last executing test programs: 1.524745297s ago: executing program 1 (id=3570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4014) 1.444855953s ago: executing program 1 (id=3580): ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x5, @raw_data="e98cac8ab2f0d77bd773c867132932324e06e550bcda9f255fa83670732f759ee04c82d572d996955bba1fb088c4275fa96dc64c5ef5667de19e2daa64ee46691450c03e2fc3b0d30039d8d6ab025a17297698eed025e7076284860771ec629b5def9dd861b94c8bc65eab7bd69e57c3ad83a9309f2c81a094cceb5a58b4bd64b0f90f623a3bd0a27db6bee8b76e2361cef9ef34a76380bac7efad77a143ac993217a785e1454e72bedceed8ea02bad41e4b5cd0e8abc222ee46522201b9c8cd3f2382e2107ae5bb"}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.298773456s ago: executing program 1 (id=3574): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0x7eb2, 0x1, 0x1, 0xc3}, 0x0, 0x0) r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x0) 1.178750748s ago: executing program 0 (id=3576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) 917.603059ms ago: executing program 0 (id=3578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) 824.146011ms ago: executing program 2 (id=3581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xfffffffffffffff7) 639.090135ms ago: executing program 2 (id=3583): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="9c", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000240)="9f", 0x1}) close(r0) 639.010318ms ago: executing program 3 (id=3584): prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000000)={0x4f9, 0x1}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 638.355715ms ago: executing program 0 (id=3592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x5, 0x0, [{0x295, 0x0, 0x4}, {0x9fa, 0x0, 0x7}, {0x991, 0x0, 0x20298ced}, {0x3f2, 0x0, 0x7fffffffffffffff}, {0x57f, 0x0, 0x101}]}) 542.13126ms ago: executing program 2 (id=3585): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000001c0)={0x10000, 0x6}) 512.291014ms ago: executing program 3 (id=3587): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x2, 0x3, 0x9}, 0x20) 408.021272ms ago: executing program 3 (id=3588): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) close(r0) 407.843641ms ago: executing program 0 (id=3589): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe2c01) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 389.811799ms ago: executing program 3 (id=3590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) futimesat(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) 357.808751ms ago: executing program 2 (id=3591): syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 300.109428ms ago: executing program 1 (id=3593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0xdddd0000, 0x8080000, 0x29a8, 0x6b4f4ab52c94c59b, 0x1d7}) 293.848948ms ago: executing program 3 (id=3594): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e00100000002004f00e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 196.987165ms ago: executing program 1 (id=3595): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) 122.682348ms ago: executing program 0 (id=3596): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x8097, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) 122.51417ms ago: executing program 2 (id=3597): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) ioctl$RTC_AIE_OFF(r0, 0x7002) 122.392876ms ago: executing program 3 (id=3598): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x55, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="40110c0000000c21"], 0x0}, 0x0) 65.785911ms ago: executing program 1 (id=3599): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 48.175618ms ago: executing program 0 (id=3600): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='X', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), 0x4) 0s ago: executing program 2 (id=3601): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x41}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) kernel console output (not intermixed with test programs): acket 1024 [ 173.188538][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.209451][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.249276][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.262856][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.504289][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 173.511002][ T9] usbtmc 3-1:16.0: can't read capabilities [ 173.718374][ T9] usb 3-1: USB disconnect, device number 11 [ 173.835221][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 173.851991][ C1] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 173.863079][ C1] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 173.882366][ T5504] etas_es58x 4-1:0.2 can1: bit-timing not yet defined [ 174.086719][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 174.101347][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 174.112378][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 174.123499][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 174.135380][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 174.150141][ C1] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 174.165259][ T801] usb 4-1: USB disconnect, device number 13 [ 174.168859][ T5504] etas_es58x 4-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 174.175840][ T801] etas_es58x 4-1:0.2: Disconnecting syz syz [ 175.572030][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 175.758915][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 175.774049][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.799726][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.833730][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.867819][ T9] usb 3-1: config 0 descriptor?? [ 176.121086][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 176.365449][ T801] usb 3-1: USB disconnect, device number 12 [ 177.650309][ T8594] random: crng reseeded on system resumption [ 177.831620][ T8600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1185'. [ 178.358531][ T801] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 178.522471][ T801] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 178.534446][ T801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.580079][ T801] usb 3-1: config 0 descriptor?? [ 178.602479][ T801] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 178.844613][ T8641] program syz.0.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.014996][ T801] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 179.417130][ T801] gspca_cpia1: usb_control_msg 02, error -71 [ 179.429719][ T801] gspca_cpia1: usb_control_msg 05, error -71 [ 179.438014][ T801] cpia1 3-1:0.0: unexpected systemstate: 00 [ 179.449180][ T801] usb 3-1: USB disconnect, device number 13 [ 180.178685][ T5941] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.348589][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 180.356580][ T5941] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 180.366053][ T5941] usb 2-1: config 0 has no interface number 0 [ 180.377148][ T5941] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 180.389246][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.397863][ T5941] usb 2-1: Product: syz [ 180.403082][ T5941] usb 2-1: Manufacturer: syz [ 180.408272][ T5941] usb 2-1: SerialNumber: syz [ 180.418882][ T5941] usb 2-1: config 0 descriptor?? [ 180.435623][ T5941] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.454012][ T5903] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.618539][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 180.634801][ T5903] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 180.647569][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.654729][ T5941] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.670350][ T5903] usb 4-1: Product: syz [ 180.670376][ T5903] usb 4-1: Manufacturer: syz [ 180.670393][ T5903] usb 4-1: SerialNumber: syz [ 180.682949][ T5903] usb 4-1: config 0 descriptor?? [ 180.705508][ T5941] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.924269][ T5903] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 181.046548][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 181.047508][ T9] usb 2-1: USB disconnect, device number 10 [ 181.085286][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 181.111398][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 181.133515][ T9] quatech2 2-1:0.51: device disconnected [ 181.238829][ T5941] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 181.295609][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 181.402349][ T5941] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 181.414295][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.426930][ T5941] usb 1-1: config 0 descriptor?? [ 181.442347][ T5941] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 181.527031][ T5903] gspca_sunplus: reg_w_riv err -71 [ 181.536264][ T5903] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 181.550942][ T5903] usb 4-1: USB disconnect, device number 14 [ 181.850743][ T5941] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 182.260761][ T5941] gspca_cpia1: usb_control_msg 02, error -71 [ 182.271946][ T5941] gspca_cpia1: usb_control_msg 05, error -71 [ 182.280445][ T5941] cpia1 1-1:0.0: unexpected systemstate: 00 [ 182.290111][ T5941] usb 1-1: USB disconnect, device number 9 [ 182.418579][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.591003][ T9] usb 4-1: config 0 has no interfaces? [ 182.601726][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.614070][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.626049][ T9] usb 4-1: Product: syz [ 182.631971][ T9] usb 4-1: Manufacturer: syz [ 182.642491][ T9] usb 4-1: config 0 descriptor?? [ 182.842267][ T8708] loop6: detected capacity change from 1 to 524288000 [ 182.915473][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.989128][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.031911][ T9] usb 4-1: USB disconnect, device number 15 [ 183.072766][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 183.445414][ T8733] netlink: 'syz.2.1249': attribute type 22 has an invalid length. [ 183.453960][ T8733] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1249'. [ 183.492114][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 183.651767][ T9] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 183.665525][ T9] usb 4-1: config 0 has no interface number 0 [ 183.674066][ T9] usb 4-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 183.687696][ T9] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.699645][ T9] usb 4-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 183.711753][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 183.723541][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.735598][ T9] usb 4-1: config 0 descriptor?? [ 183.950755][ T9] usb 4-1: string descriptor 0 read error: -71 [ 183.960629][ T9] keyspan 4-1:0.168: Keyspan 2 port adapter converter detected [ 183.974095][ T9] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 1 [ 183.986223][ T9] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 84 [ 183.995519][ T9] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 2 [ 184.007654][ T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 184.022473][ T9] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 88 [ 184.035450][ T9] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 6 [ 184.069025][ T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 184.095617][ T9] usb 4-1: USB disconnect, device number 16 [ 184.113581][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 184.131755][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 184.146735][ T9] keyspan 4-1:0.168: device disconnected [ 184.299905][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 184.658768][ T1212] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 184.818771][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 184.831091][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.857137][ T1212] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.874016][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.931771][ T1212] usb 3-1: config 0 descriptor?? [ 