454684s ago: executing program 4 (id=2434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x600000}, &(0x7f00000000c0)=0xc) 1.172819888s ago: executing program 0 (id=2435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv6=@dccp_packet={0x7, 0x6, "40f0cd", 0x10, 0x21, 0x1, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e23, 0x4e23, 0x4, 0x1, 0xa, 0x0, 0x0, 0x1, 0x1, "ac32e1", 0x6, "c6c4c8"}}}}}, 0x46) 854.969671ms ago: executing program 0 (id=2436): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001380)={0x84, &(0x7f0000000ec0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 456.531618ms ago: executing program 4 (id=2437): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x81) 417.813916ms ago: executing program 2 (id=2438): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 10.384184ms ago: executing program 34 (id=2438): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.261903ms ago: executing program 4 (id=2440): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$uac3(0x1, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x1, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xd3, 0x4, {0xa, 0x25, 0x25, 0x7, 0x5, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x3c, 0x8, {0xa, 0x25, 0x25, 0x9, 0x0, 0x8001}}}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 0s ago: executing program 5 (id=2447): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000000)={0xffffffffffffffef, "a5cf27d047ccbb89c1f100c4290def60e820cd8c04b1c593b61e33d495b06be46cdcd2311370ed9c07275742032bb2e44288967c70cd701ce0c12a45842875e8227d6cb40397f2eb7d49b3088b3ebc835bcca76ff6619e90cb54f7c521c679b25bcebda5fc398b9c05767955246311071fedaa9a378cc709642ac04d40ff2c71fa910da868fb3aed27b688940dc6a0d9d97ee7e3f9ec75fcbd8ca675953c2bea817becdc9dc1762e758c334d3b156be6923e78bbf23132ce96574d33cebd32164717acd9ede1791b611c80a8a693ed966363ce6da2a145d3dbd0a1"}) kernel console output (not intermixed with test programs): 0.00 [ 240.686966][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.704783][ T808] usb 3-1: config 0 descriptor?? [ 240.715939][ T9746] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 240.734120][ T79] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.153898][ T808] hid_parser_main: 7 callbacks suppressed [ 241.153923][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.201316][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.218769][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.234416][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.256006][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.275159][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.296773][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.314227][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.334343][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.351897][ T808] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 241.366531][ T9765] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1566'. [ 241.394225][ T808] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 241.407107][ T29] audit: type=1326 audit(1775657740.030:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9766 comm="syz.4.1565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b8379c819 code=0x0 [ 241.459131][ T808] usb 3-1: USB disconnect, device number 27 [ 241.589710][ T9768] fido_id[9768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 241.613173][ T9771] loop5: detected capacity change from 0 to 7 [ 241.931851][ T9771] Dev loop5: unable to read RDB block 7 [ 241.958849][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 241.968699][ C0] buffer_io_error: 320 callbacks suppressed [ 241.968715][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 241.988872][ T9771] loop5: unable to read partition table [ 242.011208][ T9771] loop5: partition table beyond EOD, truncated [ 242.029960][ T9771] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 242.625980][ T5897] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 242.735188][ T5904] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 242.794720][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 242.807497][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 242.828495][ T5897] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 242.858961][ T5897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.880203][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.894776][ T5897] usb 6-1: Product: syz [ 242.900480][ T5897] usb 6-1: Manufacturer: syz [ 242.905312][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 242.910639][ T5897] usb 6-1: SerialNumber: syz [ 242.917170][ T5904] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.932573][ T5904] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.945908][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 242.964260][ T5904] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 242.984894][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.005918][ T5904] usb 1-1: config 0 descriptor?? [ 243.076313][ T9802] loop5: detected capacity change from 0 to 7 [ 243.154427][ T9789] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 243.370758][ T9802] Dev loop5: unable to read RDB block 7 [ 243.372574][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 243.386216][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 243.401376][ T9802] loop5: unable to read partition table [ 243.437822][ T5904] hid (null): unknown global tag 0xd [ 243.442679][ T9802] loop5: partition table beyond EOD, truncated [ 243.454759][ T9802] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 243.471376][ T5904] hid (null): bogus close delimiter [ 243.645600][ T9] usb 1-1: USB disconnect, device number 38 [ 244.002862][ T5897] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 244.025427][ T5897] cdc_ncm 6-1:1.0: bind() failure [ 244.034729][ T5897] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 244.041609][ T5897] cdc_ncm 6-1:1.1: bind() failure [ 244.051960][ T5897] usb 6-1: USB disconnect, device number 20 [ 244.124791][ T5890] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 244.286445][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.296963][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.308330][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.318464][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 244.331507][ T5890] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 244.341021][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.352096][ T5890] usb 3-1: config 0 descriptor?? [ 244.575919][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 244.595775][ T29] audit: type=1326 audit(1775657743.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.0.1598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2156f9c819 code=0x0 [ 244.624537][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 244.648650][ T5890] usb 3-1: USB disconnect, device number 28 [ 245.124944][ T5890] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 245.175274][ T5904] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 245.274806][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 245.281741][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.293651][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.304939][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.314958][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.329029][ T5890] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 245.338185][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.346508][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 245.353479][ T5904] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 245.363707][ T5904] usb 6-1: config 0 has no interface number 0 [ 245.371891][ T5890] usb 3-1: config 0 descriptor?? [ 245.377317][ T5904] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 245.390883][ T5904] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 245.409907][ T5904] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 245.422593][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.434359][ T5904] usb 6-1: Product: syz [ 245.438666][ T5904] usb 6-1: Manufacturer: syz [ 245.443511][ T5904] usb 6-1: SerialNumber: syz [ 245.457348][ T5904] usb 6-1: config 0 descriptor?? [ 245.463264][ T9838] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 245.471236][ T9838] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 245.487092][ T5943] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 245.655047][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 245.667818][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.680024][ T5943] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.693947][ T9838] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 245.701428][ T5943] usb 5-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 245.709577][ T9838] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 245.717077][ T5943] usb 5-1: config 1 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 245.732523][ T5943] usb 5-1: config 1 interface 0 has no altsetting 0 [ 245.741383][ T5943] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.750549][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.758676][ T5943] usb 5-1: SerialNumber: syz [ 245.769348][ T9845] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 245.776692][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 245.788763][ T5943] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 245.796714][ T5943] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 245.803208][ T5943] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 245.823735][ T5890] betop 0003:20BC:5500.002B: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.2-1/input0 [ 245.842193][ T5890] betop 0003:20BC:5500.002B: no inputs found [ 245.936853][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 245.944521][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 245.954030][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.963851][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.973742][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.983857][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.004948][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.021089][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.031366][ T5943] usb 5-1: USB disconnect, device number 31 [ 246.044740][ T5890] usb 3-1: USB disconnect, device number 29 [ 246.124182][ T5904] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 246.139191][ T5904] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 246.152553][ T5904] asix 6-1:0.251: probe with driver asix failed with error -71 [ 246.167216][ T5904] usb 6-1: USB disconnect, device number 21 [ 246.275764][ T9] usb 1-1: usb_control_msg returned -32 [ 246.281401][ T9] usbtmc 1-1:16.0: can't read capabilities [ 246.858967][ T808] usb 1-1: USB disconnect, device number 39 [ 247.136131][ T9876] syzkaller1: entered promiscuous mode [ 247.147592][ T9876] syzkaller1: entered allmulticast mode [ 247.784800][ T5943] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 247.906444][ T9898] binder: 9897:9898 ioctl c0306201 0 returned -14 [ 247.945276][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 247.952498][ T5943] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.965287][ T5943] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 247.973860][ T5943] usb 5-1: config 117 has no interface number 0 [ 247.980332][ T5943] usb 5-1: config 117 interface 163 altsetting 162 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 247.992250][ T5943] usb 5-1: config 117 interface 163 has no altsetting 0 [ 248.001905][ T5943] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 248.011613][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.020141][ T5943] usb 5-1: Product: syz [ 248.024353][ T5943] usb 5-1: Manufacturer: syz [ 248.029049][ T5943] usb 5-1: SerialNumber: syz [ 249.077932][ T5943] usb 5-1: USB disconnect, device number 32 [ 249.091927][ T5943] f81534a_ctrl 5-1:117.163: failed to enable ports: -19 [ 250.234370][ T9951] binder: 9950:9951 ioctl c0306201 2000000001c0 returned -22 [ 250.365630][ T5928] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 250.528299][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.545749][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.559064][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.570267][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.580395][ T9966] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1644'. [ 250.587925][ T5928] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.601555][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.613104][ T5928] usb 3-1: config 0 descriptor?? [ 251.031266][ T5928] plantronics 0003:047F:FFFF.002C: ignoring exceeding usage max [ 251.049115][ T5928] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 251.594771][ T5890] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 251.744854][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 251.752079][ T5890] usb 5-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 251.763306][ T5890] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.775328][ T5890] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.785858][ T5890] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 251.799012][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.805756][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 251.814959][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.839704][ T5890] usb 5-1: config 0 descriptor?? [ 251.959502][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1659'. [ 252.026141][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1660'. [ 252.036590][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1660'. [ 252.496050][ T808] usb 5-1: USB disconnect, device number 33 [ 252.601588][T10005] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1666'. [ 252.684094][T10009] binder: 10008:10009 ioctl c0306201 2000000001c0 returned -22 [ 252.770158][T10013] netlink: 'syz.5.1669': attribute type 12 has an invalid length. [ 252.780538][T10013] netlink: 'syz.5.1669': attribute type 4 has an invalid length. [ 253.165595][ T5904] usb 3-1: USB disconnect, device number 30 [ 253.716820][T10048] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 