last executing test programs: 1m21.658558481s ago: executing program 0 (id=2730): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x0, "ac9ea3c75608cf7a74445673c1f1fe7bb3fe9603a055824fd5df22e9bd6c89a0"}) syz_usb_connect(0x2, 0x36, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1m20.998638943s ago: executing program 0 (id=2741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010020, 0x0, 0x40}]}) 1m20.579951858s ago: executing program 0 (id=2746): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 1m19.887653308s ago: executing program 0 (id=2752): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m19.708804381s ago: executing program 0 (id=2755): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4) 1m17.668151303s ago: executing program 0 (id=2761): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x10000)=nil, &(0x7f000000f000/0xf000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0xb, 0x63, 0x2, 0x0, 0xe4}) 1m16.883494159s ago: executing program 32 (id=2761): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x10000)=nil, &(0x7f000000f000/0xf000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0xb, 0x63, 0x2, 0x0, 0xe4}) 53.444291525s ago: executing program 3 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0) 53.255694604s ago: executing program 3 (id=2886): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0xead, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 52.992624726s ago: executing program 3 (id=2888): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@my=0x1, 0x2}) 52.844159675s ago: executing program 3 (id=2889): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 52.509239967s ago: executing program 3 (id=2892): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 51.411935433s ago: executing program 3 (id=2899): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 51.009406235s ago: executing program 33 (id=2899): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 4.951655827s ago: executing program 1 (id=3210): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.910194089s ago: executing program 2 (id=3220): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000002000)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 3.68786168s ago: executing program 2 (id=3222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="403004"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.776871258s ago: executing program 1 (id=3227): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="01000000000400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="009d17aa510000000400002a61"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 2.663607377s ago: executing program 1 (id=3228): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0xc, 0x3, "182102"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.997346628s ago: executing program 4 (id=3230): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfdfffffe, 0x5, 0x0, 'queue0\x00', 0x198}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 1.729133711s ago: executing program 4 (id=3231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdffd, {{}, {@val={0x8, 0x1, 0x80035}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x24040894) 1.717958794s ago: executing program 2 (id=3232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x6, 0x0, [{0x293, 0x0, 0x7}, {0x23a, 0x0, 0x1}, {0x365, 0x0, 0x80000001}, {0x96b, 0x0, 0x9000000}, {0xaf3, 0x0, 0x9}, {0x276, 0x0, 0x8}]}) 1.387340651s ago: executing program 4 (id=3233): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x80, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.187685548s ago: executing program 2 (id=3234): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 1.103863042s ago: executing program 2 (id=3235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000180)) 979.334766ms ago: executing program 5 (id=3236): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 926.664835ms ago: executing program 4 (id=3237): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) 766.88687ms ago: executing program 4 (id=3238): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000371000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x69, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 731.112339ms ago: executing program 1 (id=3239): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 642.590237ms ago: executing program 5 (id=3240): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x7fffffff) ptrace$pokeuser(0x6, r0, 0x358, 0x4000000000000004) 599.864679ms ago: executing program 2 (id=3241): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 425.935786ms ago: executing program 1 (id=3242): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x50, r0, 0x801, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "88d43ab161e9013bb562ad5ecd"}]}]}, 0x50}}, 0x0) 403.080425ms ago: executing program 4 (id=3243): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) 379.978684ms ago: executing program 5 (id=3244): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3, 0xc9}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 267.85639ms ago: executing program 1 (id=3245): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r2, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 184.42296ms ago: executing program 5 (id=3246): ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x0, 0x0, "5dc9ca561a5fbf61048955f6f876b2ff", 0x0, 0x1}) request_key(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 93.116243ms ago: executing program 5 (id=3247): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x3, 0x2, 0x1, 0x7755fbf6}) 0s ago: executing program 5 (id=3248): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x7f9fe813eb32507f, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4010) kernel console output (not intermixed with test programs): ummy_hcd [ 311.101319][ T5833] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 311.126187][ T5833] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 311.126686][ T5833] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 311.127148][ T5833] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 311.127168][ T5833] rtc rtc0: __rtc_set_alarm: err=-22 [ 311.239565][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.239602][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.239642][ T32] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 311.239667][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.289994][ T32] usb 4-1: config 0 descriptor?? [ 311.489378][T10757] vxcan0: tx address claim with dest, not broadcast [ 311.743237][ T32] playstation 0003:054C:0BA0.0028: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 311.923432][ T32] playstation 0003:054C:0BA0.0028: Invalid reportID received, expected 18 got 203 [ 311.923462][ T32] playstation 0003:054C:0BA0.0028: Failed to retrieve DualShock4 pairing info: -22 [ 311.923515][ T32] playstation 0003:054C:0BA0.0028: Failed to get MAC address from DualShock4 [ 311.923531][ T32] playstation 0003:054C:0BA0.0028: Failed to create dualshock4. [ 311.995360][ T32] playstation 0003:054C:0BA0.0028: probe with driver playstation failed with error -22 [ 312.040011][T10770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.137693][ T5896] usb 4-1: USB disconnect, device number 22 [ 312.449952][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 312.627293][T10787] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2124'. [ 313.373368][T10804] program syz.2.2132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.406544][T10808] loop3: detected capacity change from 0 to 7 [ 313.441477][T10808] Dev loop3: unable to read RDB block 7 [ 313.441525][T10808] loop3: unable to read partition table [ 313.441768][T10808] loop3: partition table beyond EOD, truncated [ 313.441802][T10808] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 313.945908][T10829] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2142'. [ 314.056476][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2143'. [ 314.809099][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'. [ 316.456148][T10899] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 316.507614][ T5883] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 316.672589][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 316.672625][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 316.672671][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 316.672696][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.728100][ T5883] usb 2-1: config 0 descriptor?? [ 316.730044][T10898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.236433][ T5883] hid_parser_main: 38 callbacks suppressed [ 317.236458][ T5883] lg-g15 0003:046D:C22D.0029: unknown main item tag 0x7 [ 317.236489][ T5883] lg-g15 0003:046D:C22D.0029: unknown main item tag 0x0 [ 317.236517][ T5883] lg-g15 0003:046D:C22D.0029: unknown main item tag 0x0 [ 317.236544][ T5883] lg-g15 0003:046D:C22D.0029: unknown main item tag 0x0 [ 317.236621][ T5883] lg-g15 0003:046D:C22D.0029: unbalanced collection at end of report description [ 317.238084][ T5883] lg-g15 0003:046D:C22D.0029: probe with driver lg-g15 failed with error -22 [ 317.365535][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.365628][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.432615][ T5814] usb 2-1: USB disconnect, device number 28 [ 318.338475][ T5883] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 318.500500][ T5883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.500529][ T5883] usb 2-1: config 0 has no interface number 0 [ 318.500588][ T5883] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.500616][ T5883] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.500640][ T5883] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.500667][ T5883] usb 2-1: config 0 interface 1 has no altsetting 0 [ 318.532854][ T5883] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 318.532887][ T5883] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 318.532908][ T5883] usb 2-1: Manufacturer: syz [ 318.601263][ T5883] usb 2-1: config 0 descriptor?? [ 319.238841][ T5883] uclogic 0003:145F:0212.002A: pen parameters not found [ 319.238869][ T5883] uclogic 0003:145F:0212.002A: interface is invalid, ignoring [ 319.336210][ T5883] usb 2-1: USB disconnect, device number 29 [ 319.437641][ T5831] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 319.444045][ T61] Bluetooth: hci4: command 0x1003 tx timeout [ 320.082829][T10984] kvm: kvm [10982]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x10 [ 320.273982][T10990] : renamed from vlan0 (while UP) [ 320.643331][T11001] input: syz0 as /devices/virtual/input/input29 [ 321.287636][ T5883] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 321.450244][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 321.450298][ T5883] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 321.450324][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.531518][ T5883] usb 2-1: config 0 descriptor?? [ 321.532511][T11015] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 321.966562][ T5883] hid (null): global environment stack underflow [ 321.998037][ T5883] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0 [ 321.998078][ T5883] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0 [ 321.998106][ T5883] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0 [ 321.998133][ T5883] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0 [ 321.998160][ T5883] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0 [ 321.998186][ T5883] asus 0003:0B05:1ABE.002B: unknown main item tag 0x0 [ 322.003527][ T5883] asus 0003:0B05:1ABE.002B: global environment stack underflow [ 322.003550][ T5883] asus 0003:0B05:1ABE.002B: item 0 1 1 11 parsing failed [ 322.004433][ T5883] asus 0003:0B05:1ABE.002B: Asus hid parse failed: -22 [ 322.004560][ T5883] asus 0003:0B05:1ABE.002B: probe with driver asus failed with error -22 [ 322.199202][ T5883] usb 2-1: USB disconnect, device number 30 [ 322.330876][ T5896] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 322.369307][T11051] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2222'. [ 322.369484][T11051] openvswitch: netlink: Message has 5 unknown bytes. [ 322.484666][ T5896] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 322.484701][ T5896] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 322.484730][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.540618][ T5896] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.540653][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 322.540675][ T5896] usb 4-1: Product: syz [ 322.540690][ T5896] usb 4-1: Manufacturer: syz [ 322.540706][ T5896] usb 4-1: SerialNumber: syz [ 322.581863][ T5896] usb 4-1: config 0 descriptor?? [ 322.605451][ T5896] usb 4-1: selecting invalid altsetting 0 [ 322.832412][T11060] loop8: detected capacity change from 0 to 7 [ 322.902278][T11060] loop8: [POWERTEC] [ 323.046234][ T5896] usb 4-1: USB disconnect, device number 23 [ 323.234241][ T6038] udevd[6038]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.464356][T11071] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2232'. [ 323.562454][T11074] program syz.1.2233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.965277][T11086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.688559][ T5814] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 324.801284][ T32] hid_parser_main: 306 callbacks suppressed [ 324.801310][ T32] hid-generic 0004:0004:FFFF0001.002C: unknown main item tag 0x0 [ 324.801341][ T32] hid-generic 0004:0004:FFFF0001.002C: unknown main item tag 0x0 [ 324.801368][ T32] hid-generic 0004:0004:FFFF0001.002C: unknown main item tag 0x0 [ 324.839849][ T5814] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 324.839882][ T5814] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 324.839906][ T5814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 324.842026][ T5814] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.842053][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.842073][ T5814] usb 1-1: Product: syz [ 324.842087][ T5814] usb 1-1: Manufacturer: syz [ 324.842102][ T5814] usb 1-1: SerialNumber: syz [ 324.935663][ T32] hid-generic 0004:0004:FFFF0001.002C: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 324.948034][ T5814] usb 1-1: config 0 descriptor?? [ 325.088602][ T5814] usb 1-1: selecting invalid altsetting 0 [ 325.340614][T11127] lo: entered allmulticast mode [ 325.593785][ T5814] usb 1-1: USB disconnect, device number 25 [ 325.898865][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.021556][T11139] Bluetooth: hci4: Frame reassembly failed (-84) [ 326.032837][T11141] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2261'. [ 326.032862][T11141] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.626240][ T61] Bluetooth: hci0: link tx timeout [ 326.626520][ T61] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.916234][T11163] sctp: Trying to GSO but underlying device doesn't support it. [ 327.575737][T11181] krxrpcio/0 (11181) used greatest stack depth: 17120 bytes left [ 327.991216][ T61] Bluetooth: hci0: link tx timeout [ 327.991240][ T61] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.027671][ T5883] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 328.157610][ T5831] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 328.157624][ T61] Bluetooth: hci4: command 0xfc11 tx timeout [ 328.247640][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 328.263200][ T5883] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 