last executing test programs: 1m30.901688338s ago: executing program 2 (id=1781): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff, 0x6}, 0x8) 1m30.785482942s ago: executing program 2 (id=1783): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m28.895962878s ago: executing program 2 (id=1808): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x8000003d) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 1m28.771163039s ago: executing program 2 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 1m28.651337027s ago: executing program 2 (id=1811): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r0 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) 1m28.36536892s ago: executing program 2 (id=1814): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m28.185892087s ago: executing program 32 (id=1814): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 56.195123119s ago: executing program 3 (id=2156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) 56.053295698s ago: executing program 3 (id=2158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x603, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfe}]}, 0x30}}, 0x10) 55.90275746s ago: executing program 3 (id=2160): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0) 47.841454156s ago: executing program 3 (id=2255): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 47.769012587s ago: executing program 3 (id=2256): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 47.249455968s ago: executing program 0 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858db", 0x2f}, {&(0x7f0000000b40)="d569b7a5f82a8e0c50067eb3f27130", 0xf}], 0x2) 47.249306363s ago: executing program 3 (id=2263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) 46.781029656s ago: executing program 33 (id=2263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) 46.720483439s ago: executing program 0 (id=2266): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 46.58555965s ago: executing program 0 (id=2267): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) 43.495942247s ago: executing program 0 (id=2281): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 43.38993769s ago: executing program 0 (id=2283): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x4) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x6}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x4, @time={0x83, 0xa77f}, {0x6, 0x4}, {}, @result={0xf, 0x4}}], 0x38) 42.461501392s ago: executing program 0 (id=2288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x6}) 42.110384529s ago: executing program 34 (id=2288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x6}) 3.288957553s ago: executing program 1 (id=2598): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 2.609299746s ago: executing program 4 (id=2604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000001f008504"]) 2.465616106s ago: executing program 4 (id=2605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.349799311s ago: executing program 1 (id=2607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x7, 0x17, 0x0, 0x4003, 0xf9, 0xf7, 0x79, 0xff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x4, 0x18, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) 2.280743768s ago: executing program 4 (id=2608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe800000000000000000000000000010ff0200000000000000000000000000018f"], 0x340a) 2.202173993s ago: executing program 6 (id=2609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2.116925203s ago: executing program 1 (id=2610): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0x0, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000400)=0x3fd, 0x4) 2.077637891s ago: executing program 6 (id=2611): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000040)) 2.023656357s ago: executing program 1 (id=2612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 2.013707387s ago: executing program 4 (id=2613): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.960073554s ago: executing program 6 (id=2614): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 1.858996413s ago: executing program 4 (id=2615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000300)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000380)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000000400)="8b0b4c"}) clock_nanosleep(0x7, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0x0, 0x0, 0x0}) 1.757502887s ago: executing program 1 (id=2616): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5200005f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.39345829s ago: executing program 1 (id=2617): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) 1.325593217s ago: executing program 6 (id=2618): r0 = semget$private(0x0, 0x6, 0x40d) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x1, 0xf, 0x0) 1.063231216s ago: executing program 5 (id=2619): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 920.317052ms ago: executing program 4 (id=2620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002480), 0x0, 0x404) 849.329875ms ago: executing program 5 (id=2621): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 757.961417ms ago: executing program 5 (id=2622): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 676.968071ms ago: executing program 5 (id=2623): ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000140)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 457.6495ms ago: executing program 5 (id=2624): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x323, @tick=0x65757100}) 350.548861ms ago: executing program 6 (id=2625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2ac00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 107.55595ms ago: executing program 5 (id=2626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=2627): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000003c0)=0x7, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) kernel console output (not intermixed with test programs): nnect, device number 26 [ 215.562399][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.579050][ T5951] usb 1-1: USB disconnect, device number 27 [ 215.800396][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 215.964149][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.975979][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.985819][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 215.995005][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.006602][ T24] usb 2-1: config 0 descriptor?? [ 216.350763][ T5921] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 216.364886][ T5921] ath9k_htc: Failed to initialize the device [ 216.373901][ T5951] usb 1-1: ath9k_htc: USB layer deinitialized [ 216.381213][ T5863] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 216.427766][ T24] hid_parser_main: 2 callbacks suppressed [ 216.427790][ T24] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 216.442882][ T24] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 216.451517][ T24] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 216.458830][ T24] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 216.466737][ T24] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 216.478932][ T24] logitech 0003:046D:C29C.0014: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 216.540779][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 216.558612][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.578523][ T5863] usb 3-1: config 9 has an invalid interface number: 48 but max is 0 [ 216.590941][ T5863] usb 3-1: config 9 has no interface number 0 [ 216.597079][ T5863] usb 3-1: config 9 interface 48 has no altsetting 0 [ 216.622522][ T5863] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 216.631944][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.648172][ T5863] usb 3-1: Product: syz [ 216.653341][ T5863] usb 3-1: Manufacturer: syz [ 216.658002][ T5863] usb 3-1: SerialNumber: syz [ 216.680535][ T5951] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 216.718030][ T9518] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1589'. [ 216.825391][ T24] logitech 0003:046D:C29C.0014: no inputs found [ 216.838804][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 216.838837][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 216.845178][ T5951] usb 1-1: Using ep0 maxpacket: 32 [ 216.851509][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 216.862099][ T5951] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 216.882357][ T24] usb 2-1: USB disconnect, device number 29 [ 216.920434][ T5951] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 216.932447][ T5863] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 216.945367][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.969916][ T5951] usb 1-1: Product: syz [ 216.974297][ T5951] usb 1-1: Manufacturer: syz [ 216.978973][ T5951] usb 1-1: SerialNumber: syz [ 216.999502][ T5951] mos7840 1-1:1.0: missing endpoints [ 217.224469][ T24] usb 1-1: USB disconnect, device number 28 [ 217.547630][ T5863] gspca_vc032x: reg_r err -71 [ 217.561847][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.567199][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.577106][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.585894][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.595705][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.603327][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.615152][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.624957][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.642459][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.653148][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.658958][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.668475][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.674681][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.684571][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.692358][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.698143][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.710763][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.716421][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.724568][ T5863] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.733030][ T5863] gspca_vc032x: Unknown sensor... [ 217.738227][ T5863] vc032x 3-1:9.48: probe with driver vc032x failed with error -22 [ 217.765923][ T5863] usb 3-1: USB disconnect, device number 27 [ 219.083071][ T9580] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.253099][ T9588] sctp: [Deprecated]: syz.2.1620 (pid 9588) Use of int in max_burst socket option deprecated. [ 219.253099][ T9588] Use struct sctp_assoc_value instead [ 219.621032][ T983] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 219.793212][ T983] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.819338][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.839069][ T983] usb 1-1: Product: syz [ 219.846618][ T983] usb 1-1: Manufacturer: syz [ 219.857732][ T983] usb 1-1: SerialNumber: syz [ 219.883885][ T983] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.906817][ T5921] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.299338][ T9614] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1633'. [ 220.310901][ T9614] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1633'. [ 220.322758][ T9614] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1633'. [ 220.534921][ T10] usb 1-1: USB disconnect, device number 29 [ 221.147791][ T5921] usb 1-1: Service connection timeout for: 256 [ 221.162394][ T5921] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 221.180294][ T5921] ath9k_htc: Failed to initialize the device [ 221.189600][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 221.452529][ T9646] block nbd3: not configured, cannot reconfigure [ 221.537831][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 221.712809][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 221.719974][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.731435][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.741354][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 221.750507][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.761357][ T10] usb 1-1: config 0 descriptor?? [ 221.769988][ T10] hub 1-1:0.0: USB hub found [ 221.972906][ T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 222.402015][ T10] hid-generic 0003:046D:C31C.0015: item fetching failed at offset 0/1 [ 222.421127][ T10] hid-generic 0003:046D:C31C.0015: probe with driver hid-generic failed with error -22 [ 222.557657][ T9675] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1661'. [ 222.697918][ T5914] usb 1-1: USB disconnect, device number 30 [ 223.095013][ T9693] sctp: [Deprecated]: syz.3.1670 (pid 9693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.095013][ T9693] Use struct sctp_sack_info instead [ 223.387820][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 223.549279][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 223.557521][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.581585][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.611360][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.636712][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 223.659618][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.670946][ T10] usb 2-1: config 0 descriptor?? [ 224.088287][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.095569][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.123166][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.134685][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.141918][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.158555][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.165565][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.177128][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.184101][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.206045][ T10] kye 0003:0458:0138.0016: unknown main item tag 0x0 [ 224.221832][ T10] kye 0003:0458:0138.0016: collection stack underflow [ 224.232160][ T10] kye 0003:0458:0138.0016: item 0 0 0 12 parsing failed [ 224.242084][ T10] kye 0003:0458:0138.0016: parse failed [ 224.251296][ T10] kye 0003:0458:0138.0016: probe with driver kye failed with error -22 [ 224.341235][ T5914] usb 2-1: USB disconnect, device number 30 [ 224.348853][ T1111] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.500231][ T9732] netlink: 'syz.3.1688': attribute type 31 has an invalid length. [ 224.511919][ T9732] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 224.520513][ T9732] bridge0: port 1(bridge_slave_0) entered learning state [ 224.557948][ T9734] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1689'. [ 224.745922][ T9742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1693'. [ 224.756460][ T9742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1693'. [ 224.766835][ T9742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1693'. [ 225.177798][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.393150][ T9763] fido_id[9763]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.736454][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 225.815326][ T5951] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 225.906706][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 225.923515][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.940047][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 225.950966][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.966715][ T10] usb 2-1: config 0 descriptor?? [ 226.009310][ T5951] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 