253.726679][T10048] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 253.737816][T10048] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 254.890067][T10094] capability: warning: `syz.0.1705' uses 32-bit capabilities (legacy support in use) [ 255.014854][ T5904] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 255.167742][ T5904] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 255.198982][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.213561][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.227493][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 255.242560][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 255.253262][ T5904] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 255.262616][ T5904] usb 3-1: Manufacturer: syz [ 255.272604][ T5904] usb 3-1: config 0 descriptor?? [ 255.610922][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.618126][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.641445][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 255.704855][ T5904] hid_parser_main: 5 callbacks suppressed [ 255.704877][ T5904] appleir 0003:05AC:8243.002E: unknown main item tag 0x0 [ 255.754978][ T5904] appleir 0003:05AC:8243.002E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 255.836742][ T5943] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 256.008856][ T5943] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.020054][ T5943] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.032154][ T5943] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.041394][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 256.049535][ T5943] usb 6-1: Product: syz [ 256.053750][ T5943] usb 6-1: SerialNumber: syz [ 256.144908][ T5928] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 256.326032][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 256.333992][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 137, using maximum allowed: 30 [ 256.345903][ T5928] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.357071][ T5928] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 256.370310][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.377057][ T5928] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 256.387017][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.398530][ T5928] usb 1-1: config 0 descriptor?? [ 256.821370][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.828520][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.836353][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.843574][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.850987][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.859644][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.867064][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.874109][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.881412][ T5928] waltop 0003:172F:0500.002F: unknown main item tag 0x0 [ 256.892566][ T5928] waltop 0003:172F:0500.002F: hidraw1: USB HID vff.fc Device [HID 172f:0500] on usb-dummy_hcd.0-1/input0 [ 257.028880][ T9] usb 1-1: USB disconnect, device number 40 [ 257.093180][ T5943] cdc_ncm 6-1:1.0: bind() failure [ 257.107078][ T5943] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 257.116038][ T5943] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 257.125328][ T5943] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 257.142852][ T5943] usb 6-1: USB disconnect, device number 22 [ 257.590483][T10135] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.601306][T10135] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 257.630484][T10135] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 257.783350][ T5928] usb 3-1: USB disconnect, device number 31 [ 257.944759][ T808] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 258.125772][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 258.135643][ T808] usb 1-1: too many endpoints for config 0 interface 0 altsetting 64: 129, using maximum allowed: 30 [ 258.147759][ T808] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.159543][ T808] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.172511][ T808] usb 1-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 258.187337][ T808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 258.194034][ T808] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 258.204528][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.217661][ T808] usb 1-1: config 0 descriptor?? [ 258.239303][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 258.254853][ T5943] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 258.262553][ T5928] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 258.424949][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 258.440748][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.455055][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.463056][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.473992][ T5928] usb 3-1: config 117 has an invalid interface number: 163 but max is 0 [ 258.482617][ T5943] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.492091][ T5928] usb 3-1: config 117 has no interface number 0 [ 258.498997][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.507279][ T5928] usb 3-1: config 117 interface 163 altsetting 162 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 258.524595][ T5943] usb 5-1: config 0 descriptor?? [ 258.530513][ T5928] usb 3-1: config 117 interface 163 has no altsetting 0 [ 258.553541][ T5928] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 258.566382][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.578182][ T5928] usb 3-1: Product: syz [ 258.582432][ T5928] usb 3-1: Manufacturer: syz [ 258.587403][ T5928] usb 3-1: SerialNumber: syz [ 258.872595][ T808] usb 1-1: USB disconnect, device number 41 [ 258.954826][ T5943] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 258.965056][ T5904] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 258.977274][ T5943] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0031/input/input53 [ 259.082602][ T5943] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 259.125015][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 259.140760][ T5904] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 259.158728][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.171944][ T5904] usb 6-1: config 0 descriptor?? [ 259.188949][ T5904] as10x_usb: device has been detected [ 259.196608][ T5904] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 259.240598][ T5904] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 259.294430][ T5904] as10x_usb: error during firmware upload part1 [ 259.303087][ T5904] Registered device nBox DVB-T Dongle [ 259.359855][ T5943] usb 5-1: USB disconnect, device number 34 [ 259.391446][ T5904] usb 6-1: USB disconnect, device number 23 [ 259.489487][ T5904] Unregistered device nBox DVB-T Dongle [ 259.500221][ T5904] as10x_usb: device has been disconnected [ 259.625814][ T5928] usb 3-1: USB disconnect, device number 32 [ 259.635112][ T5928] f81534a_ctrl 3-1:117.163: failed to enable ports: -19 [ 259.724841][ T808] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 259.874783][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 259.881867][ T808] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.893782][ T808] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.904275][ T808] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 259.926612][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.052519][ T5943] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 260.254833][ T5904] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 260.301645][T10170] hid-generic 0000:0000:0000.0032: pid 10170 passed too large report [ 260.384562][ T808] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 260.416964][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.436595][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.461639][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 260.501683][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.528002][ T5904] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.537549][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.554611][ T5904] usb 6-1: config 0 descriptor?? [ 260.601287][ T808] usb 1-1: USB disconnect, device number 42 [ 260.681246][T10180] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 260.983098][ T5904] hid_parser_main: 33 callbacks suppressed [ 260.983130][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.002082][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.011263][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.018900][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.027397][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.036359][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.044036][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.072545][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.090863][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.109622][ T5904] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 261.166771][ T5904] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 261.241903][ T5904] usb 6-1: USB disconnect, device number 24 [ 261.282091][T10191] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.326878][T10189] fido_id[10189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 261.533762][T10191] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 261.565290][T10191] overlayfs: failed to look up (tracing) for ino (-66) [ 261.652517][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 262.194886][ T5928] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 262.364814][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 262.371395][ T5928] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.382858][ T5928] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.392800][ T5928] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.399721][ T5928] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 262.409248][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.420801][ T5928] usb 3-1: config 0 descriptor?? [ 262.464772][ T5932] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 262.614744][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 262.621837][ T5932] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 262.630163][ T5932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.641052][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.651387][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.661470][ T5932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.674580][ T5932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.685754][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.804787][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 262.862952][ T5928] hid-corsair-void 0003:1B1C:1B25.0035: item fetching failed at offset 2/5 [ 262.872856][ T5928] hid-corsair-void 0003:1B1C:1B25.0035: parse failed (reason: -22) [ 262.881085][ T5928] hid-corsair-void 0003:1B1C:1B25.0035: probe with driver hid-corsair-void failed with error -22 [ 262.906689][ T5932] usb 5-1: usb_control_msg returned -32 [ 262.921032][ T5932] usbtmc 5-1:16.0: can't read capabilities [ 263.077186][ T5932] usb 3-1: USB disconnect, device number 33 [ 263.259761][T10250] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 263.441435][T10257] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 263.466030][ T808] usb 5-1: USB disconnect, device number 35 [ 263.583455][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 263.919521][T10273] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1786'. [ 264.269711][T10281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 264.292657][T10282] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 264.338624][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 264.348973][T10281] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 264.360217][T10281] overlayfs: failed to look up (tracing) for ino (-66) [ 264.524472][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.554749][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.577087][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.606415][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 264.628935][ T9] usb 5-1: Product: syz [ 264.637667][ T9] usb 5-1: SerialNumber: syz [ 264.755648][ T5904] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 264.904899][ T5928] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 264.921597][ T5904] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 264.932823][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.940928][ T5904] usb 1-1: Product: syz [ 264.945625][ T5904] usb 1-1: Manufacturer: syz [ 264.950280][ T5904] usb 1-1: SerialNumber: syz [ 264.960377][ T5904] usb 1-1: config 0 descriptor?? [ 264.977097][ T5904] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 265.064943][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 265.074200][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.085758][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.096792][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.103492][ T5928] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 265.112839][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.124472][ T5928] usb 6-1: config 0 descriptor?? [ 265.542505][ T5928] hid (null): unknown global tag 0x7d [ 265.548137][ T5928] hid (null): report_id 2747394877 is invalid [ 265.554385][ T5928] hid (null): unknown global tag 0xe [ 265.559962][ T5928] hid (null): report_id 3315148781 is invalid [ 265.676056][ T9] cdc_ncm 5-1:1.0: bind() failure [ 265.691527][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 265.700271][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 265.710680][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 265.729259][ T9] usb 5-1: USB disconnect, device number 36 [ 265.750120][ T5890] usb 6-1: USB disconnect, device number 25 [ 265.982047][ T5904] gspca_sunplus: reg_w_riv err -71 [ 265.995254][ T5904] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 266.015671][ T5904] usb 1-1: USB disconnect, device number 43 [ 266.555586][ T5904] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 266.614782][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 