last executing test programs: 1m26.891197273s ago: executing program 3 (id=1983): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000001140)=""/62, 0x3e, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 1m26.673866801s ago: executing program 3 (id=1988): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000001600)=""/166, 0xa6}, {&(0x7f0000004b00)=""/191, 0xbf}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1m26.471759896s ago: executing program 3 (id=1991): r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) ftruncate(r0, 0x0) 1m26.331033757s ago: executing program 3 (id=1992): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 1m26.176884577s ago: executing program 3 (id=1997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000140)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0xffff1000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf110607000000a4798fec811c2c85faec02352367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c67c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e09735f38b738f29e83e0dae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2d8f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4005ffe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af85833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0af8f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01eec110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f6471470000000000000b408aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb0060000001b9876bc4e8708a8315512823cff1f9375d208ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d226629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1f58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47d2da13155c5470013d53dea003005e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217da23f0951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 1m25.657907955s ago: executing program 3 (id=2003): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251d00000008001e004000000008001d00ab000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40884) 1m25.439185977s ago: executing program 32 (id=2003): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251d00000008001e004000000008001d00ab000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40884) 46.066017607s ago: executing program 0 (id=2396): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000002c0)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x80000001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}], 0x1c) 45.932102599s ago: executing program 0 (id=2400): sendmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="4741aa2d2693d37b2a5600", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x81) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 45.783927587s ago: executing program 0 (id=2402): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)="8c", 0x1}]) 45.639544281s ago: executing program 0 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 45.517089044s ago: executing program 0 (id=2407): creat(&(0x7f00000000c0)='./file0\x00', 0xce) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d", @ANYRESHEX=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 45.466430669s ago: executing program 2 (id=2408): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 45.181989135s ago: executing program 0 (id=2409): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r2, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) 45.181821971s ago: executing program 2 (id=2410): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xe4460, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 44.823210229s ago: executing program 33 (id=2409): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r2, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) 44.797227217s ago: executing program 2 (id=2413): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f0000003280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}}], 0x1, 0x40) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 44.234619837s ago: executing program 2 (id=2416): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 44.041406943s ago: executing program 2 (id=2418): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20501, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES32=r0]) 42.82789452s ago: executing program 2 (id=2423): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) 42.223481359s ago: executing program 34 (id=2423): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) 3.242749665s ago: executing program 5 (id=2727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x1, 0xff, 0x2, 0xfffe, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, 0x4c, 0x3) 3.242624834s ago: executing program 4 (id=2728): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) read$fb(r1, &(0x7f0000000140)=""/227, 0xe3) 3.142623651s ago: executing program 5 (id=2729): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008dd000/0x400000)=nil) 2.580102414s ago: executing program 1 (id=2738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 2.495957548s ago: executing program 1 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.386536765s ago: executing program 1 (id=2742): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 2.262166517s ago: executing program 1 (id=2743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2.227049154s ago: executing program 5 (id=2744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2ac00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.102062423s ago: executing program 1 (id=2745): r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) 1.99373745s ago: executing program 5 (id=2747): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000400)=0x3fd, 0x4) 1.888813415s ago: executing program 5 (id=2749): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 1.440654086s ago: executing program 5 (id=2752): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="000ec20000002b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.177981526s ago: executing program 1 (id=2754): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x1, '*'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.133687604s ago: executing program 6 (id=2755): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1.032207734s ago: executing program 4 (id=2756): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x323, @tick=0x65757100}) 857.844255ms ago: executing program 4 (id=2757): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x810c9365, 0x0) 785.311493ms ago: executing program 4 (id=2758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) 572.274275ms ago: executing program 6 (id=2759): r0 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x8000}, 0x8) 543.409151ms ago: executing program 4 (id=2760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006016000003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 472.585967ms ago: executing program 6 (id=2761): pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x8f5, 0x100000000000000) write(0xffffffffffffffff, 0x0, 0x0) 380.081969ms ago: executing program 6 (id=2762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x7, 0x17, 0x0, 0x4003, 0xf9, 0xf7, 0x79, 0xff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x4, 0x18, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) 231.938971ms ago: executing program 4 (id=2763): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 193.84931ms ago: executing program 6 (id=2764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe800000000000000000000000000010ff0200000000000000000000000000018f"], 0x340a) 0s ago: executing program 6 (id=2765): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) kernel console output (not intermixed with test programs): 221.488352][ T2345] pvrusb2: Invalid write control endpoint [ 221.497114][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 221.514269][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 221.526869][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 221.532948][ T9974] sctp: [Deprecated]: syz.3.1756 (pid 9974) Use of int in max_burst socket option deprecated. [ 221.532948][ T9974] Use struct sctp_assoc_value instead [ 221.570245][ T2345] pvrusb2: Device being rendered inoperable [ 221.585589][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 221.596182][ T43] usb 1-1: USB disconnect, device number 28 [ 221.597336][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 221.670735][ T2345] pvrusb2: Attached sub-driver cx25840 [ 221.676824][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 221.687475][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 222.264692][ T9990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 222.537998][ T5952] IPVS: starting estimator thread 0... [ 222.650551][T10002] IPVS: using max 27 ests per chain, 64800 per kthread [ 222.729119][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 222.889853][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 222.906003][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.926743][ T10] usb 4-1: config 0 has no interface number 0 [ 222.933888][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.962342][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.982839][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 222.993215][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.014148][ T10] usb 4-1: config 0 descriptor?? [ 223.650235][ T10] uclogic 0003:28BD:0071.0018: pen parameters not found [ 223.657345][ T10] uclogic 0003:28BD:0071.0018: interface is invalid, ignoring [ 223.864384][ T10] usb 4-1: USB disconnect, device number 30 [ 224.521977][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 224.688282][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 224.697648][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.716445][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.731443][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.742776][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.753015][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.768488][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.784587][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.807743][ T10] usb 3-1: Manufacturer: syz [ 224.825596][ T10] usb 3-1: config 0 descriptor?? [ 224.837813][ T5952] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 224.852898][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1800'. [ 224.867548][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1800'. [ 224.882179][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1800'. [ 224.961898][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 225.007714][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 225.023530][ T5952] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.037118][ T5952] usb 4-1: config 9 has an invalid interface number: 48 but max is 0 [ 225.065925][ T5952] usb 4-1: config 9 has no interface number 0 [ 225.073060][ T5952] usb 4-1: config 9 interface 48 has no altsetting 0 [ 225.090634][ T5952] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 225.125247][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.144085][ T5952] usb 4-1: Product: syz [ 225.150416][ T5952] usb 4-1: Manufacturer: syz [ 225.165562][ T5952] usb 4-1: SerialNumber: syz [ 225.187961][ T10] rc_core: IR keymap rc-hauppauge not found [ 225.194024][ T10] Registered IR keymap rc-empty [ 225.200464][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.237956][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.261325][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 225.275794][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 225.295277][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.317634][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.337676][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.368052][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.393867][ T5952] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 225.401063][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.427889][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.447534][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.467716][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.487561][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.507629][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.530976][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 225.539201][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.563566][ T5871] usb 3-1: USB disconnect, device number 22 [ 225.630122][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 225.798095][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 225.808157][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.817622][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.829763][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.837898][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.846821][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.857949][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.866927][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.875915][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.886942][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.894686][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.905290][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.916257][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.924506][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.933493][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.944517][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.952984][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.961968][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.973985][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.983809][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.994350][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.007954][ T5952] gspca_vc032x: reg_r err -71 [ 226.018532][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.021098][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 226.033301][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.039357][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.040035][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.046217][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.065771][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.072957][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 226.094138][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.105573][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 226.108025][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.131748][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.133759][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 226.151757][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.161898][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.164111][ T43] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 226.176503][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.192383][ T43] usb 1-1: Product: syz [ 226.196589][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.196604][ T43] usb 1-1: Manufacturer: syz [ 226.203383][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.221518][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.224970][ T43] usb 1-1: SerialNumber: syz [ 226.239047][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.246465][ T43] usb 1-1: config 0 descriptor?? [ 226.250445][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.259327][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.264677][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.273798][ T5952] gspca_vc032x: I2c Bus Busy Wait 00 [ 226.274757][ T43] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 226.284024][ T5952] gspca_vc032x: Unknown sensor... [ 226.292755][ T5952] vc032x 4-1:9.48: probe with driver vc032x failed with error -22 [ 226.318580][ T5952] usb 4-1: USB disconnect, device number 31 [ 226.587518][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 226.595588][ T5920] usb 1-1: USB disconnect, device number 29 [ 226.621891][ T5920] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 226.757215][ T5952] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 