226.022664][ T5951] usb 1-1: config 0 has no interface number 0 [ 226.039067][ T5951] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.051486][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.068153][ T5951] usb 1-1: Product: syz [ 226.073424][ T5951] usb 1-1: Manufacturer: syz [ 226.083793][ T5951] usb 1-1: SerialNumber: syz [ 226.112771][ T5951] usb 1-1: config 0 descriptor?? [ 226.115217][ T5914] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 226.286005][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 226.301224][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.314218][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.331212][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.344308][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.359426][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.372817][ T5914] usb 3-1: config 0 descriptor?? [ 226.397752][ T10] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 226.462076][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1714'. [ 226.537729][ T5951] usb 1-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (170) [ 226.591404][ C0] usb 2-1: input irq status -75 received [ 226.739006][ T5951] usb 1-1: failed to fetch extended address, random address set [ 226.754588][ T5951] usb 1-1: atusb_probe: initialization failed, error = -524 [ 226.765968][ T5951] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 226.789498][ T5951] usb 1-1: USB disconnect, device number 31 [ 226.792533][ T24] usb 2-1: USB disconnect, device number 31 [ 226.840682][ T5914] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 226.867327][ T5914] microsoft 0003:045E:07DA.0019: no inputs found [ 226.873739][ T5914] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 227.007977][ T5914] usb 3-1: USB disconnect, device number 28 [ 227.681182][ T9815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.156051][ T9834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 228.537114][ T9855] input: syz1 as /devices/virtual/input/input28 [ 228.584019][ T24] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 228.621178][ T5914] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 228.755643][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.774722][ T24] usb 1-1: no configurations [ 228.784222][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 228.789949][ T24] usb 1-1: can't read configurations, error -22 [ 228.824931][ T5914] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 228.841477][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.850536][ T5914] usb 4-1: Product: syz [ 228.860288][ T5914] usb 4-1: Manufacturer: syz [ 228.867209][ T5914] usb 4-1: SerialNumber: syz [ 228.879828][ T5914] usb 4-1: config 0 descriptor?? [ 229.504434][ T5914] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 229.644122][ T5914] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 229.675716][ T5914] usb 4-1: USB disconnect, device number 27 [ 229.740832][ T9899] netlink: 'syz.1.1765': attribute type 83 has an invalid length. [ 229.983508][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 230.163244][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 230.185424][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 230.217895][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.227731][ T24] usb 1-1: Product: syz [ 230.231934][ T24] usb 1-1: Manufacturer: syz [ 230.243044][ T24] usb 1-1: SerialNumber: syz [ 230.265933][ T24] usb 1-1: config 0 descriptor?? [ 230.298198][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 230.962925][ T5921] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 231.088631][ T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 231.118419][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.139351][ T24] usb 1-1: USB disconnect, device number 34 [ 231.153761][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 231.185154][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 231.197577][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.222706][ T5921] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.239277][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.263342][ T5921] usb 3-1: config 0 descriptor?? [ 231.271875][ T9944] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 231.525918][ T9971] wireguard: wg1: Could not create IPv4 socket [ 231.636938][ T9976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1799'. [ 231.662713][ T983] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 231.677394][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 231.732060][ T5921] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 231.843212][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 231.850846][ T983] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 231.866687][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.903187][ T983] usb 4-1: config 0 descriptor?? [ 231.924362][ T983] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 231.944212][ T5951] usb 3-1: USB disconnect, device number 29 [ 232.263503][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 232.285959][ T9997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1807'. [ 232.422058][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 232.429772][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.441092][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.453583][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.469468][ T24] usb 2-1: config 0 descriptor?? [ 232.729983][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 232.745198][ T983] gspca_vc032x: reg_w err -71 [ 232.752448][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.757825][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.788793][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.802222][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.808458][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.815045][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.820440][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.830563][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.837883][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.846301][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.851713][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.858652][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.864146][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.869823][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.875263][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.880694][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.886250][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.893936][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 232.932423][ T24] usb 2-1: USB disconnect, device number 32 [ 232.943359][ T983] gspca_vc032x: Unknown sensor... [ 232.948530][ T983] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 232.980212][ T983] usb 4-1: USB disconnect, device number 28 [ 233.291795][ T5951] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 233.375570][T10020] loop6: detected capacity change from 0 to 63 [ 233.462466][ T5951] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 233.502885][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.531545][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.561584][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.573070][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.591409][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.617081][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.628530][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.638007][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.646804][T10028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.661374][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.669928][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.686856][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.721457][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.739150][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.751386][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.791290][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.799392][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.808555][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.829172][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.852337][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.862158][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.872068][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.883819][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.892468][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.899247][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.908558][ T5951] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.917957][ T5951] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.929543][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.936398][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.945543][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 233.971583][ T5951] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.983229][ T5951] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.992349][ T5951] usb 1-1: Product: syz [ 233.996644][ T5951] usb 1-1: Manufacturer: syz [ 234.001352][ T5951] usb 1-1: SerialNumber: syz [ 234.017611][ T5951] usb 1-1: config 0 descriptor?? [ 234.052120][ T5951] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 234.468648][T10054] loop6: detected capacity change from 0 to 63 [ 234.484919][T10031] chnl_net:caif_netlink_parms(): no params data found [ 234.500071][ T6797] buffer_io_error: 54 callbacks suppressed [ 234.500091][ T6797] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.564928][ T6797] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.589615][ T6797] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.618104][ T6797] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.649639][ T6797] Buffer I/O error on dev loop6, logical block 0, async page read [ 234.918617][T10031] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.939492][T10031] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.958603][T10031] bridge_slave_0: entered allmulticast mode [ 234.972286][T10031] bridge_slave_0: entered promiscuous mode [ 234.984148][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.991605][T10031] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.999628][T10031] bridge_slave_1: entered allmulticast mode [ 235.008776][T10031] bridge_slave_1: entered promiscuous mode [ 235.118028][T10031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.134785][T10031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.203812][T10031] team0: Port device team_slave_0 added [ 235.214659][T10031] team0: Port device team_slave_1 added [ 235.274065][T10031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.283592][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.311062][T10031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.325306][T10031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.332857][ T5914] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 235.342768][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.379782][T10031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.492117][T10031] hsr_slave_0: entered promiscuous mode [ 235.499782][T10031] hsr_slave_1: entered promiscuous mode [ 235.506538][T10031] debugfs: 'hsr0' already exists in 'hsr' [ 235.512903][T10031] Cannot create hsr debugfs directory [ 235.525105][ T5914] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 235.549849][ T5914] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 235.573343][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.583149][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 235.596175][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 235.610236][ T5914] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.624490][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.638312][ T5914] usb 4-1: Product: syz [ 235.647356][ T5914] usb 4-1: Manufacturer: syz [ 235.669307][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 235.682407][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 235.699278][ T5914] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 235.707695][ T5914] cdc_wdm 4-1:1.0: Unknown control protocol [ 235.890574][T10031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.903657][T10031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.914743][T10031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.927790][T10031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.021385][ T5873] Bluetooth: hci0: command tx timeout [ 236.022790][T10031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.044326][ T10] usb 4-1: USB disconnect, device number 29 [ 236.092720][T10031] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.110639][ T983] usb 1-1: USB disconnect, device number 35 [ 236.125974][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.133205][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.157580][ T983] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 236.179248][T10102] vivid-001: disconnect [ 236.186405][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.193615][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.202181][T10102] vivid-001: reconnect [ 236.618824][T10031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.910192][ T983] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 237.019802][ T5934] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 237.051916][T10031] veth0_vlan: entered promiscuous mode [ 237.066991][T10031] veth1_vlan: entered promiscuous mode [ 237.081160][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 237.091429][ T983] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 237.113454][ T983] usb 4-1: config 0 has no interface number 0 [ 237.116571][T10031] veth0_macvtap: entered promiscuous mode [ 237.132024][T10031] veth1_macvtap: entered promiscuous mode [ 237.133786][ T983] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 237.163682][ T983] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.176844][ T983] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 237.189057][T10031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.189805][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 237.196460][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.219555][ T983] usb 4-1: Product: syz [ 237.227999][T10031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.235797][ T983] usb 4-1: Manufacturer: syz [ 237.240941][ T983] usb 4-1: SerialNumber: syz [ 237.241934][ T5934] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 237.260605][ T983] usb 4-1: config 0 descriptor?? [ 237.271307][ T5934] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 237.275757][T10114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.286934][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 237.296038][T10114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.316286][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.331576][ T5934] usb 1-1: config 1 has no interface number 0 [ 237.335533][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.337922][ T5934] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.362660][ T5934] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 237.385358][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.386589][ T5934] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 237.404710][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.414216][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.476376][ T5934] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 