266.726604][ T5904] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 266.737842][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.749230][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.759468][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 266.774281][ T5904] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 266.776455][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 266.784731][ T5904] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 266.797152][ T5904] usb 5-1: Manufacturer: syz [ 266.807157][ T5904] usb 5-1: config 0 descriptor?? [ 266.812523][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 266.834787][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.846974][ T9] usb 6-1: config 0 descriptor?? [ 267.076892][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 267.100276][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.116449][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 267.123838][ T9] usb 6-1: media controller created [ 267.147552][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.231874][ T5904] hid_parser_main: 7 callbacks suppressed [ 267.231917][ T5904] appleir 0003:05AC:8243.0037: unknown main item tag 0x0 [ 267.255140][ T5904] appleir 0003:05AC:8243.0037: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 267.564765][ T5928] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 267.664830][ T5943] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 267.714766][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 267.724486][ T5928] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 267.734119][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.743630][ T5928] usb 3-1: Product: syz [ 267.748196][ T5928] usb 3-1: Manufacturer: syz [ 267.753290][ T5928] usb 3-1: SerialNumber: syz [ 267.818292][ T5943] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 267.827775][ T5943] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 267.836039][ T5943] usb 1-1: Product: syz [ 267.840347][ T5943] usb 1-1: Manufacturer: syz [ 267.846058][ T5943] usb 1-1: SerialNumber: syz [ 267.853775][ T5943] usb 1-1: config 0 descriptor?? [ 267.863794][ T5943] ch341 1-1:0.0: ch341-uart converter detected [ 267.895260][ T9] az6027: usb out operation failed. (-71) [ 267.901080][ T9] stb0899_attach: Driver disabled by Kconfig [ 267.907339][ T9] az6027: no front-end attached [ 267.907339][ T9] [ 267.914969][ T9] az6027: usb out operation failed. (-71) [ 267.921483][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 267.933223][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54 [ 267.951002][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 267.959546][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 267.977251][ T9] usb 6-1: USB disconnect, device number 26 [ 268.042366][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 268.386830][ T5928] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 268.595725][ T5928] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 268.604428][ T5928] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 268.612061][ T5928] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 268.664367][ T5928] usb 3-1: USB disconnect, device number 34 [ 268.875912][ T5943] ch341-uart ttyUSB0: failed to read break control: -71 [ 268.886034][ T5943] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 268.897359][ T5943] usb 1-1: USB disconnect, device number 44 [ 268.906069][ T5943] ch341 1-1:0.0: device disconnected [ 269.334053][T10351] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 269.348907][ T5847] usb 5-1: USB disconnect, device number 37 [ 269.434728][ T5890] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 269.596350][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 269.616054][ T5890] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 269.632189][ T5890] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 269.644537][ T5890] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 269.656126][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.659965][T10359] syzkaller1: entered promiscuous mode [ 269.666966][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 269.678090][T10359] syzkaller1: entered allmulticast mode [ 269.682284][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 269.701295][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 269.712370][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 269.725842][ T5890] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 269.735159][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.746490][ T5890] usb 3-1: config 0 descriptor?? [ 269.752459][T10340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.968124][ T5890] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 270.030300][T10369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 270.064771][ T5904] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 270.127390][T10371] syzkaller1: entered promiscuous mode [ 270.132991][T10371] syzkaller1: entered allmulticast mode [ 270.170819][ C1] usblp0: nonzero read bulk status received: -71 [ 270.180643][ T5847] usb 3-1: USB disconnect, device number 35 [ 270.202669][ T5847] usblp0: removed [ 270.236814][ T5904] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 270.251728][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.264616][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.275443][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.302379][ T5904] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 270.312381][ T5904] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 270.328859][ T5904] usb 1-1: Manufacturer: syz [ 270.339915][ T5904] usb 1-1: config 0 descriptor?? [ 270.434391][T10379] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1835'. [ 270.766304][ T5904] appleir 0003:05AC:8243.0038: unknown main item tag 0x0 [ 270.783313][ T5904] appleir 0003:05AC:8243.0038: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 270.815974][ T5928] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 270.987516][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 271.000453][ T5928] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.021648][ T5928] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.039496][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.047402][ T5928] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 271.057395][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.072968][ T5928] usb 6-1: config 0 descriptor?? [ 271.370424][T10402] syzkaller1: entered promiscuous mode [ 271.377365][T10402] syzkaller1: entered allmulticast mode [ 271.520955][ T5928] hid-corsair-void 0003:1B1C:1B25.0039: unknown main item tag 0x0 [ 271.530752][ T5928] hid-corsair-void 0003:1B1C:1B25.0039: unknown main item tag 0x0 [ 271.539225][ T5928] hid-corsair-void 0003:1B1C:1B25.0039: item fetching failed at offset 2/5 [ 271.550117][ T5928] hid-corsair-void 0003:1B1C:1B25.0039: parse failed (reason: -22) [ 271.560320][ T5928] hid-corsair-void 0003:1B1C:1B25.0039: probe with driver hid-corsair-void failed with error -22 [ 271.713661][ T5928] usb 6-1: USB disconnect, device number 27 [ 271.905686][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 272.064841][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 272.071933][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 272.081396][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.097934][ T24] usb 5-1: config 0 descriptor?? [ 272.322938][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 272.353826][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.369776][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 272.377745][ T24] usb 5-1: media controller created [ 272.397482][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.783278][T10425] input: syz0 as /devices/virtual/input/input55 [ 272.847302][ T5928] usb 1-1: USB disconnect, device number 45 [ 273.145124][ T24] az6027: usb out operation failed. (-71) [ 273.164145][ T24] stb0899_attach: Driver disabled by Kconfig [ 273.170638][ T24] az6027: no front-end attached [ 273.170638][ T24] [ 273.179829][ T24] az6027: usb out operation failed. (-71) [ 273.194700][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 273.204988][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 273.220917][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 273.228226][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 273.255086][ T24] usb 5-1: USB disconnect, device number 38 [ 273.392192][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 273.430623][T10445] syzkaller1: entered promiscuous mode [ 273.448757][T10445] syzkaller1: entered allmulticast mode [ 273.512917][T10447] syzkaller1: entered promiscuous mode [ 273.520605][T10447] syzkaller1: entered allmulticast mode [ 273.984788][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 274.157509][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.177665][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.199368][ T24] usb 1-1: config 0 descriptor?? [ 274.217815][ T24] cp210x 1-1:0.0: cp210x converter detected [ 274.244820][ T5928] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 274.408765][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.422548][ T5928] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.433256][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.446964][ T5928] usb 5-1: config 0 descriptor?? [ 274.463949][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 274.564857][ T5890] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 274.634404][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 274.635110][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 274.719547][ T5890] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.729149][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.737564][ T5890] usb 3-1: Product: syz [ 274.741961][ T5890] usb 3-1: Manufacturer: syz [ 274.746836][ T5890] usb 3-1: SerialNumber: syz [ 274.760121][ T5890] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.794777][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 274.808462][ T808] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.825291][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.835531][ T9] usb 6-1: config 179 has no interface number 0 [ 274.841895][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 274.855239][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 274.867951][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 274.874944][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.887841][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 274.896964][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 274.913034][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.927927][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.937559][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.939436][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 274.959514][T10494] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 275.029197][ T9] usb 3-1: USB disconnect, device number 36 [ 275.059445][ T5943] usb 1-1: USB disconnect, device number 46 [ 275.075225][ T5943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.087935][ T5943] cp210x 1-1:0.0: device disconnected [ 275.113810][ T5928] pwc: recv_control_msg error -71 req 04 val 1000 [ 275.125474][ T5928] pwc: recv_control_msg error -71 req 04 val 1300 [ 275.133338][ T5928] pwc: recv_control_msg error -71 req 04 val 1400 [ 275.141556][ T5928] pwc: recv_control_msg error -71 req 02 val 2000 [ 275.149250][ T5928] pwc: recv_control_msg error -71 req 02 val 2100 [ 275.156729][ T5928] pwc: recv_control_msg error -71 req 04 val 1500 [ 275.163790][ T5928] pwc: recv_control_msg error -71 req 02 val 2500 [ 275.171219][ T5928] pwc: recv_control_msg error -71 req 02 val 2400 [ 275.179215][ T5928] pwc: recv_control_msg error -71 req 02 val 2600 [ 275.186831][ T5928] pwc: recv_control_msg error -71 req 02 val 2900 [ 275.202314][ T5847] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input57 [ 275.214831][ T5928] pwc: recv_control_msg error -71 req 02 val 2800 [ 275.222753][ T5928] pwc: recv_control_msg error -71 req 04 val 1100 [ 275.239802][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 275.280202][ T5928] pwc: Registered as video103. [ 275.300179][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 275.376264][ T5928] usb 5-1: USB disconnect, device number 39 [ 275.393271][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.413751][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.626295][ T5890] usb 6-1: USB disconnect, device number 28 [ 275.626317][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 275.641274][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 275.845094][ T808] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 275.860464][ T808] ath9k_htc: Failed to initialize the device [ 275.870832][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 275.892757][ T5158] Bluetooth: hci1: link tx timeout [ 275.899267][ T5158] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.912538][ T5158] Bluetooth: hci1: link tx timeout [ 275.919619][ T5158] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.175795][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 276.205124][T10512] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1899'. [ 276.245825][ T5943] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 276.334747][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 276.347233][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 276.358124][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 276.366430][ T9] usb 3-1: Product: syz [ 276.370706][ T9] usb 3-1: Manufacturer: syz [ 276.375402][ T9] usb 3-1: SerialNumber: syz [ 276.384025][ T9] usb 3-1: config 0 descriptor?? [ 276.406806][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.418175][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.428801][ T5943] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 276.438933][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.453119][ T5943] usb 5-1: config 0 descriptor?? [ 276.604276][ T9] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 276.612649][ T9] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 276.806236][ T9] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 