185.065812][ T8765] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1273'. [ 185.378401][ T1212] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 185.635673][ T8782] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1272'. [ 185.729745][ T1212] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.788736][ T8786] evm: overlay not supported [ 185.853056][ T5941] usb 3-1: USB disconnect, device number 14 [ 185.893258][ T1212] usb 1-1: config 0 has no interfaces? [ 185.902450][ T1212] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.918344][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.931802][ T1212] usb 1-1: Product: syz [ 185.940961][ T1212] usb 1-1: Manufacturer: syz [ 185.981031][ T1212] usb 1-1: config 0 descriptor?? [ 186.234022][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.247072][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.262799][ T1212] usb 1-1: USB disconnect, device number 10 [ 186.720359][ T5896] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.779150][ T1212] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 186.896378][ T5896] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 186.914017][ T8824] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1292'. [ 186.938550][ T5896] usb 1-1: config 0 has no interface number 0 [ 186.945536][ T5896] usb 1-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 186.947129][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 186.974568][ T5896] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.998089][ T1212] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 187.002869][ T5896] usb 1-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 187.010362][ T1212] usb 4-1: config 0 has no interface number 0 [ 187.034049][ T1212] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 187.046151][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.049529][ T5896] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 187.055139][ T1212] usb 4-1: Product: syz [ 187.069834][ T1212] usb 4-1: Manufacturer: syz [ 187.071691][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.079510][ T1212] usb 4-1: SerialNumber: syz [ 187.100375][ T5896] usb 1-1: config 0 descriptor?? [ 187.122913][ T1212] usb 4-1: config 0 descriptor?? [ 187.142574][ T1212] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 187.315709][ T5896] usb 1-1: string descriptor 0 read error: -71 [ 187.329012][ T5896] keyspan 1-1:0.168: Keyspan 2 port adapter converter detected [ 187.339894][ T5896] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 1 [ 187.350551][ T5896] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 84 [ 187.359046][ T5896] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 2 [ 187.366614][ T1212] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 187.369684][ T5896] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 187.392775][ T5896] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 88 [ 187.402226][ T5941] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.412808][ T5896] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 6 [ 187.417463][ T1212] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 187.424934][ T5896] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 187.448409][ T5896] usb 1-1: USB disconnect, device number 11 [ 187.475070][ T5896] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 187.495821][ T5896] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 187.510693][ T5896] keyspan 1-1:0.168: device disconnected [ 187.574776][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 187.601963][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.616207][ T5941] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.627687][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.649597][ T5941] usb 2-1: config 0 descriptor?? [ 187.885383][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 187.885897][ T5896] usb 4-1: USB disconnect, device number 17 [ 187.909593][ T5896] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 187.930445][ T5896] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 187.948387][ T5896] quatech2 4-1:0.51: device disconnected [ 188.080906][ T5941] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 188.129808][ T8834] serio: Serial port ptm0 [ 188.444628][ T8846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1302'. [ 188.483613][ T1212] usb 2-1: USB disconnect, device number 11 [ 188.718196][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 188.930953][ T8864] use of bytesused == 0 is deprecated and will be removed in the future, [ 188.942683][ T8864] use the actual size instead. [ 189.319766][ T1212] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.498631][ T1212] usb 1-1: Using ep0 maxpacket: 8 [ 189.517516][ T1212] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 189.533063][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.547716][ T1212] usb 1-1: Product: syz [ 189.553754][ T1212] usb 1-1: Manufacturer: syz [ 189.561436][ T1212] usb 1-1: SerialNumber: syz [ 189.575074][ T1212] usb 1-1: config 0 descriptor?? [ 189.802440][ T1212] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 189.824788][ T8886] serio: Serial port ptm0 [ 189.991674][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.023162][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.031391][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.255491][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 190.415019][ T1212] gspca_sunplus: reg_w_riv err -71 [ 190.428690][ T1212] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 190.450120][ T1212] usb 1-1: USB disconnect, device number 12 [ 191.863269][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 192.134600][ T8940] sctp: [Deprecated]: syz.1.1342 (pid 8940) Use of int in max_burst socket option. [ 192.134600][ T8940] Use struct sctp_assoc_value instead [ 192.296959][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.307099][ T1212] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 192.343952][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.353226][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.481326][ T1212] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 192.502654][ T1212] usb 4-1: config 0 has no interface number 0 [ 192.525462][ T1212] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 192.546933][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.578554][ T1212] usb 4-1: Product: syz [ 192.584222][ T1212] usb 4-1: Manufacturer: syz [ 192.594411][ T1212] usb 4-1: SerialNumber: syz [ 192.612399][ T1212] usb 4-1: config 0 descriptor?? [ 193.440854][ T1212] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 193.473360][ T1212] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 193.487533][ T1212] asix 4-1:0.251: probe with driver asix failed with error -71 [ 193.501246][ T1212] usb 4-1: USB disconnect, device number 18 [ 193.771153][ T8988] sctp: [Deprecated]: syz.2.1368 (pid 8988) Use of int in max_burst socket option. [ 193.771153][ T8988] Use struct sctp_assoc_value instead [ 193.878628][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.050604][ T5941] usb 1-1: config 1 has an invalid interface number: 166 but max is 0 [ 194.062620][ T5941] usb 1-1: config 1 has no interface number 0 [ 194.072553][ T5941] usb 1-1: config 1 interface 166 has no altsetting 0 [ 194.095394][ T5941] usb 1-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=50.1a [ 194.116192][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.127732][ T5941] usb 1-1: Product: syz [ 194.134090][ T5941] usb 1-1: Manufacturer: syz [ 194.139853][ T5941] usb 1-1: SerialNumber: syz [ 194.492086][ T9011] sctp: [Deprecated]: syz.3.1377 (pid 9011) Use of int in max_burst socket option. [ 194.492086][ T9011] Use struct sctp_assoc_value instead [ 194.597404][ T9014] netlink: 'syz.2.1380': attribute type 83 has an invalid length. [ 194.661198][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.674250][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.767785][ T5941] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state. [ 194.792874][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.804248][ T5941] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 194.838934][ T5941] usb 1-1: media controller created [ 194.867370][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.085031][ T9031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.095346][ T5941] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 195.109271][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.125152][ T5941] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 195.139104][ T5941] usb 1-1: media controller created [ 195.222443][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.279560][ T5941] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 195.398688][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found [ 195.406545][ T5941] Registered IR keymap rc-empty [ 195.421482][ T5941] dvb-usb: could not initialize remote control. [ 195.437882][ T5941] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully initialized and connected. [ 195.485094][ T5941] usb 1-1: USB disconnect, device number 13 [ 195.711163][ T5941] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully deinitialized and disconnected. [ 195.875191][ T9058] netlink: 'syz.0.1401': attribute type 83 has an invalid length. [ 196.370700][ T9083] netlink: 'syz.1.1412': attribute type 83 has an invalid length. [ 196.755118][ T9101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.879606][ T9107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.200038][ T9121] kvm: apic: phys broadcast and lowest prio [ 197.901151][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 198.073989][ T5896] usb 4-1: config index 0 descriptor too short (expected 64706, got 72) [ 198.102300][ T5896] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.115311][ T9165] kvm: kvm [9164]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 198.120587][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.135844][ T5896] usb 4-1: Product: syz [ 198.166544][ T5896] usb 4-1: Manufacturer: syz [ 198.176449][ T5896] usb 4-1: SerialNumber: syz [ 198.232451][ T5896] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 198.282340][ T42] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 198.541066][ T1212] usb 4-1: USB disconnect, device number 19 [ 198.590529][ T9183] loop8: detected capacity change from 0 to 7 [ 198.603193][ T9183] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 198.618982][ T9183] loop8: partition table partially beyond EOD, truncated [ 198.635756][ T9183] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 198.657545][ T9183] loop8: p2 start 956478 is beyond EOD, truncated [ 198.711170][ T9185] sctp: [Deprecated]: syz.0.1460 (pid 9185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.711170][ T9185] Use struct sctp_sack_info instead [ 198.748147][ T6473] udevd[6473]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 199.368887][ T42] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 199.383047][ T9207] loop8: detected capacity change from 0 to 7 [ 199.389675][ T42] ath9k_htc: Failed to initialize the device [ 199.398115][ T9207] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 199.406267][ T9207] loop8: partition table partially beyond EOD, truncated [ 199.415232][ T1212] usb 4-1: ath9k_htc: USB layer deinitialized [ 199.430710][ T9207] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 199.465568][ T9207] loop8: p2 start 956478 is beyond EOD, truncated [ 199.500713][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 199.564696][ T6473] udevd[6473]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 199.671536][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.693412][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.731557][ T10] usb 1-1: config 0 descriptor?? [ 199.751488][ T10] cp210x 1-1:0.0: cp210x converter detected [ 200.160090][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 200.209068][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 200.254540][ T9231] loop8: detected capacity change from 0 to 7 [ 200.263477][ T9231] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 200.282386][ T9231] loop8: partition table partially beyond EOD, truncated [ 200.299550][ T9231] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 200.313596][ T9231] loop8: p2 start 956478 is beyond EOD, truncated [ 200.376078][ T6473] udevd[6473]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 200.412141][ T10] usb 1-1: USB disconnect, device number 14 [ 200.430351][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.463472][ T10] cp210x 1-1:0.0: device disconnected [ 200.906377][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 202.010833][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 202.019416][ T1212] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.206855][ T10] usb 3-1: config index 0 descriptor too short (expected 64706, got 72) [ 202.217182][ T1212] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.228981][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.243559][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 202.258320][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.268902][ T1212] usb 4-1: config 0 descriptor?? [ 202.285938][ T10] usb 3-1: Product: syz [ 202.292567][ T1212] cp210x 4-1:0.0: cp210x converter detected [ 202.301135][ T10] usb 3-1: Manufacturer: syz [ 202.306459][ T10] usb 3-1: SerialNumber: syz [ 202.319853][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 202.340147][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 202.559042][ T42] usb 3-1: USB disconnect, device number 15 [ 202.684174][ T1212] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 202.700494][ T1212] usb 4-1: cp210x converter now attached to ttyUSB0 [ 202.903608][ T1212] usb 4-1: USB disconnect, device number 20 [ 202.913413][ T1212] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.925609][ T1212] cp210x 4-1:0.0: device disconnected [ 203.388503][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 203.395797][ T9] ath9k_htc: Failed to initialize the device [ 203.406583][ T42] usb 3-1: ath9k_htc: USB layer deinitialized [ 203.549804][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 203.569022][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 203.580085][ T9327] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1534'. [ 203.592400][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 203.611761][ T9327] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1534'. [ 203.778732][ T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 203.950765][ T42] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 203.967068][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.980960][ T42] usb 3-1: config 0 descriptor?? [ 203.997057][ T42] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 204.089348][ T1212] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 204.261121][ T1212] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.275833][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.289627][ T1212] usb 2-1: config 0 descriptor?? [ 204.299754][ T1212] cp210x 2-1:0.0: cp210x converter detected [ 204.709601][ T1212] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 204.743841][ T1212] usb 2-1: cp210x converter now attached to ttyUSB0 [ 204.816128][ T42] gspca_sunplus: reg_w_riv err -71 [ 204.825258][ T42] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 204.837222][ T42] usb 3-1: USB disconnect, device number 16 [ 204.936172][ T5896] usb 2-1: USB disconnect, device number 12 [ 204.948215][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.964216][ T5896] cp210x 2-1:0.0: device disconnected [ 205.956225][ T9404] loop2: detected capacity change from 0 to 7 [ 205.972171][ T9404] Dev loop2: unable to read RDB block 7 [ 205.980083][ T9404] loop2: AHDI p1 p2 p3 [ 205.986165][ T9404] loop2: partition table partially beyond EOD, truncated [ 205.996516][ T9404] loop2: p1 start 1601398130 is beyond EOD, truncated [ 206.006307][ T9404] loop2: p2 start 1702059890 is beyond EOD, truncated [ 206.909570][ T9448] can0: slcan on pty22. [ 206.971055][ T5847] Bluetooth: hci2: command 0x0405 tx timeout [ 206.971098][ T5160] Bluetooth: hci0: command 0x0406 tx timeout [ 206.980499][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 206.986917][ T5160] Bluetooth: hci3: command 0x0406 tx timeout [ 207.052978][ T9445] can0 (unregistered): slcan off pty22. [ 207.242189][ T9464] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1591'. [ 207.377839][ T9470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.596739][ T9479] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 207.622376][ T9479] /dev/nullb0: Can't open blockdev [ 207.914549][ T9497] overlay: ./file0 is not a directory [ 208.810988][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 208.811009][ T29] audit: type=1326 audit(1769511809.113:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9501 comm="syz.1.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc559aeb9 code=0x7fc00000 [ 209.058161][ T42] Process accounting resumed [ 209.538585][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'. [ 209.553916][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'. [ 209.569489][ T9567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1631'. [ 209.883231][ T9578] netlink: 'syz.2.1637': attribute type 31 has an invalid length. [ 209.898992][ T9578] netlink: 'syz.2.1637': attribute type 1 has an invalid length. [ 210.356816][ T5896] IPVS: starting estimator thread 0... [ 210.371689][ T9594] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 210.408869][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 210.478675][ T9595] IPVS: using max 27 ests per chain, 64800 per kthread [ 210.566098][ T9602] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 210.580004][ T9602] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 210.594538][ T9602] overlayfs: failed to set uuid (396/file0, err=-13); falling back to uuid=null. [ 210.741516][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 210.775649][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.829448][ T9] usb 1-1: config 0 descriptor?? [ 210.858567][ T5896] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.038541][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 211.064841][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.082002][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.109828][ T5896] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.148236][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.174414][ T5896] usb 2-1: config 0 descriptor?? [ 211.548334][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'. [ 211.560652][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 211.571785][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 211.676524][ T9] usb 1-1: Cannot set autoneg [ 211.690958][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 211.726716][ T9] usb 1-1: USB disconnect, device number 15 [ 212.066626][ T9635] block nbd0: Unsupported socket: should be TCP or UNIX. [ 212.282687][ T9641] dummy0: entered allmulticast mode [ 212.292840][ T9641] dummy0: left allmulticast mode [ 213.228628][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 213.398549][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 213.412628][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 213.430238][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.461651][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 213.473753][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.497955][ T10] usb 4-1: Product: syz [ 213.502715][ T10] usb 4-1: Manufacturer: syz [ 213.507483][ T10] usb 4-1: SerialNumber: syz [ 213.547631][ T10] usb 4-1: config 0 descriptor?? [ 213.577337][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.597995][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 213.605615][ T5896] usbhid 2-1:0.0: can't add hid device: -71 [ 213.628262][ T5896] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 213.670616][ T5896] usb 2-1: USB disconnect, device number 13 [ 213.740575][ T9685] usb usb8: usbfs: process 9685 (syz.1.1689) did not claim interface 0 before use [ 214.099334][ T9701] overlayfs: invalid origin (0000) [ 214.169729][ T10] em28xx 4-1:0.0: chip ID is em28178 [ 214.381500][ T10] usb 4-1: USB disconnect, device number 21 [ 214.400289][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 214.432235][ T10] em28xx 4-1:0.0: Freeing device [ 214.734434][ T9728] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1711'. [ 215.041503][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1717'. [ 215.278603][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 215.441405][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 215.448547][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 215.473113][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.489947][ T9] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 215.508606][ T9] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 215.520159][ T9] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 215.530354][ T9] usb 2-1: config 128 has no interface number 0 [ 215.536996][ T9] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 87, changing to 10 [ 215.549739][ T9] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 32864, setting to 1024 [ 215.564607][ T9] usb 2-1: config 128 interface 127 has no altsetting 0 [ 215.579838][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 215.589461][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.599096][ T9] usb 2-1: Product: syz [ 215.604100][ T9] usb 2-1: Manufacturer: syz [ 215.617434][ T9] usb 2-1: SerialNumber: syz [ 215.647394][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 215.658107][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.667500][ T10] usb 3-1: Product: syz [ 215.674251][ T10] usb 3-1: Manufacturer: syz [ 215.681529][ T10] usb 3-1: SerialNumber: syz [ 215.702731][ T10] usb 3-1: config 0 descriptor?? [ 215.920822][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 216.033896][ T9765] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1726'. [ 216.046731][ T9] usb 2-1: USB disconnect, device number 14 [ 216.109153][ T6473] udevd[6473]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.181129][ T10] usb 3-1: USB disconnect, device number 17 [ 216.360263][ T9772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1729'. [ 216.363635][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 216.918549][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 217.111115][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 217.123465][ T9800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.167193][ T10] usb 1-1: config index 0 descriptor too short (expected 65315, got 36) [ 217.197340][ T10] usb 1-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 217.223616][ T9802] cgroup: noprefix used incorrectly [ 217.238544][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 217.261789][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.293161][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.316065][ T9804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.326569][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 217.367176][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.404695][ T10] usb 1-1: config 0 descriptor?? [ 217.598502][ T9813] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1748'. [ 217.617283][ T9813] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 217.849590][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.858280][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.881860][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.908530][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.916206][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.938954][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.947701][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.973758][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 217.999518][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 218.017998][ T10] logitech 0003:046D:C29C.0008: unknown main item tag 0x0 [ 218.055349][ T10] logitech 0003:046D:C29C.0008: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 