328.263231][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.263253][ T5883] usb 4-1: Product: syz [ 328.263267][ T5883] usb 4-1: Manufacturer: syz [ 328.263283][ T5883] usb 4-1: SerialNumber: syz [ 328.471636][ T5831] Bluetooth: hci0: link tx timeout [ 328.471659][ T5831] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.702000][T11205] netlink: 'syz.0.2298': attribute type 25 has an invalid length. [ 328.702268][T11205] netlink: 'syz.0.2298': attribute type 28 has an invalid length. [ 328.718972][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 329.007154][T11215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.150025][ T5883] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 329.266849][ T5883] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 329.268794][ T5883] usb 4-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 329.514098][T11225] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2297'. [ 329.514123][T11225] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 329.705653][ T5883] usb 4-1: USB disconnect, device number 24 [ 330.211142][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.378007][ T37] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 330.527703][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 330.530451][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.530485][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.530529][ T37] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 330.530554][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.607810][ T37] usb 2-1: config 0 descriptor?? [ 330.963067][ T38] audit: type=1326 audit(1776855873.413:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f0bec819 code=0x7fc00000 [ 331.054069][T11268] input: syz1 as /devices/virtual/input/input30 [ 331.067183][ T37] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 331.067209][ T37] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 331.067227][ T37] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 331.067246][ T37] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 331.067264][ T37] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 331.113454][ T37] HID 045e:07da: Invalid code 65791 type 1 [ 331.113828][ T37] HID 045e:07da: Invalid code 768 type 1 [ 331.113846][ T37] HID 045e:07da: Invalid code 769 type 1 [ 331.113861][ T37] HID 045e:07da: Invalid code 770 type 1 [ 331.113876][ T37] HID 045e:07da: Invalid code 771 type 1 [ 331.113890][ T37] HID 045e:07da: Invalid code 772 type 1 [ 331.113904][ T37] HID 045e:07da: Invalid code 773 type 1 [ 331.113917][ T37] HID 045e:07da: Invalid code 774 type 1 [ 331.113930][ T37] HID 045e:07da: Invalid code 775 type 1 [ 331.113944][ T37] HID 045e:07da: Invalid code 776 type 1 [ 331.368394][ T37] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002D/input/input31 [ 331.830847][ T37] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 331.869343][ T37] usb 2-1: USB disconnect, device number 31 [ 332.017835][T11290] fido_id[11290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 333.489906][ T6027] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 333.646172][ T6027] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 333.646205][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.681917][ T6027] usb 2-1: config 0 descriptor?? [ 333.708605][ T6027] cp210x 2-1:0.0: cp210x converter detected [ 333.824727][T11345] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2339'. [ 333.833351][T11345] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2339'. [ 333.839826][T11345] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2339'. [ 333.953597][T11349] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.2341'. [ 333.953629][T11349] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 334.125601][ T6027] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 334.185139][ T6027] usb 2-1: cp210x converter now attached to ttyUSB0 [ 334.345299][ T5814] usb 2-1: USB disconnect, device number 32 [ 334.369755][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 334.498084][ T5814] cp210x 2-1:0.0: device disconnected [ 336.157025][T11413] netlink: 'syz.0.2370': attribute type 12 has an invalid length. [ 336.157051][T11413] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2370'. [ 336.727617][ T5896] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 336.877886][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 336.881166][ T5896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.881194][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.881217][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.881240][ T5896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.881279][ T5896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.881315][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.201826][ T5896] usb 1-1: GET_CAPABILITIES returned 0 [ 337.201867][ T5896] usbtmc 1-1:16.0: can't read capabilities [ 337.347615][ T6027] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 337.403640][ T5896] usb 1-1: USB disconnect, device number 26 [ 337.502897][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 337.502952][ T6027] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 337.502976][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.550751][ T6027] usb 4-1: config 0 descriptor?? [ 337.563777][T11442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.693282][T11453] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2389'. [ 338.003329][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003368][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003394][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003420][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003445][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003471][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003497][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003522][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003548][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.003573][ T6027] asus 0003:0B05:1ABE.002E: unknown main item tag 0x0 [ 338.080076][ T6027] asus 0003:0B05:1ABE.002E: unexpected long global item [ 338.080948][ T6027] asus 0003:0B05:1ABE.002E: Asus hid parse failed: -22 [ 338.081075][ T6027] asus 0003:0B05:1ABE.002E: probe with driver asus failed with error -22 [ 338.184687][ T37] usb 4-1: USB disconnect, device number 25 [ 339.257961][T11494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2408'. [ 339.866942][T11515] netlink: 'syz.0.2418': attribute type 2 has an invalid length. [ 339.866965][T11515] netlink: 'syz.0.2418': attribute type 5 has an invalid length. [ 340.271674][T11522] serio: Serial port ptm0 [ 340.758462][T11542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2431'. [ 341.491330][T11564] pim6reg: entered allmulticast mode [ 341.497150][T11563] pim6reg: left allmulticast mode [ 341.707569][ T37] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 341.857626][ T6027] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 341.870802][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 341.894270][ T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.894327][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.894357][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 341.894379][ T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 341.894403][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.956476][ T37] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 341.956507][ T37] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 341.956529][ T37] usb 1-1: Manufacturer: syz [ 342.027524][ T6027] usb 3-1: Using ep0 maxpacket: 16 [ 342.030580][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.030615][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.030655][ T6027] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 342.030680][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.085707][ T6027] usb 3-1: config 0 descriptor?? [ 342.128455][ T37] usb 1-1: config 0 descriptor?? [ 342.329410][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.332664][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.582133][ T37] rc_core: IR keymap rc-hauppauge not found [ 342.582155][ T37] Registered IR keymap rc-empty [ 342.582318][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.597602][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.682869][ T37] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 342.683350][ T6027] hid-multitouch 0003:1FD2:6007.002F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 342.749157][ T37] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 342.807296][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.835323][ T32] usb 3-1: USB disconnect, device number 31 [ 342.862509][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.877713][ T5833] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 342.888938][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.922430][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.940772][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.972664][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 342.999953][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 343.019843][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 343.038166][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 343.073261][ T37] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 343.174597][ T37] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 343.174624][ T37] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 343.211744][T11589] fido_id[11589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 343.215814][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 343.229769][ T5833] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 343.229857][ T5833] usb 4-1: config 0 has no interface number 0 [ 343.229982][ T5833] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.230083][ T5833] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 343.230150][ T5833] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 343.230218][ T5833] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 343.230258][ T5833] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.334001][ T5833] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 343.334033][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.334055][ T5833] usb 4-1: Product: syz [ 343.334069][ T5833] usb 4-1: Manufacturer: syz [ 343.334084][ T5833] usb 4-1: SerialNumber: syz [ 343.401246][ T5833] usb 4-1: config 0 descriptor?? [ 343.485939][ T37] usb 1-1: USB disconnect, device number 27 [ 343.656254][ T5833] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 343.982369][ T5833] usb 4-1: USB disconnect, device number 26 [ 344.217649][T11610] Bluetooth: MGMT ver 1.23 [ 344.938084][T11633] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2470'. [ 345.087538][ T37] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 345.147583][ T5814] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 345.265020][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 345.265676][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 345.266939][ T37] usb 1-1: config 61 has an invalid interface number: 37 but max is 0 [ 345.266964][ T37] usb 1-1: config 61 has no interface number 0 [ 345.267001][ T37] usb 1-1: config 61 interface 37 has no altsetting 0 [ 345.311110][ T5814] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.311138][ T5814] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.312709][ T5814] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 345.312738][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.312760][ T5814] usb 4-1: SerialNumber: syz [ 345.319236][ T37] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 345.319266][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.319318][ T37] usb 1-1: Product: syz [ 345.319354][ T37] usb 1-1: Manufacturer: syz [ 345.319397][ T37] usb 1-1: SerialNumber: syz [ 345.641733][ T5814] usb 4-1: 0:2 : does not exist [ 345.667576][ T5814] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 345.695076][ T5814] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 345.783974][ T5814] usb 4-1: USB disconnect, device number 27 [ 345.895269][ T37] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 345.929025][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.230369][ T37] gp8psk: usb in 128 operation failed. [ 346.230708][ T37] gp8psk: usb in 137 operation failed. [ 346.230719][ T37] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 346.230749][ T37] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 346.286082][ T37] usb 1-1: USB disconnect, device number 28 [ 346.627523][ T5833] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 346.821465][ T5833] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 346.821497][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.821519][ T5833] usb 3-1: Product: syz [ 346.821534][ T5833] usb 3-1: Manufacturer: syz [ 346.821548][ T5833] usb 3-1: SerialNumber: syz [ 346.889810][ T5833] usb 3-1: config 0 descriptor?? [ 346.912469][ T5833] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 032 [ 347.195206][T11666] program syz.1.2485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.282026][ T6027] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 347.335367][ T5833] (null): failure reading functionality [ 347.380078][ T5833] i2c i2c-1: connected i2c-tiny-usb device [ 347.428415][ T6027] usb 4-1: Using ep0 maxpacket: 16 [ 347.431404][ T6027] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.431461][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.431489][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 347.431511][ T6027] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 347.431535][ T6027] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.433705][ T6027] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.433736][ T6027] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.433757][ T6027] usb 4-1: Manufacturer: syz [ 347.545118][ T6027] usb 4-1: config 0 descriptor?? [ 347.578397][ T5833] usb 3-1: USB disconnect, device number 32 [ 347.810199][T11676] tipc: Started in network mode [ 347.810232][T11676] tipc: Node identity ac14140f, cluster identity 4711 [ 347.853513][T11676] tipc: New replicast peer: 255.255.255.255 [ 347.856796][T11676] tipc: Enabled bearer , priority 10 [ 347.871995][ T6027] rc_core: IR keymap rc-hauppauge not found [ 347.872019][ T6027] Registered IR keymap rc-empty [ 347.872181][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 347.891556][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 347.912275][ T6027] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 347.930385][ T6027] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 347.956111][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 347.971915][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 347.996239][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.010819][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.027637][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.047632][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.067696][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.087649][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.107692][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.127670][ T6027] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 348.176254][ T6027] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 348.176513][ T6027] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 348.257875][ T6027] usb 4-1: USB disconnect, device number 28 [ 348.519495][T11692] input: syz0 as /devices/virtual/input/input34 [ 348.700723][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2498'. [ 348.854628][ T5833] tipc: Node number set to 2886997007 [ 349.434241][T11720] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 349.434265][T11720] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.677172][ T38] audit: type=1400 audit(1776855892.073:10): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041 [ 350.564723][T11767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2530'. [ 350.564854][T11767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2530'. [ 350.846800][T11775] binder: 11774:11775 ioctl 400c620e 0 returned -14 [ 351.390563][T11794] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2542'. [ 351.717486][ T32] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 351.747580][ T6027] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 351.879466][ T32] usb 4-1: too many configurations: 79, using maximum allowed: 8 [ 351.897852][ T6027] usb 1-1: Using ep0 maxpacket: 32 [ 351.900270][ T6027] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 351.900298][ T6027] usb 1-1: config 0 has no interface number 0 [ 351.903258][ T6027] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 351.903285][ T6027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.903305][ T6027] usb 1-1: Product: syz [ 351.903319][ T6027] usb 1-1: Manufacturer: syz [ 351.903335][ T6027] usb 1-1: SerialNumber: syz [ 351.965202][ T6027] usb 1-1: config 0 descriptor?? [ 351.988877][ T32] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 351.988896][ T6027] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 351.988908][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.988929][ T32] usb 4-1: Product: syz [ 351.988943][ T32] usb 4-1: Manufacturer: syz [ 351.988958][ T32] usb 4-1: SerialNumber: syz [ 352.203101][ T6027] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 352.234583][ T6027] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 352.486098][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 352.486165][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 352.604776][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 352.689410][ T37] usb 1-1: USB disconnect, device number 29 [ 352.710327][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 352.710370][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 352.711146][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 352.777065][ T32] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 352.796545][ T37] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 352.804828][T11815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.865843][ T32] usb 4-1: USB disconnect, device number 29 [ 352.875653][ T37] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 352.898256][ T37] quatech2 1-1:0.51: device disconnected [ 353.362907][ T5914] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 353.478894][T11838] netlink: 'syz.0.2562': attribute type 83 has an invalid length. [ 353.509076][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 353.511849][ T5914] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 353.511877][ T5914] usb 2-1: config 0 has no interface number 0 [ 353.511925][ T5914] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 353.511953][ T5914] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 353.515142][ T5914] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 353.515174][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.515196][ T5914] usb 2-1: Product: syz [ 353.515211][ T5914] usb 2-1: Manufacturer: syz [ 353.515225][ T5914] usb 2-1: SerialNumber: syz [ 353.581914][ T5914] usb 2-1: config 0 descriptor?? [ 353.603498][T11823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.603647][T11823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.818606][T11823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.818718][T11823] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.819082][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 354.023544][ T5914] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 354.224530][ T5914] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 159 [ 354.454406][ T6027] usb 2-1: USB disconnect, device number 33 [ 354.531398][T11871] vxcan0: tx address claim with dest, not broadcast [ 355.089225][ T5896] kernel read not supported for file /video37 (pid: 5896 comm: kworker/0:5) [ 355.156759][T11892] netlink: 'syz.2.2586': attribute type 10 has an invalid length. [ 355.156782][T11892] netlink: 'syz.2.2586': attribute type 29 has an invalid length. [ 355.657803][ T6027] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 355.767586][ T5883] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 355.807515][ T6027] usb 2-1: Using ep0 maxpacket: 32 [ 355.809854][ T6027] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.809913][ T6027] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.809934][ T6027] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.809950][ T6027] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.809969][ T6027] usb 2-1: config 0 interface 0 has no altsetting 0 [ 355.809995][ T6027] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 355.810011][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.815014][ T6027] usb 2-1: config 0 descriptor?? [ 355.838688][ T5914] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 355.990674][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.990712][ T5883] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.992307][ T5883] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 355.992337][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 355.992358][ T5883] usb 1-1: SerialNumber: syz [ 356.055311][ T5914] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 356.055344][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.055365][ T5914] usb 3-1: Product: syz [ 356.055379][ T5914] usb 3-1: Manufacturer: syz [ 356.055396][ T5914] usb 3-1: SerialNumber: syz [ 356.321794][ T6027] corsair-cpro 0003:1B1C:0C10.0030: item fetching failed at offset 3/5 [ 356.322785][ T6027] corsair-cpro 0003:1B1C:0C10.0030: probe with driver corsair-cpro failed with error -22 [ 356.387752][ T5883] usb 1-1: skipping empty audio interface (v1) [ 356.471895][ T5914] rtl8150 3-1:1.0: couldn't reset the device [ 356.472228][ T5914] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 356.520057][ T5914] usb 3-1: USB disconnect, device number 33 [ 356.598631][ T5896] usb 2-1: USB disconnect, device number 34 [ 356.708955][ T5883] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 356.736742][ T5883] usb 1-1: USB disconnect, device number 30 [ 356.787223][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.007248][T11922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.087781][ T5914] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 357.240425][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 357.240469][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 357.240494][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.281424][ T5914] usb 4-1: config 0 descriptor?? [ 358.120221][ T5914] video4linux radio48: keene_cmd_main failed (-71) [ 358.120248][ T5914] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 358.144650][ T5914] usb 4-1: USB disconnect, device number 30 [ 358.330127][ T6027] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 358.479167][ T6027] usb 1-1: Using ep0 maxpacket: 8 [ 358.492633][ T6027] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.492666][ T6027] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.492693][ T6027] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.492717][ T6027] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.492760][ T6027] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.492783][ T6027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.651791][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 358.781799][ T6027] usb 1-1: GET_CAPABILITIES returned 0 [ 358.781834][ T6027] usbtmc 1-1:16.0: can't read capabilities [ 359.019115][ T6027] usb 1-1: USB disconnect, device number 31 [ 359.547528][ T6027] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 359.699254][ T6027] usb 4-1: Using ep0 maxpacket: 8 [ 359.711950][ T6027] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 359.711982][ T6027] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.712003][ T6027] usb 4-1: Product: syz [ 359.712018][ T6027] usb 4-1: Manufacturer: syz [ 359.712034][ T6027] usb 4-1: SerialNumber: syz [ 359.769503][ T6027] usb 4-1: config 0 descriptor?? [ 359.799689][ T6027] gspca_main: se401-2.14.0 probing 047d:5003 [ 360.367543][ T5883] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 360.379854][ T5833] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 360.442894][ T6027] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 360.456119][ T5914] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 360.506426][ T6027] usb 4-1: USB disconnect, device number 31 [ 360.557537][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 360.566368][ T5883] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 360.566391][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.584810][ T5833] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 360.584840][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 360.584862][ T5833] usb 2-1: Product: syz [ 360.643061][ T5914] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 360.643092][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.667694][ T5833] usb 2-1: config 0 descriptor?? [ 360.669012][ T5883] usb 3-1: config 0 descriptor?? [ 360.745010][ T5914] usb 1-1: config 0 descriptor?? [ 360.766415][ T5883] gspca_main: sunplus-2.14.0 probing 041e:400b [ 360.778310][ T5914] cp210x 1-1:0.0: cp210x converter detected [ 360.780675][ T5833] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 360.806910][ T5833] usb 2-1: Detected FT232H [ 360.889998][ T5833] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 361.295872][ T5833] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 361.338050][ T5833] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 361.349390][ T5833] usb 2-1: USB disconnect, device number 35 [ 361.366784][ T5914] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 361.366840][ T5914] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 361.502551][ T5883] gspca_sunplus: reg_r err -71 [ 361.502649][ T5883] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 361.544777][ T5883] usb 3-1: USB disconnect, device number 34 [ 361.567312][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 361.593143][ T5914] usb 1-1: cp210x converter now attached to ttyUSB1 [ 361.605901][ T5833] ftdi_sio 2-1:0.0: device disconnected [ 361.617778][ T5914] usb 1-1: USB disconnect, device number 32 [ 361.702573][ T5914] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 361.704202][ T5914] cp210x 1-1:0.0: device disconnected [ 362.667561][ T5814] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 362.819954][ T5814] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.819982][ T5814] usb 1-1: config 0 has no interface number 0 [ 362.824293][ T5814] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 362.824326][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.824347][ T5814] usb 1-1: Product: syz [ 362.824362][ T5814] usb 1-1: Manufacturer: syz [ 362.824376][ T5814] usb 1-1: SerialNumber: syz [ 362.842759][ T5814] usb 1-1: config 0 descriptor?? [ 362.915614][ T38] audit: type=1326 audit(1776855905.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.3.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8c45c819 code=0x7fc00000 [ 363.206812][ T5814] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 363.270093][ T5814] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.270447][ T5814] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 363.270499][ T5814] usb 1-1: media controller created [ 363.395512][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 363.436484][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.469117][ T6027] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 363.629865][ T6027] usb 2-1: Using ep0 maxpacket: 8 [ 363.644968][ T6027] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 363.645014][ T6027] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 363.645042][ T6027] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.645073][ T6027] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.645155][ T6027] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.645180][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.103044][ T6027] usb 2-1: GET_CAPABILITIES returned 0 [ 364.103102][ T6027] usbtmc 2-1:16.0: can't read capabilities [ 364.346227][ T5896] usb 2-1: USB disconnect, device number 36 [ 364.608404][ T5814] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 364.757188][ T5814] usb 1-1: USB disconnect, device number 33 [ 365.170711][T12100] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2677'. [ 365.459657][ T5814] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 365.613180][ T5814] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 365.613211][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.653021][ T5814] usb 2-1: config 0 descriptor?? [ 365.700181][ T5814] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 366.390290][T12135] loop2: detected capacity change from 0 to 7 [ 366.520727][ T5814] usb 2-1: USB disconnect, device number 37 [ 366.536255][T12135] Dev loop2: unable to read RDB block 7 [ 366.536300][T12135] loop2: unable to read partition table [ 366.536544][T12135] loop2: partition table beyond EOD, truncated [ 366.536587][T12135] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 366.727976][ T5833] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 366.887474][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 366.890935][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.890971][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.891011][ T5833] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 366.891036][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.959794][ T5833] usb 1-1: config 0 descriptor?? [ 367.449312][ T5833] koneplus 0003:1E7D:2D51.