276.823325][ T9] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 276.853365][ T9] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 276.885518][ T5943] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 276.912716][ T5943] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 276.925437][ T5943] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 276.943100][ T5943] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 276.957046][ T5943] elan 0003:04F3:0755.003A: unknown main item tag 0x0 [ 276.973553][T10532] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1909'. [ 276.984126][ T5943] elan 0003:04F3:0755.003A: failed to start in urb: -90 [ 277.002904][ T5943] elan 0003:04F3:0755.003A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 277.019649][ T9] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 277.042791][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.049487][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.056242][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.062906][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.069593][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.076555][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.083412][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.090058][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.097166][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.104036][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.111823][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.118502][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.125267][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.131915][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.138612][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.145263][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.152038][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.158675][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.165463][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.172104][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.181384][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.188281][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.194931][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.201680][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.208533][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.215232][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.222247][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.229637][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.236294][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.242990][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.249823][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.256485][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.263048][ T9] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 277.271723][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.278335][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.285917][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.292483][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.299608][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.306417][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.312994][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.319601][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.326203][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.332770][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.339381][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.346032][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.352620][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.359619][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.366369][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.372938][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.379601][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.387203][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.393763][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.400345][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.406983][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.413543][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.420121][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.426712][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.433264][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.439882][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.446475][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.453096][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.459709][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.466314][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.472873][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.479442][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.486508][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.493590][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.500332][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.507059][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.513779][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.520426][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.527078][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.533752][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.540435][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.547103][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.553786][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.560443][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.567718][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.574373][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.581027][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.587680][ T5943] usb 5-1: USB disconnect, device number 40 [ 277.594209][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.602408][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.609057][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.615624][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.622146][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.628735][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.635287][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.641824][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.648457][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.655004][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.661552][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.668107][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.674639][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.681218][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.687795][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.694931][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.701540][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.708131][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.714712][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.721230][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.727793][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.734334][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.741000][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.747556][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.754089][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.760679][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.767298][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.773814][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.780394][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.786954][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.794890][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.801538][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.808185][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.814829][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.821484][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.828174][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.834818][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.842437][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.849167][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.856105][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.862758][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.869429][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.876089][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.882768][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.892389][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.899162][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.905842][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 277.912945][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 277.934228][ T9] usb 3-1: USB disconnect, device number 37 [ 278.014898][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 278.464805][ T808] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 278.624733][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 278.631704][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.642843][ T808] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.652245][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.663571][ T808] usb 3-1: config 0 descriptor?? [ 278.675157][ T5943] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 278.714803][ T5890] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 278.836494][ T5943] usb 1-1: config 0 has no interfaces? [ 278.842064][ T5943] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.851293][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.862577][ T5943] usb 1-1: config 0 descriptor?? [ 278.869893][ T5890] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.885499][ T5890] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 278.900548][ T808] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 278.911292][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.924915][ T5890] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.936858][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 278.948448][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.962261][ T5890] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.972043][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.980565][ T5890] usb 6-1: Product: syz [ 278.985282][ T5890] usb 6-1: Manufacturer: syz [ 278.993683][T10559] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 279.004281][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 279.009718][ T5890] cdc_wdm 6-1:1.0: skipping garbage [ 279.019939][ T5890] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 279.026168][ T5890] cdc_wdm 6-1:1.0: Unknown control protocol [ 279.077941][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.088231][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.097657][ T5890] usb 3-1: USB disconnect, device number 38 [ 279.109226][ T5943] usb 1-1: USB disconnect, device number 47 [ 279.217264][ T808] usb 6-1: USB disconnect, device number 29 [ 279.748025][T10563] input: syz0 as /devices/virtual/input/input59 [ 280.150400][T10581] netlink: 'syz.0.1930': attribute type 3 has an invalid length. [ 280.159856][T10581] netlink: 'syz.0.1930': attribute type 4 has an invalid length. [ 280.168563][T10581] netlink: 'syz.0.1930': attribute type 5 has an invalid length. [ 280.176750][T10581] netlink: 'syz.0.1930': attribute type 6 has an invalid length. [ 280.185106][T10581] netlink: 'syz.0.1930': attribute type 7 has an invalid length. [ 280.194860][T10581] netlink: 'syz.0.1930': attribute type 7 has an invalid length. [ 280.207576][T10581] netlink: 13626 bytes leftover after parsing attributes in process `syz.0.1930'. [ 280.224527][T10584] syzkaller1: entered promiscuous mode [ 280.230242][T10584] syzkaller1: entered allmulticast mode [ 280.385385][ T5943] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 280.537454][ T5943] usb 3-1: config 0 has no interfaces? [ 280.553784][ T5943] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.571918][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.617176][ T5943] usb 3-1: config 0 descriptor?? [ 280.851180][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.868753][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.883689][ T9] usb 3-1: USB disconnect, device number 39 [ 281.521312][ T808] IPVS: starting estimator thread 0... [ 281.624843][T10617] IPVS: using max 25 ests per chain, 60000 per kthread [ 281.964749][ T5890] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 282.147497][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.160607][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.174211][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 282.184114][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.198868][ T5890] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.208953][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.221461][ T5890] usb 6-1: config 0 descriptor?? [ 282.356121][ T808] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 282.527657][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.540235][ T808] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.542084][T10659] binder: 10658:10659 ioctl c018620b 200000000000 returned -14 [ 282.551450][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.572175][ T808] usb 5-1: config 0 descriptor?? [ 282.668606][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.678738][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.690355][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.701513][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.711816][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.720778][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.730689][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.738221][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.746216][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.753641][ T5890] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 282.772075][ T5890] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 282.936569][ T24] usb 6-1: USB disconnect, device number 30 [ 282.944760][ T5943] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 