237.512421][T10114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.523917][T10114] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.586029][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.598759][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.669077][ T5934] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 237.676379][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.684541][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.096280][ T5951] usb 1-1: USB disconnect, device number 36 [ 238.102687][ T5873] Bluetooth: hci0: command tx timeout [ 238.111754][ T5951] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 238.156439][ T983] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 238.198504][ T983] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 238.233374][ T983] asix 4-1:0.251: probe with driver asix failed with error -71 [ 238.281981][ T983] usb 4-1: USB disconnect, device number 30 [ 238.778414][T10159] netlink: 'syz.4.1862': attribute type 58 has an invalid length. [ 239.417514][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 239.609325][ T983] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 239.788549][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 239.980667][ T983] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 239.991040][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.022433][ T983] usb 5-1: config 0 descriptor?? [ 240.178270][ T5873] Bluetooth: hci0: command tx timeout [ 240.240485][ T983] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 240.266471][ T983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.296617][ T983] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 240.318678][ T983] usb 5-1: media controller created [ 240.402809][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.452380][ T983] az6027: usb out operation failed. (-71) [ 240.468940][ T983] az6027: usb out operation failed. (-71) [ 240.474799][ T983] stb0899_attach: Driver disabled by Kconfig [ 240.498511][ T983] az6027: no front-end attached [ 240.498511][ T983] [ 240.507954][ T983] az6027: usb out operation failed. (-71) [ 240.513721][ T983] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 240.555784][ T983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 240.581517][ T983] dvb-usb: schedule remote query interval to 400 msecs. [ 240.583856][ T5866] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 240.595827][ T5873] Bluetooth: hci4: command 0x1003 tx timeout [ 240.597872][ T983] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 240.699165][ T983] usb 5-1: USB disconnect, device number 2 [ 240.904002][ T983] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 241.077850][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 241.273833][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.311920][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.340489][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.381301][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 241.421724][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 241.447872][ T5934] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 241.475981][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.509975][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.531138][ T9] usb 2-1: Product: syz [ 241.535364][ T9] usb 2-1: Manufacturer: syz [ 241.574635][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 241.585104][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 241.604481][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 241.613499][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 241.624373][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 241.633826][ T5934] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 241.646598][ T5934] usb 1-1: config 0 has no interface number 0 [ 241.662815][ T5934] usb 1-1: config 0 interface 21 has no altsetting 0 [ 241.692022][ T5934] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=b4.00 [ 241.717467][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.738014][ T5934] usb 1-1: Product: syz [ 241.742264][ T5934] usb 1-1: Manufacturer: syz [ 241.751584][ T5934] usb 1-1: SerialNumber: syz [ 241.760097][ T5934] usb 1-1: config 0 descriptor?? [ 241.790457][ T5934] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 241.799349][ T983] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 241.813959][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.825427][ T5934] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 241.841298][ T5934] usb 1-1: media controller created [ 241.873489][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.942402][ T5934] DVB: Unable to find symbol mt352_attach() [ 241.957674][ T983] usb 5-1: Using ep0 maxpacket: 8 [ 241.975377][ T983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.995518][ T983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.017501][ T983] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.040274][ T983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.043275][ T5934] DVB: Unable to find symbol nxt6000_attach() [ 242.055138][ T983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.070058][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.075827][ T5934] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 242.107870][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 242.133018][ T5934] dvb-usb: schedule remote query interval to 1000 msecs. [ 242.143309][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 242.155892][ T5934] dvb-usb: bulk message failed: -22 (7/0) [ 242.165177][ T5934] dvb-usb: bulk message failed: -22 (7/0) [ 242.258468][ T5866] Bluetooth: hci0: command tx timeout [ 242.292921][T10228] netlink: 'syz.3.1894': attribute type 25 has an invalid length. [ 242.302795][T10228] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 242.320341][ T983] usb 5-1: GET_CAPABILITIES returned 0 [ 242.326159][ T983] usbtmc 5-1:16.0: can't read capabilities [ 242.594646][T10236] C: renamed from team_slave_0 (while UP) [ 242.611674][T10236] netlink: 'syz.3.1898': attribute type 2 has an invalid length. [ 242.619946][T10236] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1898'. [ 242.630436][T10236] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 243.219981][ T5951] dvb-usb: bulk message failed: -22 (7/0) [ 243.226144][ T5951] dvb-usb: error while querying for an remote control event. [ 243.824248][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.831140][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.838748][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.845386][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.851886][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.858511][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.865849][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.872488][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.879437][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.886106][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.892503][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.899125][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.905493][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 243.912118][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 243.918258][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 243.929471][ T5951] usb 5-1: USB disconnect, device number 3 [ 243.931749][ T5914] usb 2-1: USB disconnect, device number 33 [ 244.169985][ T5951] usb 1-1: USB disconnect, device number 37 [ 244.275573][T10290] overlay: filesystem on ./bus is read-only [ 244.279991][ T5951] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 244.336448][T10292] overlayfs: conflicting options: userxattr,metacopy=on [ 244.566666][T10302] input: syz0 as /devices/virtual/input/input32 [ 244.693244][T10304] syzkaller1: entered promiscuous mode [ 244.718343][T10304] syzkaller1: entered allmulticast mode [ 244.749022][ T5921] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 244.916628][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 244.932917][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.963480][ T5921] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.972807][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.992622][ T5921] usb 4-1: config 0 descriptor?? [ 245.060696][T10317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.069330][T10317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.077883][T10317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.086409][T10317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.093921][T10317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.102186][T10317] Dead loop on virtual device ip6_vti0, fix it urgently! [ 245.171910][ T5951] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 245.238938][ T5921] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 245.336016][T10326] syz.1.1940 uses obsolete (PF_INET,SOCK_PACKET) [ 245.346016][ T5951] usb 1-1: Using ep0 maxpacket: 32 [ 245.364515][ T5951] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 245.388569][ T5951] usb 1-1: config 0 has no interface number 0 [ 245.394770][ T5951] usb 1-1: config 0 interface 12 has no altsetting 0 [ 245.408320][ T5951] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 245.431794][ T5951] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 245.441306][ T5951] usb 1-1: Product: syz [ 245.451922][ T5951] usb 1-1: Manufacturer: syz [ 245.458568][ T5951] usb 1-1: SerialNumber: syz [ 245.470356][ T5951] usb 1-1: config 0 descriptor?? [ 245.550999][T10331] syzkaller1: entered promiscuous mode [ 245.558236][T10331] syzkaller1: entered allmulticast mode [ 245.687436][ T5921] usb 4-1: USB disconnect, device number 31 [ 246.502254][ T5951] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 246.509962][ T5934] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 246.518061][ T5951] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 246.533137][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 246.541699][ T5951] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 246.552359][ T5951] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 246.570746][ T5951] usb 1-1: USB disconnect, device number 38 [ 246.697168][ T5934] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 246.706509][ T10] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 246.716872][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.726548][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.744024][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.753817][ T5934] usb 5-1: config 0 descriptor?? [ 246.760015][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.771341][ T5934] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 246.778143][ T10] usb 4-1: Product: syz [ 246.782337][ T10] usb 4-1: Manufacturer: syz [ 246.787330][ T10] usb 4-1: SerialNumber: syz [ 246.998903][T10352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.008288][T10352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.031093][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 247.056208][ T10] usb 4-1: USB disconnect, device number 32 [ 247.116786][T10361] syzkaller1: entered promiscuous mode [ 247.122393][T10361] syzkaller1: entered allmulticast mode [ 247.175899][ T5934] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 247.577522][ T5934] gspca_cpia1: usb_control_msg 02, error -71 [ 247.589694][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 247.600037][ T5934] gspca_cpia1: usb_control_msg 05, error -71 [ 247.608885][ T5934] cpia1 5-1:0.0: unexpected systemstate: 00 [ 247.621728][ T5934] usb 5-1: USB disconnect, device number 4 [ 247.754430][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 247.761619][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 247.772949][ T10] usb 4-1: config 16 has an invalid descriptor of length 121, skipping remainder of the config [ 247.783495][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.793619][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.804943][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 247.815403][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 247.826526][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 247.837869][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.847524][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.061489][ T10] usb 4-1: usb_control_msg returned -71 [ 248.067361][ T10] usbtmc 4-1:16.0: can't read capabilities [ 248.085544][ T10] usb 4-1: USB disconnect, device number 33 [ 248.731656][T10401] tipc: Started in network mode [ 248.760863][T10401] tipc: Node identity ac1414aa, cluster identity 4711 [ 248.776668][T10401] tipc: Enabled bearer , priority 10 [ 248.873810][ T5914] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 249.049065][ T5914] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 249.067961][ T5914] usb 5-1: config 0 has no interface number 0 [ 249.093128][ T5914] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 249.110017][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.119075][ T5914] usb 5-1: Product: syz [ 249.154052][ T5914] usb 5-1: Manufacturer: syz [ 249.162718][ T5914] usb 5-1: SerialNumber: syz [ 249.184116][ T5914] usb 5-1: config 0 descriptor?? [ 249.312662][T10425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.775756][ T9] tipc: Node number set to 2886997162 [ 250.018886][ T5914] usb 5-1: Firmware version (0.0) predates our first public release. [ 250.028295][ T5914] usb 5-1: Please update to version 0.2 or newer [ 250.087300][ T5914] usb 5-1: USB disconnect, device number 5 [ 250.183152][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 250.233337][ T983] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 250.367027][ T9] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 250.376452][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 250.388918][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 250.393625][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 250.398495][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.403723][ T983] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 250.412060][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.426799][ T983] usb 4-1: config 0 has no interface number 0 [ 250.433584][ T983] usb 4-1: config 0 interface 184 has no altsetting 0 [ 250.443128][ T9] usb 2-1: Product: syz [ 250.443478][ T983] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 250.447327][ T9] usb 2-1: Manufacturer: syz [ 250.447347][ T9] usb 2-1: SerialNumber: syz [ 250.468070][ T9] usb 2-1: config 0 descriptor?? [ 250.478442][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.492255][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 250.516749][ T983] usb 4-1: Product: syz [ 250.518784][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 250.520970][ T983] usb 4-1: Manufacturer: syz [ 250.535293][ T983] usb 4-1: SerialNumber: syz [ 250.547521][ T9] usb 2-1: selecting invalid altsetting 0 [ 250.548650][ T983] usb 4-1: config 0 descriptor?? [ 250.581676][ T983] smsc75xx v1.0.0 [ 251.113441][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 251.283244][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 251.293376][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 251.302932][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.310963][ T10] usb 5-1: Product: syz [ 251.315325][ T10] usb 5-1: Manufacturer: syz [ 251.319952][ T10] usb 5-1: SerialNumber: syz [ 251.333171][ T10] usb 5-1: config 0 descriptor?? [ 251.345023][ T10] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 251.398706][ T983] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 251.410572][ T983] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 251.413500][T10455] usb 2-1: reset high-speed USB device number 34 using dummy_hcd [ 251.422065][ T983] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 251.439323][ T983] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 251.449085][ T983] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 251.460454][ T983] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 251.471352][ T983] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 251.490488][ T983] usb 4-1: USB disconnect, device number 34 [ 252.014879][ T9] usb 2-1: USB disconnect, device number 34 [ 252.349150][T10503] netlink: 'syz.0.2018': attribute type 29 has an invalid length. [ 252.360613][ T10] gspca_sonixj: reg_w err -71 [ 252.368957][T10503] netlink: 'syz.0.2018': attribute type 29 has an invalid length. [ 252.377494][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 252.392668][T10503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2018'. [ 252.404422][ T10] usb 5-1: USB disconnect, device number 6 [ 252.781834][ T5951] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 252.943504][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.967146][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.996202][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.021314][T10524] overlayfs: conflicting lowerdir path [ 253.022068][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 253.042936][ T5951] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 253.052863][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.069726][ T5951] usb 1-1: config 0 descriptor?? [ 253.453520][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 253.512321][ T5951] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 253.544607][ T5951] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001B/input/input33 [ 253.622313][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 253.641152][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 253.658166][T10541] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2036'. [ 253.680463][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.704589][ T5951] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 253.721646][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.761357][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.781015][ T5951] usb 1-1: USB disconnect, device number 39 [ 253.806789][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.871488][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.910591][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.945853][T10543] fido_id[10543]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 254.186494][ T10] usb 5-1: usb_control_msg returned -32 [ 254.201141][ T10] usbtmc 5-1:16.0: can't read capabilities [ 254.361439][T10565] syzkaller1: entered promiscuous mode [ 254.367252][T10565] syzkaller1: entered allmulticast mode [ 254.553725][T10570] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 254.573524][ T5921] usb 5-1: USB disconnect, device number 7 [ 254.819760][T10580] syzkaller1: entered promiscuous mode [ 254.827843][T10580] syzkaller1: entered allmulticast mode [ 255.114220][T10589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input34 [ 255.694096][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.700588][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.748694][T10612] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 255.748694][T10612] The task syz.0.2069 (10612) triggered the difference, watch for misbehavior. [ 256.108965][T10628] netlink: 'syz.4.2076': attribute type 11 has an invalid length. [ 256.330996][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 256.440145][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 256.521831][ T983] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 256.589909][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 256.599164][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 256.634181][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.655866][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 256.667515][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.675621][ T10] usb 2-1: Product: syz [ 256.680060][ T10] usb 2-1: Manufacturer: syz [ 256.689848][ T10] usb 2-1: SerialNumber: syz [ 256.700075][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 256.704625][ T10] usb 2-1: config 0 descriptor?? [ 256.714569][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 256.720745][ T983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.724225][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 256.745048][ T983] usb 5-1: config 0 has no interface number 0 [ 256.752200][ T983] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.763628][ T983] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.780609][ T983] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 256.792575][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.808833][T10647] input: syz0 as /devices/virtual/input/input35 [ 256.810563][ T983] usb 5-1: config 0 descriptor?? [ 256.880200][ T5921] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 257.041848][ T5921] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.061460][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.097482][ T5921] usb 1-1: config 0 descriptor?? [ 257.114934][ T5921] cp210x 1-1:0.0: cp210x converter detected [ 257.140143][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 257.151175][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 257.165640][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 257.173599][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 257.194645][ T10] usb 2-1: USB disconnect, device number 35 [ 257.215993][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 257.241170][ T10] em28xx 2-1:0.0: Freeing device [ 257.351199][T10659] binder: 10658:10659 ioctl c0306201 0 returned -14 [ 257.448387][ T983] uclogic 0003:28BD:0094.001C: pen parameters not found [ 257.459946][ T983] uclogic 0003:28BD:0094.001C: interface is invalid, ignoring [ 257.475112][ T983] usb 5-1: USB disconnect, device number 8 [ 257.526460][ T5921] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 257.745120][ T5921] usb 1-1: cp210x converter now attached to ttyUSB0 [ 257.939479][ T5934] usb 1-1: USB disconnect, device number 40 [ 257.953903][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 257.971589][ T5934] cp210x 1-1:0.0: device disconnected [ 258.266815][T10674] loop8: detected capacity change from 0 to 8 [ 258.276804][T10674] Dev loop8: unable to read RDB block 8 [ 258.282890][T10674] loop8: unable to read partition table [ 258.290809][T10674] loop8: partition table beyond EOD, truncated [ 258.308983][T10674] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 258.339237][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 258.497752][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.510590][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.521629][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.533971][ T10] usb 4-1: config 0 descriptor?? [ 258.621306][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 258.738903][ T5921] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 258.778775][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 258.785748][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.796508][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.808876][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.818068][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.826381][ T9] usb 5-1: Product: syz [ 258.830714][ T9] usb 5-1: Manufacturer: syz [ 258.835395][ T9] usb 5-1: SerialNumber: syz [ 258.889286][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 258.897485][ T5921] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.908148][ T5921] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.918148][ T5921] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.931376][ T5921] usb 1-1: config 1 interface 0 has no altsetting 0 [ 258.941472][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 258.950639][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.961417][ T5921] usb 1-1: Product: syz [ 258.965637][ T5921] usb 1-1: Manufacturer: syz [ 258.968976][ T10] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 258.975465][ T5921] usb 1-1: SerialNumber: syz [ 258.997237][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001D/input/input36 [ 259.056079][ T9] usb 5-1: 0:2 : does not exist [ 259.067294][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 259.123063][ T10] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 259.161093][ T9] usb 5-1: USB disconnect, device number 9 [ 259.207902][ T5921] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 259.250110][ T6797] udevd[6797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.398938][T10684] syzkaller1: entered promiscuous mode [ 259.404559][T10684] syzkaller1: entered allmulticast mode [ 259.425904][ T9] usb 1-1: USB disconnect, device number 41 [ 259.443526][ T9] usblp0: removed [ 259.505481][ T983] usb 4-1: USB disconnect, device number 35 [ 259.644211][T10688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2103'. [ 259.872086][T10696] vxcan1: entered allmulticast mode [ 259.879121][T10696] vxcan1: left allmulticast mode [ 260.179647][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 260.368144][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 260.371127][T10716] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 260.384491][ T10] usb 5-1: config 0 has no interfaces? [ 260.395383][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 260.423213][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 260.434816][ T10] usb 5-1: Manufacturer: syz [ 260.452297][ T10] usb 5-1: config 0 descriptor?? [ 260.674294][ T10] usb 5-1: USB disconnect, device number 10 [ 260.707820][ T5921] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 260.877719][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 260.894721][ T5921] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 260.918999][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.943934][ T5921] usb 4-1: config 0 descriptor?? [ 260.971918][ T5921] gspca_main: sunplus-2.14.0 probing 041e:400b [ 261.575980][ T30] audit: type=1326 audit(1756960593.493:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.603632][ T30] audit: type=1326 audit(1756960593.493:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.632772][ T30] audit: type=1326 audit(1756960593.493:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.655227][ T30] audit: type=1326 audit(1756960593.493:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.678326][ T30] audit: type=1326 audit(1756960593.493:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.701217][ T30] audit: type=1326 audit(1756960593.493:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.724226][ T30] audit: type=1326 audit(1756960593.493:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.746603][ T30] audit: type=1326 audit(1756960593.493:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.772996][ T30] audit: type=1326 audit(1756960593.523:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 261.802908][ T30] audit: type=1326 audit(1756960593.523:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10748 comm="syz.4.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7698ebe9 code=0x50000 [ 262.031182][ T5921] gspca_sunplus: reg_w_riv err -71 [ 262.036515][ T5921] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 262.061546][ T5921] usb 4-1: USB disconnect, device number 36 [ 262.227191][ T5934] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 262.391564][ T5934] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.428651][ T5934] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 262.465884][ T5934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.499372][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.509610][T10760] loop7: detected capacity change from 0 to 3 [ 262.527458][ T5934] usb 2-1: Product: syz [ 262.538844][ T5934] usb 2-1: Manufacturer: syz [ 262.548920][ T5934] usb 2-1: SerialNumber: syz [ 262.560925][T10760] Dev loop7: unable to read RDB block 3 [ 262.569055][ T5934] cdc_mbim 2-1:1.0: skipping garbage [ 262.574570][T10760] loop7: unable to read partition table [ 262.580881][T10760] loop7: partition table beyond EOD, truncated [ 262.596993][T10760] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 262.800018][T10756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 263.414185][T10756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 263.437582][ T5934] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 263.453522][ T5934] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 263.641051][ T5934] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 263.665652][ T5934] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 263.687604][ T5934] wwan wwan0: port wwan0mbim0 attached [ 263.709546][ T5934] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ea:e9:26:dc:27:3b [ 263.726120][ T5934] usb 2-1: USB disconnect, device number 36 [ 263.734460][ T5934] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 263.746522][ T5921] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 263.906827][ T5934] wwan wwan0: port wwan0mbim0 disconnected [ 263.918516][ T5921] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 263.929126][ T5921] usb 4-1: config 0 has no interface number 0 [ 263.938821][ T5921] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 263.948268][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.957971][ T5921] usb 4-1: Product: syz [ 263.963959][ T5921] usb 4-1: Manufacturer: syz [ 263.970008][ T5921] usb 4-1: SerialNumber: syz [ 263.983597][ T5921] usb 4-1: config 0 descriptor?? [ 264.386000][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.401470][ T5921] usb 4-1: Firmware version (0.0) predates our first public release. [ 264.416078][ T5921] usb 4-1: Please update to version 0.2 or newer [ 264.424508][ T5921] usb 4-1: Firmware: build [ 264.476006][ T5934] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 264.541609][ T9] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 264.557591][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 264.576466][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.608535][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.617946][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 264.626625][ T9] usb 5-1: Product: syz [ 264.634076][ T9] usb 5-1: Manufacturer: syz [ 264.634227][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.645156][T10806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.658665][ T9] usb 5-1: SerialNumber: syz [ 264.667216][ T9] usb 5-1: config 0 descriptor?? [ 264.671400][ T5921] usb 4-1: USB disconnect, device number 37 [ 264.687773][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.698984][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 264.707488][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 264.716039][ T5934] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 264.725275][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.743511][ T9] usb 5-1: selecting invalid altsetting 0 [ 264.766492][ T5934] usb 2-1: config 0 descriptor?? [ 265.198075][ T5934] hid_parser_main: 659 callbacks suppressed [ 265.198099][ T5934] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 265.236412][ T5934] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 265.269924][ T5934] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001E/input/input37 [ 265.337064][ T5934] cm6533_jd 