226.920875][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 226.940485][ T5952] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.961762][ T5952] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.977187][ T5952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.983994][ T5952] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 226.994360][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.015041][ T5952] usb 2-1: config 0 descriptor?? [ 227.440310][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.460062][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.468318][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.475893][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.485257][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.492417][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.499530][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.507284][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.514035][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.521311][ T5952] kye 0003:0458:0138.0019: unknown main item tag 0x0 [ 227.536628][ T5952] kye 0003:0458:0138.0019: collection stack underflow [ 227.550179][ T5952] kye 0003:0458:0138.0019: item 0 0 0 12 parsing failed [ 227.561591][ T5952] kye 0003:0458:0138.0019: parse failed [ 227.567666][ T5952] kye 0003:0458:0138.0019: probe with driver kye failed with error -22 [ 227.588783][T10141] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1828'. [ 227.642201][ T5952] usb 2-1: USB disconnect, device number 24 [ 227.656519][ T5920] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 227.686821][T10143] block nbd2: not configured, cannot reconfigure [ 227.820657][ T5920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.834561][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.855995][ T5920] usb 1-1: Product: syz [ 227.860687][ T5920] usb 1-1: Manufacturer: syz [ 227.865451][ T5920] usb 1-1: SerialNumber: syz [ 227.879198][ T5920] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 227.897629][ T5952] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 228.045541][T10159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 228.059376][T10159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 228.073308][T10159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 228.545430][ T43] usb 1-1: USB disconnect, device number 30 [ 229.176074][ T5952] usb 1-1: Service connection timeout for: 256 [ 229.185351][ T5952] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 229.219431][ T5952] ath9k_htc: Failed to initialize the device [ 229.242268][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 229.345574][ T5871] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 229.537115][ T5871] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 229.549423][ T5871] usb 4-1: config 0 has no interface number 0 [ 229.559074][ T5871] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 229.568535][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.580494][ T5871] usb 4-1: Product: syz [ 229.584784][ T5871] usb 4-1: Manufacturer: syz [ 229.589656][ T5871] usb 4-1: SerialNumber: syz [ 229.599798][ T5856] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 229.606221][ T5871] usb 4-1: config 0 descriptor?? [ 229.785287][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 229.796723][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.815213][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.825025][ T5856] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.837807][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.856167][ T5856] usb 3-1: config 0 descriptor?? [ 229.876391][ T5856] hub 3-1:0.0: USB hub found [ 229.973109][T10199] sctp: [Deprecated]: syz.0.1854 (pid 10199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.973109][T10199] Use struct sctp_sack_info instead [ 230.032032][ T5871] usb 4-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (170) [ 230.074048][ T5856] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 230.235834][ T5871] usb 4-1: failed to fetch extended address, random address set [ 230.248258][ T5871] usb 4-1: atusb_probe: initialization failed, error = -524 [ 230.258978][ T5871] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 230.288642][ T5871] usb 4-1: USB disconnect, device number 32 [ 230.377293][T10210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.489077][ T5856] hid-generic 0003:046D:C31C.001A: item fetching failed at offset 0/1 [ 230.516079][ T5856] hid-generic 0003:046D:C31C.001A: probe with driver hid-generic failed with error -22 [ 230.776670][ T5952] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 230.835240][ T10] usb 3-1: USB disconnect, device number 23 [ 230.951139][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.971704][ T5952] usb 2-1: no configurations [ 230.984080][ T5952] usb 2-1: can't read configurations, error -22 [ 230.991057][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 231.104889][T10236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1872'. [ 231.131650][T10236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1872'. [ 231.143445][T10236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1872'. [ 231.438033][ T5871] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.676557][T10254] fido_id[10254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.743827][T10265] netlink: 'syz.2.1886': attribute type 31 has an invalid length. [ 231.773636][T10265] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 231.796068][T10265] bridge0: port 1(bridge_slave_0) entered learning state [ 232.041826][T10278] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1893'. [ 232.430561][T10297] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 233.613519][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 233.685576][T10329] input: syz1 as /devices/virtual/input/input22 [ 233.808809][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.835990][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.876047][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.889609][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 233.901642][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 233.917214][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.926579][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.947234][ T10] usb 3-1: Product: syz [ 233.951929][ T10] usb 3-1: Manufacturer: syz [ 233.969112][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 233.998175][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 234.014583][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 234.033280][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 234.365340][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 234.532486][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.554396][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 234.583106][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 234.599822][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.624723][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.642920][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.660179][ T10] usb 1-1: config 0 descriptor?? [ 234.683270][T10347] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 235.141586][ T10] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 235.312342][ T5871] usb 1-1: USB disconnect, device number 31 [ 235.570033][T10402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1942'. [ 236.368942][ T10] usb 3-1: USB disconnect, device number 24 [ 236.382119][ T5871] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 236.382232][ T5856] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 236.541960][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 236.548810][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.559847][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.569652][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.574755][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 236.583134][ T5871] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.594395][ T5856] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 236.597507][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.610196][ T5856] usb 1-1: config 0 has no interface number 0 [ 236.620401][ T5856] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 236.632349][ T5856] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 236.635951][ T5871] usb 4-1: config 0 descriptor?? [ 236.646027][ T5856] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 236.661027][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.669318][ T5856] usb 1-1: Product: syz [ 236.673710][ T5856] usb 1-1: Manufacturer: syz [ 236.678471][ T5856] usb 1-1: SerialNumber: syz [ 236.686461][ T5856] usb 1-1: config 0 descriptor?? [ 236.692321][T10424] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.699643][T10424] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.762068][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 236.913177][T10424] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.921309][T10424] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.928815][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 236.938668][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.955784][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 236.965043][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.976679][ T10] usb 3-1: config 0 descriptor?? [ 237.082930][ T5871] hid_parser_main: 644 callbacks suppressed [ 237.082956][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.100036][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.107375][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.114983][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.123457][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.130734][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.138646][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.146002][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.153448][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.160699][ T5871] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 237.174338][ T5871] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 237.191525][ T5871] microsoft 0003:045E:07DA.001D: no inputs found [ 237.197970][ T5871] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 237.318044][ T5871] usb 4-1: USB disconnect, device number 33 [ 237.405030][ T10] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 237.540835][ T5856] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 237.552214][ T5856] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 237.564264][ T5856] asix 1-1:0.251: probe with driver asix failed with error -71 [ 237.581659][ T5856] usb 1-1: USB disconnect, device number 32 [ 237.615036][ C0] usb 3-1: input irq status -75 received [ 237.817249][ T5856] usb 3-1: USB disconnect, device number 25 [ 238.051418][ T5183] Bluetooth: hci4: command 0x1003 tx timeout [ 238.051443][ T5864] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 238.302031][T10446] netlink: 'syz.1.1960': attribute type 83 has an invalid length. [ 238.428797][T10453] wireguard: wg1: Could not create IPv4 socket [ 239.338151][T10497] loop6: detected capacity change from 0 to 63 [ 239.362252][ T6253] buffer_io_error: 54 callbacks suppressed [ 239.362272][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.404761][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.451117][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.480840][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.491245][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.591682][T10508] loop6: detected capacity change from 0 to 63 [ 239.603445][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.622528][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'. [ 239.636535][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.658743][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.677264][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.696490][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.048321][T10528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.140250][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 240.310431][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 240.329214][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.370154][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 240.398311][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.422990][ T24] usb 1-1: config 0 descriptor?? [ 240.657710][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 240.882917][ T24] usb 1-1: USB disconnect, device number 33 [ 241.060152][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 241.222916][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.238624][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.240207][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 241.251362][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.259791][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.264625][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 241.278201][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.286717][ T10] usb 2-1: Product: syz [ 241.287218][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.291488][ T10] usb 2-1: Manufacturer: syz [ 241.304748][ T10] usb 2-1: SerialNumber: syz [ 241.334895][ T10] usb 2-1: config 0 descriptor?? [ 241.355887][ T10] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 241.370099][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 241.549571][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 241.608185][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 241.635114][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.669320][ T24] usb 3-1: Product: syz [ 241.673553][ T24] usb 3-1: Manufacturer: syz [ 241.678204][ T24] usb 3-1: SerialNumber: syz [ 241.764622][ T24] usb 3-1: config 0 descriptor?? [ 242.018569][T10555] chnl_net:caif_netlink_parms(): no params data found [ 242.196544][ T10] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 242.257211][ T10] usb 2-1: USB disconnect, device number 27 [ 242.352336][T10555] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.359864][T10555] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.367484][T10555] bridge_slave_0: entered allmulticast mode [ 242.377074][T10555] bridge_slave_0: entered promiscuous mode [ 242.387467][T10555] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.395259][T10555] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.403615][T10555] bridge_slave_1: entered allmulticast mode [ 242.412970][T10555] bridge_slave_1: entered promiscuous mode [ 242.421426][ T24] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 242.469325][ T5856] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 242.500127][ T24] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 242.511305][T10555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.529204][ T24] usb 3-1: USB disconnect, device number 26 [ 242.544626][T10555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.642210][T10555] team0: Port device team_slave_0 added [ 242.642893][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 242.653779][T10555] team0: Port device team_slave_1 added [ 242.667431][ T5856] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 242.683888][ T5856] usb 1-1: config 0 has no interface number 0 [ 242.690620][ T5856] usb 1-1: config 0 interface 21 has no altsetting 0 [ 242.700398][ T5856] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=b4.00 [ 242.713666][T10555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.713853][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.729913][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.734050][ T5856] usb 1-1: Product: syz [ 242.765414][ T5856] usb 1-1: Manufacturer: syz [ 242.770364][ T5856] usb 1-1: SerialNumber: syz [ 242.777052][T10555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.789281][ T5856] usb 1-1: config 0 descriptor?? [ 242.808939][ T5856] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 242.822732][T10555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.832875][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.860546][ T5856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.880102][T10555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.891568][ T5856] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 242.904892][ T5856] usb 1-1: media controller created [ 242.951550][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.078146][ T5856] DVB: Unable to find symbol mt352_attach() [ 243.116182][T10555] hsr_slave_0: entered promiscuous mode [ 243.145555][T10555] hsr_slave_1: entered promiscuous mode [ 243.175237][T10555] debugfs: 'hsr0' already exists in 'hsr' [ 243.192378][T10555] Cannot create hsr debugfs directory [ 243.224325][ T5856] DVB: Unable to find symbol nxt6000_attach() [ 243.238651][ T5856] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 243.278811][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 243.319242][ T5856] dvb-usb: schedule remote query interval to 1000 msecs. [ 243.341774][ T5856] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 243.362265][ T5856] dvb-usb: bulk message failed: -22 (7/0) [ 243.378750][ T5856] dvb-usb: bulk message failed: -22 (7/0) [ 243.408635][ T5864] Bluetooth: hci2: command tx timeout [ 243.588952][T10589] netlink: 'syz.1.2020': attribute type 58 has an invalid length. [ 243.873072][T10555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.882914][T10598] vivid-000: disconnect [ 243.900208][T10555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.900729][T10598] vivid-000: reconnect [ 243.939554][T10555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.967093][T10555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.165128][T10555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.221358][T10555] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.253072][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.260344][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.356490][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.363790][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.373391][ T5952] dvb-usb: bulk message failed: -22 (7/0) [ 244.380398][ T5952] dvb-usb: error while querying for an remote control event. [ 244.809413][ T7234] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 244.894449][T10555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.971314][ T7234] usb 3-1: Using ep0 maxpacket: 8 [ 244.999866][ T7234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.030073][ T7234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.052106][ T7234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.075353][ T7234] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.185658][ T5856] usb 1-1: USB disconnect, device number 34 [ 245.202127][ T7234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.232936][ T7234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.419268][ T5856] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 245.487664][ T5864] Bluetooth: hci2: command tx timeout [ 245.507635][ T7234] usb 3-1: GET_CAPABILITIES returned 0 [ 245.544787][ T7234] usbtmc 3-1:16.0: can't read capabilities [ 245.763251][ T7234] usb 3-1: USB disconnect, device number 27 [ 245.790296][T10555] veth0_vlan: entered promiscuous mode [ 245.822986][T10555] veth1_vlan: entered promiscuous mode [ 245.874878][T10555] veth0_macvtap: entered promiscuous mode [ 245.890816][T10555] veth1_macvtap: entered promiscuous mode [ 245.984037][T10555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.021560][T10555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.070527][ T1099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.085030][ T1099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.102904][ T1099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.117915][ T1099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.330419][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.348427][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.445305][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.467935][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.667045][ T5856] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 246.832761][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 246.833330][T10669] netlink: 'syz.4.2048': attribute type 25 has an invalid length. [ 246.845381][ T5856] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 246.856082][T10669] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 246.877840][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.900448][ T5856] usb 3-1: config 0 descriptor?? [ 246.943388][ T5856] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 246.977187][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 247.151103][ T24] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 247.186345][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.210734][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.224635][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.238323][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.274699][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.293054][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.303055][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.333148][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.345930][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.361626][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.378546][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.406788][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.415950][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.435435][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.456757][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.476020][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.495784][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.511461][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.534024][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.555509][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.576568][ T5864] Bluetooth: hci2: command tx timeout [ 247.586825][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.609656][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 247.631514][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 247.663766][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.693759][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 247.704390][ T24] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 247.719193][ T24] usb 1-1: Product: syz [ 247.722525][ T5856] gspca_vc032x: reg_w err -71 [ 247.725693][ T24] usb 1-1: Manufacturer: syz [ 247.734409][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.745824][ T24] usb 1-1: SerialNumber: syz [ 247.750178][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.755859][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.774626][ T24] usb 1-1: config 0 descriptor?? [ 247.791767][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.793222][ T24] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 247.815919][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.835348][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.852303][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.869949][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.875346][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.880972][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.886992][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.892432][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.898182][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.903602][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.909300][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.926256][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.931653][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.937200][ T5856] gspca_vc032x: I2c Bus Busy Wait 00 [ 247.942569][ T5856] gspca_vc032x: Unknown sensor... [ 247.947823][ T5856] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 247.962489][ T5856] usb 3-1: USB disconnect, device number 28 [ 248.086276][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 248.247065][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 248.271828][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 248.302233][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.332964][ T24] usb 2-1: config 0 descriptor?? [ 248.561879][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 248.593298][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.636868][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 248.644378][ T24] usb 2-1: media controller created [ 248.696601][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.760810][ T24] az6027: usb out operation failed. (-71) [ 248.781817][ T24] az6027: usb out operation failed. (-71) [ 248.792041][ T24] stb0899_attach: Driver disabled by Kconfig [ 248.802914][ T24] az6027: no front-end attached [ 248.802914][ T24] [ 248.818483][ T24] az6027: usb out operation failed. (-71) [ 248.828886][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 248.841073][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 248.864839][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 248.877585][ T5856] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 248.892255][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 248.918308][ T24] usb 2-1: USB disconnect, device number 28 [ 249.003845][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 249.035679][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 249.054051][ T5856] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 249.069753][ T5856] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 249.082929][ T5856] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 249.095148][ T5856] usb 5-1: config 1 has no interface number 0 [ 249.104314][ T5856] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.117589][T10712] C: renamed from team_slave_0 (while UP) [ 249.120118][ T5856] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 249.141169][ T5856] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 249.141721][T10712] netlink: 'syz.2.2067': attribute type 2 has an invalid length. [ 249.150329][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.166895][T10712] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2067'. [ 249.177750][T10712] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 249.195391][ T5856] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 249.350210][T10716] overlayfs: conflicting options: userxattr,metacopy=on [ 249.400876][ T5856] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 249.490570][T10720] ptrace attach of "./syz-executor exec"[5873] was attempted by "./syz-executor exec"[10720] [ 249.647466][ T5864] Bluetooth: hci2: command tx timeout [ 249.788150][ T5856] usb 1-1: USB disconnect, device number 35 [ 249.799069][ T5856] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 249.849798][ T5920] usb 5-1: USB disconnect, device number 2 [ 249.874151][ T5920] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 249.940737][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 250.152982][T10743] syz.2.2081 uses obsolete (PF_INET,SOCK_PACKET) [ 250.305715][T10750] syzkaller1: entered promiscuous mode [ 250.320647][T10750] syzkaller1: entered allmulticast mode [ 250.634955][ T5856] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 250.679279][T10766] overlay: filesystem on ./bus is read-only [ 250.823585][ T5856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.863532][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.898374][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.914280][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 250.940581][ T5856] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 250.952734][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.971984][ T5856] usb 3-1: config 0 descriptor?? [ 251.000644][T10776] input: syz0 as /devices/virtual/input/input27 [ 251.223887][T10782] syzkaller1: entered promiscuous mode [ 251.231235][T10782] syzkaller1: entered allmulticast mode [ 251.412884][ T5856] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 251.457372][ T5856] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001F/input/input28 [ 251.501069][T10792] syzkaller1: entered promiscuous mode [ 251.514507][T10792] syzkaller1: entered allmulticast mode [ 251.590701][T10794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 251.595614][ T5856] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 251.610676][T10794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 251.611086][T10794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 251.621772][T10794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 251.666155][T10794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 251.687807][T10794] Dead loop on virtual device ip6_vti0, fix it urgently! [ 251.714626][ T5856] usb 3-1: USB disconnect, device number 29 [ 251.820065][T10795] fido_id[10795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 252.140480][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 252.312160][ T10] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 252.342465][ T10] usb 2-1: config 0 has no interface number 0 [ 252.358992][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 252.387488][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.406207][ T10] usb 2-1: Product: syz [ 252.422570][ T10] usb 2-1: Manufacturer: syz [ 252.437694][ T10] usb 2-1: SerialNumber: syz [ 252.450378][ T10] usb 2-1: config 0 descriptor?? [ 252.844519][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 252.993918][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 253.009171][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.031239][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.042003][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.064350][ T43] usb 3-1: config 0 descriptor?? [ 253.293120][ T43] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 253.293772][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 253.343691][ T10] usb 2-1: Please update to version 0.2 or newer [ 253.435140][ T10] usb 2-1: USB disconnect, device number 29 [ 253.758873][ T43] usb 3-1: USB disconnect, device number 30 [ 253.913495][ T5856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.063242][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 254.072715][ T5856] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 254.082151][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.090250][ T5856] usb 5-1: Product: syz [ 254.094648][ T5856] usb 5-1: Manufacturer: syz [ 254.099271][ T5856] usb 5-1: SerialNumber: syz [ 254.109007][ T5856] usb 5-1: config 0 descriptor?? [ 254.118904][ T5856] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 254.328711][T10865] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.942940][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 255.096044][ T43] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 255.105511][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.117176][ T43] usb 1-1: config 0 descriptor?? [ 255.131645][ T5856] gspca_sonixj: reg_w err -71 [ 255.132303][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 255.145603][ T5856] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 255.160673][ T5856] usb 5-1: USB disconnect, device number 3 [ 255.173515][ T7234] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 255.344462][ T7234] usb 3-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 255.355325][ T7234] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.372022][ T7234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.381441][ T7234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.389551][ T7234] usb 3-1: Product: syz [ 255.393998][ T7234] usb 3-1: Manufacturer: syz [ 255.398642][ T7234] usb 3-1: SerialNumber: syz [ 255.531663][ T43] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 255.612388][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.621542][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.640562][ T7234] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 255.659848][ T7234] usb 3-1: USB disconnect, device number 31 [ 255.937901][ T43] gspca_cpia1: usb_control_msg 02, error -71 [ 255.951190][ T43] gspca_cpia1: usb_control_msg 05, error -71 [ 255.972263][ T43] cpia1 1-1:0.0: unexpected systemstate: 