283.003691][ T808] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor [ 283.019229][ T808] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003C/input/input60 [ 283.107514][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.123661][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.143478][ T5943] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 283.155414][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.170013][ T808] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 283.178021][ T5943] usb 3-1: config 0 descriptor?? [ 283.203511][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.246852][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.424334][T10668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.579854][T10672] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 283.586718][T10672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.605389][T10672] vhci_hcd vhci_hcd.0: Device attached [ 283.634993][ T5943] cp2112 0003:10C4:EA90.003D: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 283.636151][ T808] usb 5-1: USB disconnect, device number 41 [ 283.828016][ T5943] cp2112 0003:10C4:EA90.003D: error requesting version [ 283.846266][ T5847] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 283.861071][ T5943] cp2112 0003:10C4:EA90.003D: probe with driver cp2112 failed with error -71 [ 283.874425][ T5943] usb 3-1: USB disconnect, device number 40 [ 283.885363][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 284.055234][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 284.066270][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 284.074776][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 284.085443][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 284.094552][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.241195][T10685] syzkaller1: entered promiscuous mode [ 284.246810][T10685] syzkaller1: entered allmulticast mode [ 284.310814][ T808] usb 6-1: USB disconnect, device number 31 [ 284.320090][T10673] usb 43-1: recv xbuf, 0 [ 284.362413][ T35] vhci_hcd vhci_hcd.5: stop threads [ 284.391978][ T35] vhci_hcd vhci_hcd.5: release socket [ 284.412936][ T35] vhci_hcd vhci_hcd.5: disconnect device [ 284.464787][ T5847] usb 43-1: device descriptor read/64, error -71 [ 284.655234][ T5847] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 284.794760][ T808] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 284.966720][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.978013][ T808] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 284.989424][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.000981][ T808] usb 1-1: config 0 descriptor?? [ 285.138532][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 285.146375][ T5932] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 285.204143][T10719] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 285.217174][T10719] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 285.227820][T10719] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1987'. [ 285.314944][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 285.320790][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 285.330472][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.341557][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.350599][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.361639][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.374417][ T5932] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 285.385937][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.393139][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.403437][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.414212][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.427796][ T5932] usb 3-1: config 0 descriptor?? [ 285.440906][ T808] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 285.459479][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.477922][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.489793][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.501083][ T808] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003E/input/input61 [ 285.514749][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.548643][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.559615][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.572967][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.582123][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.591905][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.611855][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.620650][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.631143][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.642374][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.651011][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.661794][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.683830][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.702142][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 285.718442][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 285.741566][ T808] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 285.745002][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 285.799642][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 285.813152][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 285.833645][ T9] usb 6-1: Product: syz [ 285.843745][ T9] usb 6-1: Manufacturer: syz [ 285.858123][ T9] usb 6-1: SerialNumber: syz [ 285.876259][ T9] usb 6-1: config 0 descriptor?? [ 285.910584][ T5932] savu 0003:1E7D:2D5A.003F: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 285.941957][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 285.982988][ T808] usb 1-1: USB disconnect, device number 48 [ 286.162348][ T9] usb 6-1: USB disconnect, device number 32 [ 286.173624][ T9] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 286.217187][ T5890] usb 3-1: USB disconnect, device number 41 [ 286.424772][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 286.576819][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 286.589200][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 286.600747][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 286.610559][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 286.620027][ T24] usb 5-1: Product: syz [ 286.624375][ T24] usb 5-1: Manufacturer: syz [ 286.629120][ T24] usb 5-1: SerialNumber: syz [ 286.638182][ T24] usb 5-1: config 0 descriptor?? [ 286.660242][ T24] usb 5-1: selecting invalid altsetting 0 [ 286.866963][ T24] usb 5-1: USB disconnect, device number 42 [ 287.254913][ T808] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 287.418927][ T808] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 287.428235][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.436347][ T808] usb 6-1: Product: syz [ 287.440704][ T808] usb 6-1: Manufacturer: syz [ 287.445744][ T808] usb 6-1: SerialNumber: syz [ 287.453221][ T808] usb 6-1: config 0 descriptor?? [ 287.462682][ T808] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 287.884812][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 288.034743][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 288.042572][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.052960][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 288.063105][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.072450][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 288.082281][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.090495][ T9] usb 5-1: Product: syz [ 288.095038][ T9] usb 5-1: Manufacturer: syz [ 288.099725][ T9] usb 5-1: SerialNumber: syz [ 288.111372][ T9] usb 5-1: config 0 descriptor?? [ 288.474358][ T808] gspca_sunplus: reg_w_riv err -71 [ 288.487604][ T808] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 288.504153][ T808] usb 6-1: USB disconnect, device number 33 [ 288.536763][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 288.602717][T10774] binder: 10773:10774 ioctl c0306201 200000000480 returned -14 [ 288.829320][T10782] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2015'. [ 288.900789][T10784] syzkaller1: entered promiscuous mode [ 288.906553][T10784] syzkaller1: entered allmulticast mode [ 288.914735][T10786] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 288.939889][ T9] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 289.001918][ T9] usb 5-1: USB disconnect, device number 43 [ 289.497889][ T5847] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 289.679897][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.693138][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.705719][ T5847] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.715391][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.723486][ T5847] usb 1-1: SerialNumber: syz [ 289.942924][ T5847] usb 1-1: 0:2 : does not exist [ 289.978184][ T5847] usb 1-1: USB disconnect, device number 49 [ 290.010718][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.748320][T10829] tmpfs: Too small a size for current use [ 291.446656][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 291.447526][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 291.559219][T10864] syzkaller1: entered promiscuous mode [ 291.567225][T10864] syzkaller1: entered allmulticast mode [ 291.901043][T10879] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 292.294822][T10895] netlink: 'syz.4.2069': attribute type 83 has an invalid length. [ 292.772656][T10909] vivid-001: disconnect [ 292.780579][T10906] vivid-001: reconnect [ 293.014808][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 293.197920][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 293.212573][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 293.244799][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 293.271828][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 293.296499][ T9] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 293.326600][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.347288][ T9] usb 5-1: Product: syz [ 293.354005][ T9] usb 5-1: Manufacturer: syz [ 293.364167][ T9] usb 5-1: SerialNumber: syz [ 293.381773][ T9] usb 5-1: config 0 descriptor?? [ 293.402332][ T9] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 293.443527][ T79] Bluetooth: hci4: Frame reassembly failed (-84) [ 293.608036][ T9] scsi host1: usb-storage 5-1:0.0 [ 293.804949][ T5847] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 293.818673][ T5904] usb 5-1: USB disconnect, device number 44 [ 293.985641][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 293.992489][ T5847] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 294.002733][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.013394][ T5847] usb 3-1: config 0 descriptor?? [ 294.094891][ T5932] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 294.223626][ T5847] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 294.233358][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.243892][ T5847] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 294.253549][ T5847] usb 3-1: media controller created [ 294.269685][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.279046][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 294.287826][ T5932] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 294.307646][ T5932] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 294.316554][ T5932] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 294.324897][ T5932] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 294.333135][ T5932] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 294.342449][ T5932] usb 6-1: config 0 has no interface number 0 [ 294.354972][ T5932] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 294.366543][ T5932] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 294.378202][ T5932] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.388649][ T5932] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.402115][ T5932] usb 6-1: config 0 interface 125 has no altsetting 0 [ 294.410747][ T5932] usb 6-1: config 0 interface 125 has no altsetting 2 [ 294.420772][ T5932] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 294.436567][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.454977][ T5932] usb 6-1: Product: syz [ 294.463228][ T5932] usb 6-1: Manufacturer: syz [ 294.473955][ T5932] usb 6-1: SerialNumber: syz [ 294.486814][ T5932] usb 6-1: config 0 descriptor?? [ 294.502849][ T5932] usb 6-1: selecting invalid altsetting 2 [ 294.693505][T10967] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.2099'. [ 294.776398][T10969] kvm: kvm [10968]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005) [ 294.845322][ T5847] az6027: usb out operation failed. (-71) [ 294.851340][ T5847] stb0899_attach: Driver disabled by Kconfig [ 294.857560][ T5847] az6027: no front-end attached [ 294.857560][ T5847] [ 294.866392][ T5847] az6027: usb out operation failed. (-71) [ 294.872860][ T5847] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 294.887120][ T5847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 294.907705][ T5847] dvb-usb: schedule remote query interval to 400 msecs. [ 294.916490][ T5847] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 294.938589][ T5847] usb 3-1: USB disconnect, device number 42 [ 295.021121][ T5847] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 295.404980][T10981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.456692][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 295.530299][ T808] usb 6-1: USB disconnect, device number 34 [ 295.584831][ T5904] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 295.678727][T10989] netlink: 'syz.2.2110': attribute type 1 has an invalid length. [ 295.688394][T10989] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2110'. [ 295.698957][T10989] netlink: 'syz.2.2110': attribute type 1 has an invalid length. [ 295.707630][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 295.734824][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 295.742844][ T5904] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 295.751485][ T5904] usb 5-1: config 2 has no interface number 0 [ 295.757895][ T5904] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 