0003:0D8C:0022.001E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 265.464448][ T5921] usb 2-1: USB disconnect, device number 37 [ 265.530914][T10818] fido_id[10818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 265.615496][T10796] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 265.825347][ T983] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 265.988990][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 266.013645][ T983] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 266.035592][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.046449][ T983] usb 4-1: Product: syz [ 266.050861][ T983] usb 4-1: Manufacturer: syz [ 266.056900][ T983] usb 4-1: SerialNumber: syz [ 266.132984][T10837] Zero length message leads to an empty skb [ 266.170181][T10839] bridge0: port 3(batadv0) entered blocking state [ 266.177443][T10839] bridge0: port 3(batadv0) entered disabled state [ 266.185532][T10839] batadv0: entered allmulticast mode [ 266.195506][T10839] batadv0: entered promiscuous mode [ 266.206519][T10839] bridge0: port 3(batadv0) entered blocking state [ 266.213698][T10839] bridge0: port 3(batadv0) entered forwarding state [ 266.223782][ T5914] usb 5-1: USB disconnect, device number 11 [ 266.244753][T10839] batadv0: left allmulticast mode [ 266.266334][T10839] batadv0: left promiscuous mode [ 266.273505][T10839] bridge0: port 3(batadv0) entered disabled state [ 266.289101][ T983] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 266.421624][T10845] syzkaller1: entered promiscuous mode [ 266.428871][T10845] syzkaller1: entered allmulticast mode [ 267.128809][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 268.663262][T10902] syzkaller1: entered promiscuous mode [ 268.669185][T10902] syzkaller1: entered allmulticast mode [ 268.730570][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'. [ 269.213949][ T5873] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.408481][T10932] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2209'. [ 269.443564][ T983] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 269.615272][ T983] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.630154][ T983] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 269.643711][ T983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.655288][ T983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 269.688639][ T983] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 269.715177][ T983] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.733381][ T983] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.748204][ T983] usb 5-1: Product: syz [ 269.761231][ T983] usb 5-1: Manufacturer: syz [ 269.773915][ T983] cdc_wdm 5-1:1.0: skipping garbage [ 269.783304][ T983] cdc_wdm 5-1:1.0: skipping garbage [ 269.798798][ T983] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 269.813418][ T983] cdc_wdm 5-1:1.0: Unknown control protocol [ 269.847342][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2215'. [ 269.979119][T10951] syzkaller1: entered promiscuous mode [ 269.984863][T10951] syzkaller1: entered allmulticast mode [ 269.997881][ T24] usb 5-1: USB disconnect, device number 12 [ 270.232382][T10958] input: syz1 as /devices/virtual/input/input38 [ 270.273170][ T983] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 270.438098][ T983] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.446332][ T983] usb 2-1: config 0 has no interface number 0 [ 270.453378][ T983] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 270.464799][ T983] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 270.476283][ T983] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.485596][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.496874][ T983] usb 2-1: config 0 descriptor?? [ 270.502671][T10953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.521987][ T983] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 270.602912][ T5914] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 270.728775][ T5934] usb 2-1: USB disconnect, device number 38 [ 270.754082][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 270.791802][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 270.814459][ T5914] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 270.827321][ T5914] usb 1-1: can't read configurations, error -71 [ 271.273530][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.446381][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.465151][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.477599][ T24] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 271.507972][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.516856][ T24] usb 5-1: Product: syz [ 271.521076][ T24] usb 5-1: Manufacturer: syz [ 271.532553][ T24] usb 5-1: SerialNumber: syz [ 271.552557][ T24] usb 5-1: config 0 descriptor?? [ 271.573432][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 271.590264][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.611169][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 271.626835][ T24] usb 5-1: media controller created [ 271.663896][T10982] loop8: detected capacity change from 0 to 8 [ 271.670282][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.680440][ T5877] Dev loop8: unable to read RDB block 8 [ 271.698146][ T5877] loop8: unable to read partition table [ 271.719466][ T5877] loop8: partition table beyond EOD, truncated [ 271.735291][T10982] Dev loop8: unable to read RDB block 8 [ 271.755692][T10982] loop8: unable to read partition table [ 271.764478][T10982] loop8: partition table beyond EOD, truncated [ 271.792592][T10982] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 271.835646][ T24] DVB: Unable to find symbol tda10046_attach() [ 271.841869][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 271.872711][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 272.015785][T10991] program syz.1.2235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.195874][T10999] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2239'. [ 272.697746][ T24] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 272.721628][ T24] usb 5-1: USB disconnect, device number 13 [ 273.138120][T11019] Invalid/unusable pipe [ 273.490549][T11030] syzkaller1: entered promiscuous mode [ 273.506118][T11030] syzkaller1: entered allmulticast mode [ 273.521150][ T24] usb 4-1: USB disconnect, device number 38 [ 273.544844][ T24] usblp0: removed [ 274.201447][ T5934] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 274.334184][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.403297][ T5934] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 274.422565][ T5934] usb 5-1: config 0 has no interface number 0 [ 274.470146][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.481486][ T5934] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 274.500889][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.508957][ T5934] usb 5-1: Product: syz [ 274.529054][ T5934] usb 5-1: Manufacturer: syz [ 274.534076][ T5934] usb 5-1: SerialNumber: syz [ 274.558198][ T5934] usb 5-1: config 0 descriptor?? [ 274.615203][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.790207][T11044] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2259'. [ 274.831944][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.844442][ T5934] pl2303 5-1:0.161: required endpoints missing [ 274.870183][ T5934] usb 5-1: USB disconnect, device number 14 [ 274.876210][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 274.876229][ T30] audit: type=1326 audit(1756960606.779:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11060 comm="syz.0.2267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61e1b8ebe9 code=0x0 [ 275.198862][ T1161] bridge_slave_1: left allmulticast mode [ 275.230575][ T1161] bridge_slave_1: left promiscuous mode [ 275.238068][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.305882][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.417751][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.429292][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.444232][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.456591][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.464802][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.476786][ T1161] bond_slave_0: left promiscuous mode [ 275.499890][ T1161] bond_slave_1: left promiscuous mode [ 275.506388][ T1161] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 276.317951][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.335707][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.353614][ T1161] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 276.382115][ T1161] bond0 (unregistering): Released all slaves [ 276.527057][ T1161] tipc: Left network mode [ 276.583850][T11091] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2272'. [ 277.055210][ T1161] hsr_slave_0: left promiscuous mode [ 277.065590][ T1161] hsr_slave_1: left promiscuous mode [ 277.074562][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.085953][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.097226][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.105140][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.136067][ T1161] veth1_macvtap: left promiscuous mode [ 277.142874][ T1161] veth0_macvtap: left promiscuous mode [ 277.148732][ T1161] veth1_vlan: left promiscuous mode [ 277.154735][ T1161] veth0_vlan: left promiscuous mode [ 277.519598][ T5866] Bluetooth: hci2: command tx timeout [ 277.792305][T11122] input: syz1 as /devices/virtual/input/input39 [ 277.798759][T11122] input: failed to attach handler leds to device input39, error: -6 [ 278.216372][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 278.317249][ T1161] team0 (unregistering): Port device C removed [ 278.837514][T11070] chnl_net:caif_netlink_parms(): no params data found [ 278.916419][T11144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2287'. [ 279.308971][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.316167][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.361316][T11070] bridge_slave_0: entered allmulticast mode [ 279.377586][T11070] bridge_slave_0: entered promiscuous mode [ 279.424019][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.445632][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.497913][T11070] bridge_slave_1: entered allmulticast mode [ 279.557026][T11070] bridge_slave_1: entered promiscuous mode [ 279.608633][ T5866] Bluetooth: hci2: command tx timeout [ 279.687320][ T1161] IPVS: stop unused estimator thread 0... [ 279.781228][T11070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.881465][T11070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.988497][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 280.028624][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.031518][T11070] team0: Port device team_slave_0 added [ 280.045422][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.054360][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.063986][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.075499][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.171392][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.176772][ T1161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.195282][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 280.234699][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.255765][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.272366][T11070] team0: Port device team_slave_1 added [ 280.288394][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.346339][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.383510][ T24] usb 2-1: config 0 descriptor?? [ 280.428540][ T1161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.529837][ T1161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.575033][T11070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.608100][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.635144][T11070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.687909][ T1161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.723724][T11070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.730944][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.758237][T11070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.810799][ T24] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 280.858341][ T24] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 280.994827][T11070] hsr_slave_0: entered promiscuous mode [ 281.016671][T11070] hsr_slave_1: entered promiscuous mode [ 281.024194][T11070] debugfs: 'hsr0' already exists in 'hsr' [ 281.030567][T11070] Cannot create hsr debugfs directory [ 281.602189][ T1161] bridge_slave_1: left allmulticast mode [ 281.610453][ T1161] bridge_slave_1: left promiscuous mode [ 281.616440][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.633329][ T1161] bridge_slave_0: left allmulticast mode [ 281.640067][ T1161] bridge_slave_0: left promiscuous mode [ 281.646912][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.676127][ T1161] bond_slave_0: left promiscuous mode [ 281.682443][ T5866] Bluetooth: hci2: command tx timeout [ 281.690669][ T1161] bond_slave_1: left promiscuous mode [ 281.767833][ T5934] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 281.927171][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 281.942354][ T5934] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 281.960283][ T5934] usb 5-1: config 1 has no interface number 0 [ 281.981383][ T5934] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 281.991662][ T5934] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 282.001952][ T5934] usb 5-1: config 1 interface 105 has no altsetting 0 [ 282.011766][ T5934] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 282.022804][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.034266][ T5934] usb 5-1: Product: syz [ 282.038877][ T5934] usb 5-1: Manufacturer: syz [ 282.044584][ T5934] usb 5-1: SerialNumber: syz [ 282.055254][T11208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 282.063211][T11208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 282.159376][ T5866] Bluetooth: hci3: command tx timeout [ 282.223270][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.235171][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.247867][ T1161] bond0 (unregistering): Released all slaves [ 282.494280][T11208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 282.512363][T11208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 282.555636][T11176] chnl_net:caif_netlink_parms(): no params data found [ 282.843413][ T24] usb 2-1: USB disconnect, device number 39 [ 283.026112][ T7712] bond0: (slave syz_tun): Releasing backup interface [ 283.055333][ T1161] hsr_slave_0: left promiscuous mode [ 283.065716][ T1161] hsr_slave_1: left promiscuous mode [ 283.076134][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.096396][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.123109][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.138952][ T5934] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 283.152466][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.176971][ T5934] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 283.235357][ T1161] veth1_macvtap: left promiscuous mode [ 283.258282][ T1161] veth0_macvtap: left promiscuous mode [ 283.264020][ T1161] veth1_vlan: left promiscuous mode [ 283.286729][ T1161] veth0_vlan: left promiscuous mode [ 283.770176][ T5866] Bluetooth: hci2: command tx timeout [ 