00 [ 255.983728][ T43] usb 1-1: USB disconnect, device number 36 [ 256.092227][ T7234] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 256.249564][ T7234] usb 3-1: Using ep0 maxpacket: 8 [ 256.265711][ T7234] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 256.280694][ T7234] usb 3-1: config 16 has an invalid descriptor of length 121, skipping remainder of the config [ 256.293153][ T7234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.303242][ T7234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.313419][ T7234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 256.325002][ T7234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 256.338140][ T7234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 256.349716][ T7234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.359458][ T7234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.585007][ T7234] usb 3-1: usb_control_msg returned -71 [ 256.600978][ T7234] usbtmc 3-1:16.0: can't read capabilities [ 256.626377][ T7234] usb 3-1: USB disconnect, device number 32 [ 256.682105][ T5856] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 256.862075][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 256.881317][ T5856] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.893262][ T5856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.903785][ T5856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.915336][ T5856] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.928996][ T5856] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.938818][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.180571][ T5856] usb 2-1: GET_CAPABILITIES returned 0 [ 257.190000][ T5856] usbtmc 2-1:16.0: can't read capabilities [ 257.404687][ T5920] usb 2-1: USB disconnect, device number 30 [ 258.100192][T10964] overlayfs: conflicting lowerdir path [ 258.401077][ T5952] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 258.481309][T10982] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input29 [ 258.519879][T10984] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2190'. [ 258.591373][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 258.628498][T10990] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 258.640470][ T5952] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 258.653857][T10990] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 258.665499][T10990] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2192'. [ 258.676632][ T5952] usb 1-1: config 0 has no interface number 0 [ 258.692805][ T5952] usb 1-1: config 0 interface 184 has no altsetting 0 [ 258.717755][ T5952] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 258.731329][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.750208][ T5952] usb 1-1: Product: syz [ 258.760328][ T5952] usb 1-1: Manufacturer: syz [ 258.777340][ T5952] usb 1-1: SerialNumber: syz [ 258.794675][ T5952] usb 1-1: config 0 descriptor?? [ 258.813020][ T5952] smsc75xx v1.0.0 [ 258.941214][ T7234] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 259.106733][ T7234] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 259.126667][ T7234] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.144644][ T7234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.162705][ T7234] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.172268][ T7234] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.184057][ T7234] usb 5-1: Product: syz [ 259.188303][ T7234] usb 5-1: Manufacturer: syz [ 259.193885][ T7234] usb 5-1: SerialNumber: syz [ 259.202394][ T7234] usb 5-1: config 0 descriptor?? [ 259.218893][ T7234] hub 5-1:0.0: bad descriptor, ignoring hub [ 259.225548][ T7234] hub 5-1:0.0: probe with driver hub failed with error -5 [ 259.238303][ T7234] usb 5-1: selecting invalid altsetting 0 [ 259.370745][ T5871] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 259.520638][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 259.533112][ T5871] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 259.542167][ T5871] usb 2-1: config 0 has no interface number 0 [ 259.548328][ T5871] usb 2-1: config 0 interface 12 has no altsetting 0 [ 259.563707][ T5871] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 259.573038][ T5871] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 259.581368][ T5871] usb 2-1: Product: syz [ 259.585656][ T5871] usb 2-1: Manufacturer: syz [ 259.590502][ T5871] usb 2-1: SerialNumber: syz [ 259.598601][ T5871] usb 2-1: config 0 descriptor?? [ 259.619174][ T5952] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 259.642853][ T5952] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.658560][ T5952] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 259.672504][ T5952] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 259.682905][ T5952] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 259.693918][ T5952] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 259.708993][ T5952] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 259.729511][ T5952] usb 1-1: USB disconnect, device number 37 [ 259.825938][T11023] syzkaller1: entered promiscuous mode [ 259.831732][T11023] syzkaller1: entered allmulticast mode [ 260.170349][T10993] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 260.659554][ T5871] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 260.673337][ T5871] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 260.690936][ T5871] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 260.701689][ T5871] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 260.720605][ T5871] usb 2-1: USB disconnect, device number 31 [ 260.771817][ T5920] usb 5-1: USB disconnect, device number 4 [ 260.925503][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.937079][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.298559][T11047] binder: 11046:11047 ioctl c0306201 0 returned -14 [ 261.554605][T11058] syzkaller1: entered promiscuous mode [ 261.566503][T11058] syzkaller1: entered allmulticast mode [ 262.199741][ T5920] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 262.379249][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 262.386859][ T5920] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.407148][ T5920] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.418944][T11093] netlink: 'syz.2.2238': attribute type 11 has an invalid length. [ 262.428941][ T5920] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.459006][ T5920] usb 1-1: config 1 interface 0 has no altsetting 0 [ 262.471791][ T5920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.489367][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.510095][ T5920] usb 1-1: Product: syz [ 262.514429][ T5920] usb 1-1: Manufacturer: syz [ 262.528982][ T5920] usb 1-1: SerialNumber: syz [ 262.781137][ T5920] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 262.827360][T11107] loop8: detected capacity change from 0 to 8 [ 262.847708][T11107] Dev loop8: unable to read RDB block 8 [ 262.854843][T11107] loop8: unable to read partition table [ 262.863640][T11107] loop8: partition table beyond EOD, truncated [ 262.870630][T11107] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 262.957565][ T5871] usb 1-1: USB disconnect, device number 38 [ 263.000847][ T5871] usblp0: removed [ 263.089413][T11115] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 263.089413][T11115] The task syz.1.2245 (11115) triggered the difference, watch for misbehavior. [ 263.753934][T11126] input: syz0 as /devices/virtual/input/input30 [ 263.953080][T11136] vxcan1: entered allmulticast mode [ 263.959555][T11136] vxcan1: left allmulticast mode [ 264.030971][ T43] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 264.188145][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 264.195578][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 264.207360][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 264.221660][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 264.230865][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.239087][ T43] usb 1-1: Product: syz [ 264.243266][ T43] usb 1-1: Manufacturer: syz [ 264.250421][ T43] usb 1-1: SerialNumber: syz [ 264.257511][ T43] usb 1-1: config 0 descriptor?? [ 264.267178][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 264.277663][ T43] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 264.308116][ T7234] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 264.458052][ T7234] usb 3-1: Using ep0 maxpacket: 32 [ 264.466899][ T7234] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.501925][ T7234] usb 3-1: config 0 has no interface number 0 [ 264.533474][ T7234] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.595063][ T7234] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.639721][ T7234] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 264.660389][ T7234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.700873][ T7234] usb 3-1: config 0 descriptor?? [ 265.318182][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 265.341184][ T43] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 265.351878][ T7234] uclogic 0003:28BD:0094.0020: pen parameters not found [ 265.366970][ T43] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 265.375832][ T7234] uclogic 0003:28BD:0094.0020: interface is invalid, ignoring [ 265.389016][ T43] em28xx 1-1:0.0: No AC97 audio processor [ 265.405615][ T7234] usb 3-1: USB disconnect, device number 33 [ 265.421602][ T43] usb 1-1: USB disconnect, device number 39 [ 265.439301][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 265.455573][ T43] em28xx 1-1:0.0: Freeing device [ 265.457575][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 265.469763][ T30] audit: type=1326 audit(1756961358.686:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.506368][ T30] audit: type=1326 audit(1756961358.686:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.531339][ T30] audit: type=1326 audit(1756961358.686:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.553910][ T30] audit: type=1326 audit(1756961358.686:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.578121][ T30] audit: type=1326 audit(1756961358.686:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.602296][ T30] audit: type=1326 audit(1756961358.686:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.625590][ T30] audit: type=1326 audit(1756961358.686:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.648588][ T30] audit: type=1326 audit(1756961358.686:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.671676][ T30] audit: type=1326 audit(1756961358.686:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.694398][ T30] audit: type=1326 audit(1756961358.686:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.0.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730f38ebe9 code=0x50000 [ 265.720789][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.732313][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.744585][ T10] usb 2-1: config 0 descriptor?? [ 265.760281][ T10] cp210x 2-1:0.0: cp210x converter detected [ 266.297109][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 266.530208][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 266.635659][T11183] loop7: detected capacity change from 0 to 3 [ 266.666949][ T5920] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 266.703365][T11183] Dev loop7: unable to read RDB block 3 [ 266.709792][T11183] loop7: unable to read partition table [ 266.715858][T11183] loop7: partition table beyond EOD, truncated [ 266.724656][T11183] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 266.754381][ T5952] usb 2-1: USB disconnect, device number 32 [ 266.774732][ T5952] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.830275][ T5920] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 266.852351][ T5920] usb 1-1: config 0 has no interface number 0 [ 266.859512][ T5952] cp210x 2-1:0.0: device disconnected [ 266.874095][T11185] syzkaller1: entered promiscuous mode [ 266.883943][ T5920] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 266.884587][T11185] syzkaller1: entered allmulticast mode [ 266.897763][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.908065][ T5920] usb 1-1: Product: syz [ 266.912282][ T5920] usb 1-1: Manufacturer: syz [ 266.919906][ T5920] usb 1-1: SerialNumber: syz [ 266.939971][ T5920] usb 1-1: config 0 descriptor?? [ 267.307053][ T7234] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 267.364792][ T5920] usb 1-1: Firmware version (0.0) predates our first public release. [ 267.390734][ T5920] usb 1-1: Please update to version 0.2 or newer [ 267.411652][ T5920] usb 1-1: Firmware: build [ 267.480625][ T7234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.514089][ T7234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.533807][ T7234] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 267.544820][ T7234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.564966][ T7234] usb 3-1: config 0 descriptor?? [ 267.636710][ T5920] usb 1-1: USB disconnect, device number 40 [ 267.648384][ T1099] wlan1: Creating new IBSS network, BSSID 86:9c:7d:7f:f8:fb [ 267.746642][ T5856] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 267.916229][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 267.923372][ T5856] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 267.932932][ T5856] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.943730][ T5856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.953610][ T5856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.964510][ T5856] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.977855][ T5856] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.987026][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.001113][ T7234] hid_parser_main: 5 callbacks suppressed [ 268.001138][ T7234] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 268.015305][ T7234] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 268.033908][ T7234] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0021/input/input31 [ 268.070289][ T7234] cm6533_jd 0003:0D8C:0022.0021: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 268.228419][ T43] usb 3-1: USB disconnect, device number 34 [ 268.233933][ T5856] usb 2-1: usb_control_msg returned -32 [ 268.249238][ T5856] usbtmc 2-1:16.0: can't read capabilities [ 268.436317][ T7234] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 268.596259][ T7234] usb 1-1: Using ep0 maxpacket: 16 [ 268.603976][ T7234] usb 1-1: config 0 has no interfaces? [ 268.613225][ T7234] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.622613][ T7234] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.630994][ T7234] usb 1-1: Manufacturer: syz [ 268.639482][ T7234] usb 1-1: config 0 descriptor?? [ 268.775928][T11217] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2291'. [ 268.935226][ T5856] usb 1-1: USB disconnect, device number 41 [ 269.040416][T11225] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 269.717846][ T7234] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 269.875483][ T7234] usb 3-1: Using ep0 maxpacket: 16 [ 269.883167][ T7234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.893992][ T7234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.907333][ T7234] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.917737][ T7234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.926602][ T7234] usb 3-1: Product: syz [ 269.931057][ T7234] usb 3-1: Manufacturer: syz [ 269.935851][ T7234] usb 3-1: SerialNumber: syz [ 269.975304][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 270.152877][ T7234] usb 3-1: 0:2 : does not exist [ 270.169537][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.186192][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.201091][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.212562][ T7234] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 270.233997][ T43] usb 5-1: config 0 descriptor?? [ 270.271622][ T7234] usb 3-1: USB disconnect, device number 35 [ 270.334214][ T6253] udevd[6253]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.549649][ T24] usb 2-1: USB disconnect, device number 33 [ 270.652830][ T43] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 270.682498][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0022/input/input32 [ 270.784410][T11265] bridge0: port 3(batadv0) entered blocking state [ 270.810021][T11265] bridge0: port 3(batadv0) entered disabled state [ 270.831783][T11268] netlink: 'syz.0.2312': attribute type 58 has an invalid length. [ 270.848056][T11265] batadv0: entered allmulticast mode [ 270.864580][ T43] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 270.891085][T11265] batadv0: entered promiscuous mode [ 270.928179][T11265] bridge0: port 3(batadv0) entered blocking state [ 270.935374][T11265] bridge0: port 3(batadv0) entered forwarding state [ 270.966392][T11270] batadv0: left allmulticast mode [ 270.971529][T11270] batadv0: left promiscuous mode [ 271.034022][T11270] bridge0: port 3(batadv0) entered disabled state [ 271.225957][ T43] usb 5-1: USB disconnect, device number 5 [ 271.241260][T11276] syzkaller1: entered promiscuous mode [ 271.251492][T11276] syzkaller1: entered allmulticast mode [ 271.269362][T11279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.474731][ T5920] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 271.634535][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 271.641886][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 271.664053][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.688059][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.697886][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.714506][ T5920] usb 3-1: Product: syz [ 271.724607][ T5920] usb 3-1: Manufacturer: syz [ 271.734552][ T5920] usb 3-1: SerialNumber: syz [ 271.755273][ T5920] usb 3-1: config 0 descriptor?? [ 271.784825][ T5920] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.805264][ T5920] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 272.916768][ T5920] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 272.948036][ T5920] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 272.976085][T11317] Zero length message leads to an empty skb [ 272.978970][ T5920] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 273.000509][ T5920] em28xx 3-1:0.0: No AC97 audio processor [ 273.384657][ T5856] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 273.543409][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 273.552093][ T5856] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 273.572927][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.622011][ T5856] usb 5-1: config 0 descriptor?? [ 273.650887][ T5856] gspca_main: sunplus-2.14.0 probing 041e:400b [ 274.223542][ T43] usb 3-1: USB disconnect, device number 36 [ 274.233985][ T43] em28xx 3-1:0.0: Disconnecting em28xx [ 274.272718][ T43] em28xx 3-1:0.0: Freeing device [ 274.423426][ T920] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 274.585295][ T920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.599887][ T920] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 274.626319][ T920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.635702][ T920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.644373][ T920] usb 1-1: Product: syz [ 274.648595][ T920] usb 1-1: Manufacturer: syz [ 274.654379][ T920] usb 1-1: SerialNumber: syz [ 274.669868][ T920] cdc_mbim 1-1:1.0: skipping garbage [ 274.688033][ T5856] gspca_sunplus: reg_w_riv err -71 [ 274.699137][ T5856] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 274.719122][ T5856] usb 5-1: USB disconnect, device number 6 [ 274.875623][T11340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 275.486966][T11340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 275.494926][ T920] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 275.521031][ T920] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 275.706027][ T920] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 275.717119][ T920] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 275.739447][ T920] wwan wwan0: port wwan0mbim0 attached [ 275.758280][ T920] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 62:b9:d4:9f:5c:09 [ 275.790164][ T920] usb 1-1: USB disconnect, device number 42 [ 275.803747][ T920] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 275.905117][ T920] wwan wwan0: port wwan0mbim0 disconnected [ 276.476982][T11369] syzkaller1: entered promiscuous mode [ 276.512432][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 276.521387][T11369] syzkaller1: entered allmulticast mode [ 276.629491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 277.721385][T11399] input: syz1 as /devices/virtual/input/input33 [ 277.868827][T11402] syzkaller1: entered promiscuous mode [ 277.895673][T11402] syzkaller1: entered allmulticast mode [ 278.170392][T11406] syzkaller1: entered promiscuous mode [ 278.193288][T11406] syzkaller1: entered allmulticast mode [ 278.421150][ T7234] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 278.580891][ T7234] usb 1-1: Using ep0 maxpacket: 32 [ 278.620828][ T7234] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.661614][ T7234] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 278.669255][ T7234] usb 1-1: can't read configurations, error -71 [ 278.876439][T11428] loop8: detected capacity change from 0 to 8 [ 278.915586][T11428] Dev loop8: unable to read RDB block 8 [ 278.924225][T11428] loop8: unable to read partition table [ 278.930208][T11428] loop8: partition table beyond EOD, truncated [ 278.951072][T11428] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 279.119510][T11432] program syz.1.2387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.304107][T11436] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2389'. [ 279.833629][T11442] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2392'. [ 280.185670][T11357] Set syz1 is full, maxelem 65536 reached [ 280.870037][ T7234] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 280.937859][T10202] bond0: (slave syz_tun): Releasing backup interface [ 281.046827][ T7234] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.072327][ T7234] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.083180][ T7234] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.097506][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.114185][ T7234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 281.140305][T11479] Invalid/unusable pipe [ 281.146902][ T7234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 281.162243][ T7234] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.179708][ T7234] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.198039][ T7234] usb 5-1: Product: syz [ 281.206273][ T7234] usb 5-1: Manufacturer: syz [ 281.224984][ T7234] cdc_wdm 5-1:1.0: skipping garbage [ 281.243330][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.249653][ T7234] cdc_wdm 5-1:1.0: skipping garbage [ 281.272288][ T7234] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 281.278256][ T7234] cdc_wdm 5-1:1.0: Unknown control protocol [ 281.313770][ T5864] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 281.320761][ T5183] Bluetooth: hci4: command 0x1003 tx timeout [ 281.359037][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.536239][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.543124][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.551244][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.557893][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.564212][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.570857][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.577222][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.583940][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.595420][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.602157][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.608938][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.615632][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.622407][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.629068][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.635812][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.638898][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.642453][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.642679][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.642699][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.642944][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 281.678394][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 281.685048][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.688659][T11487] input: syz1 as /devices/virtual/input/input34 [ 281.719992][ T10] usb 5-1: USB disconnect, device number 7 [ 281.725932][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 281.737780][T11487] input: failed to attach handler leds to device input34, error: -6 [ 282.046174][ T1164] bridge_slave_1: left allmulticast mode [ 282.060726][ T1164] bridge_slave_1: left promiscuous mode [ 282.068083][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.150400][ T1164] bridge_slave_0: left allmulticast mode [ 282.156250][ T1164] bridge_slave_0: left promiscuous mode [ 282.186728][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.476627][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.495406][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.505484][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.516948][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.541413][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.164936][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.181329][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.192089][ T1164] bond0 (unregistering): Released all slaves [ 283.237555][T10787] bond0: (slave syz_tun): Releasing backup interface [ 284.089239][ T1164] hsr_slave_0: left promiscuous mode [ 284.131439][ T1164] hsr_slave_1: left promiscuous mode [ 284.162222][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.180498][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.212588][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.231666][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.355212][ T1164] veth1_macvtap: left promiscuous mode [ 284.372366][ T1164] veth0_macvtap: left promiscuous mode [ 284.398390][ T1164] veth1_vlan: left promiscuous mode [ 284.403992][ T1164] veth0_vlan: left promiscuous mode [ 284.538204][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.548537][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.558180][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.567673][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.575604][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.671073][ T5183] Bluetooth: hci0: command tx timeout [ 284.716961][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.733191][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.745895][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.774020][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.785458][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.116944][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 285.160563][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 285.802579][T11545] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2427'. [ 286.135638][T11501] chnl_net:caif_netlink_parms(): no params data found [ 286.270602][ T1164] IPVS: stop unused estimator thread 0... [ 286.594944][ T1164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.631322][T11501] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.638718][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.646004][T11501] bridge_slave_0: entered allmulticast mode [ 286.656587][T11501] bridge_slave_0: entered promiscuous mode [ 286.666910][ T5864] Bluetooth: hci1: command tx timeout [ 286.724410][ T1164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.743215][T11501] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.751653][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.758857][ T5864] Bluetooth: hci0: command tx timeout [ 286.765168][T11501] bridge_slave_1: entered allmulticast mode [ 286.773951][T11501] bridge_slave_1: entered promiscuous mode [ 286.808398][ T1164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.828389][ T5864] Bluetooth: hci3: command tx timeout [ 286.861673][T11537] chnl_net:caif_netlink_parms(): no params data found [ 286.902425][T11501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.920138][T11539] chnl_net:caif_netlink_parms(): no params data found [ 286.944118][T11501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.016005][ T1164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.063441][T11501] team0: Port device team_slave_0 added [ 287.171852][T11501] team0: Port device team_slave_1 added [ 287.336083][T11501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.343216][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.371472][T11501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.408380][T11539] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.423941][T11539] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.431388][T11539] bridge_slave_0: entered allmulticast mode [ 287.450996][T11539] bridge_slave_0: entered promiscuous mode [ 287.468756][T11537] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.475963][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.483608][T11537] bridge_slave_0: entered allmulticast mode [ 287.492574][T11537] bridge_slave_0: entered promiscuous mode [ 287.505906][T11537] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.513515][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.520961][T11537] bridge_slave_1: entered allmulticast mode [ 287.528630][T11537] bridge_slave_1: entered promiscuous mode [ 287.535986][T11501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.543880][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.570086][T11501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.590665][T11539] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.599773][T11539] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.607852][T11539] bridge_slave_1: entered allmulticast mode [ 287.615882][T11539] bridge_slave_1: entered promiscuous mode [ 287.813207][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2434'. [ 287.867105][T11537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.909961][T11539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.961915][T11539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.023721][T11537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.294978][T11501] hsr_slave_0: entered promiscuous mode [ 288.307705][T11501] hsr_slave_1: entered promiscuous mode [ 288.314848][T11501] debugfs: 'hsr0' already exists in 'hsr' [ 288.322158][T11501] Cannot create hsr debugfs directory [ 288.478293][T11537] team0: Port device team_slave_0 added [ 288.532215][T11537] team0: Port device team_slave_1 added [ 288.609533][T11539] team0: Port device team_slave_0 added [ 288.666473][T11539] team0: Port device team_slave_1 added [ 288.746184][ T5864] Bluetooth: hci1: command tx timeout [ 288.751723][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.826122][ T5864] Bluetooth: hci0: command tx timeout [ 288.906200][ T5864] Bluetooth: hci3: command tx timeout [ 289.041099][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.075451][T11539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.084499][T11539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.114869][T11539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.148190][T11539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.155190][T11539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.194239][T11539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.209971][T11537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.221072][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.248301][T11537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.261020][T11537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.268671][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.295002][T11537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.328520][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.405569][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.435806][ T7234] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 289.517585][T11539] hsr_slave_0: entered promiscuous mode [ 289.524383][T11539] hsr_slave_1: entered promiscuous mode [ 289.533887][T11539] debugfs: 'hsr0' already exists in 'hsr' [ 289.540012][T11539] Cannot create hsr debugfs directory [ 289.583690][T11537] hsr_slave_0: entered promiscuous mode [ 289.595740][ T7234] usb 5-1: Using ep0 maxpacket: 8 [ 289.598880][T11537] hsr_slave_1: entered promiscuous mode [ 289.613636][T11537] debugfs: 'hsr0' already exists in 'hsr' [ 289.619515][ T7234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 289.619547][ T7234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.619569][ T7234] usb 5-1: Product: syz [ 289.619585][ T7234] usb 5-1: Manufacturer: syz [ 289.619600][ T7234] usb 5-1: SerialNumber: syz [ 289.659166][T11537] Cannot create hsr debugfs directory [ 289.864748][ T7234] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 290.311434][T11501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.353515][ T1164] bridge_slave_1: left allmulticast mode [ 290.359829][ T1164] bridge_slave_1: left promiscuous mode [ 290.365986][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.378810][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.394175][ T1164] bridge_slave_1: left allmulticast mode [ 290.400327][ T1164] bridge_slave_1: left promiscuous mode [ 290.406310][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.419246][ T1164] bridge_slave_0: left allmulticast mode [ 290.426517][ T1164] bridge_slave_0: left promiscuous mode [ 290.432319][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.461379][ T1164] bond_slave_0: left promiscuous mode [ 290.467858][ T1164] bond_slave_1: left promiscuous mode [ 290.474049][ T1164] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 290.829717][ T5864] Bluetooth: hci1: command tx timeout [ 290.909344][ T5864] Bluetooth: hci0: command tx timeout [ 290.936782][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.949450][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.962871][ T1164] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 290.978057][ T1164] bond0 (unregistering): Released all slaves [ 290.985309][ T5864] Bluetooth: hci3: command tx timeout [ 291.400271][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.413581][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.425360][ T1164] bond0 (unregistering): Released all slaves [ 291.449917][T11501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.500169][T11501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.564585][T11501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.618429][ T1164] tipc: Left network mode [ 291.817201][T11539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 291.888889][T11539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 291.941491][T11539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 291.985591][T11539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 292.391690][ T1164] hsr_slave_0: left promiscuous mode [ 292.400948][ T1164] hsr_slave_1: left promiscuous mode [ 292.412035][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.423227][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.447773][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.459775][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.489413][ T1164] hsr_slave_0: left promiscuous mode [ 292.501765][ T1164] hsr_slave_1: left promiscuous mode [ 292.508793][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.517429][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.526220][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.533750][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.585575][ T1164] veth1_macvtap: left promiscuous mode [ 292.591208][ T1164] veth0_macvtap: left promiscuous mode [ 292.598063][ T1164] veth1_vlan: left promiscuous mode [ 292.603449][ T1164] veth0_vlan: left promiscuous mode [ 292.618975][ T1164] veth1_macvtap: left promiscuous mode [ 292.625121][ T1164] veth0_macvtap: left promiscuous mode [ 292.631982][ T1164] veth1_vlan: left promiscuous mode [ 292.638754][ T1164] veth0_vlan: left promiscuous mode [ 292.909875][ T5864] Bluetooth: hci1: command tx timeout [ 293.066924][ T5864] Bluetooth: hci3: command tx timeout [ 293.342825][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 293.400763][ T1164] team0 (unregistering): Port device C removed [ 294.312553][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 294.362676][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 294.871239][T11501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.014314][T11501] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.074406][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.081608][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.153679][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.160882][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.324559][T11537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.338907][T11537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.364958][T11537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.410182][T11539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.446888][T11537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.577427][T11539] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.661485][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.668783][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.698137][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.705389][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.819886][ T1164] IPVS: stop unused estimator thread 0... [ 295.871487][T11539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.904472][T11539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.061752][T11501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.121115][T11537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.197846][T11537] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.255174][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.262406][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.336932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.344188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.759377][T11539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.040593][ T10] usb 5-1: USB disconnect, device number 8 [ 297.069666][ T10] usblp0: removed [ 297.316938][T11537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.387298][T11501] veth0_vlan: entered promiscuous mode [ 297.452923][T11501] veth1_vlan: entered promiscuous mode [ 297.644484][T11501] veth0_macvtap: entered promiscuous mode [ 297.670646][T11501] veth1_macvtap: entered promiscuous mode [ 297.792453][T11537] veth0_vlan: entered promiscuous mode [ 297.848141][T11537] veth1_vlan: entered promiscuous mode [ 297.883483][T11501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.907901][T11501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.019159][T11733] syzkaller1: entered promiscuous mode [ 298.036479][T11733] syzkaller1: entered allmulticast mode [ 298.157481][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.179783][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.287170][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.306456][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.434046][T11537] veth0_macvtap: entered promiscuous mode [ 298.472023][T11539] veth0_vlan: entered promiscuous mode [ 298.517470][T11537] veth1_macvtap: entered promiscuous mode [ 298.638272][T11539] veth1_vlan: entered promiscuous mode [ 298.696544][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.712879][T11537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.728992][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.775737][T11537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.855032][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.867426][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.887763][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.897871][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.935296][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.944761][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.068471][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.086404][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.120311][ T10] libceph: connect (1)[c::]:6789 error -101 [ 299.150621][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 299.179993][T11539] veth0_macvtap: entered promiscuous mode [ 299.199321][T11749] ceph: No mds server is up or the cluster is laggy [ 299.214881][ T10] libceph: connect (1)[c::]:6789 error -101 [ 299.230108][T11539] veth1_macvtap: entered promiscuous mode [ 299.256002][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 299.263766][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.276704][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.380155][T11539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.446025][T11539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.509543][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.566018][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.594684][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.656684][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.892939][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.927062][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.940863][ T1164] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 300.058254][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.102100][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.569862][ T7234] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 300.802956][ T7234] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.834195][ T7234] usb 7-1: config 0 interface 0 has no altsetting 0 [ 300.857824][ T7234] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 300.875610][ T7234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.905685][ T7234] usb 7-1: Product: syz [ 300.923013][ T7234] usb 7-1: Manufacturer: syz [ 300.943136][ T7234] usb 7-1: SerialNumber: syz [ 300.976610][ T7234] usb 7-1: config 0 descriptor?? [ 301.002870][ T7234] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 301.039237][ T7234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.059486][ T7234] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 301.062551][ T7234] usb 7-1: media controller created [ 301.092751][ T7234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.118126][T11813] syzkaller1: entered promiscuous mode [ 301.118161][T11813] syzkaller1: entered allmulticast mode [ 301.307322][ T7234] DVB: Unable to find symbol tda10046_attach() [ 301.336223][ T7234] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 301.376271][ T7234] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 302.119346][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 302.143121][ T920] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 302.192853][ T7234] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 302.215230][ T7234] usb 7-1: USB disconnect, device number 2 [ 302.272946][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 302.285904][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.307562][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 302.324007][ T920] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 302.327867][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.357478][ T920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.360587][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.377932][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.390936][ T9] usb 5-1: config 0 descriptor?? [ 302.404680][ T920] usb 2-1: config 0 descriptor?? [ 302.422544][ T920] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 302.684594][T11858] program syz.5.2493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.846228][ T9] plantronics 0003:047F:FFFF.0023: ignoring exceeding usage max [ 302.897956][ T9] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 303.237497][ T920] gspca_sunplus: reg_w_riv err -71 [ 303.250181][ T920] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 303.311948][ T920] usb 2-1: USB disconnect, device number 34 [ 303.545530][T11879] syzkaller1: entered promiscuous mode [ 303.551632][T11879] syzkaller1: entered allmulticast mode [ 304.017465][T11891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.157487][T11896] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 304.326673][T11901] syzkaller1: entered promiscuous mode [ 304.335817][T11901] syzkaller1: entered allmulticast mode [ 304.931429][ T9] usb 5-1: USB disconnect, device number 9 [ 305.530699][ T7234] psmouse serio2: Failed to reset mouse on : -5 [ 306.564532][T11989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.691279][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.824292][T11999] syzkaller1: entered promiscuous mode [ 306.831962][T11999] syzkaller1: entered allmulticast mode [ 306.877439][ T9] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 306.885596][ T9] usb 5-1: config 0 has no interface number 0 [ 306.902873][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 306.923916][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.956869][ T9] usb 5-1: Product: syz [ 306.961104][ T9] usb 5-1: Manufacturer: syz [ 306.983174][ T9] usb 5-1: SerialNumber: syz [ 307.002549][ T9] usb 5-1: config 0 descriptor?? [ 307.250774][ T9] f81534a_ctrl 5-1:0.74: failed to set register 0x116: -5 [ 307.264009][ T9] f81534a_ctrl 5-1:0.74: failed to enable ports: -5 [ 307.275114][ T9] f81534a_ctrl 5-1:0.74: probe with driver f81534a_ctrl failed with error -5 [ 307.303418][ T9] usb 5-1: USB disconnect, device number 10 [ 307.306753][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 307.479161][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.491446][ T43] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 307.491480][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.496266][ T43] usb 7-1: config 0 descriptor?? [ 307.851184][T12023] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.858491][T12023] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 307.865589][T12023] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.872206][T12023] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 307.887268][T12023] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.893748][T12023] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 307.903444][T12023] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.909929][T12023] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 307.919645][T12023] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.920104][T12026] netlink: 'syz.1.2566': attribute type 1 has an invalid length. [ 307.926125][T12023] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 307.951459][T12026] netlink: 'syz.1.2566': attribute type 2 has an invalid length. [ 307.952109][ T43] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 308.009783][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0024/input/input36 [ 308.126902][ T43] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 308.149803][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 308.318215][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 308.330849][ T24] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 308.340237][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.349972][ T24] usb 5-1: Product: syz [ 308.354332][ T24] usb 5-1: Manufacturer: syz [ 308.359487][ T24] usb 5-1: SerialNumber: syz [ 308.369578][ T24] usb 5-1: config 0 descriptor?? [ 308.595204][ T5871] usb 7-1: USB disconnect, device number 3 [ 308.611523][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 308.656009][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 308.835979][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 308.846805][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.862947][ T43] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 308.872567][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.885822][ T43] usb 2-1: Product: syz [ 308.890105][ T43] usb 2-1: Manufacturer: syz [ 308.914559][ T43] usb 2-1: SerialNumber: syz [ 308.936410][ T43] usb 2-1: config 0 descriptor?? [ 309.325901][ T7234] misc userio: Buffer overflowed, userio client isn't keeping up [ 309.365674][ T43] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 