295.769168][ T5904] usb 5-1: config 2 interface 88 has no altsetting 0 [ 295.778810][ T5904] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 295.791615][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.800060][ T5904] usb 5-1: Product: syz [ 295.804285][ T5904] usb 5-1: Manufacturer: syz [ 295.810384][ T5904] usb 5-1: SerialNumber: syz [ 295.819266][T10979] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 296.047864][T10979] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 296.213537][T11004] syzkaller1: entered promiscuous mode [ 296.220778][T11004] syzkaller1: entered allmulticast mode [ 296.545300][ T5943] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 296.704791][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 296.717670][ T5943] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.736106][ T5943] usb 1-1: config 0 has no interface number 0 [ 296.751789][ T5943] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 296.784807][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.795063][ T5943] usb 1-1: Product: syz [ 296.801222][ T5943] usb 1-1: Manufacturer: syz [ 296.807090][ T5943] usb 1-1: SerialNumber: syz [ 296.817991][ T5943] usb 1-1: config 0 descriptor?? [ 296.836082][ T5943] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 296.882381][ T5904] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 296.907330][ T5904] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 296.926847][ T5904] asix 5-1:2.88: probe with driver asix failed with error -71 [ 296.949156][ T5904] usb 5-1: USB disconnect, device number 45 [ 297.580004][T11047] sock: sock_set_timeout: `syz.2.2138' (pid 11047) tries to set negative timeout [ 297.643467][ T5943] gspca_spca1528: reg_w err -71 [ 297.675460][ T5943] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 297.690516][ T5943] usb 1-1: USB disconnect, device number 50 [ 297.878361][T11057] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2142'. [ 298.574777][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 298.634742][ T5932] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 298.727284][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.738553][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.748735][ T5904] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 298.756466][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.769772][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.779753][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.790246][ T24] usb 3-1: config 0 descriptor?? [ 298.804945][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 298.812607][ T5932] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.824569][ T5932] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 298.839880][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.846879][ T5932] usb 5-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 298.856078][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.869497][ T5932] usb 5-1: config 0 descriptor?? [ 298.925834][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 298.933970][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 298.946846][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 298.957973][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 298.967942][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 298.979100][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 298.994856][ T5904] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 299.014939][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.023136][ T5904] usb 1-1: Product: syz [ 299.027478][ T5904] usb 1-1: Manufacturer: syz [ 299.033293][ T5904] usb 1-1: SerialNumber: syz [ 299.041618][ T5904] usb 1-1: config 0 descriptor?? [ 299.218820][ T24] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xd [ 299.241697][ T24] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 299.289186][ T5932] hid_parser_main: 12 callbacks suppressed [ 299.289210][ T5932] steelseries 0003:1038:12C2.0041: unknown main item tag 0x0 [ 299.315293][ T5932] steelseries 0003:1038:12C2.0041: unknown main item tag 0x0 [ 299.326164][ T5932] steelseries 0003:1038:12C2.0041: unknown main item tag 0x0 [ 299.344750][ T5932] steelseries 0003:1038:12C2.0041: unknown main item tag 0x0 [ 299.352531][ T5932] steelseries 0003:1038:12C2.0041: unknown main item tag 0x0 [ 299.362606][ T5932] steelseries 0003:1038:12C2.0041: unknown main item tag 0x0 [ 299.371883][ T5932] steelseries 0003:1038:12C2.0041: invalid report_count 10949382 [ 299.381589][ T5932] steelseries 0003:1038:12C2.0041: item 0 4 1 9 parsing failed [ 299.392715][ T5932] steelseries 0003:1038:12C2.0041: probe with driver steelseries failed with error -22 [ 299.461817][ T5904] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 299.470385][ T5904] input input64: Device does not respond to id packet M [ 299.479440][ T5904] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 299.488367][ T5932] usb 5-1: USB disconnect, device number 46 [ 299.492291][ T24] usb 3-1: USB disconnect, device number 43 [ 299.507678][ T5904] input input64: Device does not respond to id packet P [ 299.560885][T11097] syzkaller1: entered promiscuous mode [ 299.567802][T11097] syzkaller1: entered allmulticast mode [ 299.729845][ T5904] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 299.737788][ T5904] input input64: Device does not respond to id packet N [ 299.747992][ T5904] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 299.754504][ T5904] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 299.762268][ T5904] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 299.770087][ T5904] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 299.782552][ T5904] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input64 [ 299.811427][ T5904] usb 1-1: USB disconnect, device number 51 [ 299.957139][T11107] Bluetooth: hci4: Frame reassembly failed (-84) [ 300.083328][T11111] syzkaller1: entered promiscuous mode [ 300.089329][T11111] syzkaller1: entered allmulticast mode [ 300.179848][T11115] input: syz0 as /devices/virtual/input/input66 [ 300.455061][ T5904] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 300.635542][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 300.646537][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.662549][ T5904] usb 5-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.673411][ T5904] usb 5-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32 [ 300.684037][ T5904] usb 5-1: config 1 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 300.697760][ T5904] usb 5-1: config 1 interface 0 has no altsetting 0 [ 300.707090][ T5904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.717939][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 300.727837][ T5904] usb 5-1: SerialNumber: syz [ 300.741758][T11117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.766820][ T5904] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 300.777289][ T5904] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 300.785515][ T5904] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 300.972900][ T5904] usb 5-1: USB disconnect, device number 47 [ 302.005147][ T5158] Bluetooth: hci4: command 0x1003 tx timeout [ 302.006590][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 302.575726][T11186] syzkaller1: entered promiscuous mode [ 302.582857][T11186] syzkaller1: entered allmulticast mode [ 303.180427][T11203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.399401][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 304.074719][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 304.226553][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.236814][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.247577][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.256673][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.264983][ T24] usb 3-1: SerialNumber: syz [ 304.482631][ T24] usb 3-1: 0:2 : does not exist [ 304.515531][ T24] usb 3-1: USB disconnect, device number 44 [ 304.563263][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.134395][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 305.143567][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 305.267781][T11267] netlink: 'syz.2.2235': attribute type 4 has an invalid length. [ 305.306652][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 305.321524][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.334885][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.345152][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 305.359702][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 305.369383][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 305.380235][ T9] usb 1-1: Manufacturer: syz [ 305.388344][ T9] usb 1-1: config 0 descriptor?? [ 305.597095][ T24] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 305.758280][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.781098][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.801250][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 305.819814][ T9] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 305.820688][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.854837][ T9] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 305.865649][ T24] usb 3-1: config 0 descriptor?? [ 305.942162][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2239'. [ 305.960371][T11275] block nbd0: Unsupported socket: should be TCP or UNIX. [ 306.088244][ T5904] usb 1-1: USB disconnect, device number 52 [ 306.314204][ T24] isku 0003:1E7D:319C.0043: unknown main item tag 0x0 [ 306.325408][ T24] isku 0003:1E7D:319C.0043: unknown main item tag 0x0 [ 306.332275][ T24] isku 0003:1E7D:319C.0043: unknown main item tag 0x0 [ 306.339344][ T24] isku 0003:1E7D:319C.0043: unknown main item tag 0x0 [ 306.346247][ T24] isku 0003:1E7D:319C.0043: unknown main item tag 0x0 [ 306.353106][ T24] isku 0003:1E7D:319C.0043: unknown main item tag 0x0 [ 306.360635][ T24] isku 0003:1E7D:319C.0043: unknown main item tag 0x0 [ 306.372813][ T24] isku 0003:1E7D:319C.0043: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 306.424920][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 306.596704][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.607816][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.619117][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.632478][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.641812][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.653315][ T9] usb 6-1: config 0 descriptor?? [ 306.728457][ T808] usb 3-1: USB disconnect, device number 45 [ 307.076806][ T9] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 307.084399][ T9] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 307.097885][ T9] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 307.340318][ T9] usb 6-1: USB disconnect, device number 35 [ 307.664832][ T5904] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 307.818151][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.838219][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.858165][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.871613][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.882010][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.896137][ T5904] usb 3-1: config 0 descriptor?? [ 307.999933][T11310] autofs: Bad value for 'fd' [ 308.335879][ T5904] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 308.414904][T11322] input: syz0 as /devices/virtual/input/input67 [ 308.487141][ T51] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 308.494743][ T5158] Bluetooth: hci4: command 0xfc11 tx timeout [ 308.528829][T11324] input: syz0 as /devices/virtual/input/input68 [ 309.101056][T11345] syzkaller1: entered promiscuous mode [ 309.114185][T11345] syzkaller1: entered allmulticast mode [ 309.516218][ T808] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 309.674746][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 309.689109][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.712027][ T808] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.727024][ T808] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.737596][ T808] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 309.750850][ T808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.758805][ T808] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 309.769424][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.780902][ T808] usb 5-1: config 0 descriptor?? [ 309.942010][T11374] netlink: 'syz.5.2282': attribute type 21 has an invalid length. [ 309.951190][T11374] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2282'. [ 310.212879][ T808] hid-thrustmaster 0003:044F:B65D.0046: item fetching failed at offset 2/5 [ 310.238230][ T808] hid-thrustmaster 0003:044F:B65D.0046: parse failed with error -22 [ 310.257636][ T808] hid-thrustmaster 0003:044F:B65D.0046: probe with driver hid-thrustmaster failed with error -22 [ 310.340091][ T5904] usb 3-1: USB disconnect, device number 46 [ 310.428895][ T808] usb 5-1: USB disconnect, device number 48 [ 310.694868][ T5943] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 310.886284][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 310.915533][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.930877][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.942317][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.965224][ T5943] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 310.975782][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.998699][ T5943] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.011167][ T5943] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.019633][ T5943] usb 6-1: Manufacturer: syz [ 311.029154][ T5943] usb 6-1: config 0 descriptor?? [ 311.086330][T11406] loop8: detected capacity change from 0 to 7 [ 311.131170][T11406] Dev loop8: unable to read RDB block 7 [ 311.141403][T11406] loop8: AHDI p1 p2 p3 [ 311.146010][T11406] loop8: partition table partially beyond EOD, truncated [ 311.153384][T11406] loop8: p1 start 1601398130 is beyond EOD, truncated [ 311.160782][T11406] loop8: p2 start 1702059890 is beyond EOD, truncated [ 311.239372][T11409] Dev loop8: unable to read RDB block 7 [ 311.254783][T11409] loop8: AHDI p1 p2 p3 [ 311.263021][T11409] loop8: partition table partially beyond EOD, truncated [ 311.283283][T11409] loop8: p1 start 1601398130 is beyond EOD, truncated [ 311.310159][T11409] loop8: p2 start 1702059890 is beyond EOD, truncated [ 311.393840][T11413] syzkaller1: entered promiscuous mode [ 311.408723][T11413] syzkaller1: entered allmulticast mode [ 311.415908][ T5943] rc_core: IR keymap rc-hauppauge not found [ 311.422048][ T5943] Registered IR keymap rc-empty [ 311.431808][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.474814][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.527220][ T5943] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 311.556770][ T5943] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input69 [ 311.608705][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.674985][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.715051][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.744886][ T5932] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 311.752785][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.775146][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.815602][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.865504][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.905353][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.925060][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.944223][ T5932] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 311.952869][ T5932] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 311.963184][ T5943] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 311.974268][ T5932] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 311.985825][ T5932] usb 3-1: config 220 has no interface number 2 [ 311.992871][ T5932] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 312.011596][ T5943] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 312.021791][ T5943] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 312.030342][ T5932] usb 3-1: config 220 interface 0 has no altsetting 0 [ 312.037848][ T5932] usb 3-1: config 220 interface 76 has no altsetting 0 [ 312.052071][ T5932] usb 3-1: config 220 interface 1 has no altsetting 0 [ 312.060825][ T5943] usb 6-1: USB disconnect, device number 36 [ 312.093326][ T5932] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 312.104662][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.117826][ T5932] usb 3-1: Product: syz [ 312.122059][ T5932] usb 3-1: Manufacturer: syz [ 312.127119][ T5932] usb 3-1: SerialNumber: syz [ 312.365965][ T5932] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 312.386040][ T5932] uvcvideo 3-1:220.0: No valid video chain found. [ 312.395258][ T5932] usb 3-1: selecting invalid altsetting 0 [ 312.401114][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 312.472718][ T5932] usb 3-1: selecting invalid altsetting 0 [ 312.499482][ T5932] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 312.526115][ T5932] usb 3-1: USB disconnect, device number 47 [ 312.718337][T11442] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 312.740815][T11442] CPU: 0 UID: 0 PID: 11442 Comm: syz.4.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.740846][T11442] Tainted: [L]=SOFTLOCKUP [ 312.740854][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.740871][T11442] Call Trace: [ 312.740880][T11442] [ 312.740888][T11442] dump_stack_lvl+0xe8/0x150 [ 312.740928][T11442] sysfs_warn_dup+0x8e/0xa0 [ 312.740958][T11442] sysfs_do_create_link_sd+0xc0/0x110 [ 312.740989][T11442] device_add_class_symlinks+0x1cf/0x240 [ 312.741023][T11442] device_add+0x475/0xb70 [ 312.741055][T11442] wiphy_register+0x1dc5/0x2dc0 [ 312.741102][T11442] ? __pfx_wiphy_register+0x10/0x10 [ 312.741131][T11442] ? __pfx_netdev_run_todo+0x10/0x10 [ 312.741159][T11442] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 312.741200][T11442] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 312.741233][T11442] ieee80211_register_hw+0x3cb7/0x4980 [ 312.741281][T11442] ? ieee80211_register_hw+0x1881/0x4980 [ 312.741338][T11442] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 312.741371][T11442] ? __asan_memset+0x22/0x50 [ 312.741398][T11442] ? __hrtimer_setup+0x1b7/0x260 [ 312.741417][T11442] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 312.741450][T11442] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 312.741505][T11442] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 312.741529][T11442] ? kstrndup+0xbf/0x160 [ 312.741561][T11442] hwsim_new_radio_nl+0xf6a/0x1c00 [ 312.741608][T11442] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 312.741654][T11442] ? rcu_is_watching+0x15/0xb0 [ 312.741686][T11442] ? trace_kmalloc+0x2a/0xf0 [ 312.741723][T11442] ? __nla_parse+0x40/0x60 [ 312.741748][T11442] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 312.741795][T11442] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 312.741832][T11442] genl_family_rcv_msg_doit+0x22a/0x330 [ 312.741868][T11442] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 312.741910][T11442] ? bpf_lsm_capable+0x9/0x20 [ 312.741934][T11442] ? security_capable+0x7e/0x2c0 [ 312.741963][T11442] genl_rcv_msg+0x61c/0x7a0 [ 312.741998][T11442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.742024][T11442] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 312.742057][T11442] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.742086][T11442] ? __skb_clone+0x63/0x7a0 [ 312.742120][T11442] netlink_rcv_skb+0x232/0x4b0 [ 312.742143][T11442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.742173][T11442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.742191][T11442] ? genl_rcv+0x19/0x40 [ 312.742237][T11442] ? down_read+0x270/0x2e0 [ 312.742266][T11442] ? genl_rcv+0xd/0x40 [ 312.742294][T11442] genl_rcv+0x28/0x40 [ 312.742317][T11442] netlink_unicast+0x80f/0x9b0 [ 312.742359][T11442] ? __pfx_netlink_unicast+0x10/0x10 [ 312.742393][T11442] ? netlink_sendmsg+0x650/0xb40 [ 312.742413][T11442] ? skb_put+0x11b/0x210 [ 312.742441][T11442] netlink_sendmsg+0x813/0xb40 [ 312.742474][T11442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.742501][T11442] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.742526][T11442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.742562][T11442] ____sys_sendmsg+0x972/0x9f0 [ 312.742588][T11442] ? __might_fault+0xaf/0x130 [ 312.742625][T11442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.742670][T11442] ? import_iovec+0x73/0xa0 [ 312.742708][T11442] ___sys_sendmsg+0x2a5/0x360 [ 312.742734][T11442] ? __lock_acquire+0x6b5/0x2cf0 [ 312.742769][T11442] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.742805][T11442] ? futex_wait+0x2a2/0x390 [ 312.742858][T11442] ? __fget_files+0x2a/0x420 [ 312.742885][T11442] ? __fget_files+0x3a0/0x420 [ 312.742925][T11442] __x64_sys_sendmsg+0x1bd/0x2a0 [ 312.742954][T11442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.742992][T11442] ? rcu_is_watching+0x15/0xb0 [ 312.743036][T11442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.743059][T11442] do_syscall_64+0x15f/0xf80 [ 312.743086][T11442] ? trace_irq_disable+0x3b/0x140 [ 312.743113][T11442] ? clear_bhb_loop+0x40/0x90 [ 312.743139][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.743160][T11442] RIP: 0033:0x7f1b8379c819 [ 312.743191][T11442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.743209][T11442] RSP: 002b:00007f1b845ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.743232][T11442] RAX: ffffffffffffffda RBX: 00007f1b83a15fa0 RCX: 00007f1b8379c819 [ 312.743247][T11442] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 312.743261][T11442] RBP: 00007f1b83832c91 R08: 0000000000000000 R09: 0000000000000000 [ 312.743275][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.743287][T11442] R13: 00007f1b83a16038 R14: 00007f1b83a15fa0 R15: 00007ffc2263d6a8 [ 312.743323][T11442] [ 313.258132][T11447] 9pnet: p9_errstr2errno: server reported unknown error [ 313.426706][T11457] syzkaller1: entered promiscuous mode [ 313.432289][T11457] syzkaller1: entered allmulticast mode [ 313.444790][ T5890] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 313.597863][ T5890] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 313.612073][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 313.643935][ T5890] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 313.687049][ T5890] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 313.713200][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.751021][ T5890] usb 6-1: Product: syz [ 313.763712][ T5890] usb 6-1: Manufacturer: syz [ 313.798143][ T5890] usb 6-1: SerialNumber: syz [ 313.825790][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2325'. [ 313.834903][ T5890] usb 6-1: config 0 descriptor?? [ 313.836545][T11449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 313.862464][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2325'. [ 313.872332][T11449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 313.905650][ T5890] usb 6-1: ucan: probing device on interface #0 [ 314.494744][ T5932] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 314.522658][ T5890] ucan 6-1:0.0 can0: registered device [ 314.604836][ T5943] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 314.647918][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.659628][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.669836][ T5932] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 314.679431][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.690705][ T5932] usb 5-1: config 0 descriptor?? [ 314.713918][ T5890] ucan 6-1:0.0 can0: firmware string: "[ [ 314.764817][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 314.774012][ T5943] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 314.784131][ T5943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.795883][ T5943] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.808754][ T5943] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.819097][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.827216][ T5943] usb 1-1: Product: syz [ 314.831671][ T5943] usb 1-1: Manufacturer: syz [ 314.837661][ T5943] usb 1-1: SerialNumber: syz [ 314.857296][ T5943] usb 1-1: 0:2 : does not exist [ 314.919013][ T9] usb 6-1: USB disconnect, device number 37 [ 315.062821][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.076497][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.115749][ T5932] hid_parser_main: 15 callbacks suppressed [ 315.115772][ T5932] cm6533_jd 0003:0D8C:0022.0047: unknown main item tag 0x0 [ 315.132964][ T5932] cm6533_jd 0003:0D8C:0022.0047: unknown main item tag 0x0 [ 315.169263][ T5932] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0047/input/input70 [ 315.228180][ T5932] cm6533_jd 0003:0D8C:0022.0047: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 315.311332][ T5932] usb 5-1: USB disconnect, device number 49 [ 315.398226][T11507] fido_id[11507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 315.509713][ T5943] usb 1-1: 1:0: bogus dB values (-10666/-10367), disabling dB reporting [ 315.546932][ T5943] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 315.645774][ T5943] usb 1-1: USB disconnect, device number 53 [ 316.325100][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 316.330912][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 316.714985][ T5932] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 316.895190][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 316.922087][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.936267][ T5932] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 316.950019][ T5932] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 316.959386][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.967622][ T5932] usb 3-1: Product: syz [ 316.971944][ T5932] usb 3-1: Manufacturer: syz [ 316.982582][ T5932] usb 3-1: SerialNumber: syz [ 317.056876][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.063316][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.232373][ T5932] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 317.244101][ T5932] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 317.442646][T11562] pim6reg1: entered promiscuous mode [ 317.450731][T11562] pim6reg1: entered allmulticast mode [ 317.519712][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2353'. [ 317.679324][ T5932] usb 3-1: USB disconnect, device number 48 [ 317.765865][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.842142][T11572] syzkaller1: entered promiscuous mode [ 317.848827][T11572] syzkaller1: entered allmulticast mode [ 317.854805][ T5904] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 318.014863][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 318.022116][ T5904] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 318.033199][ T5904] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 318.046897][ T5904] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.058812][ T5904] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 318.076752][ T5904] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 318.087036][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.095977][ T5904] usb 6-1: Product: syz [ 318.100216][ T5904] usb 6-1: Manufacturer: syz [ 318.105866][ T5904] usb 6-1: SerialNumber: syz [ 318.137396][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 318.162231][ T5904] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input71 [ 318.345223][ T5904] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 318.355030][ T5904] (id 0x00) [ 318.414744][ T5904] rc_core: IR keymap rc-imon-pad not found [ 318.422507][ T5904] Registered IR keymap rc-empty [ 318.427777][ T5904] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 318.440763][ T5904] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 318.546036][ T5904] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 318.560808][ T5904] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input72 [ 318.574830][ T5932] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 318.583498][ T5904] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:38> initialized [ 318.594862][ T5943] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 318.728138][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.741673][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.751448][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 