218.296173][ T10] logitech 0003:046D:C29C.0008: no inputs found [ 218.344119][ T10] usb 1-1: USB disconnect, device number 16 [ 218.851396][ T9848] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1766'. [ 219.099324][ T9858] batadv_slave_0: entered promiscuous mode [ 219.126154][ T9858] batadv_slave_0: left promiscuous mode [ 219.924587][ T9887] bpf: Bad value for 'uid' [ 220.006154][ T9888] input: syz0 as /devices/virtual/input/input9 [ 220.029230][ T9890] team0: entered allmulticast mode [ 220.049975][ T9890] team_slave_0: entered allmulticast mode [ 220.086995][ T9890] team_slave_1: entered allmulticast mode [ 220.760063][ T9918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.796222][ T9921] netlink: 'syz.1.1800': attribute type 83 has an invalid length. [ 221.382090][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 221.534609][ T9954] netlink: 'syz.0.1817': attribute type 12 has an invalid length. [ 221.550008][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 221.558700][ T9954] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1817'. [ 221.570323][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 221.581902][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 221.600475][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 221.620811][ T10] usb 3-1: config 1 has no interface number 0 [ 221.627847][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.664916][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 221.679264][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 221.695674][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.721349][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 221.828097][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 221.924437][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 222.352276][ T9] usb 3-1: USB disconnect, device number 18 [ 222.371499][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 222.556729][ T5941] kernel read not supported for file /990/net/arp (pid: 5941 comm: kworker/1:7) [ 222.571002][ T5896] kernel write not supported for file /ppp (pid: 5896 comm: kworker/1:5) [ 222.781617][T10008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1842'. [ 223.136863][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 223.232654][T10029] mkiss: ax0: crc mode is auto. [ 223.800837][T10054] sctp: [Deprecated]: syz.0.1864 (pid 10054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.800837][T10054] Use struct sctp_sack_info instead [ 224.260719][T10076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.511676][T10086] kvm_intel: kvm [10085]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 224.545685][ C1] sd 0:0:1:0: [sda] tag#6451 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 224.558916][ C1] sd 0:0:1:0: [sda] tag#6451 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 224.628744][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 224.734236][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'. [ 224.798162][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.819726][ T9] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 224.833008][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.852517][ T9] usb 1-1: config 0 descriptor?? [ 225.007419][T10106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.284767][ T9] hid_parser_main: 150 callbacks suppressed [ 225.284795][ T9] pantherlord 0003:0F30:0111.0009: unknown main item tag 0x0 [ 225.311385][ T9] pantherlord 0003:0F30:0111.0009: unknown main item tag 0x0 [ 225.320067][ T9] pantherlord 0003:0F30:0111.0009: unknown main item tag 0x0 [ 225.328774][ T9] pantherlord 0003:0F30:0111.0009: unknown main item tag 0x0 [ 225.337104][ T9] pantherlord 0003:0F30:0111.0009: unknown main item tag 0x0 [ 225.390442][ T9] pantherlord 0003:0F30:0111.0009: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.0-1/input0 [ 225.428555][ T9] pantherlord 0003:0F30:0111.0009: no output reports found [ 225.485517][ T9] usb 1-1: USB disconnect, device number 17 [ 225.561770][T10126] tipc: Enabling of bearer rejected, already enabled [ 225.567381][T10124] fido_id[10124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 225.945147][T10142] kvm: kvm [10141]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 226.086668][T10148] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 226.124630][T10148] @0Ù: renamed from bond_slave_1 (while UP) [ 226.257220][ T5839] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 226.289963][T10152] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1910'. [ 226.605411][T10168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.178716][T10196] program syz.1.1931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.254919][T10200] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1933'. [ 227.383245][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1936'. [ 227.799579][ T5941] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 227.848878][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 227.970080][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 227.977516][ T5941] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 227.990079][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.997578][ T5941] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 228.008529][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 228.008957][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.027831][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 228.029526][ T5941] usb 2-1: config 0 descriptor?? [ 228.044776][ T10] usb 3-1: config 0 has no interface number 0 [ 228.065378][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.077027][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 228.097420][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.116171][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.135734][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 228.150848][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.169700][ T10] usb 3-1: config 0 descriptor?? [ 228.186271][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 228.394461][T10218] ldusb 3-1:0.55: Write buffer overflow, 1 bytes dropped [ 228.830775][ T5941] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 228.839497][ T5941] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 228.847984][ T5941] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 228.857241][ T5941] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 228.879027][ T5941] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 228.906043][ T5941] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 229.258652][ T5941] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-110) [ 229.280758][ T5941] corsair-psu 0003:1B1C:1C09.000A: probe with driver corsair-psu failed with error -110 [ 229.316299][ T5941] usb 2-1: USB disconnect, device number 15 [ 229.838758][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 229.909078][ T5941] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 230.001799][ T10] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 230.021756][ T10] usb 1-1: config 0 has no interface number 0 [ 230.041326][ T10] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 230.051844][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.062900][ T10] usb 1-1: Product: syz [ 230.067944][ T10] usb 1-1: Manufacturer: syz [ 230.068601][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 230.073371][ T10] usb 1-1: SerialNumber: syz [ 230.098192][ T5941] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 230.099153][ T10] usb 1-1: config 0 descriptor?? [ 230.120265][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.133300][ T5941] usb 4-1: Product: syz [ 230.140430][ T5941] usb 4-1: Manufacturer: syz [ 230.141429][ T10] usb 1-1: Expected 3 endpoints, found: 0 [ 230.147329][ T5941] usb 4-1: SerialNumber: syz [ 230.199474][ T5941] usb 4-1: config 0 descriptor?? [ 230.357607][ T10] usb 1-1: USB disconnect, device number 18 [ 230.410403][ T9] usb 3-1: USB disconnect, device number 19 [ 230.413334][ T5941] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.441622][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 230.464406][ T5941] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 230.496646][ T5941] usb 4-1: USB disconnect, device number 22 [ 231.173865][T10299] tmpfs: Cannot change global quota limit on remount [ 231.183768][T10300] input: syz1 as /devices/virtual/input/input10 [ 231.567064][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 231.750021][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 231.767101][ T9] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 231.789012][ T9] usb 3-1: config 0 has no interface number 0 [ 231.796276][ T9] usb 3-1: config 0 interface 254 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 231.827282][ T9] usb 3-1: config 0 interface 254 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 231.840125][ T9] usb 3-1: config 0 interface 254 has no altsetting 0 [ 231.858835][ T9] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 231.873322][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.888099][ T9] usb 3-1: Product: syz [ 231.904774][ T9] usb 3-1: Manufacturer: syz [ 231.915338][ T9] usb 3-1: SerialNumber: syz [ 231.936648][ T9] usb 3-1: config 0 descriptor?? [ 231.949185][T10304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.959008][T10304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.391241][ T9] ir_usb 3-1:0.254: IR Dongle converter detected [ 232.592495][ T9] usb 3-1: IRDA class descriptor not found, device not bound [ 232.757264][T10375] input: syz1 as /devices/virtual/input/input11 [ 232.805079][ T9] usb 3-1: USB disconnect, device number 20 [ 234.892474][T10453] tmpfs: Cannot change global quota limit on remount [ 235.658905][ T5904] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 235.843880][ T5904] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 235.859394][ T5904] usb 2-1: config 0 has no interface number 0 [ 235.863639][T10492] usb usb8: usbfs: process 10492 (syz.3.2070) did not claim interface 0 before use [ 235.873232][ T5904] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 235.896275][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.908216][ T5904] usb 2-1: Product: syz [ 235.922903][ T5904] usb 2-1: Manufacturer: syz [ 235.928364][ T5904] usb 2-1: SerialNumber: syz [ 235.941614][ T5904] usb 2-1: config 0 descriptor?? [ 235.953750][ T5904] usb 2-1: Expected 3 endpoints, found: 0 [ 236.048581][ T1212] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 236.177830][ T9] usb 2-1: USB disconnect, device number 16 [ 236.239874][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 236.253207][ T1212] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 236.272254][ T1212] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.282424][ T1212] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 236.296271][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.313002][ T1212] usb 3-1: config 0 descriptor?? [ 236.938838][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 237.126912][T10513] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 237.137231][ T1212] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 237.154628][T10513] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 237.172372][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 237.172539][ T1212] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 237.190361][T10513] overlayfs: failed to set uuid (510/file0, err=-13); falling back to uuid=null. [ 237.205947][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 237.241777][T10515] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2079'. [ 237.259011][ T1212] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 237.270419][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.284113][ T1212] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 237.295127][ T9] usb 1-1: Product: syz [ 237.300979][ T9] usb 1-1: Manufacturer: syz [ 237.307263][ T9] usb 1-1: SerialNumber: syz [ 237.314400][ T1212] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 237.332589][ T1212] corsair-psu 