283.945566][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.963146][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.980785][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.991440][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.005825][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.111728][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 284.152424][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 284.240635][ T5873] Bluetooth: hci3: command tx timeout [ 284.539734][T11070] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.575333][T11070] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.582810][ T5934] aqc111 5-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:4e:e3:4a:47:40 [ 284.628191][ T5934] usb 5-1: USB disconnect, device number 15 [ 284.641342][ T5934] aqc111 5-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 284.672988][T11176] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.709559][T11176] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.722214][T11176] bridge_slave_0: entered allmulticast mode [ 284.730304][T11176] bridge_slave_0: entered promiscuous mode [ 284.740120][T11176] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.748343][T11176] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.766146][T11176] bridge_slave_1: entered allmulticast mode [ 284.774067][T11176] bridge_slave_1: entered promiscuous mode [ 284.811772][T11070] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.824504][T11070] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.936643][ T5934] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 284.938163][T11176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.956015][ T5934] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 284.974332][ T5934] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 285.062741][T11176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.233486][T11176] team0: Port device team_slave_0 added [ 285.278115][T11176] team0: Port device team_slave_1 added [ 285.478994][T11176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.503501][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.535665][T11176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.596143][T11176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.624881][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.672123][T11176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.894907][ T1161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.075578][ T5873] Bluetooth: hci1: command tx timeout [ 286.118424][T11176] hsr_slave_0: entered promiscuous mode [ 286.142590][T11176] hsr_slave_1: entered promiscuous mode [ 286.149424][T11176] debugfs: 'hsr0' already exists in 'hsr' [ 286.165055][T11176] Cannot create hsr debugfs directory [ 286.224403][T11070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.262995][ T1161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.315123][ T5873] Bluetooth: hci3: command tx timeout [ 286.354828][ T1161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.521961][T11070] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.655471][ T1161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.782973][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.790221][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.835387][T11241] chnl_net:caif_netlink_parms(): no params data found [ 286.941154][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.948474][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.653849][ T1161] bridge_slave_1: left allmulticast mode [ 287.663623][ T1161] bridge_slave_1: left promiscuous mode [ 287.670946][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.693903][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.171698][ T5873] Bluetooth: hci1: command tx timeout [ 288.398709][ T5873] Bluetooth: hci3: command tx timeout [ 288.686344][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.704087][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.716567][ T1161] bond0 (unregistering): Released all slaves [ 288.733326][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.741776][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.754949][T11241] bridge_slave_0: entered allmulticast mode [ 288.762997][T11241] bridge_slave_0: entered promiscuous mode [ 288.809640][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.817352][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.825910][T11241] bridge_slave_1: entered allmulticast mode [ 288.836471][T11241] bridge_slave_1: entered promiscuous mode [ 288.896209][ T1161] tipc: Disabling bearer [ 288.909099][ T1161] tipc: Left network mode [ 288.999881][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.079246][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.140671][T11176] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.249754][T11176] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.285758][T11241] team0: Port device team_slave_0 added [ 289.312810][T11241] team0: Port device team_slave_1 added [ 289.325363][T11176] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.354843][T11176] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.555615][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.562629][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.631185][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.673387][ T1161] hsr_slave_0: left promiscuous mode [ 289.686133][T11248] Set syz1 is full, maxelem 65536 reached [ 289.698093][ T1161] hsr_slave_1: left promiscuous mode [ 289.715536][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.722968][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.738734][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.754175][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.815289][ T1161] veth1_macvtap: left promiscuous mode [ 289.820963][ T1161] veth0_macvtap: left promiscuous mode [ 289.827846][ T1161] veth1_vlan: left promiscuous mode [ 289.834725][ T1161] veth0_vlan: left promiscuous mode [ 290.233839][ T5873] Bluetooth: hci1: command tx timeout [ 290.521139][ T983] libceph: connect (1)[c::]:6789 error -101 [ 290.528360][ T983] libceph: mon0 (1)[c::]:6789 connect error [ 290.544286][T11324] ceph: No mds server is up or the cluster is laggy [ 290.778764][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 290.816940][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 291.228719][T11070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.244495][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.251594][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.278969][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.323356][T11332] syzkaller1: entered promiscuous mode [ 291.331438][T11332] syzkaller1: entered allmulticast mode [ 291.495478][T11241] hsr_slave_0: entered promiscuous mode [ 291.514180][T11241] hsr_slave_1: entered promiscuous mode [ 291.896172][ T1161] IPVS: stop unused estimator thread 0... [ 292.038977][T11176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.145670][T11176] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.205029][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.212254][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.312447][ T5873] Bluetooth: hci1: command tx timeout [ 292.346054][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.353296][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.610348][T11070] veth0_vlan: entered promiscuous mode [ 292.668055][T11070] veth1_vlan: entered promiscuous mode [ 292.887955][T11070] veth0_macvtap: entered promiscuous mode [ 292.944116][T11070] veth1_macvtap: entered promiscuous mode [ 293.027794][T11070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.096025][T11070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.141891][ T983] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 293.166224][ T3481] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.176579][ T3481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.200901][T11241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.235268][ T3481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.249823][ T3481] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.268592][T11241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.282422][T11241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.300764][T11241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.317961][ T983] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 293.330157][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.351209][ T983] usb 5-1: config 0 descriptor?? [ 293.381228][ T983] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 293.487412][T11176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.528299][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.565763][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.667921][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.701469][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.830276][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.885853][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.998256][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.005638][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.059463][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.066751][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.179859][ T983] gspca_sunplus: reg_w_riv err -71 [ 294.191521][ T983] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 294.257160][ T983] usb 5-1: USB disconnect, device number 16 [ 294.521205][T11176] veth0_vlan: entered promiscuous mode [ 294.549589][T11176] veth1_vlan: entered promiscuous mode [ 294.662557][T11176] veth0_macvtap: entered promiscuous mode [ 294.704470][T11176] veth1_macvtap: entered promiscuous mode [ 294.778109][T11176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.837863][T11176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.929256][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.964762][ T1111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.066099][ T1111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.079652][ T1111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.164747][ T1111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.282604][T11241] veth0_vlan: entered promiscuous mode [ 295.341507][T11429] syzkaller1: entered promiscuous mode [ 295.347041][T11429] syzkaller1: entered allmulticast mode [ 295.390774][T11241] veth1_vlan: entered promiscuous mode [ 295.458279][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.499263][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.651643][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.666862][T11241] veth0_macvtap: entered promiscuous mode [ 295.674303][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.752571][T11241] veth1_macvtap: entered promiscuous mode [ 295.788202][T11439] syzkaller1: entered promiscuous mode [ 295.798578][T11439] syzkaller1: entered allmulticast mode [ 295.884791][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.943967][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.035016][ T1335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.103682][ T1335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.205515][ T1335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.245062][ T1335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.397718][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.449963][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.548801][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.592280][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.593217][T11464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.788569][T11471] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 297.766896][T11507] syzkaller1: entered promiscuous mode [ 297.791326][T11507] syzkaller1: entered allmulticast mode [ 297.806257][T11512] program syz.4.2364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.029786][ T6268] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 299.217505][ T6268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.230275][ T6268] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.244522][ T6268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.263332][ T6268] usb 5-1: config 0 descriptor?? [ 299.408532][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 299.568497][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 299.577602][ T5914] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 299.587760][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.597078][ T5914] usb 6-1: Product: syz [ 299.601510][ T5914] usb 6-1: Manufacturer: syz [ 299.606183][ T5914] usb 6-1: SerialNumber: syz [ 299.614372][ T5914] usb 6-1: config 0 descriptor?? [ 299.685192][ T6268] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 299.700761][ T6268] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input40 [ 299.808006][ T6268] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 299.826211][ T8767] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 299.851283][ T5914] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 299.989449][ T8767] usb 2-1: Using ep0 maxpacket: 32 [ 300.012610][ T8767] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.022593][ T8767] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 300.032030][ T8767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.040249][ T8767] usb 2-1: Product: syz [ 300.045290][ T8767] usb 2-1: Manufacturer: syz [ 300.050132][ T8767] usb 2-1: SerialNumber: syz [ 300.063891][ T8767] usb 2-1: config 0 descriptor?? [ 300.241970][T11583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.293062][ T5934] usb 5-1: USB disconnect, device number 17 [ 300.446467][T11587] syzkaller1: entered promiscuous mode [ 300.452823][T11587] syzkaller1: entered allmulticast mode [ 300.493697][ T8767] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 300.659300][ T5914] gspca_sunplus: reg_w_riv err -71 [ 300.670016][ T5914] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 300.702510][ T8767] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 300.717790][ T5914] usb 6-1: USB disconnect, device number 2 [ 300.741003][ T8767] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 300.950765][ T5934] usb 2-1: USB disconnect, device number 40 [ 302.197960][ T5914] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 302.401448][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 302.413278][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.422378][ T5914] usb 2-1: Product: syz [ 302.426789][ T5914] usb 2-1: Manufacturer: syz [ 302.431888][ T5914] usb 2-1: SerialNumber: syz [ 302.458462][ T5914] usb 2-1: config 0 descriptor?? [ 302.684463][ T5914] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 302.936966][T11676] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.944264][T11676] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.965626][T11676] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.972237][T11676] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.995138][T11678] netlink: 'syz.4.2428': attribute type 1 has an invalid length. [ 303.009288][T11676] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 303.015944][T11676] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 303.043200][T11678] netlink: 'syz.4.2428': attribute type 2 has an invalid length. [ 303.060085][T11676] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 303.066687][T11676] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 303.089713][T11676] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 303.096209][T11676] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 303.523481][ T5914] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 303.555987][ T5914] usb 2-1: USB disconnect, device number 41 [ 