309.409866][ T24] gspca_sunplus: reg_w_riv err -71 [ 309.425663][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 309.452323][ T24] usb 5-1: USB disconnect, device number 11 [ 309.574170][ T43] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 309.580563][T12055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.601131][ T43] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 309.793186][ T5901] usb 2-1: USB disconnect, device number 35 [ 309.875443][T12061] syzkaller1: entered promiscuous mode [ 309.881251][T12061] syzkaller1: entered allmulticast mode [ 309.987044][T12063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.395978][ T7234] input: PS/2 Generic Mouse as /devices/serio2/input/input35 [ 310.684987][ T7234] psmouse serio2: Failed to enable mouse on [ 310.864745][ T7234] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 311.061008][ T7234] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.104578][ T7234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.112642][ T7234] usb 7-1: Product: syz [ 311.155760][ T7234] usb 7-1: Manufacturer: syz [ 311.162438][ T7234] usb 7-1: SerialNumber: syz [ 311.183729][ T7234] usb 7-1: config 0 descriptor?? [ 311.430299][ T7234] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 311.957834][T12129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.237674][ T7234] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 312.304847][ T7234] usb 7-1: USB disconnect, device number 4 [ 312.563041][T12158] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 312.581910][T12158] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 312.590571][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2611'. [ 312.785234][ T7234] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 312.946440][ T7234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.971463][ T7234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.989416][ T7234] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 313.002427][ T7234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.019699][ T7234] usb 5-1: config 0 descriptor?? [ 313.140864][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 313.505780][ T7234] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0 [ 313.530635][ T7234] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0 [ 313.569636][ T7234] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0 [ 313.592559][ T7234] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0 [ 313.613915][ T7234] playstation 0003:054C:0DF2.0025: unknown main item tag 0x0 [ 313.639880][ T7234] playstation 0003:054C:0DF2.0025: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 313.662183][T12198] input: syz1 as /devices/virtual/input/input37 [ 313.925346][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2624'. [ 314.134692][ T7234] playstation 0003:054C:0DF2.0025: Failed to retrieve feature with reportID 5: -71 [ 314.159277][ T7234] playstation 0003:054C:0DF2.0025: Failed to retrieve DualSense calibration info: -71 [ 314.181954][ T7234] playstation 0003:054C:0DF2.0025: Failed to get calibration data from DualSense [ 314.218776][ T7234] playstation 0003:054C:0DF2.0025: Failed to create dualsense. [ 314.260077][ T7234] playstation 0003:054C:0DF2.0025: probe with driver playstation failed with error -71 [ 314.386803][ T7234] usb 5-1: USB disconnect, device number 12 [ 315.343855][ T7234] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 315.548548][ T7234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.579424][ T7234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.592101][ T7234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.605661][ T7234] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.618628][ T7234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.646610][ T7234] usb 5-1: config 0 descriptor?? [ 316.063194][ T5901] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.080369][ T7234] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 316.122966][ T7234] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 316.142126][ T7234] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 316.154055][ T7234] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 316.181669][ T7234] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 316.210812][ T7234] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 316.232363][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 316.246551][ T5901] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 316.266103][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.292414][ T5901] usb 6-1: Product: syz [ 316.296662][ T5901] usb 6-1: Manufacturer: syz [ 316.301294][ T5901] usb 6-1: SerialNumber: syz [ 316.343412][ T5901] usb 6-1: config 0 descriptor?? [ 316.345916][ T7234] usb 5-1: USB disconnect, device number 13 [ 316.377610][ T5901] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 316.423023][ T5901] usb 6-1: Detected FT232H [ 316.582193][ T5901] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 317.030419][ T5901] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 317.246412][ T43] usb 6-1: USB disconnect, device number 2 [ 317.307293][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 317.377835][ T43] ftdi_sio 6-1:0.0: device disconnected [ 317.590335][T12337] syzkaller1: entered promiscuous mode [ 317.600112][T12337] syzkaller1: entered allmulticast mode [ 317.638423][ T43] IPVS: starting estimator thread 0... [ 317.651487][ T5901] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 317.743602][T12341] IPVS: using max 23 ests per chain, 55200 per kthread [ 317.824210][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 317.831530][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.898948][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.939827][ T5901] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 317.963919][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.008645][ T5901] usb 2-1: config 0 descriptor?? [ 318.061639][ T5952] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 318.265908][ T5952] usb 5-1: config 0 has no interfaces? [ 318.279404][ T5952] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 318.299289][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.336806][ T5952] usb 5-1: config 0 descriptor?? [ 318.551474][T12372] syzkaller1: entered promiscuous mode [ 318.557249][T12372] syzkaller1: entered allmulticast mode [ 318.586878][ T5952] usb 5-1: USB disconnect, device number 14 [ 318.847863][ T5901] letsketch 0003:6161:4D15.0027: Device info: п [ 318.960828][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 319.091436][ T5901] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 319.099460][ T5901] letsketch 0003:6161:4D15.0027: probe with driver letsketch failed with error -71 [ 319.125766][ T5901] usb 2-1: USB disconnect, device number 36 [ 319.141105][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 319.157192][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.187037][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.216376][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.238031][ T9] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 319.249444][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.271373][ T9] usb 7-1: config 0 descriptor?? [ 319.733183][T12402] netlink: 'syz.1.2681': attribute type 21 has an invalid length. [ 319.751634][ T9] hid-multitouch 0003:0457:07DA.0028: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 319.779608][T12402] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2681'. [ 319.940514][T12405] tipc: Started in network mode [ 319.945450][T12405] tipc: Node identity ac14142f, cluster identity 4711 [ 319.974575][T12405] tipc: New replicast peer: 0.0.0.0 [ 319.981479][T12405] tipc: Enabled bearer , priority 10 [ 320.007119][T12407] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 320.037535][ T5856] usb 7-1: USB disconnect, device number 5 [ 320.288505][T12419] syzkaller1: entered promiscuous mode [ 320.302607][T12419] syzkaller1: entered allmulticast mode [ 320.407014][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2689'. [ 321.110611][ T5856] tipc: Node number set to 2886997039 [ 321.347152][T12459] vxcan0: tx address claim with different name [ 321.424936][ T5856] IPVS: starting estimator thread 0... [ 321.529625][T12464] IPVS: using max 30 ests per chain, 72000 per kthread [ 321.559417][ T43] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 321.751106][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 321.766950][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.802368][ T43] usb 2-1: config 0 descriptor?? [ 321.825247][ T43] cp210x 2-1:0.0: cp210x converter detected [ 321.969390][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 322.056907][T12483] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2718'. [ 322.067577][T12483] net_ratelimit: 66 callbacks suppressed [ 322.067599][T12483] openvswitch: netlink: Message has 512 unknown bytes. [ 322.126231][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.140912][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.152036][ T9] usb 7-1: Product: syz [ 322.156333][ T9] usb 7-1: Manufacturer: syz [ 322.162248][ T9] usb 7-1: SerialNumber: syz [ 322.178079][ T9] usb 7-1: config 0 descriptor?? [ 322.181702][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 322.234316][ T43] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 322.333869][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.341161][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.433698][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 322.484696][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 322.694101][ T43] usb 2-1: USB disconnect, device number 37 [ 322.719732][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 322.746289][ T43] cp210x 2-1:0.0: device disconnected [ 323.055762][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 323.096842][ T9] usb 7-1: USB disconnect, device number 6 [ 323.256666][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 324.401285][T12551] block nbd5: Send control failed (result -32) [ 324.411582][T12551] block nbd5: Request send failed, requeueing [ 324.434741][ T25] block nbd5: Dead connection, failed to find a fallback [ 324.442096][ T25] block nbd5: shutting down sockets [ 324.447410][ T25] blk_print_req_error: 53 callbacks suppressed [ 324.447429][ T25] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.467066][T12551] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.483094][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 324.494634][T12551] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.506174][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 324.518499][T12551] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.528578][T12551] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.541414][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 324.551453][T12551] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.563095][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 324.574765][T12551] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.585805][T12551] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.595544][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 324.616622][T12551] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.629049][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 324.646505][T12551] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 324.665802][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 324.676142][T12551] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 324.687749][T12551] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 324.940191][T12560] loop8: detected capacity change from 0 to 8 [ 324.947393][T12560] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 324.956522][T12560] loop8: p1 start 540042604 is beyond EOD, truncated [ 324.966236][T12560] loop8: p2 start 528661076 is beyond EOD, truncated [ 324.973385][T12560] loop8: p3 start 8 is beyond EOD, truncated [ 324.980013][T12560] loop8: p4 start 3529794595 is beyond EOD, truncated [ 324.988171][T12560] loop8: p5 start 2690239768 is beyond EOD, truncated [ 324.995238][T12560] loop8: p6 start 1431538145 is beyond EOD, truncated [ 325.002604][T12560] loop8: p7 start 1634731803 is beyond EOD, truncated [ 325.010148][T12560] loop8: p8 start 614672050 is beyond EOD, truncated [ 325.016962][T12560] loop8: p9 start 609447309 is beyond EOD, truncated [ 325.024375][T12560] loop8: p10 start 3832541991 is beyond EOD, truncated [ 325.032402][T12560] loop8: p11 start 3286981679 is beyond EOD, truncated [ 325.088933][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 325.263746][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.287625][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 325.311642][ T43] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.341331][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.378136][ T43] usb 6-1: config 0 descriptor?? [ 325.403821][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 325.475008][ T24] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 325.494719][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.522563][ T24] usb 2-1: Product: syz [ 325.526897][ T24] usb 2-1: Manufacturer: syz [ 325.535134][ T24] usb 2-1: SerialNumber: syz [ 325.558975][ T24] usb 2-1: config 0 descriptor?? [ 325.806211][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 325.809383][T12574] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x1 [ 325.837632][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 326.049093][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 326.073140][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 326.080832][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 326.089645][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 326.096728][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 326.105335][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 326.114056][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 326.126559][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 326.133879][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 326.141561][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 326.149207][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 326.156341][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 326.163486][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 326.181814][ T43] pwc: Registered as video103. [ 326.201301][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 326.237508][ T24] mos7840 2-1:0.0: required endpoints missing [ 326.247575][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 326.270164][ T43] usb 6-1: USB disconnect, device number 3 [ 326.279638][ T24] usb 2-1: USB disconnect, device number 38 [ 326.313331][ T43] [ 326.315756][ T43] ====================================================== [ 326.322852][ T43] WARNING: possible circular locking dependency detected [ 326.329922][ T43] syzkaller #0 Not tainted [ 326.334369][ T43] ------------------------------------------------------ [ 326.341411][ T43] kworker/1:1/43 is trying to acquire lock: [ 326.347337][ T43] ffff88801b6ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 326.357901][ T43] [ 326.357901][ T43] but task is already holding lock: [ 326.365289][ T43] ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 326.375590][ T43] [ 326.375590][ T43] which lock already depends on the new lock. [ 326.375590][ T43] [ 326.386029][ T43] [ 326.386029][ T43] the existing dependency chain (in reverse order) is: [ 326.395589][ T43] [ 326.395589][ T43] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 326.403794][ T43] lock_acquire+0x120/0x360 [ 326.408940][ T43] down_write+0x96/0x1f0 [ 326.413721][ T43] kernfs_add_one+0x41/0x520 [ 326.418848][ T43] kernfs_create_dir_ns+0xde/0x130 [ 326.424521][ T43] internal_create_group+0x419/0x1110 [ 326.430521][ T43] cpuhp_invoke_callback+0x445/0x860 [ 326.436359][ T43] cpuhp_issue_call+0x430/0x7a0 [ 326.441750][ T43] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 326.448352][ T43] __cpuhp_setup_state+0x3f/0x60 [ 326.453829][ T43] do_one_initcall+0x233/0x820 [ 326.459419][ T43] do_initcall_level+0x104/0x190 [ 326.464897][ T43] do_initcalls+0x59/0xa0 [ 326.469763][ T43] kernel_init_freeable+0x334/0x4b0 [ 326.475491][ T43] kernel_init+0x1d/0x1d0 [ 326.480439][ T43] ret_from_fork+0x47c/0x820 [ 326.485562][ T43] ret_from_fork_asm+0x1a/0x30 [ 326.491030][ T43] [ 326.491030][ T43] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 326.498865][ T43] [ 326.498865][ T43] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 326.507225][ T43] lock_acquire+0x120/0x360 [ 326.512259][ T43] cpus_read_lock+0x42/0x160 [ 326.517378][ T43] static_key_slow_inc+0x12/0x30 [ 326.522850][ T43] udp_lib_setsockopt+0x3bc/0x970 [ 326.528596][ T43] udp_setsockopt+0x77/0xc0 [ 326.533640][ T43] do_sock_setsockopt+0x179/0x1b0 [ 326.539289][ T43] __x64_sys_setsockopt+0x13f/0x1b0 [ 326.545050][ T43] do_syscall_64+0xfa/0xfa0 [ 326.550081][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.556502][ T43] [ 326.556502][ T43] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 326.564247][ T43] lock_acquire+0x120/0x360 [ 326.569283][ T43] lock_sock_nested+0x48/0x100 [ 326.574805][ T43] tcp_sendmsg+0x21/0x50 [ 326.579616][ T43] __sock_sendmsg+0x19c/0x270 [ 326.584873][ T43] sock_sendmsg+0x158/0x230 [ 326.589916][ T43] __sock_xmit+0x1c1/0x470 [ 326.594890][ T43] nbd_send_cmd+0x863/0x1ba0 [ 326.600021][ T43] nbd_queue_rq+0xcdb/0xf10 [ 326.605158][ T43] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 326.611242][ T43] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 326.618109][ T43] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 326.624628][ T43] blk_mq_run_hw_queue+0x348/0x4f0 [ 326.630277][ T43] blk_mq_dispatch_list+0xd0c/0xe00 [ 326.636025][ T43] blk_mq_flush_plug_list+0x469/0x550 [ 326.641935][ T43] __blk_flush_plug+0x3d3/0x4b0 [ 326.647324][ T43] __submit_bio+0x2d3/0x5a0 [ 326.652356][ T43] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 326.658640][ T43] __bread_gfp+0x216/0x3c0 [ 326.663588][ T43] udf_load_vrs+0x365/0xf20 [ 326.668633][ T43] udf_fill_super+0x5ad/0x17a0 [ 326.673939][ T43] get_tree_bdev_flags+0x40e/0x4d0 [ 326.679619][ T43] vfs_get_tree+0x92/0x2b0 [ 326.684664][ T43] do_new_mount+0x2a2/0xa30 [ 326.689704][ T43] __se_sys_mount+0x317/0x410 [ 326.695033][ T43] do_syscall_64+0xfa/0xfa0 [ 326.700071][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.706493][ T43] [ 326.706493][ T43] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 326.714164][ T43] lock_acquire+0x120/0x360 [ 326.719200][ T43] __mutex_lock+0x187/0x1350 [ 326.724320][ T43] nbd_queue_rq+0x257/0xf10 [ 326.729361][ T43] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 326.735447][ T43] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 326.742312][ T43] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 326.748826][ T43] blk_mq_run_hw_queue+0x348/0x4f0 [ 326.754685][ T43] blk_mq_dispatch_list+0xd0c/0xe00 [ 326.760423][ T43] blk_mq_flush_plug_list+0x469/0x550 [ 326.766332][ T43] __blk_flush_plug+0x3d3/0x4b0 [ 326.771805][ T43] __submit_bio+0x2d3/0x5a0 [ 326.776832][ T43] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 326.782996][ T43] block_read_full_folio+0x599/0x830 [ 326.788813][ T43] filemap_read_folio+0x114/0x380 [ 326.794378][ T43] do_read_cache_folio+0x350/0x590 [ 326.800023][ T43] read_part_sector+0xb6/0x2b0 [ 326.805325][ T43] adfspart_check_ICS+0xa4/0xa50 [ 326.810835][ T43] bdev_disk_changed+0x75f/0x14b0 [ 326.816393][ T43] blkdev_get_whole+0x380/0x510 [ 326.821971][ T43] bdev_open+0x31e/0xd30 [ 326.826777][ T43] blkdev_open+0x457/0x600 [ 326.831746][ T43] do_dentry_open+0x950/0x13f0 [ 326.837049][ T43] vfs_open+0x3b/0x340 [ 326.841661][ T43] path_openat+0x2ee5/0x3830 [ 326.846786][ T43] do_filp_open+0x1fa/0x410 [ 326.851852][ T43] do_sys_openat2+0x121/0x1c0 [ 326.857062][ T43] __x64_sys_openat+0x138/0x170 [ 326.862446][ T43] do_syscall_64+0xfa/0xfa0 [ 326.867475][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.873898][ T43] [ 326.873898][ T43] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 326.881119][ T43] lock_acquire+0x120/0x360 [ 326.886152][ T43] __mutex_lock+0x187/0x1350 [ 326.891270][ T43] nbd_queue_rq+0xc8/0xf10 [ 326.896343][ T43] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 326.902424][ T43] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 326.909457][ T43] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 326.916064][ T43] blk_mq_run_hw_queue+0x348/0x4f0 [ 326.921723][ T43] blk_mq_dispatch_list+0xd0c/0xe00 [ 326.927477][ T43] blk_mq_flush_plug_list+0x469/0x550 [ 326.933390][ T43] __blk_flush_plug+0x3d3/0x4b0 [ 326.938811][ T43] __submit_bio+0x2d3/0x5a0 [ 326.943848][ T43] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 326.950020][ T43] block_read_full_folio+0x599/0x830 [ 326.955846][ T43] filemap_read_folio+0x114/0x380 [ 326.961405][ T43] do_read_cache_folio+0x350/0x590 [ 326.967051][ T43] read_part_sector+0xb6/0x2b0 [ 326.972359][ T43] adfspart_check_ICS+0xa4/0xa50 [ 326.978219][ T43] bdev_disk_changed+0x75f/0x14b0 [ 326.983904][ T43] blkdev_get_whole+0x380/0x510 [ 326.989314][ T43] bdev_open+0x31e/0xd30 [ 326.994182][ T43] blkdev_open+0x457/0x600 [ 326.999135][ T43] do_dentry_open+0x950/0x13f0 [ 327.004434][ T43] vfs_open+0x3b/0x340 [ 327.009133][ T43] path_openat+0x2ee5/0x3830 [ 327.014286][ T43] do_filp_open+0x1fa/0x410 [ 327.019460][ T43] do_sys_openat2+0x121/0x1c0 [ 327.024685][ T43] __x64_sys_openat+0x138/0x170 [ 327.030085][ T43] do_syscall_64+0xfa/0xfa0 [ 327.035133][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.041564][ T43] [ 327.041564][ T43] -> #4 (set->srcu){.+.+}-{0:0}: [ 327.048742][ T43] lock_sync+0xba/0x160 [ 327.053429][ T43] __synchronize_srcu+0x96/0x3a0 [ 327.058924][ T43] elevator_switch+0x12b/0x640 [ 327.064307][ T43] elevator_change+0x2d4/0x450 [ 327.069603][ T43] elevator_set_default+0x186/0x260 [ 327.075392][ T43] blk_register_queue+0x34e/0x3f0 [ 327.080951][ T43] __add_disk+0x677/0xd50 [ 327.085812][ T43] add_disk_fwnode+0xfc/0x480 [ 327.091118][ T43] nbd_dev_add+0x717/0xae0 [ 327.096070][ T43] nbd_init+0x168/0x1f0 [ 327.100777][ T43] do_one_initcall+0x233/0x820 [ 327.106069][ T43] do_initcall_level+0x104/0x190 [ 327.111545][ T43] do_initcalls+0x59/0xa0 [ 327.116397][ T43] kernel_init_freeable+0x334/0x4b0 [ 327.122206][ T43] kernel_init+0x1d/0x1d0 [ 327.127071][ T43] ret_from_fork+0x47c/0x820 [ 327.132203][ T43] ret_from_fork_asm+0x1a/0x30 [ 327.137510][ T43] [ 327.137510][ T43] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 327.145345][ T43] lock_acquire+0x120/0x360 [ 327.150470][ T43] __mutex_lock+0x187/0x1350 [ 327.155592][ T43] elevator_change+0x19b/0x450 [ 327.160903][ T43] elevator_set_none+0x42/0xb0 [ 327.166203][ T43] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 327.172641][ T43] nbd_start_device+0x17f/0xb10 [ 327.178025][ T43] nbd_genl_connect+0x135b/0x18f0 [ 327.183581][ T43] genl_family_rcv_msg_doit+0x215/0x300 [ 327.189759][ T43] genl_rcv_msg+0x60e/0x790 [ 327.194889][ T43] netlink_rcv_skb+0x208/0x470 [ 327.200185][ T43] genl_rcv+0x28/0x40 [ 327.204695][ T43] netlink_unicast+0x82f/0x9e0 [ 327.209987][ T43] netlink_sendmsg+0x805/0xb30 [ 327.215391][ T43] __sock_sendmsg+0x219/0x270 [ 327.220629][ T43] ____sys_sendmsg+0x505/0x830 [ 327.225937][ T43] ___sys_sendmsg+0x21f/0x2a0 [ 327.231158][ T43] __x64_sys_sendmsg+0x19b/0x260 [ 327.236641][ T43] do_syscall_64+0xfa/0xfa0 [ 327.241676][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.248128][ T43] [ 327.248128][ T43] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 327.256797][ T43] lock_acquire+0x120/0x360 [ 327.261834][ T43] blk_alloc_queue+0x538/0x620 [ 327.267135][ T43] __blk_mq_alloc_disk+0x15c/0x340 [ 327.272771][ T43] nbd_dev_add+0x46c/0xae0 [ 327.277844][ T43] nbd_init+0x168/0x1f0 [ 327.282557][ T43] do_one_initcall+0x233/0x820 [ 327.287862][ T43] do_initcall_level+0x104/0x190 [ 327.293329][ T43] do_initcalls+0x59/0xa0 [ 327.298188][ T43] kernel_init_freeable+0x334/0x4b0 [ 327.303922][ T43] kernel_init+0x1d/0x1d0 [ 327.308784][ T43] ret_from_fork+0x47c/0x820 [ 327.313906][ T43] ret_from_fork_asm+0x1a/0x30 [ 327.319198][ T43] [ 327.319198][ T43] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 327.326450][ T43] lock_acquire+0x120/0x360 [ 327.331494][ T43] fs_reclaim_acquire+0x72/0x100 [ 327.336970][ T43] kmem_cache_alloc_noprof+0x45/0x6e0 [ 327.342874][ T43] __kernfs_iattrs+0xd9/0x320 [ 327.348082][ T43] kernfs_iop_setattr+0xea/0x3f0 [ 327.353545][ T43] notify_change+0xc17/0xf40 [ 327.358661][ T43] do_truncate+0x1a4/0x220 [ 327.363607][ T43] path_openat+0x306c/0x3830 [ 327.368752][ T43] do_filp_open+0x1fa/0x410 [ 327.373800][ T43] do_sys_openat2+0x121/0x1c0 [ 327.379092][ T43] __x64_sys_openat+0x138/0x170 [ 327.384468][ T43] do_syscall_64+0xfa/0xfa0 [ 327.389594][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.396060][ T43] [ 327.396060][ T43] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 327.404685][ T43] validate_chain+0xb9b/0x2140 [ 327.410345][ T43] __lock_acquire+0xab9/0xd20 [ 327.415641][ T43] lock_acquire+0x120/0x360 [ 327.420669][ T43] down_write+0x96/0x1f0 [ 327.425456][ T43] kernfs_unlink_sibling+0x71/0x180 [ 327.431215][ T43] __kernfs_remove+0x353/0x570 [ 327.436601][ T43] kernfs_remove_by_name_ns+0xaf/0x130 [ 327.442591][ T43] sysfs_unmerge_group+0xd4/0x140 [ 327.448151][ T43] dpm_sysfs_remove+0x76/0xd0 [ 327.453358][ T43] device_del+0x251/0x8e0 [ 327.458215][ T43] device_unregister+0x20/0xc0 [ 327.463508][ T43] usb_pwc_disconnect+0xe2/0x160 [ 327.469049][ T43] usb_unbind_interface+0x26b/0x910 [ 327.474806][ T43] device_release_driver_internal+0x4d6/0x800 [ 327.481461][ T43] bus_remove_device+0x34d/0x410 [ 327.486945][ T43] device_del+0x511/0x8e0 [ 327.491805][ T43] usb_disable_device+0x3e9/0x8a0 [ 327.497367][ T43] usb_disconnect+0x330/0x950 [ 327.502585][ T43] hub_event+0x1cf5/0x4a20 [ 327.507554][ T43] process_scheduled_works+0xade/0x17b0 [ 327.513802][ T43] worker_thread+0x8a0/0xda0 [ 327.518928][ T43] kthread+0x70e/0x8a0 [ 327.523545][ T43] ret_from_fork+0x47c/0x820 [ 327.528675][ T43] ret_from_fork_asm+0x1a/0x30 [ 327.534057][ T43] [ 327.534057][ T43] other info that might help us debug this: [ 327.534057][ T43] [ 327.544296][ T43] Chain exists of: [ 327.544296][ T43] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 327.544296][ T43] [ 327.558847][ T43] Possible unsafe locking scenario: [ 327.558847][ T43] [ 327.566322][ T43] CPU0 CPU1 [ 327.571893][ T43] ---- ---- [ 327.577297][ T43] lock(&root->kernfs_rwsem); [ 327.582082][ T43] lock(cpuhp_state_mutex); [ 327.589213][ T43] lock(&root->kernfs_rwsem); [ 327.596506][ T43] lock(&root->kernfs_iattr_rwsem); [ 327.601824][ T43] [ 327.601824][ T43] *** DEADLOCK *** [ 327.601824][ T43] [ 327.609982][ T43] 8 locks held by kworker/1:1/43: [ 327.615021][ T43] #0: ffff888143ea1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 327.626531][ T43] #1: ffffc90000b37ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 327.638381][ T43] #2: ffff888144fb3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 327.647404][ T43] #3: ffff88806dd6b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 327.656573][ T43] #4: ffff88807c646160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 327.667116][ T43] #5: ffff888050280a90 (&pdev->vb_queue_lock){+.+.}-{4:4}, at: usb_pwc_disconnect+0x50/0x160 [ 327.677410][ T43] #6: ffff888050280a00 (&pdev->v4l2_lock){+.+.}-{4:4}, at: usb_pwc_disconnect+0x61/0x160 [ 327.687438][ T43] #7: ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 327.698249][ T43] [ 327.698249][ T43] stack backtrace: [ 327.704276][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 327.704301][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.704314][ T43] Workqueue: usb_hub_wq hub_event [ 327.704351][ T43] Call Trace: [ 327.704360][ T43] [ 327.704367][ T43] dump_stack_lvl+0x189/0x250 [ 327.704396][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.704423][ T43] ? __pfx__printk+0x10/0x10 [ 327.704449][ T43] ? print_lock_name+0xde/0x100 [ 327.704474][ T43] print_circular_bug+0x2ee/0x310 [ 327.704500][ T43] check_noncircular+0x134/0x160 [ 327.704525][ T43] validate_chain+0xb9b/0x2140 [ 327.704556][ T43] __lock_acquire+0xab9/0xd20 [ 327.704576][ T43] ? kernfs_unlink_sibling+0x71/0x180 [ 327.704598][ T43] lock_acquire+0x120/0x360 [ 327.704615][ T43] ? kernfs_unlink_sibling+0x71/0x180 [ 327.704642][ T43] down_write+0x96/0x1f0 [ 327.704661][ T43] ? kernfs_unlink_sibling+0x71/0x180 [ 327.704682][ T43] ? __pfx_down_write+0x10/0x10 [ 327.704701][ T43] ? kernfs_root+0x1c/0x230 [ 327.704717][ T43] ? kernfs_root+0x1c/0x230 [ 327.704734][ T43] ? kernfs_root+0x1ea/0x230 [ 327.704751][ T43] kernfs_unlink_sibling+0x71/0x180 [ 327.704774][ T43] __kernfs_remove+0x353/0x570 [ 327.704797][ T43] kernfs_remove_by_name_ns+0xaf/0x130 [ 327.704819][ T43] sysfs_unmerge_group+0xd4/0x140 [ 327.704839][ T43] dpm_sysfs_remove+0x76/0xd0 [ 327.704860][ T43] device_del+0x251/0x8e0 [ 327.704880][ T43] ? __pfx_device_del+0x10/0x10 [ 327.704895][ T43] ? kobject_put+0x43f/0x480 [ 327.704923][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.704952][ T43] device_unregister+0x20/0xc0 [ 327.704968][ T43] usb_pwc_disconnect+0xe2/0x160 [ 327.704991][ T43] usb_unbind_interface+0x26b/0x910 [ 327.705011][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 327.705033][ T43] device_release_driver_internal+0x4d6/0x800 [ 327.705055][ T43] bus_remove_device+0x34d/0x410 [ 327.705081][ T43] device_del+0x511/0x8e0 [ 327.705098][ T43] ? __pm_runtime_barrier+0x212/0x460 [ 327.705117][ T43] ? __pfx_device_del+0x10/0x10 [ 327.705132][ T43] ? __pfx___mutex_lock+0x10/0x10 [ 327.705152][ T43] usb_disable_device+0x3e9/0x8a0 [ 327.705181][ T43] usb_disconnect+0x330/0x950 [ 327.705207][ T43] hub_event+0x1cf5/0x4a20 [ 327.705242][ T43] ? do_raw_spin_lock+0x121/0x290 [ 327.705267][ T43] ? register_lock_class+0x51/0x320 [ 327.705291][ T43] ? __pfx_hub_event+0x10/0x10 [ 327.705316][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 327.705340][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.705363][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 327.705383][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 327.705404][ T43] process_scheduled_works+0xade/0x17b0 [ 327.705436][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.705463][ T43] worker_thread+0x8a0/0xda0 [ 327.705494][ T43] kthread+0x70e/0x8a0 [ 327.705521][ T43] ? __pfx_worker_thread+0x10/0x10 [ 327.705541][ T43] ? __pfx_kthread+0x10/0x10 [ 327.705566][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.705590][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.705605][ T43] ? __pfx_kthread+0x10/0x10 [ 327.705629][ T43] ret_from_fork+0x47c/0x820 [ 327.705650][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 327.705671][ T43] ? __switch_to_asm+0x39/0x70 [ 327.705688][ T43] ? __switch_to_asm+0x33/0x70 [ 327.705704][ T43] ? __pfx_kthread+0x10/0x10 [ 327.705729][ T43] ret_from_fork_asm+0x1a/0x30 [ 327.705752][ T43] [ 328.147323][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.182251][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 328.196685][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 328.210772][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.232505][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.242057][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.251720][ T9] usb 5-1: config 0 descriptor?? [ 328.258848][T12580] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 328.689755][ T9] hid_parser_main: 10 callbacks suppressed [ 328.689777][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.703100][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.710700][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.718852][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.731153][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.738982][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.746570][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.753983][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.761622][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.769691][ T9] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 328.783469][ T9] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 328.956908][ T9] usb 5-1: USB disconnect, device number 15 [ 331.295491][ T1115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)