0003:1B1C:1C09.000B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 237.351747][ T9] usb 1-1: config 0 descriptor?? [ 237.573094][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.600451][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.629969][ T9] usb 1-1: USB disconnect, device number 19 [ 237.689518][ T1212] corsair-psu 0003:1B1C:1C09.000B: unable to initialize device (-110) [ 237.704645][ T1212] corsair-psu 0003:1B1C:1C09.000B: probe with driver corsair-psu failed with error -110 [ 237.740737][ T1212] usb 3-1: USB disconnect, device number 21 [ 237.858609][ T5904] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 238.021000][ T5904] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 238.034949][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.056231][ T5904] usb 4-1: config 0 descriptor?? [ 238.498298][T10540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2092'. [ 238.697477][T10548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'. [ 238.859995][ T5941] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 238.896863][ T5904] usb 4-1: Cannot set autoneg [ 238.916550][ T5904] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 238.969820][ T5904] usb 4-1: USB disconnect, device number 23 [ 238.985915][T10558] overlay: ./file0 is not a directory [ 239.038618][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 239.055716][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.068342][ T5941] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 239.086899][ T5941] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 239.106226][ T5941] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 239.119607][ T5941] usb 3-1: config 128 has no interface number 0 [ 239.131041][ T5941] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 87, changing to 10 [ 239.148098][ T5941] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 32864, setting to 1024 [ 239.176985][ T5941] usb 3-1: config 128 interface 127 has no altsetting 0 [ 239.191160][ T5941] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 239.204270][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.213941][ T5941] usb 3-1: Product: syz [ 239.219056][ T5941] usb 3-1: Manufacturer: syz [ 239.225379][ T5941] usb 3-1: SerialNumber: syz [ 239.615029][T10576] block nbd0: Unsupported socket: should be TCP or UNIX. [ 239.681087][ T5941] usb 3-1: USB disconnect, device number 22 [ 239.726018][ T6473] udevd[6473]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.196164][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.224666][T10595] loop2: detected capacity change from 0 to 7 [ 240.234340][T10595] Dev loop2: unable to read RDB block 7 [ 240.245353][T10595] loop2: AHDI p1 p2 p3 [ 240.253285][T10595] loop2: partition table partially beyond EOD, truncated [ 240.279505][T10595] loop2: p1 start 1601398130 is beyond EOD, truncated [ 240.289522][T10595] loop2: p2 start 1702059890 is beyond EOD, truncated [ 240.299229][T10599] overlayfs: invalid origin (0000) [ 240.924817][T10624] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2134'. [ 240.958681][T10624] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 240.995685][T10626] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2143'. [ 241.298194][ T5904] Process accounting resumed [ 241.831758][T10663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.942512][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 241.963401][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2155'. [ 241.975122][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2155'. [ 242.178307][T10677] netlink: 'syz.3.2160': attribute type 31 has an invalid length. [ 242.190782][T10677] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 242.956261][T10712] input: syz0 as /devices/virtual/input/input12 [ 243.061537][T10716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.466487][T10730] bpf: Bad value for 'uid' [ 243.599157][ T5941] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 243.780373][ T5941] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 243.816876][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.859431][ T5941] usb 4-1: config 0 descriptor?? [ 243.882947][ T5941] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 244.253928][T10754] netlink: 'syz.0.2194': attribute type 83 has an invalid length. [ 244.690725][ T5941] gspca_sunplus: reg_w_riv err -71 [ 244.731707][ T5941] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 244.765228][ T5941] usb 4-1: USB disconnect, device number 24 [ 245.155122][T10784] netlink: 'syz.1.2209': attribute type 12 has an invalid length. [ 245.168246][ T5941] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 245.184303][T10784] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2209'. [ 245.354394][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 245.376926][ T5941] usb 3-1: config index 0 descriptor too short (expected 65315, got 36) [ 245.398693][ T5941] usb 3-1: config 0 has too many interfaces: 239, using maximum allowed: 32 [ 245.423066][ T5941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 239 [ 245.448658][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.497616][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.517304][ T5941] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 245.533829][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.557119][ T5941] usb 3-1: config 0 descriptor?? [ 246.011159][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.030699][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.051059][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.067769][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.080675][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.093566][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.128782][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.141471][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.171018][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.189900][ T5941] logitech 0003:046D:C29C.000C: unknown main item tag 0x0 [ 246.218856][ T5941] logitech 0003:046D:C29C.000C: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 246.462590][ T5941] logitech 0003:046D:C29C.000C: no inputs found [ 246.523483][ T5941] usb 3-1: USB disconnect, device number 23 [ 247.167600][ T9] kernel read not supported for file /1190/net/arp (pid: 9 comm: kworker/0:0) [ 247.181232][ T5904] kernel write not supported for file /ppp (pid: 5904 comm: kworker/0:4) [ 247.212860][T10857] kvm: kvm [10856]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 247.534127][T10873] program syz.2.2250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.645246][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 247.681368][T10878] batadv_slave_0: entered promiscuous mode [ 247.698777][T10878] batadv_slave_0: left promiscuous mode [ 248.008930][ T5941] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 248.168890][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 248.198256][ T5941] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 248.228590][ T5941] usb 2-1: config 0 has no interface number 0 [ 248.235707][ T5941] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.260172][ T5941] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 248.274967][ T5941] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.306664][ T5941] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.324051][ T5941] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 248.348763][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.393906][ T5941] usb 2-1: config 0 descriptor?? [ 248.436702][ T5941] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 248.569500][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 248.688123][T10882] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 248.859020][T10927] sctp: [Deprecated]: syz.3.2278 (pid 10927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.859020][T10927] Use struct sctp_sack_info instead [ 250.152957][T10973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2300'. [ 250.626376][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'. [ 250.738186][ T42] usb 2-1: USB disconnect, device number 17 [ 250.777176][ T42] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 251.215958][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 251.571213][T11017] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2320'. [ 251.706809][T11023] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2323'. [ 252.339574][T11051] Bluetooth: MGMT ver 1.23 [ 252.367069][T11051] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 252.666765][T11068] binder: 11066:11068 ioctl c018620c 200000000580 returned -22 [ 253.021289][T11084] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2352'. [ 253.242067][T11094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.291622][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 253.522192][T11108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.813997][T11126] new mount options do not match the existing superblock, will be ignored [ 253.839491][T11126] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 253.975837][T11132] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2373'. [ 254.074350][T11136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2376'. [ 254.132502][T11140] overlay: Unknown parameter '32 [ 254.132502][T11140] time [ 254.132502][T11140] string [ 254.132502][T11140] statistic [ 254.132502][T11140] state [ 254.132502][T11140] realm [ 254.132502][T11140] rateest [ 254.132502][T11140] quota [ 254.132502][T11140] pkttype [ 254.132502][T11140] physdev [ 254.132502][T11140] cgroup [ 254.132502][T11140] cgroup [ 254.132502][T11140] cgroup [ 254.132502][T11140] owner [ 254.132502][T11140] nfacct [ 254.132502][T11140] nfacct [ 254.132502][T11140] mac [ 254.132502][T11140] limit [ 254.132502][T11140] ipvs [ 254.132502][T11140] helper [ 254.132502][T11140] devgroup [ 254.132502][T11140] cpu [ 254.132502][T11140] conntrack [ 254.132502][T11140] conntrack [ 254.132502][T11140] conntrack [ 254.132502][T11140] connlabel [ 254.132502][T11140] connbytes [ 254.132502][T11140] comment [ 254.132502][T11140] bpf [ 254.132502][T11140] bpf [ 254.132502][T11140] connmark [ 254.132502][T11140] mark [ 254.132502][T11140] rpfilter [ 254.132502][T11140] ah [ 254.132502][T11140] tcpmss [ 254.132502][T11140] socket [ 254.132502][T11140] socket [ 254.132502][T11140] socket [ 254.132502][T11140] socket [ 254.132502][T11140] sctp [ 254.132502][T11140] recent [ 254.132502][T11140] recent [ 254.132502][T11140] policy [ 254.132502][T11140] osf [ 254.132502][T11140] multiport [ 254.132502][T11140] length [ 254.132502][T11140] l2tp [ 254.132502][T11140] iprange [ 254.132502][T11140] ipcomp [ 254.132502][T11140] ttl [ 254.132502][T11140] hashlimit [ 254.132502][T11140] hashlimit [ 254.132502][T11140] hashlimit [ 254.132502][T11140] esp [ 254.132502][T11140] ecn [ 254.132502][T11140] tos [ 254.132502][T11140] dscp [ 254.132502][T11140] dccp [ 254.132502][T11140] connlimit [ 254.132502][T11140] cluster [ 254.132502][T11140] addrtype [ 254.132502][T11140] addrtype [ 254.132502][T11140] set [ 254.132502][T11140] set [ 254.132502][T11140] set [ 254.132502][T11140] set [ 254.132502][T11140] set [ 254.132502][T11140] icmp [ 254.596207][T11150] smc: net device bond0 applied user defined pnetid SYZ0 [ 254.608337][T11150] smc: net device bond0 erased user defined pnetid SYZ0 [ 254.750771][T11156] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 254.758893][ T5941] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.760479][T11156] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 254.763651][T11156] vhci_hcd vhci_hcd.0: Device attached [ 254.804173][T11159] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 254.812386][T11159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.833137][T11159] vhci_hcd vhci_hcd.0: Device attached [ 254.852344][T11156] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 254.860288][T11156] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.872977][T11156] vhci_hcd vhci_hcd.0: Device attached [ 254.890130][T11156] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(8) [ 