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 367.988568][ T5833] usb 1-1: USB disconnect, device number 34 [ 368.077572][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 368.687584][ T6027] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 368.707732][ T5896] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 368.839882][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 368.839922][ T6027] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.839967][ T6027] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 368.839992][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.874519][ T6027] usb 3-1: config 0 descriptor?? [ 368.921533][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.921563][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 368.952908][ T5896] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 368.952931][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.952945][ T5896] usb 4-1: Product: syz [ 368.952956][ T5896] usb 4-1: Manufacturer: syz [ 368.952967][ T5896] usb 4-1: SerialNumber: syz [ 369.003420][ T5896] usb 4-1: config 0 descriptor?? [ 369.057295][ T5896] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 369.155886][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.166296][ T5896] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 369.167218][ T5896] usb 4-1: media controller created [ 369.183940][ T945] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 369.288028][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.323370][ T6027] hid_parser_main: 354 callbacks suppressed [ 369.323388][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323410][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323429][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323448][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323466][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323485][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323503][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323522][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323540][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.323558][ T6027] steelseries 0003:1038:12C2.0032: unknown main item tag 0x0 [ 369.327089][ T6027] steelseries 0003:1038:12C2.0032: ignoring exceeding usage max [ 369.327594][ T945] usb 2-1: Using ep0 maxpacket: 16 [ 369.379161][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.379251][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.379354][ T945] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 369.379412][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.390615][ T6027] steelseries 0003:1038:12C2.0032: unexpected long global item [ 369.408838][ T6027] steelseries 0003:1038:12C2.0032: probe with driver steelseries failed with error -22 [ 369.487237][ T945] usb 2-1: config 0 descriptor?? [ 369.548427][ T6027] usb 3-1: USB disconnect, device number 35 [ 369.604502][ T5896] DVB: Unable to find symbol tda10046_attach() [ 369.604514][ T5896] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 369.604525][ T5896] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 369.963637][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 370.015855][ T5896] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 370.018027][ T945] konepure 0003:1E7D:2DB4.0033: item fetching failed at offset 2/4 [ 370.018841][ T945] konepure 0003:1E7D:2DB4.0033: parse failed [ 370.018922][ T945] konepure 0003:1E7D:2DB4.0033: probe with driver konepure failed with error -22 [ 370.068863][ T5896] usb 4-1: USB disconnect, device number 32 [ 370.205539][ T6027] usb 2-1: USB disconnect, device number 38 [ 370.770879][ T5835] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 370.770925][ T5835] Bluetooth: hci3: Dropping invalid advertising data [ 370.770949][ T5835] Bluetooth: hci3: Malformed LE Event: 0x02 [ 371.571018][T12238] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 371.571066][T12238] netlink: 'syz.3.2743': attribute type 2 has an invalid length. [ 371.571081][T12238] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 371.571094][T12238] netlink: 'syz.3.2743': attribute type 3 has an invalid length. [ 371.571107][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 372.037244][T12254] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2749'. [ 372.318376][ T945] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 372.540865][ T945] usb 3-1: Using ep0 maxpacket: 16 [ 372.544396][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.544430][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.544470][ T945] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 372.544494][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.600028][ T945] usb 3-1: config 0 descriptor?? [ 372.789950][ T5896] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 372.841270][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.842412][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.947617][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 372.950549][ T5896] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 372.950643][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.018162][ T5896] usb 4-1: config 0 descriptor?? [ 373.137721][ T5896] as10x_usb: device has been detected [ 373.143282][ T5896] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 373.217915][ T945] hid-multitouch 0003:1FD2:6007.0034: item fetching failed at offset 4/5 [ 373.218941][ T945] hid-multitouch 0003:1FD2:6007.0034: probe with driver hid-multitouch failed with error -22 [ 373.254339][ T5814] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 373.287479][ T945] usb 3-1: USB disconnect, device number 36 [ 373.434077][ T5814] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 373.434110][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.434131][ T5814] usb 2-1: Product: syz [ 373.434147][ T5814] usb 2-1: Manufacturer: syz [ 373.434163][ T5814] usb 2-1: SerialNumber: syz [ 373.599660][ T5896] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 374.009856][ T5814] rtl8150 2-1:1.0: couldn't reset the device [ 374.010257][ T5814] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 374.262565][ T5814] usb 2-1: USB disconnect, device number 39 [ 374.774730][ T5896] as10x_usb: error during firmware upload part1 [ 374.787027][ T5896] Registered device nBox DVB-T Dongle [ 374.804297][ T5896] usb 4-1: USB disconnect, device number 33 [ 375.274149][ T5896] Unregistered device nBox DVB-T Dongle [ 375.292042][ T5896] as10x_usb: device has been disconnected [ 375.610300][ T5896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 375.842893][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.909801][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.911013][ T5896] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.911041][ T5896] usb 4-1: config 0 has no interface number 0 [ 375.914422][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.920035][ T5896] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 375.920078][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.920139][ T5896] usb 4-1: Product: syz [ 375.920183][ T5896] usb 4-1: Manufacturer: syz [ 375.920220][ T5896] usb 4-1: SerialNumber: syz [ 375.987741][ T5896] usb 4-1: config 0 descriptor?? [ 376.021841][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.024785][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.278797][ T5896] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 376.339549][ T5896] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 376.339801][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 376.339837][ T5896] usb 4-1: media controller created [ 376.395853][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.471394][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.598124][ T5896] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 376.751036][ T5896] usb 4-1: USB disconnect, device number 34 [ 377.260829][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.398699][ T5883] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 377.557714][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 377.557859][ T5833] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 377.560570][ T5883] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.560607][ T5883] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 377.560633][ T5883] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 377.560650][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 377.561890][ T5883] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.561919][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 377.561934][ T5883] usb 3-1: SerialNumber: syz [ 377.583190][T12302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.583480][T12302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.689414][ T5883] hub 3-1:1.0: bad descriptor, ignoring hub [ 377.689453][ T5883] hub 3-1:1.0: probe with driver hub failed with error -5 [ 377.775745][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.775774][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.777240][ T5833] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.777267][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.808706][T12302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.808895][T12302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 377.825729][T12310] netlink: 'syz.1.2775': attribute type 4 has an invalid length. [ 377.825774][T12310] netlink: 'syz.1.2775': attribute type 1 has an invalid length. [ 377.825810][T12310] netlink: 'syz.1.2775': attribute type 3 has an invalid length. [ 377.825845][T12310] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2775'. [ 377.825882][T12310] NCSI netlink: No device for ifindex 830110067 [ 377.875135][ T5833] usb 4-1: SerialNumber: syz [ 377.915277][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.175603][ T5835] Bluetooth: hci3: command tx timeout [ 378.193133][ T5833] usb 4-1: 0:2 : does not exist [ 378.251597][ T5833] usb 4-1: USB disconnect, device number 35 [ 378.394628][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.451959][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.530582][T12319] binder: 12318:12319 ioctl c018620c 200000000040 returned -22 [ 378.589408][ T5883] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 378.648600][ T5883] usb 3-1: USB disconnect, device number 37 [ 378.666487][ T5883] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 378.731011][T12321] program syz.1.2780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.809659][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.809768][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.440061][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 379.677598][ T5559] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 379.824547][T12288] chnl_net:caif_netlink_parms(): no params data found [ 379.841103][ T5559] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.841135][ T5559] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 379.843569][ T5559] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.843601][ T5559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.843621][ T5559] usb 3-1: Product: syz [ 379.843631][ T5559] usb 3-1: Manufacturer: syz [ 379.843641][ T5559] usb 3-1: SerialNumber: syz [ 380.164335][T12336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.164937][T12336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.224442][ T5559] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 380.238052][ T5835] Bluetooth: hci3: command tx timeout [ 380.256972][ T5559] usb 3-1: USB disconnect, device number 38 [ 380.533024][T12350] netlink: 'syz.3.2791': attribute type 2 has an invalid length. [ 380.533048][T12350] netlink: 'syz.3.2791': attribute type 4 has an invalid length. [ 380.793271][ T5559] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 380.939170][ T5559] usb 3-1: Using ep0 maxpacket: 8 [ 380.941746][ T5559] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 380.941775][ T5559] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 380.941825][ T5559] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.941848][ T5559] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.941874][ T5559] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 380.941899][ T5559] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.941941][ T5559] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.941963][ T5559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.172918][ T5559] usb 3-1: usb_control_msg returned -71 [ 381.172979][ T5559] usbtmc 3-1:16.0: can't read capabilities [ 381.280808][ T12] bridge_slave_1: left allmulticast mode [ 381.280953][ T12] bridge_slave_1: left promiscuous mode [ 381.317842][ T5559] usb 3-1: USB disconnect, device number 39 [ 381.322343][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.429684][ T12] bridge_slave_0: left promiscuous mode [ 381.449909][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.327648][ T5835] Bluetooth: hci3: command tx timeout [ 383.108337][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.168382][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.190349][ T12] bond0 (unregistering): Released all slaves [ 383.356007][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 383.433125][T12288] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.434815][T12288] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.435505][T12288] bridge_slave_0: entered allmulticast mode [ 383.441665][ T5835] Bluetooth: hci0: link tx timeout [ 383.441710][ T5835] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 383.482126][T12288] bridge_slave_0: entered promiscuous mode [ 383.516796][T12288] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.517166][T12288] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.532008][T12288] bridge_slave_1: entered allmulticast mode [ 383.536134][T12288] bridge_slave_1: entered promiscuous mode [ 383.730572][T12288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.785003][T12288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.986708][T12395] pim6reg: entered allmulticast mode [ 384.059390][T12401] pim6reg: left allmulticast mode [ 384.397671][ T5831] Bluetooth: hci3: command tx timeout [ 384.532062][T12288] team0: Port device team_slave_0 added [ 384.851902][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2810'. [ 384.915092][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2810'. [ 385.082693][T12288] team0: Port device team_slave_1 added [ 385.518298][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 385.672200][T12432] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2817'. [ 385.672222][T12432] netlink: 'syz.1.2817': attribute type 2 has an invalid length. [ 385.707737][ T10] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 385.782542][T12288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.782559][T12288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.782589][T12288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.866165][ T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 385.866192][ T10] usb 3-1: config 150 has no interface number 0 [ 385.866231][ T10] usb 3-1: config 150 interface 204 has no altsetting 0 [ 385.907308][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 385.907457][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.907478][ T10] usb 3-1: Product: syz [ 385.907491][ T10] usb 3-1: Manufacturer: syz [ 385.907505][ T10] usb 3-1: SerialNumber: syz [ 386.294606][T12435] serio: Serial port ptm0 [ 386.518041][ T10] xr_serial 3-1:150.204: xr_serial converter detected [ 386.759133][ T5833] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 386.947568][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 386.976934][ T5833] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.976964][ T5833] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.976988][ T5833] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.977012][ T5833] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.977220][ T5833] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.977246][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.073667][ T10] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 387.073729][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 387.113113][ T10] usb 3-1: USB disconnect, device number 40 [ 387.165856][T12288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.169774][ T10] xr_serial 3-1:150.204: device disconnected [ 387.170560][T12288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.170597][T12288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.369897][ T5833] usb 4-1: GET_CAPABILITIES returned 