304.245313][T11719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.266094][ T5934] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 304.465167][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.499553][T11729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.506504][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.521991][ T5934] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 304.532947][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.555742][ T5934] usb 5-1: config 0 descriptor?? [ 305.002820][ T5934] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 305.010764][ T5934] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 305.018719][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 305.026353][ T5934] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 305.034568][ T5934] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 305.044296][ T5934] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 305.063781][ T5934] playstation 0003:054C:0DF2.0021: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 305.208394][ T9] usb 6-1: config 0 has an invalid interface number: 74 but max is 0 [ 305.221731][ T9] usb 6-1: config 0 has no interface number 0 [ 305.238694][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 305.252392][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.261563][ T9] usb 6-1: Product: syz [ 305.266235][ T9] usb 6-1: Manufacturer: syz [ 305.270931][ T9] usb 6-1: SerialNumber: syz [ 305.281636][ T9] usb 6-1: config 0 descriptor?? [ 305.291361][T11744] syzkaller1: entered promiscuous mode [ 305.297195][T11744] syzkaller1: entered allmulticast mode [ 305.463238][T11750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.504839][ T9] f81534a_ctrl 6-1:0.74: failed to set register 0x116: -5 [ 305.522095][ T9] f81534a_ctrl 6-1:0.74: failed to enable ports: -5 [ 305.530035][ T9] f81534a_ctrl 6-1:0.74: probe with driver f81534a_ctrl failed with error -5 [ 305.547600][ T9] usb 6-1: USB disconnect, device number 3 [ 305.608780][ T5934] playstation 0003:054C:0DF2.0021: Failed to retrieve feature with reportID 5: -71 [ 305.624757][ T5934] playstation 0003:054C:0DF2.0021: Failed to retrieve DualSense calibration info: -71 [ 305.634686][ T5934] playstation 0003:054C:0DF2.0021: Failed to get calibration data from DualSense [ 305.643956][ T5934] playstation 0003:054C:0DF2.0021: Failed to create dualsense. [ 305.653938][ T5934] playstation 0003:054C:0DF2.0021: probe with driver playstation failed with error -71 [ 305.674539][ T5934] usb 5-1: USB disconnect, device number 18 [ 306.236018][T11769] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2465'. [ 306.450924][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 306.840630][T11795] input: syz1 as /devices/virtual/input/input41 [ 307.089504][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 307.524699][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 307.564588][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 307.715054][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 307.730677][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.742276][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 307.774756][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.795335][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.814980][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 307.831004][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.849753][ T5934] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 307.864339][ T9] usb 2-1: Product: syz [ 307.875442][ T9] usb 2-1: Manufacturer: syz [ 307.882013][ T9] usb 2-1: SerialNumber: syz [ 307.886968][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.908729][ T9] usb 2-1: config 0 descriptor?? [ 307.945940][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 307.959628][ T5934] usb 6-1: config 0 descriptor?? [ 307.970445][ T9] usb 2-1: Detected FT232H [ 308.123113][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 308.419465][ T5934] hid-multitouch 0003:0457:07DA.0022: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 308.542577][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 308.675699][ T9] usb 6-1: USB disconnect, device number 4 [ 308.753976][ T5934] usb 2-1: USB disconnect, device number 42 [ 308.789138][ T5934] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 308.809953][ T5934] ftdi_sio 2-1:0.0: device disconnected [ 309.482111][T11891] netlink: 'syz.6.2502': attribute type 29 has an invalid length. [ 309.513955][T11891] netlink: 'syz.6.2502': attribute type 29 has an invalid length. [ 309.532561][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2502'. [ 310.003407][T11916] tipc: Started in network mode [ 310.008334][T11916] tipc: Node identity ac14142f, cluster identity 4711 [ 310.017411][T11916] tipc: New replicast peer: 0.0.0.0 [ 310.024682][T11916] tipc: Enabled bearer , priority 10 [ 310.032266][T11916] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 310.123464][ T5934] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 310.197659][T11924] syzkaller1: entered promiscuous mode [ 310.204632][T11924] syzkaller1: entered allmulticast mode [ 310.274752][ T5934] usb 6-1: config 0 has no interfaces? [ 310.280706][ T5934] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 310.310055][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.322101][ T5934] usb 6-1: config 0 descriptor?? [ 310.543483][ T5934] usb 6-1: USB disconnect, device number 5 [ 310.682835][ T5914] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 310.891000][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 310.913233][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.939339][ T5914] usb 2-1: Product: syz [ 310.964470][ T5914] usb 2-1: Manufacturer: syz [ 310.969191][ T5914] usb 2-1: SerialNumber: syz [ 311.016099][ T5914] usb 2-1: config 0 descriptor?? [ 311.132859][ T5863] tipc: Node number set to 2886997039 [ 311.238312][ T5914] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 311.847554][ T5914] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 311.892996][ T5914] usb 2-1: USB disconnect, device number 43 [ 312.471987][ T5914] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 312.548819][T12007] netlink: 'syz.4.2536': attribute type 21 has an invalid length. [ 312.563788][T12007] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2536'. [ 312.577597][ T6268] psmouse serio2: Failed to reset mouse on : -5 [ 312.670178][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.689928][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.704483][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.717736][ T5914] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.726962][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.740285][ T5914] usb 7-1: config 0 descriptor?? [ 312.745439][ T983] IPVS: starting estimator thread 0... [ 312.851951][T12012] IPVS: using max 26 ests per chain, 62400 per kthread [ 313.194138][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.211696][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.219164][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.235494][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.247685][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.247717][ T5934] IPVS: starting estimator thread 0... [ 313.256957][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.276337][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.284126][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.297489][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.306353][ T5914] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 313.348880][ T5914] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 313.402807][T12033] IPVS: using max 31 ests per chain, 74400 per kthread [ 313.515645][ T5914] usb 7-1: USB disconnect, device number 2 [ 313.544796][T12037] fido_id[12037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 313.610803][T12044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input43 [ 313.760083][T12049] syzkaller1: entered promiscuous mode [ 313.769806][T12049] syzkaller1: entered allmulticast mode [ 313.846584][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 314.016815][T12062] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2558'. [ 314.026649][T12062] net_ratelimit: 66 callbacks suppressed [ 314.026669][T12062] openvswitch: netlink: Message has 512 unknown bytes. [ 314.155994][T12066] vxcan0: tx address claim with different name [ 314.604058][ T8767] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 314.751214][ T983] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 314.781131][ T8767] usb 7-1: Using ep0 maxpacket: 16 [ 314.797816][ T8767] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.818234][ T8767] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.830591][ T8767] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 314.845052][ T8767] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.865703][ T8767] usb 7-1: config 0 descriptor?? [ 314.925860][ T983] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.938200][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 314.954676][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 314.972125][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.990187][ T983] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.005479][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.026146][ T983] usb 2-1: config 0 descriptor?? [ 315.044810][T12085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 315.500126][ T983] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 315.714159][ T8767] letsketch 0003:6161:4D15.0024: Device info: п [ 315.743305][ T983] usb 2-1: USB disconnect, device number 44 [ 315.947493][ T8767] usb 7-1: Max retries (5) exceeded reading string descriptor 201 [ 315.955932][ T8767] letsketch 0003:6161:4D15.0024: probe with driver letsketch failed with error -71 [ 315.969295][ T8767] usb 7-1: USB disconnect, device number 3 [ 316.450839][ T6268] misc userio: Buffer overflowed, userio client isn't keeping up [ 316.535333][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 316.909007][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 317.074005][ T9] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 317.083373][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.091981][ T9] usb 5-1: Product: syz [ 317.096266][ T9] usb 5-1: Manufacturer: syz [ 317.111409][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117841][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.129025][ T9] usb 5-1: SerialNumber: syz [ 317.140776][ T9] usb 5-1: config 0 descriptor?? [ 317.254541][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'. [ 317.557304][ T6268] input: PS/2 Generic Mouse as /devices/serio2/input/input42 [ 317.581523][ T5934] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 317.741312][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 317.750638][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.755126][T12146] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x1 [ 317.766428][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.782354][ T5934] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 317.793353][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.801710][ T9] mos7840 5-1:0.0: required endpoints missing [ 317.802168][ T6268] psmouse serio2: Failed to enable mouse on [ 317.837899][ T9] usb 5-1: USB disconnect, device number 19 [ 317.844265][ T5934] usb 7-1: config 0 descriptor?? [ 318.159870][T12156] loop8: detected capacity change from 0 to 8 [ 318.167574][T12156] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 318.175353][T12156] loop8: p1 start 540042604 is beyond EOD, truncated [ 318.185030][T12156] loop8: p2 start 528661076 is beyond EOD, truncated [ 318.192437][T12156] loop8: p3 start 8 is beyond EOD, truncated [ 318.198596][T12156] loop8: p4 start 3529794595 is beyond EOD, truncated [ 318.205918][T12156] loop8: p5 start 2690239768 is beyond EOD, truncated [ 318.214169][T12156] loop8: p6 start 1431538145 is beyond EOD, truncated [ 318.221759][T12156] loop8: p7 start 1634731803 is beyond EOD, truncated [ 318.229850][T12156] loop8: p8 start 614672050 is beyond EOD, truncated [ 318.236714][T12156] loop8: p9 start 609447309 is beyond EOD, truncated [ 318.243623][T12156] loop8: p10 start 3832541991 is beyond EOD, truncated [ 318.252169][T12156] loop8: p11 start 3286981679 is beyond EOD, truncated [ 318.276627][ T5934] hid_parser_main: 20 callbacks suppressed [ 318.276651][ T5934] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 318.307367][ T5934] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 318.319535][ T5934] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 318.326741][ T5934] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 318.345660][ T5934] corsair 0003:1B1C:1B02.0026: unknown main item tag 0x0 [ 318.370568][ T5934] corsair 0003:1B1C:1B02.0026: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 318.498218][ T5934] corsair 0003:1B1C:1B02.0026: Failed to get K90 initial state (error -32). [ 318.525437][ T5934] usb 7-1: USB disconnect, device number 4 [ 318.590319][T12164] fido_id[12164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 318.648947][ T6268] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 318.820829][ T6268] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 318.839116][ T6268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.853070][ T6268] usb 6-1: config 0 descriptor?? [ 318.869656][ T6268] cp210x 6-1:0.0: cp210x converter detected [ 319.287166][ T6268] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 319.524700][ T6268] usb 6-1: cp210x converter now attached to ttyUSB0 [ 319.589695][T12192] block nbd6: Send control failed (result -32) [ 319.603156][T12192] block nbd6: Request send failed, requeueing [ 319.613114][ T9726] block nbd6: Dead connection, failed to find a fallback [ 319.622289][ T9726] block nbd6: shutting down sockets [ 319.627530][ T9726] blk_print_req_error: 51 callbacks suppressed [ 319.627548][ T9726] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.643697][T12192] I/O error, dev nbd6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.657736][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 319.671429][T12192] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.680947][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 319.692162][T12192] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.701785][T12192] I/O error, dev nbd6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.711180][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 319.721998][T12192] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.731505][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 319.742148][T12192] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.746737][ T5951] usb 6-1: USB disconnect, device number 6 [ 319.752111][T12192] I/O error, dev nbd6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.767020][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 319.780471][T12197] loop2: detected capacity change from 0 to 7 [ 319.781547][T12192] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.792902][ T6797] Dev loop2: unable to read RDB block 7 [ 319.798038][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 319.806987][ T6797] loop2: AHDI p1 p2 p3 [ 319.814497][ T6797] loop2: partition table partially beyond EOD, truncated [ 319.830344][ T5951] cp210x 6-1:0.0: device disconnected [ 319.833192][ T6797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.836064][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 319.845110][ T6797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 