254.897012][T11156] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.909682][T11156] vhci_hcd vhci_hcd.0: Device attached [ 254.917584][T11168] vhci_hcd: connection closed [ 254.917815][T11160] vhci_hcd: connection closed [ 254.923677][ T12] vhci_hcd vhci_hcd.3: stop threads [ 254.924520][ T12] vhci_hcd vhci_hcd.3: release socket [ 254.943739][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 254.944573][T11166] vhci_hcd: connection closed [ 254.950935][T11157] vhci_hcd: connection closed [ 254.951021][ T5896] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 254.992573][ T5941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.003138][ T5941] usb 1-1: config 14 has an invalid interface number: 115 but max is 0 [ 255.018501][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 255.029111][ T5941] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 255.042180][ T12] vhci_hcd vhci_hcd.3: stop threads [ 255.048157][ T12] vhci_hcd vhci_hcd.3: release socket [ 255.056219][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 255.064537][ T5941] usb 1-1: config 14 has no interface number 0 [ 255.073104][ T5941] usb 1-1: config 14 interface 115 has no altsetting 0 [ 255.083199][ T5896] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 255.093062][ T12] vhci_hcd vhci_hcd.3: stop threads [ 255.101166][ T12] vhci_hcd vhci_hcd.3: release socket [ 255.112513][ T5941] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 255.128243][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 255.137092][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.149495][ T12] vhci_hcd vhci_hcd.3: stop threads [ 255.157366][ T12] vhci_hcd vhci_hcd.3: release socket [ 255.163625][ T5941] usb 1-1: Product: syz [ 255.169860][ T5941] usb 1-1: Manufacturer: syz [ 255.174945][ T5941] usb 1-1: SerialNumber: syz [ 255.180868][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 255.208763][ T5848] Bluetooth: hci2: command 0x0405 tx timeout [ 255.429663][ T5941] usb 1-1: USB disconnect, device number 20 [ 255.664739][T11194] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2401'. [ 255.676883][T11194] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2401'. [ 256.097513][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.109439][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.218532][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 256.388994][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 256.410721][ T5904] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.420638][ T5904] usb 2-1: config 0 has no interface number 0 [ 256.429912][ T5904] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.448868][ T5904] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.477866][ T5904] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 256.492227][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.504986][ T5904] usb 2-1: config 0 descriptor?? [ 256.698916][ T5941] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 256.871412][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.888641][ T5941] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 256.905841][ T5839] block nbd0: Receive control failed (result -32) [ 256.918482][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.931054][ T5941] usb 3-1: config 0 descriptor?? [ 257.158876][ T5904] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000D/input/input13 [ 257.311158][ T5904] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000D/input/input14 [ 257.361303][ T5904] uclogic 0003:28BD:0071.000D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 257.362366][ T5941] hid_parser_main: 150 callbacks suppressed [ 257.362385][ T5941] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x0 [ 257.426095][ T5904] usb 2-1: USB disconnect, device number 18 [ 257.479843][ T5941] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x0 [ 257.511909][ T5941] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x0 [ 257.528874][ T5941] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x0 [ 257.548567][ T5941] pantherlord 0003:0F30:0111.000E: unknown main item tag 0x0 [ 257.588289][ T5941] pantherlord 0003:0F30:0111.000E: hidraw1: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.2-1/input0 [ 257.606715][T11254] fido_id[11254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 257.649611][ T5941] pantherlord 0003:0F30:0111.000E: no output reports found [ 257.693372][ T5941] usb 3-1: USB disconnect, device number 24 [ 257.764532][T11256] fido_id[11256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 258.151336][T11263] [U] [ 258.155076][T11263] [U] [ 258.158437][T11263] [U] [ 258.161813][T11263] [U] [ 258.167174][T11263] [U] [ 258.170061][T11263] [U] [ 258.173843][T11263] [U] [ 258.177546][T11263] [U] [ 258.192248][T11263] [U] [ 258.195806][T11263] [U] [ 258.199695][T11263] [U] [ 258.203885][T11263] [U] [ 258.248933][T11263] [U] [ 258.251976][T11263] [U] [ 258.256721][T11263] [U] [ 258.260552][T11263] [U] [ 258.287181][T11263] [U] [ 258.290159][T11263] [U] [ 258.293082][T11263] [U] [ 258.295885][T11263] [U] [ 258.318800][T11263] [U] [ 258.321639][T11263] [U] [ 258.325619][T11263] [U] [ 258.328716][T11263] [U] [ 258.349258][T11263] [U] [ 258.352049][T11263] [U] [ 258.355055][T11263] [U] [ 258.358189][T11263] [U] [ 258.390866][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 258.392433][T11263] [U] [ 258.407076][T11263] [U] [ 258.410622][T11263] [U] [ 258.414592][T11263] [U] [ 258.427874][T11263] [U] [ 258.432749][T11263] [U] [ 258.436790][T11263] [U] [ 258.440375][T11263] [U] [ 258.514284][T11263] [U] [ 258.517686][T11263] [U] [ 258.520776][T11263] [U] [ 258.524226][T11263] [U] [ 258.531945][T11277] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 258.582411][T11263] [U] [ 258.586132][T11263] [U] [ 258.589496][T11263] [U] [ 258.593249][T11263] [U] [ 258.622692][T11263] [U] [ 258.625961][T11263] [U] [ 258.628883][T11263] [U] [ 258.632152][T11263] [U] [ 258.656696][T11263] [U] [ 258.659732][T11263] [U] [ 258.662670][T11263] [U] [ 258.665527][T11263] [U] [ 258.687489][T11263] [U] [ 258.690276][T11263] [U] [ 258.693011][T11263] [U] [ 258.695747][T11263] [U] [ 258.732252][T11263] [U] [ 258.736054][T11263] [U] [ 258.739668][T11263] [U] [ 258.742494][T11263] [U] [ 258.776826][T11263] [U] [ 258.779881][T11263] [U] [ 258.783349][T11263] [U] [ 258.786620][T11263] [U] [ 258.809722][T11263] [U] [ 258.813268][T11263] [U] [ 258.817152][T11263] [U] [ 258.822069][T11263] [U] [ 258.846629][T11263] [U] [ 258.849939][T11263] [U] [ 258.853058][T11263] [U] [ 258.858059][T11263] [U] [ 258.873613][T11263] [U] [ 258.877118][T11263] [U] [ 258.880905][T11263] [U] [ 258.885489][T11263] [U] [ 258.922013][T11263] [U] [ 258.925484][T11263] [U] [ 258.928857][T11263] [U] [ 258.932056][T11263] [U] [ 258.941602][T11263] [U] [ 258.944400][T11263] [U] [ 258.947491][T11263] [U] [ 258.950790][T11263] [U] [ 258.973063][T11263] [U] [ 258.976468][T11263] [U] [ 258.979488][T11263] [U] [ 258.982698][T11263] [U] [ 259.028162][T11263] [U] [ 259.220143][T11299] netlink: 7986 bytes leftover after parsing attributes in process `syz.3.2449'. [ 260.099852][T11336] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 260.155959][T11340] vxcan0: tx address claim with dest, not broadcast [ 260.238671][ T5896] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 261.037506][T11385] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 261.045903][T11385] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.060015][T11389] overlayfs: conflicting options: userxattr,metacopy=on [ 261.097700][T11385] vhci_hcd vhci_hcd.0: Device attached [ 261.110940][T11387] vhci_hcd: connection closed [ 261.111259][ T3556] vhci_hcd vhci_hcd.2: stop threads [ 261.141244][ T3556] vhci_hcd vhci_hcd.2: release socket [ 261.153863][ T5904] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 261.165128][ T3556] vhci_hcd vhci_hcd.2: disconnect device [ 261.330545][ T5904] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 261.343371][ T5904] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 261.375078][ T5904] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 261.382625][T11402] tap0: tun_chr_ioctl cmd 1074025678 [ 261.394723][T11402] tap0: group set to 21 [ 261.402979][ T5904] usb 2-1: config 8 has no interface number 0 [ 261.409217][ T5904] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 261.423740][ T5904] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.443292][ T5904] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 261.456324][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.466081][ T5904] usb 2-1: Product: syz [ 261.478493][ T5904] usb 2-1: Manufacturer: syz [ 261.485023][ T5904] usb 2-1: SerialNumber: syz [ 261.575161][T11409] netlink: 'syz.0.2501': attribute type 3 has an invalid length. [ 261.586752][T11409] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2501'. [ 261.711154][T11376] syz.1.2487 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 261.778896][ T5904] usb 2-1: USB disconnect, device number 19 [ 262.338997][ T5904] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 262.385267][T11433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2510'. [ 262.405441][T11433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2510'. [ 262.479979][T11437] blkio.reset_stats is deprecated [ 262.541770][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.556286][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 262.570476][ T5904] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 262.582475][ T5904] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 262.600838][ T5904] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.611347][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.622813][ T5904] usb 4-1: Product: syz [ 262.628737][ T5904] usb 4-1: Manufacturer: syz [ 262.635480][ T5904] usb 4-1: SerialNumber: syz [ 262.647410][T11427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.658960][ T5896] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 262.758681][ T5941] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 262.828693][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 262.841210][ T5896] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 262.851899][ T5896] usb 1-1: config 0 has no interface number 0 [ 262.861172][ T5896] usb 1-1: config 0 interface 184 has no altsetting 0 [ 262.880310][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.900545][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.916339][ T5896] usb 1-1: Product: syz [ 262.931070][ T5896] usb 1-1: Manufacturer: syz [ 262.939582][ T5896] usb 1-1: SerialNumber: syz [ 262.941745][ T5904] cdc_ncm 4-1:1.0: bind() failure [ 262.951675][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 262.969260][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 262.990240][ T5941] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.005685][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.017772][ T5941] usb 2-1: Product: syz [ 263.021940][ T5904] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 263.025002][ T5896] usb 1-1: config 0 descriptor?? [ 263.037474][ T5904] cdc_ncm 4-1:1.1: bind() failure [ 263.040764][ T5941] usb 2-1: Manufacturer: syz [ 263.055407][ T5896] smsc75xx v1.0.0 [ 263.063962][ T5941] usb 2-1: SerialNumber: syz [ 263.076472][ T5941] usb 2-1: config 0 descriptor?? [ 263.082144][ T5904] usb 4-1: USB disconnect, device number 25 [ 263.089692][ T5941] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 263.103335][ T5941] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 263.460683][ T5896] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 263.487487][ T5896] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 263.505676][ T5896] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 263.520883][ T5896] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 263.539237][ T5896] usb 1-1: USB disconnect, device number 21 [ 263.720439][ T5941] em28xx 2-1:0.0: chip ID is em2765 [ 263.932269][T11463] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.954176][T11463] overlayfs: overlapping lowerdir path [ 263.985002][ T5941] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 