0 [ 387.369947][ T5833] usbtmc 4-1:16.0: can't read capabilities [ 387.584690][ T37] usb 4-1: USB disconnect, device number 36 [ 388.706339][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 389.270872][T12494] nbd2: detected capacity change from 0 to 127 [ 389.283651][ T5915] block nbd2: Send control failed (result -32) [ 389.284206][ T5915] block nbd2: Request send failed, requeueing [ 389.285769][ T5835] block nbd2: Receive control failed (result -32) [ 389.390497][ T33] block nbd2: Dead connection, failed to find a fallback [ 389.390524][ T33] block nbd2: shutting down sockets [ 389.390542][ T33] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.390571][ T33] buffer_io_error: 138 callbacks suppressed [ 389.390582][ T33] Buffer I/O error on dev nbd2, logical block 0, async page read [ 389.463082][ T5915] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.463118][ T5915] Buffer I/O error on dev nbd2, logical block 1, async page read [ 389.463290][ T5915] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.463315][ T5915] Buffer I/O error on dev nbd2, logical block 2, async page read [ 389.463466][ T5915] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.463491][ T5915] Buffer I/O error on dev nbd2, logical block 3, async page read [ 389.463717][ T5915] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.463742][ T5915] Buffer I/O error on dev nbd2, logical block 0, async page read [ 389.463895][ T5915] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.463919][ T5915] Buffer I/O error on dev nbd2, logical block 1, async page read [ 389.464153][ T5915] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.464178][ T5915] Buffer I/O error on dev nbd2, logical block 2, async page read [ 389.464329][ T5915] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.464353][ T5915] Buffer I/O error on dev nbd2, logical block 3, async page read [ 389.466500][ T5915] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.466531][ T5915] Buffer I/O error on dev nbd2, logical block 0, async page read [ 389.466795][ T5915] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.466821][ T5915] Buffer I/O error on dev nbd2, logical block 1, async page read [ 389.628917][ T5915] ldm_validate_partition_table(): Disk read failed. [ 389.636343][T12288] hsr_slave_0: entered promiscuous mode [ 389.680551][T12288] hsr_slave_1: entered promiscuous mode [ 389.691394][T12288] debugfs: 'hsr0' already exists in 'hsr' [ 389.691494][T12288] Cannot create hsr debugfs directory [ 389.744381][ T5915] Dev nbd2: unable to read RDB block 0 [ 389.766468][ T5915] nbd2: unable to read partition table [ 389.798413][ T5915] ldm_validate_partition_table(): Disk read failed. [ 389.800371][ T5915] Dev nbd2: unable to read RDB block 0 [ 389.802894][ T5915] nbd2: unable to read partition table [ 390.238184][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 390.359066][ T12] hsr_slave_0: left promiscuous mode [ 390.397956][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.398275][ T12] hsr_slave_1: left promiscuous mode [ 390.416966][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 390.416994][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.417013][ T10] usb 2-1: Product: syz [ 390.417026][ T10] usb 2-1: Manufacturer: syz [ 390.417040][ T10] usb 2-1: SerialNumber: syz [ 390.447667][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.447909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.528521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.528552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.265665][ T12] veth1_macvtap: left promiscuous mode [ 391.319429][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 391.332930][ T12] veth0_macvtap: left promiscuous mode [ 391.353105][ T12] veth1_vlan: left promiscuous mode [ 391.392512][ T10] usb 2-1: USB disconnect, device number 40 [ 391.392896][ T12] veth0_vlan: left promiscuous mode [ 391.994053][T12533] netlink: 'syz.1.2851': attribute type 58 has an invalid length. [ 392.478932][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.538320][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.807638][T12526] veth1_virt_wifi: entered allmulticast mode [ 392.852014][T12526] veth1_virt_wifi: left allmulticast mode [ 395.472739][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 395.528966][ T5814] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 395.579948][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 395.713860][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.713896][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.729528][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 395.754885][ T5814] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 395.754916][ T5814] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 395.754938][ T5814] usb 2-1: Manufacturer: syz [ 395.756629][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.756662][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.756685][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 395.756720][ T5914] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 395.756743][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.842768][ T12] IPVS: stop unused estimator thread 0... [ 395.861246][ T5914] usb 3-1: config 0 descriptor?? [ 395.890774][ T5814] usb 2-1: config 0 descriptor?? [ 396.324862][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.371301][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.409494][ T5914] hid (null): nested delimiters [ 396.555762][ T5814] uclogic 0003:256C:006D.0035: failed retrieving Huion firmware version: -71 [ 396.555827][ T5814] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 396.555940][ T5814] uclogic 0003:256C:006D.0035: probe with driver uclogic failed with error -71 [ 396.635751][ T5914] usb 3-1: USB disconnect, device number 41 [ 396.718068][ T5814] usb 2-1: USB disconnect, device number 41 [ 396.787598][ T5883] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 396.843495][T12288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.884166][T12288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.896247][T12288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.932832][T12288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.934470][T12288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.996737][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 397.001407][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.001483][ T5883] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 397.001626][ T5883] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 397.001762][ T5883] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 397.001854][ T5883] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 397.001934][ T5883] usb 4-1: config 1 interface 1 has no altsetting 0 [ 397.138116][T12288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.187817][ T5883] usb 4-1: string descriptor 0 read error: -22 [ 397.187965][ T5883] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 397.187991][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.195972][T12288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.610502][T12288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.713993][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 398.173584][ T5883] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 398.186901][ T5883] usb 4-1: Warning! Unlikely big volume step count (=31861), linear volume or wrong cval->res? [ 398.186926][ T5883] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -31861/0/1 [ 398.608008][ T5883] usb 4-1: USB disconnect, device number 37 [ 398.794564][T12288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.022594][T12288] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.211353][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.228986][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.349244][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.349453][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.447519][ T5883] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 399.627517][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 399.630712][ T5883] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.630744][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.630787][ T5883] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.630811][ T5883] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.630854][ T5883] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.630877][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.949578][ T5883] usb 3-1: GET_CAPABILITIES returned 0 [ 399.949619][ T5883] usbtmc 3-1:16.0: can't read capabilities [ 400.183452][ T5883] usb 3-1: USB disconnect, device number 42 [ 400.321121][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 400.325150][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 400.822764][T12687] hugetlbfs: syz.1.2896 (12687): Using mlock ulimits for SHM_HUGETLB is obsolete [ 401.885633][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.935763][T12288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.955280][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.958727][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.000844][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.023406][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.040595][T12718] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2904'. [ 402.407547][ T5914] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 402.568062][ T5914] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 402.568093][ T5914] usb 2-1: config 0 has no interface number 0 [ 402.568143][ T5914] usb 2-1: config 0 interface 41 has no altsetting 0 [ 402.573947][ T5914] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 402.573980][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.574018][ T5914] usb 2-1: Product: syz [ 402.574034][ T5914] usb 2-1: Manufacturer: syz [ 402.574050][ T5914] usb 2-1: SerialNumber: syz [ 402.641812][ T5914] usb 2-1: config 0 descriptor?? [ 403.287095][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.303773][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.323043][ T5914] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 403.363148][ T5914] usb 2-1: USB disconnect, device number 42 [ 404.115605][T12288] veth0_vlan: entered promiscuous mode [ 404.196887][T12288] veth1_vlan: entered promiscuous mode [ 404.237853][ T5835] Bluetooth: hci0: command tx timeout [ 404.503031][T12713] chnl_net:caif_netlink_parms(): no params data found [ 404.528852][T12288] veth0_macvtap: entered promiscuous mode [ 404.687108][T12288] veth1_macvtap: entered promiscuous mode [ 404.875077][T12773] tmpfs: Invalid gid '0x00000000ffffffff' [ 405.216475][T12783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2918'. [ 405.375649][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.376056][T12713] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.376399][T12713] bridge_slave_0: entered allmulticast mode [ 405.405422][T12713] bridge_slave_0: entered promiscuous mode [ 405.448993][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.449392][T12713] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.449731][T12713] bridge_slave_1: entered allmulticast mode [ 405.474760][T12713] bridge_slave_1: entered promiscuous mode [ 405.661654][T12288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.882938][T12713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.916633][T12713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.940665][T12288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.304217][T12713] team0: Port device team_slave_0 added [ 406.317569][ T5835] Bluetooth: hci0: command tx timeout [ 406.370150][T12713] team0: Port device team_slave_1 added [ 406.373976][ T1216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.463627][ T1216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.465619][ T1216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.465698][ T1216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.824920][T12713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.824937][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.824965][T12713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.876258][T12713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.876276][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.876304][T12713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.671771][T12713] hsr_slave_0: entered promiscuous mode [ 407.694627][T12713] hsr_slave_1: entered promiscuous mode [ 407.711298][T12713] debugfs: 'hsr0' already exists in 'hsr' [ 407.711327][T12713] Cannot create hsr debugfs directory [ 408.397716][ T5831] Bluetooth: hci0: command tx timeout [ 408.727122][ T1562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.727144][ T1562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.023042][ T37] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 409.182036][ T37] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 409.182064][ T37] usb 2-1: config 0 has no interface number 0 [ 409.182090][ T37] usb 2-1: config 0 interface 2 has no altsetting 0 [ 409.185173][ T37] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 409.185206][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.185228][ T37] usb 2-1: Product: syz [ 409.185243][ T37] usb 2-1: Manufacturer: syz [ 409.185259][ T37] usb 2-1: SerialNumber: syz [ 409.253991][ T37] usb 2-1: config 0 descriptor?? [ 409.303497][ T37] hub 2-1:0.2: bad descriptor, ignoring hub [ 409.303538][ T37] hub 2-1:0.2: probe with driver hub failed with error -5 [ 409.306432][ T37] f81232 2-1:0.2: f81534a converter detected [ 409.485436][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.485458][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.508331][ T37] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 409.508361][ T37] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 409.590316][ T37] usb 2-1: USB disconnect, device number 43 [ 409.681913][ T37] f81232 2-1:0.2: device disconnected [ 410.130876][ T37] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 410.321669][ T37] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 410.321698][ T37] usb 2-1: config 0 has no interface number 0 [ 410.321731][ T37] usb 2-1: config 0 interface 2 has no altsetting 0 [ 410.327569][ T37] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 410.327602][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.327622][ T37] usb 2-1: Product: syz [ 410.327638][ T37] usb 2-1: Manufacturer: syz [ 410.327653][ T37] usb 2-1: SerialNumber: syz [ 410.434533][ T37] usb 2-1: config 0 descriptor?? [ 410.448667][ T37] hub 2-1:0.2: bad descriptor, ignoring hub [ 410.448708][ T37] hub 2-1:0.2: probe with driver hub failed with error -5 [ 410.450061][ T37] f81232 2-1:0.2: f81534a converter detected [ 410.477604][ T5831] Bluetooth: hci0: command tx timeout [ 410.557669][ T5896] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 410.674309][ T37] usb 2-1: f81534a converter now attached to ttyUSB0 [ 410.726147][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 410.733823][ T5896] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 410.734304][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.734337][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 410.734367][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 410.734393][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.812033][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 