318.759250][ T5932] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.760606][ T5904] usb 6-1: USB disconnect, device number 38 [ 318.771632][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.790145][ T5932] usb 1-1: SerialNumber: syz [ 318.796177][ T5943] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 318.805922][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.815617][ T5943] usb 3-1: Product: syz [ 318.819995][ T5943] usb 3-1: Manufacturer: syz [ 318.825412][ T5943] usb 3-1: SerialNumber: syz [ 318.841133][ T5943] usb 3-1: config 0 descriptor?? [ 318.870709][ T5943] gspca_main: sq930x-2.14.0 probing 2770:930c [ 319.052469][ T5932] usb 1-1: 0:2 : does not exist [ 319.093381][ T5932] usb 1-1: USB disconnect, device number 54 [ 319.126927][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.915720][ T5943] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 319.947786][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2371'. [ 320.154784][ T5943] gspca_sq930x: Sensor ov9630 not yet treated [ 320.164605][ T5943] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 320.186027][ T5943] usb 3-1: USB disconnect, device number 49 [ 320.221353][T11611] program syz.5.2375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.297635][T11614] loop6: detected capacity change from 0 to 8 [ 320.491204][T11617] syzkaller1: entered promiscuous mode [ 320.504476][T11617] syzkaller1: entered allmulticast mode [ 320.701642][T11614] Dev loop6: unable to read RDB block 8 [ 320.711263][T11614] loop6: unable to read partition table [ 320.732591][T11614] loop6: partition table beyond EOD, truncated [ 320.747642][T11614] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 321.719597][T11664] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 321.729490][T11664] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 321.850984][T11670] netlink: 'syz.4.2401': attribute type 7 has an invalid length. [ 321.866248][T11670] netlink: 'syz.4.2401': attribute type 8 has an invalid length. [ 321.879361][T11670] netlink: 'syz.4.2401': attribute type 7 has an invalid length. [ 321.887500][T11670] netlink: 208804 bytes leftover after parsing attributes in process `syz.4.2401'. [ 321.981056][T11673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.004813][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 322.016448][ T5158] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 322.494785][ T5890] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 322.658832][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 322.671714][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.682944][ T5890] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 322.692389][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.693746][ T5932] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 322.722578][ T5890] usb 3-1: config 0 descriptor?? [ 322.854738][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 322.869559][ T5932] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 322.908830][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.941366][ T5932] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 323.156511][ T5890] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 323.163585][ T5890] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 323.170761][ T5890] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 323.177848][ T5890] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 323.184890][ T5890] elan 0003:04F3:0755.0048: unknown main item tag 0x0 [ 323.193402][ T5890] elan 0003:04F3:0755.0048: failed to start in urb: -90 [ 323.203045][ T5890] elan 0003:04F3:0755.0048: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 323.205320][ T5943] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 323.360359][ T5928] usb 3-1: USB disconnect, device number 50 [ 323.378553][ T5943] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.396059][ T5943] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 323.412360][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.420589][ T5943] usb 1-1: Product: syz [ 323.426086][ T5943] usb 1-1: Manufacturer: syz [ 323.430785][ T5943] usb 1-1: SerialNumber: syz [ 323.944974][ T5932] gspca_nw80x: reg_w err -71 [ 323.954209][ T5932] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 323.965147][ T5932] usb 5-1: USB disconnect, device number 50 [ 324.249690][ T5943] usb 1-1: current rate 1070888 is different from the runtime rate 48000 [ 324.255253][ T5904] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 324.367895][ T12] smc: removing ib device syz1 [ 324.402149][ T5890] syz1: Port: 1 Link DOWN [ 324.431193][ T5904] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.448819][ T5904] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.468162][ T5904] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.491475][ T5890] usb 1-1: USB disconnect, device number 55 [ 324.516029][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 324.534818][ T5904] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 324.548036][ T12] smbdirect: ib_dev[syz1] removed [ 324.553997][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.597271][T11734] raw_sendmsg: syz.4.2432 forgot to set AF_INET. Fix it! [ 324.612687][ T5904] usb 6-1: config 0 descriptor?? [ 324.716888][T11736] netlink: 'syz.4.2433': attribute type 10 has an invalid length. [ 324.732555][T11736] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.742655][T11736] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.760712][T11736] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.768023][T11736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.776184][T11736] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.783390][T11736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.800872][T11736] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 325.054223][ T5904] holtek 0003:1241:5015.0049: unknown main item tag 0x0 [ 325.070716][ T5904] holtek 0003:1241:5015.0049: unknown main item tag 0x0 [ 325.088780][ T5904] holtek 0003:1241:5015.0049: item fetching failed at offset 3/5 [ 325.102520][ T5904] holtek 0003:1241:5015.0049: parse failed [ 325.110888][ T5904] holtek 0003:1241:5015.0049: probe with driver holtek failed with error -22 [ 325.136815][T11741] syzkaller1: entered promiscuous mode [ 325.142692][T11741] syzkaller1: entered allmulticast mode [ 325.257272][ T5904] usb 6-1: USB disconnect, device number 39 [ 325.604880][ T5890] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 325.769059][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.786362][ T5890] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.796011][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.822408][ T5890] usb 1-1: config 0 descriptor?? [ 325.874547][ T5890] pwc: Askey VC010 type 2 USB webcam detected. [ 325.898234][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.100495][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.231489][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.255708][ T5890] pwc: recv_control_msg error -32 req 02 val 2b00 [ 326.266557][ T5890] pwc: recv_control_msg error -32 req 02 val 2700 [ 326.282046][ T12] ================================================================== [ 326.290155][ T12] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470 [ 326.297826][ T12] Free of addr ffff88807bcb00d8 by task kworker/u8:0/12 [ 326.304881][ T12] [ 326.307242][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.307272][ T12] Tainted: [L]=SOFTLOCKUP [ 326.307281][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.307294][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 326.307324][ T12] Call Trace: [ 326.307332][ T12] [ 326.307341][ T12] dump_stack_lvl+0xe8/0x150 [ 326.307372][ T12] print_address_description+0x55/0x1e0 [ 326.307403][ T12] print_report+0x58/0x70 [ 326.307437][ T12] ? gid_table_release_one+0x384/0x470 [ 326.307457][ T12] kasan_report_invalid_free+0xea/0x110 [ 326.307481][ T12] ? gid_table_release_one+0x384/0x470 [ 326.307507][ T12] free_large_kmalloc+0x3c/0x110 [ 326.307528][ T12] gid_table_release_one+0x384/0x470 [ 326.307556][ T12] ib_device_release+0xd2/0x1c0 [ 326.307587][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 326.307615][ T12] device_release+0xc4/0x1f0 [ 326.307638][ T12] kobject_put+0x228/0x560 [ 326.307668][ T12] ? process_scheduled_works+0xa70/0x1860 [ 326.307697][ T12] process_scheduled_works+0xb5d/0x1860 [ 326.307739][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.307771][ T12] ? assign_work+0x3d5/0x5e0 [ 326.307799][ T12] worker_thread+0xa53/0xfc0 [ 326.307841][ T12] kthread+0x388/0x470 [ 326.307862][ T12] ? __pfx_worker_thread+0x10/0x10 [ 326.307889][ T12] ? __pfx_kthread+0x10/0x10 [ 326.307911][ T12] ret_from_fork+0x514/0xb70 [ 326.307941][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 326.307968][ T12] ? __switch_to+0xc79/0x1410 [ 326.307994][ T12] ? __pfx_kthread+0x10/0x10 [ 326.308016][ T12] ret_from_fork_asm+0x1a/0x30 [ 326.308042][ T12] [ 326.308050][ T12] [ 326.475340][ T12] The buggy address belongs to the physical page: [ 326.481774][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bcb1a00 pfn:0x7bcb0 [ 326.491866][ T12] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 326.500465][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 326.508041][ T12] page_type: f8(unknown) [ 326.512324][ T12] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 326.520938][ T12] raw: ffff88807bcb1a00 0000000000000000 00000000f8000000 0000000000000000 [ 326.529545][ T12] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 326.538246][ T12] head: ffff88807bcb1a00 0000000000000000 00000000f8000000 0000000000000000 [ 326.546936][ T12] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 326.555638][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 326.564322][ T12] page dumped because: kasan: bad access detected [ 326.570761][ T12] page_owner tracks the page as allocated [ 326.576511][ T12] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 7134, tgid 7132 (syz.2.444), ts 135930215833, free_ts 135898456744 [ 326.594327][ T12] post_alloc_hook+0x231/0x280 [ 326.599129][ T12] get_page_from_freelist+0x24ba/0x2540 [ 326.604717][ T12] __alloc_frozen_pages_noprof+0x18d/0x380 [ 326.610629][ T12] alloc_pages_mpol+0x235/0x490 [ 326.615491][ T12] ___kmalloc_large_node+0x4e/0x120 [ 326.620712][ T12] __kmalloc_large_node_noprof+0x18/0x90 [ 326.626397][ T12] __kmalloc_noprof+0x3e8/0x760 [ 326.631270][ T12] ib_cache_setup_one+0x198/0x570 [ 326.636313][ T12] ib_register_device+0xfbd/0x13e0 [ 326.641449][ T12] rxe_register_device+0x1e3/0x350 [ 326.646578][ T12] rxe_net_add+0x81/0x110 [ 326.650924][ T12] rxe_newlink+0xf4/0x1c0 [ 326.655304][ T12] nldev_newlink+0x5bc/0x650 [ 326.659907][ T12] rdma_nl_rcv+0x6d1/0xa10 [ 326.664345][ T12] netlink_unicast+0x80f/0x9b0 [ 326.669135][ T12] netlink_sendmsg+0x813/0xb40 [ 326.673909][ T12] page last free pid 7130 tgid 7130 stack trace: [ 326.680262][ T12] __free_frozen_pages+0xbc7/0xd30 [ 326.685401][ T12] device_release+0xc4/0x1f0 [ 326.690005][ T12] kobject_put+0x228/0x560 [ 326.694443][ T12] netdev_run_todo+0xc75/0xde0 [ 326.699230][ T12] tun_chr_close+0x13c/0x1c0 [ 326.703836][ T12] __fput+0x44f/0xa60 [ 326.707841][ T12] task_work_run+0x1d9/0x270 [ 326.712441][ T12] exit_to_user_mode_loop+0xed/0x480 [ 326.717745][ T12] do_syscall_64+0x33e/0xf80 [ 326.722363][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.728272][ T12] [ 326.730603][ T12] Memory state around the buggy address: [ 326.736247][ T12] ffff88807bcaff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 326.744328][ T12] ffff88807bcb0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.752404][ T12] >ffff88807bcb0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.760501][ T12] ^ [ 326.767442][ T12] ffff88807bcb0100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.775775][ T12] ffff88807bcb0180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 326.783865][ T12] ================================================================== [ 326.928795][ T5943] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 326.980883][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.034762][ T5847] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 327.082339][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 327.089600][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.100482][ T12] Tainted: [L]=SOFTLOCKUP [ 327.104829][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 327.114901][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 327.120865][ T12] Call Trace: [ 327.124178][ T12] [ 327.127136][ T12] vpanic+0x56c/0xa60 [ 327.131140][ T12] ? __pfx_vpanic+0x10/0x10 [ 327.135664][ T12] ? __pfx___schedule+0x10/0x10 [ 327.140541][ T12] panic+0xc5/0xd0 [ 327.144284][ T12] ? __pfx_panic+0x10/0x10 [ 327.148724][ T12] ? preempt_schedule_common+0x82/0xd0 [ 327.154233][ T12] check_panic_on_warn+0x89/0xb0 [ 327.159211][ T12] end_report+0x73/0x170 [ 327.163470][ T12] ? gid_table_release_one+0x384/0x470 [ 327.168959][ T12] kasan_report_invalid_free+0xfa/0x110 [ 327.174530][ T12] ? gid_table_release_one+0x384/0x470 [ 327.180017][ T12] free_large_kmalloc+0x3c/0x110 [ 327.184978][ T12] gid_table_release_one+0x384/0x470 [ 327.190283][ T12] ib_device_release+0xd2/0x1c0 [ 327.195183][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 327.200692][ T12] device_release+0xc4/0x1f0 [ 327.205311][ T12] kobject_put+0x228/0x560 [ 327.209751][ T12] ? process_scheduled_works+0xa70/0x1860 [ 327.215494][ T12] process_scheduled_works+0xb5d/0x1860 [ 327.221085][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.227105][ T12] ? assign_work+0x3d5/0x5e0 [ 327.231734][ T12] worker_thread+0xa53/0xfc0 [ 327.236462][ T12] kthread+0x388/0x470 [ 327.240565][ T12] ? __pfx_worker_thread+0x10/0x10 [ 327.245704][ T12] ? __pfx_kthread+0x10/0x10 [ 327.250404][ T12] ret_from_fork+0x514/0xb70 [ 327.255028][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 327.260175][ T12] ? __switch_to+0xc79/0x1410 [ 327.264891][ T12] ? __pfx_kthread+0x10/0x10 [ 327.269608][ T12] ret_from_fork_asm+0x1a/0x30 [ 327.274408][ T12] [ 327.278420][ T12] Kernel Offset: disabled [ 327.282758][ T12] Rebooting in 86400 seconds..