319.866989][T12192] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.870604][T12197] Dev loop2: unable to read RDB block 7 [ 319.882734][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 319.887626][T12197] loop2: AHDI p1 p2 p3 [ 319.897633][T12197] loop2: partition table partially beyond EOD, truncated [ 319.910417][T12197] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.913169][T12192] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 319.922937][T12197] loop2: p2 start 1702059890 is beyond EOD, truncated [ 319.936695][T12192] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 320.785806][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2623'. [ 320.822654][ T6268] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 320.987608][ T6268] usb 5-1: Using ep0 maxpacket: 32 [ 321.004304][ T6268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.077783][ T6268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.131875][ T6268] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 321.167674][ T6268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.208654][ T6268] usb 5-1: config 0 descriptor?? [ 321.243063][ T6268] hub 5-1:0.0: USB hub found [ 321.435274][ T6268] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 321.507113][T12225] [ 321.509509][T12225] ====================================================== [ 321.516550][T12225] WARNING: possible circular locking dependency detected [ 321.523604][T12225] syzkaller #0 Not tainted [ 321.528051][T12225] ------------------------------------------------------ [ 321.535077][T12225] syz.6.2627/12225 is trying to acquire lock: [ 321.541156][T12225] ffffffff8e642880 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710 [ 321.551032][T12225] [ 321.551032][T12225] but task is already holding lock: [ 321.558434][T12225] ffff88805891c220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 321.567351][T12225] [ 321.567351][T12225] which lock already depends on the new lock. [ 321.567351][T12225] [ 321.577770][T12225] [ 321.577770][T12225] the existing dependency chain (in reverse order) is: [ 321.586803][T12225] [ 321.586803][T12225] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 321.594679][T12225] lock_acquire+0x120/0x360 [ 321.599736][T12225] lock_sock_nested+0x48/0x100 [ 321.605055][T12225] __inet_bind+0x392/0xa90 [ 321.610015][T12225] mptcp_bind+0x128/0x1d0 [ 321.614884][T12225] __sys_bind+0x2c6/0x3e0 [ 321.619755][T12225] __x64_sys_bind+0x7a/0x90 [ 321.624794][T12225] do_syscall_64+0xfa/0xfa0 [ 321.629828][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.636249][T12225] [ 321.636249][T12225] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 321.644380][T12225] lock_acquire+0x120/0x360 [ 321.649415][T12225] lock_sock_nested+0x48/0x100 [ 321.654707][T12225] tcp_sendmsg+0x21/0x50 [ 321.659471][T12225] __sock_sendmsg+0x19c/0x270 [ 321.664717][T12225] sock_sendmsg+0x158/0x230 [ 321.669752][T12225] __sock_xmit+0x1c1/0x470 [ 321.674707][T12225] nbd_send_cmd+0x863/0x1ba0 [ 321.679827][T12225] nbd_queue_rq+0xcdb/0xf10 [ 321.684867][T12225] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 321.690935][T12225] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 321.697797][T12225] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 321.704315][T12225] blk_mq_run_hw_queue+0x348/0x4f0 [ 321.709986][T12225] blk_mq_dispatch_list+0xd0c/0xe00 [ 321.715719][T12225] blk_mq_flush_plug_list+0x469/0x550 [ 321.721621][T12225] __blk_flush_plug+0x3d3/0x4b0 [ 321.727000][T12225] __submit_bio+0x2d3/0x5a0 [ 321.732027][T12225] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 321.738191][T12225] __bread_gfp+0x216/0x3c0 [ 321.743126][T12225] udf_load_vrs+0x365/0xf20 [ 321.748156][T12225] udf_fill_super+0x5ad/0x17a0 [ 321.753451][T12225] get_tree_bdev_flags+0x40e/0x4d0 [ 321.759084][T12225] vfs_get_tree+0x92/0x2b0 [ 321.764045][T12225] do_new_mount+0x2a2/0xa30 [ 321.769084][T12225] __se_sys_mount+0x317/0x410 [ 321.774338][T12225] do_syscall_64+0xfa/0xfa0 [ 321.779373][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.785807][T12225] [ 321.785807][T12225] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 321.793473][T12225] lock_acquire+0x120/0x360 [ 321.798519][T12225] __mutex_lock+0x187/0x1350 [ 321.803674][T12225] nbd_queue_rq+0x257/0xf10 [ 321.808718][T12225] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 321.814813][T12225] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 321.821682][T12225] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 321.828216][T12225] blk_mq_run_hw_queue+0x348/0x4f0 [ 321.833859][T12225] blk_mq_dispatch_list+0xd0c/0xe00 [ 321.839953][T12225] blk_mq_flush_plug_list+0x469/0x550 [ 321.845879][T12225] __blk_flush_plug+0x3d3/0x4b0 [ 321.851264][T12225] __submit_bio+0x2d3/0x5a0 [ 321.856299][T12225] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 321.862466][T12225] block_read_full_folio+0x599/0x830 [ 321.868282][T12225] filemap_read_folio+0x114/0x380 [ 321.873846][T12225] do_read_cache_folio+0x350/0x590 [ 321.879495][T12225] read_part_sector+0xb6/0x2b0 [ 321.884833][T12225] adfspart_check_ICS+0xa4/0xa50 [ 321.890302][T12225] bdev_disk_changed+0x75f/0x14b0 [ 321.895858][T12225] blkdev_get_whole+0x380/0x510 [ 321.901292][T12225] bdev_open+0x31e/0xd30 [ 321.906069][T12225] blkdev_open+0x457/0x600 [ 321.911008][T12225] do_dentry_open+0x950/0x13f0 [ 321.916303][T12225] vfs_open+0x3b/0x340 [ 321.920896][T12225] path_openat+0x2ee5/0x3830 [ 321.926015][T12225] do_filp_open+0x1fa/0x410 [ 321.931051][T12225] do_sys_openat2+0x121/0x1c0 [ 321.936293][T12225] __x64_sys_openat+0x138/0x170 [ 321.941687][T12225] do_syscall_64+0xfa/0xfa0 [ 321.946720][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.953142][T12225] [ 321.953142][T12225] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 321.960362][T12225] lock_acquire+0x120/0x360 [ 321.965422][T12225] __mutex_lock+0x187/0x1350 [ 321.970546][T12225] nbd_queue_rq+0xc8/0xf10 [ 321.975510][T12225] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 321.981600][T12225] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 321.988470][T12225] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 321.994989][T12225] blk_mq_run_hw_queue+0x348/0x4f0 [ 322.000643][T12225] blk_mq_dispatch_list+0xd0c/0xe00 [ 322.006387][T12225] blk_mq_flush_plug_list+0x469/0x550 [ 322.012303][T12225] __blk_flush_plug+0x3d3/0x4b0 [ 322.017701][T12225] __submit_bio+0x2d3/0x5a0 [ 322.022741][T12225] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 322.028918][T12225] block_read_full_folio+0x599/0x830 [ 322.034736][T12225] filemap_read_folio+0x114/0x380 [ 322.040324][T12225] do_read_cache_folio+0x350/0x590 [ 322.045990][T12225] read_part_sector+0xb6/0x2b0 [ 322.051297][T12225] adfspart_check_ICS+0xa4/0xa50 [ 322.056774][T12225] bdev_disk_changed+0x75f/0x14b0 [ 322.062338][T12225] blkdev_get_whole+0x380/0x510 [ 322.067724][T12225] bdev_open+0x31e/0xd30 [ 322.072515][T12225] blkdev_open+0x457/0x600 [ 322.077480][T12225] do_dentry_open+0x950/0x13f0 [ 322.082789][T12225] vfs_open+0x3b/0x340 [ 322.087385][T12225] path_openat+0x2ee5/0x3830 [ 322.092507][T12225] do_filp_open+0x1fa/0x410 [ 322.097561][T12225] do_sys_openat2+0x121/0x1c0 [ 322.102762][T12225] __x64_sys_openat+0x138/0x170 [ 322.108140][T12225] do_syscall_64+0xfa/0xfa0 [ 322.113171][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.119591][T12225] [ 322.119591][T12225] -> #3 (set->srcu){.+.+}-{0:0}: [ 322.126737][T12225] lock_sync+0xba/0x160 [ 322.131424][T12225] __synchronize_srcu+0x96/0x3a0 [ 322.136885][T12225] elevator_switch+0x12b/0x640 [ 322.142461][T12225] elevator_change+0x2d4/0x450 [ 322.147756][T12225] elevator_set_default+0x186/0x260 [ 322.153504][T12225] blk_register_queue+0x34e/0x3f0 [ 322.159062][T12225] __add_disk+0x677/0xd50 [ 322.163916][T12225] add_disk_fwnode+0xfc/0x480 [ 322.169118][T12225] nbd_dev_add+0x717/0xae0 [ 322.174068][T12225] nbd_init+0x168/0x1f0 [ 322.178782][T12225] do_one_initcall+0x233/0x820 [ 322.184079][T12225] do_initcall_level+0x104/0x190 [ 322.189544][T12225] do_initcalls+0x59/0xa0 [ 322.194395][T12225] kernel_init_freeable+0x334/0x4b0 [ 322.200115][T12225] kernel_init+0x1d/0x1d0 [ 322.204976][T12225] ret_from_fork+0x47c/0x820 [ 322.210088][T12225] ret_from_fork_asm+0x1a/0x30 [ 322.215407][T12225] [ 322.215407][T12225] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 322.223261][T12225] lock_acquire+0x120/0x360 [ 322.228307][T12225] __mutex_lock+0x187/0x1350 [ 322.233424][T12225] elevator_change+0x19b/0x450 [ 322.238718][T12225] elevator_set_none+0x42/0xb0 [ 322.244019][T12225] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 322.250353][T12225] nbd_start_device+0x17f/0xb10 [ 322.255743][T12225] nbd_genl_connect+0x135b/0x18f0 [ 322.261309][T12225] genl_family_rcv_msg_doit+0x215/0x300 [ 322.267400][T12225] genl_rcv_msg+0x60e/0x790 [ 322.272432][T12225] netlink_rcv_skb+0x208/0x470 [ 322.277745][T12225] genl_rcv+0x28/0x40 [ 322.282266][T12225] netlink_unicast+0x82f/0x9e0 [ 322.287569][T12225] netlink_sendmsg+0x805/0xb30 [ 322.292865][T12225] __sock_sendmsg+0x219/0x270 [ 322.298073][T12225] ____sys_sendmsg+0x505/0x830 [ 322.303370][T12225] ___sys_sendmsg+0x21f/0x2a0 [ 322.308623][T12225] __x64_sys_sendmsg+0x19b/0x260 [ 322.314111][T12225] do_syscall_64+0xfa/0xfa0 [ 322.319182][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.325627][T12225] [ 322.325627][T12225] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 322.334258][T12225] lock_acquire+0x120/0x360 [ 322.339292][T12225] blk_alloc_queue+0x538/0x620 [ 322.344602][T12225] __blk_mq_alloc_disk+0x15c/0x340 [ 322.350250][T12225] nbd_dev_add+0x46c/0xae0 [ 322.355199][T12225] nbd_init+0x168/0x1f0 [ 322.359888][T12225] do_one_initcall+0x233/0x820 [ 322.365182][T12225] do_initcall_level+0x104/0x190 [ 322.370639][T12225] do_initcalls+0x59/0xa0 [ 322.375487][T12225] kernel_init_freeable+0x334/0x4b0 [ 322.381211][T12225] kernel_init+0x1d/0x1d0 [ 322.386071][T12225] ret_from_fork+0x47c/0x820 [ 322.391203][T12225] ret_from_fork_asm+0x1a/0x30 [ 322.396496][T12225] [ 322.396496][T12225] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 322.403724][T12225] validate_chain+0xb9b/0x2140 [ 322.409059][T12225] __lock_acquire+0xab9/0xd20 [ 322.414270][T12225] lock_acquire+0x120/0x360 [ 322.419305][T12225] fs_reclaim_acquire+0x72/0x100 [ 322.424773][T12225] kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.431142][T12225] __alloc_skb+0x112/0x2d0 [ 322.436099][T12225] tcp_stream_alloc_skb+0x3d/0x340 [ 322.441745][T12225] tcp_sendmsg_locked+0xf38/0x5620 [ 322.447390][T12225] tcp_sendmsg+0x2f/0x50 [ 322.452167][T12225] __sock_sendmsg+0x19c/0x270 [ 322.457470][T12225] kernel_sendmsg+0x175/0x250 [ 322.462675][T12225] smc_clc_send_decline+0x324/0x3f0 [ 322.468404][T12225] smc_connect_decline_fallback+0x125/0x2a0 [ 322.474828][T12225] smc_connect+0x877/0xd90 [ 322.479784][T12225] __sys_connect+0x313/0x440 [ 322.484937][T12225] __x64_sys_connect+0x7a/0x90 [ 322.490263][T12225] do_syscall_64+0xfa/0xfa0 [ 322.495295][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.501704][T12225] [ 322.501704][T12225] other info that might help us debug this: [ 322.501704][T12225] [ 322.511923][T12225] Chain exists of: [ 322.511923][T12225] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 322.511923][T12225] [ 322.524713][T12225] Possible unsafe locking scenario: [ 322.524713][T12225] [ 322.532156][T12225] CPU0 CPU1 [ 322.537539][T12225] ---- ---- [ 322.542899][T12225] lock(k-sk_lock-AF_INET); [ 322.547497][T12225] lock(sk_lock-AF_INET); [ 322.554442][T12225] lock(k-sk_lock-AF_INET); [ 322.561559][T12225] lock(fs_reclaim); [ 322.565556][T12225] [ 322.565556][T12225] *** DEADLOCK *** [ 322.565556][T12225] [ 322.573789][T12225] 2 locks held by syz.6.2627/12225: [ 322.578986][T12225] #0: ffff888078a89ae0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 322.588173][T12225] #1: ffff88805891c220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 322.597516][T12225] [ 322.597516][T12225] stack backtrace: [ 322.603455][T12225] CPU: 0 UID: 0 PID: 12225 Comm: syz.6.2627 Not tainted syzkaller #0 PREEMPT(full) [ 322.603483][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.603498][T12225] Call Trace: [ 322.603505][T12225] [ 322.603513][T12225] dump_stack_lvl+0x189/0x250 [ 322.603545][T12225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.603571][T12225] ? __pfx__printk+0x10/0x10 [ 322.603602][T12225] ? print_lock_name+0xde/0x100 [ 322.603628][T12225] print_circular_bug+0x2ee/0x310 [ 322.603653][T12225] check_noncircular+0x134/0x160 [ 322.603689][T12225] validate_chain+0xb9b/0x2140 [ 322.603710][T12225] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 322.603736][T12225] ? ktime_get+0x3e/0x1f0 [ 322.603760][T12225] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 322.603789][T12225] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 322.603816][T12225] ? __lock_acquire+0xab9/0xd20 [ 322.603835][T12225] __lock_acquire+0xab9/0xd20 [ 322.603854][T12225] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.603870][T12225] lock_acquire+0x120/0x360 [ 322.603890][T12225] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.603909][T12225] ? ipv4_mtu+0x53b/0x650 [ 322.603924][T12225] ? ipv4_mtu+0x23/0x650 [ 322.603939][T12225] fs_reclaim_acquire+0x72/0x100 [ 322.603959][T12225] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.603974][T12225] kmem_cache_alloc_node_noprof+0x48/0x710 [ 322.603990][T12225] ? __alloc_skb+0x112/0x2d0 [ 322.604020][T12225] __alloc_skb+0x112/0x2d0 [ 322.604046][T12225] tcp_stream_alloc_skb+0x3d/0x340 [ 322.604068][T12225] tcp_sendmsg_locked+0xf38/0x5620 [ 322.604098][T12225] ? is_bpf_text_address+0x292/0x2b0 [ 322.604127][T12225] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 322.604148][T12225] ? __local_bh_enable_ip+0x12d/0x1c0 [ 322.604172][T12225] ? __local_bh_enable_ip+0x12d/0x1c0 [ 322.604197][T12225] tcp_sendmsg+0x2f/0x50 [ 322.604217][T12225] __sock_sendmsg+0x19c/0x270 [ 322.604239][T12225] kernel_sendmsg+0x175/0x250 [ 322.604260][T12225] ? __pfx_kernel_sendmsg+0x10/0x10 [ 322.604291][T12225] smc_clc_send_decline+0x324/0x3f0 [ 322.604318][T12225] ? __pfx_smc_clc_send_decline+0x10/0x10 [ 322.604350][T12225] ? __smc_connect+0xf73/0x1890 [ 322.604371][T12225] ? kfree+0x199/0x6d0 [ 322.604393][T12225] smc_connect_decline_fallback+0x125/0x2a0 [ 322.604421][T12225] smc_connect+0x877/0xd90 [ 322.604448][T12225] __sys_connect+0x313/0x440 [ 322.604473][T12225] ? __pfx___sys_connect+0x10/0x10 [ 322.604500][T12225] ? rcu_is_watching+0x15/0xb0 [ 322.604523][T12225] __x64_sys_connect+0x7a/0x90 [ 322.604547][T12225] do_syscall_64+0xfa/0xfa0 [ 322.604566][T12225] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.604581][T12225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.604597][T12225] ? clear_bhb_loop+0x60/0xb0 [ 322.604615][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.604631][T12225] RIP: 0033:0x7f679158ebe9 [ 322.604651][T12225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.604666][T12225] RSP: 002b:00007f678f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 322.604683][T12225] RAX: ffffffffffffffda RBX: 00007f67917c5fa0 RCX: 00007f679158ebe9 [ 322.604697][T12225] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 322.604709][T12225] RBP: 00007f6791611e19 R08: 0000000000000000 R09: 0000000000000000 [ 322.604720][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.604729][T12225] R13: 00007f67917c6038 R14: 00007f67917c5fa0 R15: 00007ffc0f7d4dd8 [ 322.604747][T12225] [ 323.049121][ T6268] hid-generic 0003:046D:C31C.0027: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 323.376818][ T5934] usb 5-1: USB disconnect, device number 20