410.812056][ T5896] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 410.812070][ T5896] usb 3-1: Manufacturer: syz [ 410.896196][ T5896] usb 3-1: config 0 descriptor?? [ 411.224289][ T945] usb 2-1: USB disconnect, device number 44 [ 411.320448][ T945] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 411.322804][ T945] f81232 2-1:0.2: device disconnected [ 411.489250][ T5896] rc_core: IR keymap rc-hauppauge not found [ 411.489271][ T5896] Registered IR keymap rc-empty [ 411.492426][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.522851][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.540296][ T5896] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 411.573896][ T5896] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 411.591201][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.614954][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.633986][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.657591][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.680226][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.697984][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.720152][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.737948][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.759451][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.779899][ T5896] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 411.868833][ T5896] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 411.868859][ T5896] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 411.925714][ T5896] usb 3-1: USB disconnect, device number 43 [ 412.133053][T12713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.175851][T12713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.177306][T12713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.230726][T12713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.232054][T12713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.338399][T12713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.342208][T12713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.376484][T12713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.378278][ T945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 412.542769][ T945] usb 5-1: Using ep0 maxpacket: 32 [ 412.545506][ T945] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 412.545537][ T945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.582659][ T945] usb 5-1: config 0 descriptor?? [ 412.812728][ T945] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 412.930592][ T945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 412.936893][ T945] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 412.936950][ T945] usb 5-1: media controller created [ 413.015691][ T945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.425785][T12713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.499340][ T945] az6027: usb out operation failed. (-71) [ 413.620969][ T945] az6027: usb out operation failed. (-71) [ 413.620988][ T945] stb0899_attach: Driver disabled by Kconfig [ 413.620997][ T945] az6027: no front-end attached [ 413.620997][ T945] [ 413.621383][ T945] az6027: usb out operation failed. (-71) [ 413.621397][ T945] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 413.687000][ T945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 413.942884][ T945] dvb-usb: schedule remote query interval to 400 msecs. [ 413.942910][ T945] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 414.009469][ T945] usb 5-1: USB disconnect, device number 2 [ 414.253740][T12713] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.496244][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.496568][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.609766][ T5883] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 414.950508][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.977789][ T945] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 414.981357][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.104455][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 415.121022][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 415.121240][ T5883] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 415.121266][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.204177][ T5883] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 415.204245][ T5883] usb 2-1: MIDIStreaming interface descriptor not found [ 415.838853][ T5883] usb 2-1: USB disconnect, device number 45 [ 416.615435][T12934] loop6: detected capacity change from 0 to 7 [ 416.785505][ C0] blk_print_req_error: 138 callbacks suppressed [ 416.785529][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.785560][ C0] buffer_io_error: 138 callbacks suppressed [ 416.785584][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 416.866643][T12713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.086723][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.086763][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.089282][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.089370][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.099530][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.099642][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.100662][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.100738][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.185837][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.185875][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.198041][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.198076][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.347126][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.347169][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.414321][T12934] ldm_validate_partition_table(): Disk read failed. [ 417.424584][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.424679][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.447084][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 417.447123][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.504982][T12934] Dev loop6: unable to read RDB block 0 [ 417.506045][T12934] loop6: unable to read partition table [ 417.506289][T12934] loop6: partition table beyond EOD, truncated [ 417.506330][T12934] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 417.915122][T12713] veth0_vlan: entered promiscuous mode [ 417.961219][T12713] veth1_vlan: entered promiscuous mode [ 418.058180][ T32] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 418.067545][T12839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 418.104266][T12713] veth0_macvtap: entered promiscuous mode [ 418.253837][T12713] veth1_macvtap: entered promiscuous mode [ 418.274374][T12839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 418.274410][T12839] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 418.274438][T12839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 418.292349][T12839] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 418.292438][T12839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.292493][T12839] usb 5-1: Product: syz [ 418.292535][T12839] usb 5-1: Manufacturer: syz [ 418.292577][T12839] usb 5-1: SerialNumber: syz [ 418.320219][ T32] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 418.320249][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.324508][T12839] usb 5-1: config 0 descriptor?? [ 418.381184][T12953] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 418.381395][T12953] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 418.407500][ T32] usb 3-1: config 0 descriptor?? [ 418.421183][T12839] usb 5-1: ucan: probing device on interface #0 [ 418.432314][ T32] cp210x 3-1:0.0: cp210x converter detected [ 418.546879][T12713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.748211][T12713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.836963][ T32] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 418.884262][ T32] usb 3-1: cp210x converter now attached to ttyUSB0 [ 418.971160][ T5559] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 418.988411][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.011546][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.015750][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.035710][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.036821][T12839] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 419.114589][ T5896] usb 3-1: USB disconnect, device number 44 [ 419.132898][ T5559] usb 2-1: Using ep0 maxpacket: 16 [ 419.148019][ T5559] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.148149][ T5559] usb 2-1: config 0 interface 0 has no altsetting 0 [ 419.148247][ T5559] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 419.148315][ T5559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.219731][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 419.256761][ T5559] usb 2-1: config 0 descriptor?? [ 419.270513][T12839] usb 5-1: USB disconnect, device number 3 [ 419.506145][ T5896] cp210x 3-1:0.0: device disconnected [ 419.727962][ T5559] mcp2221 0003:04D8:00DD.0037: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 420.509403][ T5559] usb 2-1: USB disconnect, device number 46 [ 421.312687][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.312709][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.618189][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.618210][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.556279][T13024] loop6: detected capacity change from 0 to 7 [ 422.636347][ C1] blk_print_req_error: 11 callbacks suppressed [ 422.636370][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.636400][ C1] buffer_io_error: 11 callbacks suppressed [ 422.636412][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 422.884807][ T5831] block nbd4: Receive control failed (result -107) [ 422.945656][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.945701][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.002429][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.002461][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.002775][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.002800][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.003031][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.003056][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.003302][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.003330][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.003659][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.003687][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.004857][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.004887][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.006952][T13024] ldm_validate_partition_table(): Disk read failed. [ 423.087503][ T37] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 423.092205][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.092238][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.133925][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 423.134027][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 423.145004][T13024] Dev loop6: unable to read RDB block 0 [ 423.153116][T13024] loop6: unable to read partition table [ 423.154911][T13024] loop6: partition table beyond EOD, truncated [ 423.154952][T13024] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 423.282015][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.282042][ T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.284527][ T37] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.284557][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.284576][ T37] usb 3-1: SerialNumber: syz [ 423.587177][ T37] usb 3-1: 0:2 : does not exist [ 423.755991][T13040] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2989'. [ 423.775509][T13040] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2989'. [ 423.855995][ T37] usb 3-1: USB disconnect, device number 45 [ 423.951647][T13042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.146482][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.216922][ T5915] block nbd4: shutting down sockets [ 425.373707][ T38] audit: type=1326 audit(1776855967.833:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13084 comm="syz.1.3006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc34006c819 code=0x0 [ 425.679212][ T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 425.827587][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 425.829952][ T37] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.829984][ T37] usb 6-1: config 0 interface 0 has no altsetting 0 [ 425.830028][ T37] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 425.830067][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.887175][ T37] usb 6-1: config 0 descriptor?? [ 426.310867][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 426.361783][ T37] hid_parser_main: 53 callbacks suppressed [ 426.361807][ T37] kye 0003:0458:0087.0038: unknown main item tag 0x0 [ 426.361838][ T37] kye 0003:0458:0087.0038: unknown main item tag 0x0 [ 426.361865][ T37] kye 0003:0458:0087.0038: unknown main item tag 0x0 [ 426.361891][ T37] kye 0003:0458:0087.0038: unknown main item tag 0x0 [ 426.361917][ T37] kye 0003:0458:0087.0038: unknown main item tag 0x0 [ 426.361990][ T37] kye 0003:0458:0087.0038: item fetching failed at offset 12/43 [ 426.366265][ T37] kye 0003:0458:0087.0038: parse failed [ 426.366361][ T37] kye 0003:0458:0087.0038: probe with driver kye failed with error -22 [ 426.457626][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 426.460074][ T32] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.460102][ T32] usb 5-1: config 0 has no interface number 0 [ 426.460149][ T32] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.460176][ T32] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.460216][ T32] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 426.460239][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.544956][ T32] usb 5-1: config 0 descriptor?? [ 426.600446][ T5814] usb 6-1: USB disconnect, device number 2 [ 427.202581][ T32] input: HID 28bd:0094 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0039/input/input38 [ 427.532450][ T32] uclogic 0003:28BD:0094.0039: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 427.588283][ T32] usb 5-1: USB disconnect, device number 4 [ 427.731022][T13139] fido_id[13139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 428.349483][T13161] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3034'. [ 428.582447][T13169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.091382][T13187] bridge0: port 3(veth1_macvtap) entered blocking state [ 429.091807][T13187] bridge0: port 3(veth1_macvtap) entered disabled state [ 429.092148][T13187] veth1_macvtap: entered allmulticast mode [ 429.312683][T13187] veth1_macvtap: left allmulticast mode [ 429.935331][T13212] kvm: kvm [13211]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000007) = 0x4 [ 430.899759][ T38] audit: type=1800 audit(1776855973.353:13): pid=13231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3064" name="file1" dev="tmpfs" ino=127 res=0 errno=0 [ 431.250460][T13234] netlink: 'syz.5.3065': attribute type 10 has an invalid length. [ 431.982262][T13234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.070517][T13234] team0: Port device netdevsim0 added [ 432.084806][T13237] netlink: 'syz.5.3065': attribute type 10 has an invalid length. [ 432.198272][T13248] netlink: 770 bytes leftover after parsing attributes in process `syz.1.3071'. [ 432.468363][T13253] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3074'. [ 432.468388][T13253] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 432.595624][T13256] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 432.864661][T13263] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 432.872974][T13263] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 433.327579][ T5883] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 433.480162][ T5883] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 433.480193][ T5883] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 433.480214][ T5883] usb 6-1: config 0 has no interface number 0 [ 433.480260][ T5883] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 433.480283][ T5883] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.480322][ T5883] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 433.480346][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.567696][ T5883] usb 6-1: config 0 descriptor?? [ 434.212243][ T5883] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input39 [ 434.279215][ T5883] input: failed to attach handler kbd to device input39, error: -5 [ 434.417446][ T5883] usb 6-1: USB disconnect, device number 3 [ 435.347494][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 435.524691][ T32] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 435.524723][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.555028][ T32] usb 5-1: config 0 descriptor?? [ 435.607952][ T32] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 435.816450][ T32] gp8psk: usb in 128 operation failed. [ 435.842058][ T32] gp8psk: usb in 137 operation failed. [ 435.842078][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 435.843082][ T32] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 435.843140][ T32] usb 5-1: media controller created [ 435.983086][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.170116][ T32] gp8psk_fe: Frontend attached [ 436.170175][ T32] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 436.247600][ T32] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 436.407483][ T5814] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 436.559120][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 436.561963][ T5814] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.561999][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0 [ 436.562032][ T5814] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 436.562058][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.621703][ T5814] usb 6-1: config 0 descriptor?? [ 436.832501][ T32] gp8psk: usb in 137 operation failed. [ 436.832522][ T32] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 436.832535][ T32] gp8psk: found Genpix USB device pID = 203 (hex) [ 436.916362][ T32] usb 5-1: USB disconnect, device number 5 [ 437.096870][ T5814] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 437.096912][ T5814] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 437.096936][ T5814] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 437.096959][ T5814] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 437.096981][ T5814] mcp2221 0003:04D8:00DD.003A: unknown main item tag 0x0 [ 437.142469][ T5814] mcp2221 0003:04D8:00DD.003A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 437.285260][ C0] usb 6-1: input irq status -75 received [ 437.613976][ T5814] usb 6-1: USB disconnect, device number 4 [ 437.819600][T13364] loop5: detected capacity change from 0 to 7 [ 437.954434][ T32] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 438.350292][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 438.499283][ T32] usb 5-1: Using ep0 maxpacket: 8 [ 438.506504][ T32] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 438.506864][ T32] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 438.506896][ T32] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.506922][ T32] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.506969][ T32] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.506993][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.673004][ T5883] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 438.736734][T13364] Dev loop5: unable to read RDB block 7 [ 438.736782][T13364] loop5: unable to read partition table [ 438.737028][T13364] loop5: partition table beyond EOD, truncated [ 438.759388][T13364] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 438.832714][ C0] blk_print_req_error: 11 callbacks suppressed [ 438.832739][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 438.832771][ C0] buffer_io_error: 11 callbacks suppressed [ 438.832784][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 438.901378][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 438.905325][ T5883] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 438.905450][ T5883] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.905476][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.905501][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.905527][ T5883] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.905848][ T5883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.905937][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.044972][ T32] usb 5-1: GET_CAPABILITIES returned 0 [ 439.045025][ T32] usbtmc 5-1:16.0: can't read capabilities [ 439.312010][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 439.326071][T13367] usbtmc 5-1:16.0: Unable to send data, error -71 [ 439.326423][ T5883] usb 2-1: GET_CAPABILITIES returned 0 [ 439.326466][ T5883] usbtmc 2-1:16.0: can't read capabilities [ 439.346748][ T5559] usb 5-1: USB disconnect, device number 6 [ 439.357746][ T5814] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 439.511829][ T5814] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 439.511863][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.533450][ T5814] usb 3-1: config 0 descriptor?? [ 439.555104][ T5814] cp210x 3-1:0.0: cp210x converter detected [ 439.584891][ T5883] usb 2-1: USB disconnect, device number 47 [ 439.956240][ T5814] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 439.975373][ T5814] usb 3-1: cp210x converter now attached to ttyUSB0 [ 440.167879][ T5883] usb 3-1: USB disconnect, device number 46 [ 440.202624][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 440.257240][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.261569][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.350234][ T5883] cp210x 3-1:0.0: device disconnected [ 441.160409][T13425] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3149'. [ 441.385019][T13430] serio: Serial port ttyS3 [ 442.109505][T13454] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 442.109533][T13454] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 442.109723][T13454] overlayfs: failed to set uuid (55/file0, err=-13); falling back to uuid=null. [ 442.616116][T13462] tipc: New replicast peer: 255.255.255.255 [ 442.634330][T13462] tipc: Enabled bearer , priority 10 [ 442.749501][ T37] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 442.904073][ T37] usb 2-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 442.904102][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.906114][ T37] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 442.906146][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 442.906168][ T37] usb 2-1: SerialNumber: syz [ 443.204265][ T37] usb 2-1: 0:2 : does not exist [ 443.204361][ T37] usb 2-1: unit 108 not found! [ 443.204379][ T37] usb 2-1: unit 219 not found! [ 443.204403][ T37] usb 2-1: unit 169 not found! [ 443.293779][ T37] usb 2-1: USB disconnect, device number 48 [ 443.410637][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.909090][T13495] loop5: detected capacity change from 0 to 7 [ 443.925419][ T37] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 444.097885][ T37] usb 6-1: Using ep0 maxpacket: 16 [ 444.105446][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.105480][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.105504][ T37] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.105547][ T37] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 444.105571][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.175672][ T37] usb 6-1: config 0 descriptor?? [ 444.622928][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.622965][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.622992][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.623019][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.623047][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.623081][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.623109][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.623135][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.623807][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.623840][ T37] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 444.870514][ T37] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003B/input/input40 [ 444.923822][T13495] Dev loop5: unable to read RDB block 7 [ 444.923868][T13495] loop5: unable to read partition table [ 444.924073][T13495] loop5: partition table beyond EOD, truncated [ 444.929440][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 444.929539][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 444.929922][T13495] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 444.976862][ T37] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 445.012798][ T37] usb 6-1: USB disconnect, device number 5 [ 445.159041][T13504] fido_id[13504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 445.427018][T13510] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3188'. [ 445.878142][ T945] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 446.050278][ T945] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.050319][ T945] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.050337][ T945] usb 3-1: config 2 interface 0 has no altsetting 0 [ 446.050363][ T945] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 446.050380][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.593678][ T945] elo 0003:04E7:0009.003C: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0 [ 446.724733][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3204'. [ 446.753720][ T5833] usb 3-1: USB disconnect, device number 47 [ 447.036462][T13551] misc userio: Can't change port type on an already running userio instance [ 447.197651][ T5814] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 447.377513][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 447.384799][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.384860][ T5814] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 447.384884][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.437256][ T5814] usb 6-1: config 0 descriptor?? [ 447.464582][ T5814] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 447.660009][ T5814] gspca_vc032x: reg_r err -71 [ 447.660112][ T5814] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 447.683878][T13559] overlay: filesystem on ./file0 is read-only [ 447.684073][ T5814] usb 6-1: USB disconnect, device number 6 [ 447.808085][T12974] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 447.988236][T12974] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 447.988268][T12974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.988289][T12974] usb 2-1: Product: syz [ 447.988305][T12974] usb 2-1: Manufacturer: syz [ 447.988320][T12974] usb 2-1: SerialNumber: syz [ 448.003071][T12974] usb 2-1: config 0 descriptor?? [ 448.042506][T12974] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 448.637757][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 448.834389][ T5814] usb 5-1: config 0 has no interfaces? [ 448.834418][ T5814] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.834435][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.869713][T12974] gspca_stk1135: reg_w 0x5 err -71 [ 448.870797][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.870813][T12974] gspca_stk1135: Sensor write failed [ 448.870849][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.870859][T12974] gspca_stk1135: Sensor write failed [ 448.870899][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.870906][T12974] gspca_stk1135: Sensor read failed [ 448.870932][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.870938][T12974] gspca_stk1135: Sensor read failed [ 448.870943][T12974] gspca_stk1135: Detected sensor type unknown (0x0) [ 448.870975][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.870982][T12974] gspca_stk1135: Sensor read failed [ 448.871007][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.871013][T12974] gspca_stk1135: Sensor read failed [ 448.871038][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.871045][T12974] gspca_stk1135: Sensor write failed [ 448.871070][T12974] gspca_stk1135: serial bus timeout: status=0x00 [ 448.871077][T12974] gspca_stk1135: Sensor write failed [ 448.871143][T12974] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 448.999759][T12974] usb 2-1: USB disconnect, device number 49 [ 449.024044][ T5814] usb 5-1: config 0 descriptor?? [ 449.139053][ T945] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 449.245661][ T37] usb 5-1: USB disconnect, device number 7 [ 449.287481][ T945] usb 3-1: Using ep0 maxpacket: 16 [ 449.299283][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.299308][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.299339][ T945] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 449.299357][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.344325][ T945] usb 3-1: config 0 descriptor?? [ 449.647674][T12974] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 449.774868][ T945] hid_parser_main: 10 callbacks suppressed [ 449.774894][ T945] konepure 0003:1E7D:2DB4.003D: unknown main item tag 0x0 [ 449.774926][ T945] konepure 0003:1E7D:2DB4.003D: unknown main item tag 0x0 [ 449.774951][ T945] konepure 0003:1E7D:2DB4.003D: item fetching failed at offset 2/4 [ 449.775765][ T945] konepure 0003:1E7D:2DB4.003D: parse failed [ 449.775874][ T945] konepure 0003:1E7D:2DB4.003D: probe with driver konepure failed with error -22 [ 449.817485][T12974] usb 6-1: Using ep0 maxpacket: 8 [ 449.835039][T12974] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.835074][T12974] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.835097][T12974] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.835126][T12974] usb 6-1: config 0 interface 0 has no altsetting 0 [ 449.835161][T12974] usb 6-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 449.835184][T12974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.915772][T12974] usb 6-1: config 0 descriptor?? [ 449.957676][ T37] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 450.038513][ T5814] usb 3-1: USB disconnect, device number 48 [ 450.127632][ T37] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 450.127666][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.127689][ T37] usb 2-1: Product: syz [ 450.127703][ T37] usb 2-1: Manufacturer: syz [ 450.127717][ T37] usb 2-1: SerialNumber: syz [ 450.173182][ T37] usb 2-1: config 0 descriptor?? [ 450.438652][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.438695][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.438723][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.438751][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.438778][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.438805][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.438832][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.438859][T12974] lg-g15 0003:046D:C22D.003E: unknown main item tag 0x0 [ 450.533810][T12974] lg-g15 0003:046D:C22D.003E: hidraw0: USB HID vff.fc Device [HID 046d:c22d] on usb-dummy_hcd.5-1/input0 [ 450.668634][ T37] usb 2-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 450.680461][T12974] usb 6-1: USB disconnect, device number 7 [ 450.870788][ T37] usb 2-1: failed to fetch extended address, random address set [ 450.940920][T13600] fido_id[13600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 450.967241][ T37] usb 2-1: USB disconnect, device number 50 [ 451.511894][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3236'. [ 452.267639][ T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 452.429855][ T32] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 452.429905][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.463560][ T32] usb 5-1: config 0 descriptor?? [ 452.474928][T13636] [ 452.474940][T13636] ====================================================== [ 452.474948][T13636] WARNING: possible circular locking dependency detected [ 452.474969][T13636] syzkaller #0 Tainted: G L [ 452.474981][T13636] ------------------------------------------------------ [ 452.474989][T13636] syz.1.3245/13636 is trying to acquire lock: [ 452.475002][T13636] ffff888027653868 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 452.475093][T13636] [ 452.475093][T13636] but task is already holding lock: [ 452.475100][T13636] ffff8880276532d8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 452.475156][T13636] [ 452.475156][T13636] which lock already depends on the new lock. [ 452.475156][T13636] [ 452.475169][T13636] [ 452.475169][T13636] the existing dependency chain (in reverse order) is: [ 452.475175][T13636] [ 452.475175][T13636] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 452.475199][T13636] blk_alloc_queue+0x54e/0x690 [ 452.475214][T13636] __blk_mq_alloc_disk+0x197/0x390 [ 452.475233][T13636] nbd_dev_add+0x499/0xb50 [ 452.475252][T13636] nbd_init+0x168/0x1f0 [ 452.475266][T13636] do_one_initcall+0x250/0x870 [ 452.475282][T13636] do_initcall_level+0x104/0x190 [ 452.475296][T13636] do_initcalls+0x59/0xa0 [ 452.475319][T13636] kernel_init_freeable+0x2a6/0x3e0 [ 452.475332][T13636] kernel_init+0x1d/0x1d0 [ 452.475354][T13636] ret_from_fork+0x514/0xb70 [ 452.475370][T13636] ret_from_fork_asm+0x1a/0x30 [ 452.475387][T13636] [ 452.475387][T13636] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 452.475406][T13636] fs_reclaim_acquire+0x71/0x100 [ 452.475429][T13636] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 452.475450][T13636] __alloc_skb+0x1d0/0x7d0 [ 452.475467][T13636] tcp_stream_alloc_skb+0x3f/0x5c0 [ 452.475490][T13636] tcp_sendmsg_locked+0x134b/0x5370 [ 452.475514][T13636] tcp_sendmsg+0x2f/0x50 [ 452.475537][T13636] sock_sendmsg_nosec+0xf9/0x150 [ 452.475550][T13636] sock_write_iter+0x308/0x410 [ 452.475574][T13636] vfs_write+0x629/0xba0 [ 452.475593][T13636] ksys_write+0x156/0x270 [ 452.475614][T13636] do_syscall_64+0x15f/0xf80 [ 452.475631][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.475646][T13636] [ 452.475646][T13636] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 452.475666][T13636] lock_sock_nested+0x41/0x130 [ 452.475678][T13636] inet_shutdown+0x6a/0x390 [ 452.475699][T13636] nbd_mark_nsock_dead+0x2e9/0x560 [ 452.475720][T13636] recv_work+0x1c4c/0x1d60 [ 452.475745][T13636] process_one_work+0x9a3/0x1710 [ 452.475759][T13636] worker_thread+0xba8/0x11e0 [ 452.475773][T13636] kthread+0x388/0x470 [ 452.475791][T13636] ret_from_fork+0x514/0xb70 [ 452.475805][T13636] ret_from_fork_asm+0x1a/0x30 [ 452.475823][T13636] [ 452.475823][T13636] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 452.475843][T13636] mutex_lock_nested+0x5a/0x1d0 [ 452.475864][T13636] nbd_queue_rq+0x37b/0x1100 [ 452.475884][T13636] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 452.475901][T13636] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 452.475920][T13636] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 452.475938][T13636] blk_mq_run_hw_queue+0x368/0x520 [ 452.475952][T13636] blk_mq_dispatch_list+0xd1f/0xe20 [ 452.475969][T13636] blk_mq_flush_plug_list+0x48d/0x570 [ 452.475985][T13636] __blk_flush_plug+0x3ed/0x4d0 [ 452.476001][T13636] __submit_bio+0x28d/0x580 [ 452.476018][T13636] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 452.476034][T13636] block_read_full_folio+0x599/0x830 [ 452.476069][T13636] filemap_read_folio+0x137/0x3b0 [ 452.476090][T13636] do_read_cache_folio+0x2bf/0x560 [ 452.476112][T13636] read_part_sector+0xb8/0x2b0 [ 452.476133][T13636] adfspart_check_ICS+0xb1/0x960 [ 452.476154][T13636] bdev_disk_changed+0x817/0x1770 [ 452.476175][T13636] blkdev_get_whole+0x2e5/0x480 [ 452.476200][T13636] bdev_open+0x31e/0xcc0 [ 452.476221][T13636] blkdev_open+0x485/0x620 [ 452.476245][T13636] do_dentry_open+0x83d/0x13e0 [ 452.476266][T13636] vfs_open+0x3b/0x350 [ 452.476291][T13636] path_openat+0x2e43/0x38a0 [ 452.476318][T13636] do_file_open+0x23e/0x4a0 [ 452.476339][T13636] do_sys_openat2+0x113/0x200 [ 452.476355][T13636] __x64_sys_openat+0x138/0x170 [ 452.476372][T13636] do_syscall_64+0x15f/0xf80 [ 452.476388][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.476404][T13636] [ 452.476404][T13636] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 452.476425][T13636] mutex_lock_nested+0x5a/0x1d0 [ 452.476446][T13636] nbd_queue_rq+0xc6/0x1100 [ 452.476466][T13636] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 452.476482][T13636] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 452.476501][T13636] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 452.476519][T13636] blk_mq_run_hw_queue+0x368/0x520 [ 452.476533][T13636] blk_mq_dispatch_list+0xd1f/0xe20 [ 452.476550][T13636] blk_mq_flush_plug_list+0x48d/0x570 [ 452.476568][T13636] __blk_flush_plug+0x3ed/0x4d0 [ 452.476584][T13636] __submit_bio+0x28d/0x580 [ 452.476601][T13636] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 452.476616][T13636] block_read_full_folio+0x599/0x830 [ 452.476631][T13636] filemap_read_folio+0x137/0x3b0 [ 452.476646][T13636] do_read_cache_folio+0x2bf/0x560 [ 452.476662][T13636] read_part_sector+0xb8/0x2b0 [ 452.476676][T13636] adfspart_check_ICS+0xb1/0x960 [ 452.476693][T13636] bdev_disk_changed+0x817/0x1770 [ 452.476708][T13636] blkdev_get_whole+0x2e5/0x480 [ 452.476724][T13636] bdev_open+0x31e/0xcc0 [ 452.476739][T13636] blkdev_open+0x485/0x620 [ 452.476757][T13636] do_dentry_open+0x83d/0x13e0 [ 452.476772][T13636] vfs_open+0x3b/0x350 [ 452.476786][T13636] path_openat+0x2e43/0x38a0 [ 452.476807][T13636] do_file_open+0x23e/0x4a0 [ 452.476826][T13636] do_sys_openat2+0x113/0x200 [ 452.476842][T13636] __x64_sys_openat+0x138/0x170 [ 452.476858][T13636] do_syscall_64+0x15f/0xf80 [ 452.476875][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.476889][T13636] [ 452.476889][T13636] -> #1 (set->srcu){.+.+}-{0:0}: [ 452.476909][T13636] __synchronize_srcu+0xca/0x300 [ 452.476927][T13636] elevator_switch+0x1e8/0x7a0 [ 452.476941][T13636] elevator_change+0x2cc/0x450 [ 452.476956][T13636] elevator_set_default+0x36c/0x430 [ 452.476971][T13636] blk_register_queue+0x3e9/0x4e0 [ 452.476989][T13636] __add_disk+0x677/0xd50 [ 452.477008][T13636] add_disk_fwnode+0xfb/0x480 [ 452.477027][T13636] nbd_dev_add+0x72c/0xb50 [ 452.477046][T13636] nbd_init+0x168/0x1f0 [ 452.477058][T13636] do_one_initcall+0x250/0x870 [ 452.477074][T13636] do_initcall_level+0x104/0x190 [ 452.477087][T13636] do_initcalls+0x59/0xa0 [ 452.477099][T13636] kernel_init_freeable+0x2a6/0x3e0 [ 452.477112][T13636] kernel_init+0x1d/0x1d0 [ 452.477132][T13636] ret_from_fork+0x514/0xb70 [ 452.477146][T13636] ret_from_fork_asm+0x1a/0x30 [ 452.477163][T13636] [ 452.477163][T13636] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 452.477183][T13636] __lock_acquire+0x15a5/0x2cf0 [ 452.477223][T13636] lock_acquire+0x106/0x350 [ 452.477248][T13636] mutex_lock_nested+0x5a/0x1d0 [ 452.477278][T13636] elevator_change+0x1b3/0x450 [ 452.477298][T13636] elevator_set_none+0xb5/0x140 [ 452.477325][T13636] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 452.477353][T13636] nbd_start_device+0x17f/0xb20 [ 452.477377][T13636] nbd_genl_connect+0x1651/0x1c80 [ 452.477402][T13636] genl_family_rcv_msg_doit+0x22a/0x330 [ 452.477434][T13636] genl_rcv_msg+0x61c/0x7a0 [ 452.477462][T13636] netlink_rcv_skb+0x232/0x4b0 [ 452.477484][T13636] genl_rcv+0x28/0x40 [ 452.477511][T13636] netlink_unicast+0x780/0x920 [ 452.477530][T13636] netlink_sendmsg+0x813/0xb40 [ 452.477554][T13636] sock_sendmsg_nosec+0x112/0x150 [ 452.477571][T13636] ____sys_sendmsg+0x55c/0x870 [ 452.477595][T13636] ___sys_sendmsg+0x2a5/0x360 [ 452.477620][T13636] __x64_sys_sendmsg+0x1c3/0x2a0 [ 452.477645][T13636] do_syscall_64+0x15f/0xf80 [ 452.477666][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.477685][T13636] [ 452.477685][T13636] other info that might help us debug this: [ 452.477685][T13636] [ 452.477693][T13636] Chain exists of: [ 452.477693][T13636] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 452.477693][T13636] [ 452.477733][T13636] Possible unsafe locking scenario: [ 452.477733][T13636] [ 452.477740][T13636] CPU0 CPU1 [ 452.477747][T13636] ---- ---- [ 452.477753][T13636] lock(&q->q_usage_counter(io)#52); [ 452.477772][T13636] lock(fs_reclaim); [ 452.477788][T13636] lock(&q->q_usage_counter(io)#52); [ 452.477809][T13636] lock(&q->elevator_lock); [ 452.477823][T13636] [ 452.477823][T13636] *** DEADLOCK *** [ 452.477823][T13636] [ 452.477828][T13636] 6 locks held by syz.1.3245/13636: [ 452.477841][T13636] #0: ffffffff8f812b80 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 452.477898][T13636] #1: ffffffff8f812998 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 452.477955][T13636] #2: ffff8880277e89b0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbf/0x1a80 [ 452.478012][T13636] #3: ffff8880277e88c8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xd2/0x1a80 [ 452.478068][T13636] #4: ffff8880276532d8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 452.478123][T13636] #5: ffff888027653310 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 452.478176][T13636] [ 452.478176][T13636] stack backtrace: [ 452.478209][T13636] CPU: 1 UID: 0 PID: 13636 Comm: syz.1.3245 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.478239][T13636] Tainted: [L]=SOFTLOCKUP [ 452.478246][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.478268][T13636] Call Trace: [ 452.478277][T13636] [ 452.478306][T13636] dump_stack_lvl+0xe8/0x150 [ 452.478338][T13636] print_circular_bug+0x2e1/0x300 [ 452.478374][T13636] check_noncircular+0x12e/0x150 [ 452.478410][T13636] __lock_acquire+0x15a5/0x2cf0 [ 452.478451][T13636] ? elevator_change+0x1b3/0x450 [ 452.478474][T13636] lock_acquire+0x106/0x350 [ 452.478501][T13636] ? elevator_change+0x1b3/0x450 [ 452.478527][T13636] ? elevator_change+0x1b3/0x450 [ 452.478552][T13636] ? elevator_change+0x1b3/0x450 [ 452.478574][T13636] mutex_lock_nested+0x5a/0x1d0 [ 452.478605][T13636] ? elevator_change+0x1b3/0x450 [ 452.478629][T13636] elevator_change+0x1b3/0x450 [ 452.478656][T13636] elevator_set_none+0xb5/0x140 [ 452.478679][T13636] ? __pfx_elevator_set_none+0x10/0x10 [ 452.478706][T13636] ? xa_load+0x1db/0x210 [ 452.478733][T13636] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 452.478763][T13636] ? irqentry_exit+0x218/0x730 [ 452.478795][T13636] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 452.478830][T13636] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 452.478866][T13636] ? nbd_start_device+0x174/0xb20 [ 452.478898][T13636] nbd_start_device+0x17f/0xb20 [ 452.478930][T13636] ? device_create_file+0xf4/0x1b0 [ 452.478962][T13636] nbd_genl_connect+0x1651/0x1c80 [ 452.478990][T13636] ? __pfx___nla_validate_parse+0x10/0x10 [ 452.479029][T13636] ? __pfx_nbd_genl_connect+0x10/0x10 [ 452.479061][T13636] ? rcu_is_watching+0x15/0xb0 [ 452.479106][T13636] ? __nla_parse+0x40/0x60 [ 452.479139][T13636] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 452.479174][T13636] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 452.479214][T13636] genl_family_rcv_msg_doit+0x22a/0x330 [ 452.479252][T13636] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 452.479292][T13636] ? lockdep_hardirqs_on+0x7a/0x110 [ 452.479324][T13636] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 452.479351][T13636] genl_rcv_msg+0x61c/0x7a0 [ 452.479389][T13636] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.479422][T13636] ? __pfx_nbd_genl_connect+0x10/0x10 [ 452.479456][T13636] netlink_rcv_skb+0x232/0x4b0 [ 452.479484][T13636] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.479520][T13636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.479553][T13636] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.479578][T13636] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.479606][T13636] genl_rcv+0x28/0x40 [ 452.479637][T13636] netlink_unicast+0x780/0x920 [ 452.479666][T13636] netlink_sendmsg+0x813/0xb40 [ 452.479698][T13636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.479726][T13636] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 452.479759][T13636] ? aa_sock_msg_perm+0x122/0x200 [ 452.479787][T13636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.479814][T13636] sock_sendmsg_nosec+0x112/0x150 [ 452.479835][T13636] ____sys_sendmsg+0x55c/0x870 [ 452.479867][T13636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.479900][T13636] ? import_iovec+0x73/0xa0 [ 452.479934][T13636] ___sys_sendmsg+0x2a5/0x360 [ 452.479961][T13636] ? __lock_acquire+0x6b5/0x2cf0 [ 452.479990][T13636] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.480022][T13636] ? futex_wait+0x2a2/0x390 [ 452.480057][T13636] ? __fget_files+0x2a/0x420 [ 452.480081][T13636] ? __fget_files+0x3a6/0x420 [ 452.480112][T13636] __x64_sys_sendmsg+0x1c3/0x2a0 [ 452.480142][T13636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.480176][T13636] ? rcu_is_watching+0x15/0xb0 [ 452.480211][T13636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.480233][T13636] do_syscall_64+0x15f/0xf80 [ 452.480256][T13636] ? trace_irq_disable+0x3b/0x140 [ 452.480280][T13636] ? clear_bhb_loop+0x40/0x90 [ 452.480304][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.480341][T13636] RIP: 0033:0x7fc34006c819 [ 452.480373][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.480393][T13636] RSP: 002b:00007fc33e2c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.480415][T13636] RAX: ffffffffffffffda RBX: 00007fc3402e5fa0 RCX: 00007fc34006c819 [ 452.480431][T13636] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 452.480445][T13636] RBP: 00007fc340102c91 R08: 0000000000000000 R09: 0000000000000000 [ 452.480458][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.480472][T13636] R13: 00007fc3402e6038 R14: 00007fc3402e5fa0 R15: 00007ffff357dfd8 [ 452.480497][T13636] [ 453.491533][ T32] hackrf 5-1:0.0: Board ID: 00 [ 453.491599][ T32] hackrf 5-1:0.0: Firmware version: [ 453.560494][ T32] hackrf 5-1:0.0: Registered as swradio24 [ 453.560555][ T32] videodev: could not get a free minor [ 453.560588][ T32] hackrf 5-1:0.0: Failed to register as video device (-23) [ 453.646218][ T32] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 453.916438][ T32] usb 5-1: USB disconnect, device number 8 [ 453.994633][ T5835] block nbd3: Receive control failed (result -32) [ 453.994660][ T5831] block nbd3: Receive control failed (result -32)