264.000044][ T5941] em28xx 2-1:0.0: board has no eeprom [ 264.089011][ T5941] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 264.111299][ T5941] em28xx 2-1:0.0: dvb set to bulk mode. [ 264.129881][ T5896] em28xx 2-1:0.0: Binding DVB extension [ 264.150747][ T5941] usb 2-1: USB disconnect, device number 20 [ 264.187459][ T5941] em28xx 2-1:0.0: Disconnecting em28xx [ 264.305937][ T5896] em28xx 2-1:0.0: Registering input extension [ 264.316562][ T5941] em28xx 2-1:0.0: Closing input extension [ 264.345876][ T5941] em28xx 2-1:0.0: Freeing device [ 264.844551][T11490] Bluetooth: hci4: Frame reassembly failed (-84) [ 264.871512][ T3526] Bluetooth: hci4: Frame reassembly failed (-84) [ 265.418504][ T5941] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 265.580070][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 265.605843][ T5941] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 265.658599][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.700453][ T5941] usb 2-1: config 0 descriptor?? [ 265.735471][ T5941] gspca_main: sunplus-2.14.0 probing 041e:400b [ 266.410315][T11539] syz.0.2547 uses obsolete (PF_INET,SOCK_PACKET) [ 266.548773][ T5941] gspca_sunplus: reg_r err -71 [ 266.565180][ T5941] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 266.617612][ T5941] usb 2-1: USB disconnect, device number 21 [ 266.888607][ T5848] Bluetooth: hci4: command 0x1003 tx timeout [ 266.888619][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 267.228208][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 267.704876][T11600] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2573'. [ 267.925358][T11611] netlink: 'syz.3.2579': attribute type 58 has an invalid length. [ 268.163469][ T29] audit: type=1326 audit(1769511874.468:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.0.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4e59aeb9 code=0x7fc00000 [ 268.678526][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 268.868791][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 268.892474][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 268.937005][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.955419][ T10] usb 1-1: config 0 descriptor?? [ 268.975155][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 269.183173][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2606'. [ 269.209159][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2606'. [ 269.666549][T11686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.801249][ T10] gspca_vc032x: reg_w err -71 [ 269.818217][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.828523][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.836138][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.853985][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.864007][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.871687][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.879234][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.887174][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.893341][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.904974][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.911212][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.922149][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.931470][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.938890][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.946689][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.954433][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.962161][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.968128][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.974400][ T10] gspca_vc032x: Unknown sensor... [ 269.980259][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 269.995289][ T10] usb 1-1: USB disconnect, device number 22 [ 270.113690][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.980285][T11746] usb usb8: usbfs: process 11746 (syz.2.2643) did not claim interface 0 before use [ 271.553447][T11769] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 271.953159][ T5896] kernel read not supported for file /radio0 (pid: 5896 comm: kworker/1:5) [ 272.493273][T11804] kvm: kvm [11802]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfffffffffffffeb6 [ 272.828677][ T5941] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 273.010517][ T5941] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.031218][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.062005][ T5941] usb 3-1: config 0 descriptor?? [ 273.292662][ T5941] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 273.536285][ T5941] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 273.556241][ T5941] [drm] Initialized udl on minor 2 [ 273.617199][T11852] loop8: detected capacity change from 0 to 1 [ 273.624622][T11853] netlink: 'syz.1.2694': attribute type 83 has an invalid length. [ 273.637156][ T6473] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 273.647994][ T6473] loop8: p1 start 540042604 is beyond EOD, truncated [ 273.656709][ T6473] loop8: p2 start 1640453368 is beyond EOD, truncated [ 273.665514][ T6473] loop8: p3 start 1935506780 is beyond EOD, truncated [ 273.675175][ T6473] loop8: p4 start 3893138939 is beyond EOD, truncated [ 273.684220][ T6473] loop8: p5 start 287485722 is beyond EOD, truncated [ 273.693777][ T6473] loop8: p6 start 3376667143 is beyond EOD, truncated [ 273.704253][ T6473] loop8: p7 start 2111012381 is beyond EOD, truncated [ 273.704746][ T5941] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 273.714662][ T6473] loop8: p8 start 3147612238 is beyond EOD, truncated [ 273.737704][ T6473] loop8: p9 start 2252824347 is beyond EOD, truncated [ 273.744789][ T6473] loop8: p10 start 489633540 is beyond EOD, truncated [ 273.750499][ T5941] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 273.754212][ T6473] loop8: p11 start 1985099615 is beyond EOD, truncated [ 273.793706][ T6473] loop8: p12 start 2132828001 is beyond EOD, truncated [ 273.806404][T11852] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 273.815191][T11852] loop8: p1 start 540042604 is beyond EOD, truncated [ 273.822825][T11852] loop8: p2 start 1640453368 is beyond EOD, truncated [ 273.830939][T11852] loop8: p3 start 1935506780 is beyond EOD, truncated [ 273.840737][T11852] loop8: p4 start 3893138939 is beyond EOD, truncated [ 273.849418][T11852] loop8: p5 start 287485722 is beyond EOD, truncated [ 273.857844][T11852] loop8: p6 start 3376667143 is beyond EOD, truncated [ 273.866438][T11852] loop8: p7 start 2111012381 is beyond EOD, truncated [ 273.875831][T11852] loop8: p8 start 3147612238 is beyond EOD, truncated [ 273.885131][T11852] loop8: p9 start 2252824347 is beyond EOD, truncated [ 273.892806][T11852] loop8: p10 start 489633540 is beyond EOD, truncated [ 273.904153][T11852] loop8: p11 start 1985099615 is beyond EOD, truncated [ 273.913027][T11852] loop8: p12 start 2132828001 is beyond EOD, truncated [ 273.964650][ T42] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.966541][ T10] usb 3-1: USB disconnect, device number 25 [ 273.975413][ T42] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 275.064121][T11905] loop8: detected capacity change from 0 to 1 [ 275.074650][T11905] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 275.084054][T11905] loop8: p1 start 540042604 is beyond EOD, truncated [ 275.091617][T11905] loop8: p2 start 1640453368 is beyond EOD, truncated [ 275.098802][T11905] loop8: p3 start 1935506780 is beyond EOD, truncated [ 275.109375][T11905] loop8: p4 start 3893138939 is beyond EOD, truncated [ 275.120910][T11905] loop8: p5 start 287485722 is beyond EOD, truncated [ 275.128607][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 275.130667][T11905] loop8: p6 start 3376667143 is beyond EOD, truncated [ 275.151958][T11905] loop8: p7 start 2111012381 is beyond EOD, truncated [ 275.161929][T11905] loop8: p8 start 3147612238 is beyond EOD, truncated [ 275.172475][T11905] loop8: p9 start 2252824347 is beyond EOD, truncated [ 275.180621][T11905] loop8: p10 start 489633540 is beyond EOD, truncated [ 275.189966][T11905] loop8: p11 start 1985099615 is beyond EOD, truncated [ 275.199392][T11905] loop8: p12 start 2132828001 is beyond EOD, truncated [ 275.294648][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 275.305844][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.328793][ T10] usb 1-1: config 0 descriptor?? [ 275.547415][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 275.776575][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 275.798610][ T10] [drm] Initialized udl on minor 2 [ 275.951602][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 275.967552][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 276.153278][ T5904] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 276.185105][ T10] usb 1-1: USB disconnect, device number 23 [ 276.192030][ T5904] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 276.214557][ T5904] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 277.238527][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 277.378882][ T5904] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 277.410251][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 277.423607][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 277.447277][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.465885][ T10] usb 1-1: Product: syz [ 277.472493][ T10] usb 1-1: Manufacturer: syz [ 277.477682][ T10] usb 1-1: SerialNumber: syz [ 277.491932][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 277.499470][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 277.538702][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 277.562434][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 277.591049][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 277.623939][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.639753][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.650469][ T5904] usb 2-1: Product: syz [ 277.655969][ T5904] usb 2-1: Manufacturer: syz [ 277.661508][ T5904] usb 2-1: SerialNumber: syz [ 277.679677][ T5904] usb 2-1: config 0 descriptor?? [ 277.695182][ T5904] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.706286][ T5904] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 277.726199][ T10] r8152-cfgselector 1-1: Needed 1 retries to read version [ 277.969168][ T10] r8152-cfgselector 1-1: USB disconnect, device number 24 [ 278.316214][ T5904] em28xx 2-1:0.0: chip ID is em2870 [ 278.531040][ T5904] usb 2-1: USB disconnect, device number 22 [ 278.546365][ T5904] em28xx 2-1:0.0: Disconnecting em28xx [ 278.560372][ T5904] em28xx 2-1:0.0: Freeing device [ 279.818578][ T42] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 279.978481][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 279.985911][ T42] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 279.999394][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 280.018583][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 280.038573][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.052350][ T42] usb 4-1: Product: syz [ 280.057286][ T42] usb 4-1: Manufacturer: syz [ 280.063312][ T42] usb 4-1: SerialNumber: syz [ 280.072089][ T42] usb 4-1: config 0 descriptor?? [ 280.083934][ T42] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 280.097816][ T42] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 280.691716][ T42] em28xx 4-1:0.0: chip ID is em2870 [ 280.921084][ T5904] usb 4-1: USB disconnect, device number 26 [ 280.947629][ T5904] em28xx 4-1:0.0: Disconnecting em28xx [ 280.963548][ T5904] em28xx 4-1:0.0: Freeing device [ 280.998641][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 281.148582][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 281.157570][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.169384][ T10] usb 1-1: config 0 has no interface number 0 [ 281.184331][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 281.195491][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.204418][ T10] usb 1-1: Product: syz [ 281.212544][ T10] usb 1-1: Manufacturer: syz [ 281.217795][ T10] usb 1-1: SerialNumber: syz [ 281.228315][ T10] usb 1-1: config 0 descriptor?? [ 281.238276][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 281.249207][ T10] usb 1-1: selecting invalid altsetting 1 [ 281.256017][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 281.271429][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.285321][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 281.296044][ T10] usb 1-1: media controller created [ 281.312183][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.299394][ T5904] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 282.408917][ T10] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 282.429694][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 282.429955][T12056] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 282.458759][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 282.485807][ T5904] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 282.503328][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.535196][ T5904] usb 4-1: Product: syz [ 282.545064][ T10] usb 1-1: USB disconnect, device number 25 [ 282.554885][ T5904] usb 4-1: Manufacturer: syz [ 282.570303][ T5904] usb 4-1: SerialNumber: syz [ 282.599178][ T5904] r8152-cfgselector 4-1: Unknown version 0x0000 [ 282.610535][ T5904] r8152-cfgselector 4-1: config 0 descriptor?? [ 282.830941][ T5904] r8152-cfgselector 4-1: Needed 1 retries to read version [ 283.040417][ T5904] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 283.308471][T12111] raw_sendmsg: syz.2.2816 forgot to set AF_INET. Fix it! [ 283.321347][T12113] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 283.808067][T12130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2825'. [ 284.499869][T12166] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 284.772891][T12179] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2849'. [ 284.995703][T12187] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 285.016069][T12189] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2852'. [ 285.342937][T12205] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2861'. [ 285.533467][T12215] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 285.790244][T12228] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 285.877272][T12230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.463047][T12254] binder: 12253:12254 ioctl c018620c 200000000580 returned -22 [ 286.900996][T12277] binder: 12276:12277 ioctl c018620c 200000000580 returned -22 [ 287.117140][T12290] new mount options do not match the existing superblock, will be ignored [ 287.231042][T12290] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 288.046842][T12313] new mount options do not match the existing superblock, will be ignored [ 288.080827][T12313] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 288.289469][T12321] smc: net device bond0 applied user defined pnetid SYZ0 [ 288.300323][T12321] smc: net device bond0 erased user defined pnetid SYZ0 [ 288.579849][T12332] overlay: Unknown parameter '32 [ 288.579849][T12332] time [ 288.579849][T12332] string [ 288.579849][T12332] statistic [ 288.579849][T12332] state [ 288.579849][T12332] realm [ 288.579849][T12332] rateest [ 288.579849][T12332] quota [ 288.579849][T12332] pkttype [ 288.579849][T12332] physdev [ 288.579849][T12332] cgroup [ 288.579849][T12332] cgroup [ 288.579849][T12332] cgroup [ 288.579849][T12332] owner [ 288.579849][T12332] nfacct [ 288.579849][T12332] nfacct [ 288.579849][T12332] mac [ 288.579849][T12332] limit [ 288.579849][T12332] ipvs [ 288.579849][T12332] helper [ 288.579849][T12332] devgroup [ 288.579849][T12332] cpu [ 288.579849][T12332] conntrack [ 288.579849][T12332] conntrack [ 288.579849][T12332] conntrack [ 288.579849][T12332] connlabel [ 288.579849][T12332] connbytes [ 288.579849][T12332] comment [ 288.579849][T12332] bpf [ 288.579849][T12332] bpf [ 288.579849][T12332] connmark [ 288.579849][T12332] mark [ 288.579849][T12332] rpfilter [ 288.579849][T12332] ah [ 288.579849][T12332] tcpmss [ 288.579849][T12332] socket [ 288.579849][T12332] socket [ 288.579849][T12332] socket [ 288.579849][T12332] socket [ 288.579849][T12332] sctp [ 288.579849][T12332] recent [ 288.579849][T12332] recent [ 288.579849][T12332] policy [ 288.579849][T12332] osf [ 288.579849][T12332] multiport [ 288.579849][T12332] length [ 288.579849][T12332] l2tp [ 288.579849][T12332] iprange [ 288.579849][T12332] ipcomp [ 288.579849][T12332] ttl [ 288.579849][T12332] hashlimit [ 288.579849][T12332] hashlimit [ 288.579849][T12332] hashlimit [ 288.579849][T12332] esp [ 288.579849][T12332] ecn [ 288.579849][T12332] tos [ 288.579849][T12332] dscp [ 288.579849][T12332] dccp [ 288.579849][T12332] connlimit [ 288.579849][T12332] cluster [ 288.579849][T12332] addrtype [ 288.579849][T12332] addrtype [ 288.579849][T12332] set [ 288.579849][T12332] set [ 288.579849][T12332] set [ 288.579849][T12332] set [ 288.579849][T12332] set [ 288.579849][T12332] icmp [ 289.120171][T12348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2928'. [ 289.728136][T12373] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2940'. [ 289.750154][T12373] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2940'. [ 290.144867][T12392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.951668][ T5848] block nbd1: Receive control failed (result -32) [ 291.263089][T12423] dvmrp12: entered allmulticast mode [ 291.819427][T12438] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 291.827898][T12438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 291.859085][T12438] vhci_hcd vhci_hcd.0: Device attached [ 291.898597][T12441] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 291.907314][T12441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.932209][T12441] vhci_hcd vhci_hcd.0: Device attached [ 291.978533][T12438] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 291.985909][T12438] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 292.010793][T12438] vhci_hcd vhci_hcd.0: Device attached [ 292.025681][T12441] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 292.033155][T12441] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 292.058848][ T1212] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 292.118870][T12441] vhci_hcd vhci_hcd.0: Device attached [ 292.130149][ T1212] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 292.151054][T12449] vhci_hcd: connection closed [ 292.151054][T12442] vhci_hcd: connection closed [ 292.156633][ T3526] vhci_hcd vhci_hcd.0: stop threads [ 292.157209][T12439] vhci_hcd: connection reset by peer [ 292.168982][T12452] vhci_hcd: connection closed [ 292.173638][ T3526] vhci_hcd vhci_hcd.0: release socket [ 292.208557][ T3526] vhci_hcd vhci_hcd.0: disconnect device [ 292.215249][ T3526] vhci_hcd vhci_hcd.0: stop threads [ 292.238569][ T3526] vhci_hcd vhci_hcd.0: release socket [ 292.249451][ T3526] vhci_hcd vhci_hcd.0: disconnect device [ 292.271828][ T3526] vhci_hcd vhci_hcd.0: stop threads [ 292.277921][ T3526] vhci_hcd vhci_hcd.0: release socket [ 292.295275][ T3526] vhci_hcd vhci_hcd.0: disconnect device [ 292.315907][ T3526] vhci_hcd vhci_hcd.0: stop threads [ 292.330786][ T3526] vhci_hcd vhci_hcd.0: release socket [ 292.346791][ T3526] vhci_hcd vhci_hcd.0: disconnect device [ 292.679567][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 292.847822][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 292.858492][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 292.878229][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.909828][ T10] usb 2-1: config 14 has an invalid interface number: 115 but max is 0 [ 292.931035][ T10] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 292.952030][ T10] usb 2-1: config 14 has no interface number 0 [ 292.977906][ T10] usb 2-1: config 14 interface 115 has no altsetting 0 [ 292.996223][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 293.031005][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.051421][ T10] usb 2-1: Product: syz [ 293.056035][ T10] usb 2-1: Manufacturer: syz [ 293.071777][ T10] usb 2-1: SerialNumber: syz [ 293.222311][T12479] vxcan0: tx address claim with dest, not broadcast [ 293.343052][ T10] usb 2-1: USB disconnect, device number 23 [ 294.280148][T12510] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.3000'. [ 294.855808][T12537] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 294.928570][T12543] vxcan0: tx address claim with dest, not broadcast [ 295.053808][T12547] overlayfs: conflicting options: userxattr,metacopy=on [ 295.706446][T12573] tap0: tun_chr_ioctl cmd 1074025678 [ 295.724371][T12573] tap0: group set to 21 [ 295.734964][T12575] [U] [ 295.737858][T12575] [U] [ 295.740697][T12575] [U] [ 295.743439][T12575] [U] [ 295.758585][T12575] [U] [ 295.762029][T12575] [U] [ 295.765110][T12575] [U] [ 295.768255][T12575] [U] [ 295.776762][T12575] [U] [ 295.779620][T12575] [U] [ 295.782461][T12575] [U] [ 295.785188][T12575] [U] [ 295.788982][T12575] [U] [ 295.791852][T12575] [U] [ 295.794905][T12575] [U] [ 295.798791][T12575] [U] [ 295.804308][T12575] [U] [ 295.807167][T12575] [U] [ 295.810277][T12575] [U] [ 295.813187][T12575] [U] [ 295.827660][T12575] [U] [ 295.830736][T12575] [U] [ 295.833567][T12575] [U] [ 295.836475][T12575] [U] [ 295.848903][T12575] [U] [ 295.851846][T12575] [U] [ 295.854559][T12575] [U] [ 295.857364][T12575] [U] [ 295.865017][T12575] [U] [ 295.867956][T12575] [U] [ 295.870824][T12575] [U] [ 295.873673][T12575] [U] [ 295.876784][T12575] [U] [ 295.879509][T12575] [U] [ 295.882247][T12575] [U] [ 295.885312][T12575] [U] [ 295.915146][T12575] [U] [ 295.918206][T12575] [U] [ 295.921243][T12575] [U] [ 295.924501][T12575] [U] [ 295.935900][T12575] [U] [ 295.938758][T12575] [U] [ 295.941951][T12575] [U] [ 295.944790][T12575] [U] [ 295.953609][T12575] [U] [ 295.956558][T12575] [U] [ 295.959417][T12575] [U] [ 295.962764][T12575] [U] [ 295.976800][T12575] [U] [ 295.979595][T12575] [U] [ 295.982533][T12575] [U] [ 295.985283][T12575] [U] [ 296.003628][T12575] [U] [ 296.006865][T12575] [U] [ 296.009717][T12575] [U] [ 296.012465][T12575] [U] [ 296.021702][T12575] [U] [ 296.024757][T12575] [U] [ 296.027944][T12575] [U] [ 296.030803][T12575] [U] [ 296.035176][T12575] [U] [ 296.038100][T12575] [U] [ 296.040832][T12575] [U] [ 296.043786][T12575] [U] [ 296.070977][T12575] [U] [ 296.073851][T12575] [U] [ 296.076803][T12575] [U] [ 296.079835][T12575] [U] [ 296.088299][T12575] [U] [ 296.091161][T12575] [U] [ 296.094013][T12575] [U] [ 296.097162][T12575] [U] [ 296.104300][T12575] [U] [ 296.107308][T12575] [U] [ 296.110059][T12575] [U] [ 296.113126][T12575] [U] [ 296.120377][T12575] [U] [ 296.123250][T12575] [U] [ 296.126678][T12575] [U] [ 296.129692][T12575] [U] [ 296.135902][T12575] [U] [ 296.139411][T12575] [U] [ 296.142161][T12575] [U] [ 296.144990][T12575] [U] [ 296.150944][T12575] [U] [ 296.154664][T12575] [U] [ 296.157576][T12575] [U] [ 296.160388][T12575] [U] [ 296.164575][T12575] [U] [ 296.167789][T12575] [U] [ 296.171307][T12575] [U] [ 296.174732][T12575] [U] [ 296.180194][T12575] [U] [ 296.183527][T12575] [U] [ 296.186445][T12575] [U] [ 296.189208][T12575] [U] [ 296.201551][T12589] netlink: 'syz.1.3045': attribute type 3 has an invalid length. [ 296.203400][T12575] [U] [ 296.211282][T12589] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3045'. [ 296.213315][T12575] [U] [ 296.213370][T12575] [U] [ 296.213402][T12575] [U] [ 296.231619][T12575] [U] [ 296.234361][T12575] [U] [ 296.237280][T12575] [U] [ 296.240104][T12575] [U] [ 296.245387][T12575] [U] [ 296.249005][T12575] [U] [ 296.252001][T12575] [U] [ 296.254863][T12575] [U] [ 296.278572][T12575] [U] [ 296.281510][T12575] [U] [ 296.284485][T12575] [U] [ 296.287513][T12575] [U] [ 296.296457][T12575] [U] [ 296.299641][T12575] [U] [ 296.302360][T12575] [U] [ 296.305111][T12575] [U] [ 296.319190][T12575] [U] [ 296.322107][T12575] [U] [ 296.325033][T12575] [U] [ 296.327767][T12575] [U] [ 296.359245][T12575] [U] [ 296.362646][T12575] [U] [ 296.365651][T12575] [U] [ 296.368617][T12575] [U] [ 296.378879][T12575] [U] [ 296.381919][T12575] [U] [ 296.384971][T12575] [U] [ 296.505594][T12574] [U] [ 296.691034][T12607] overlayfs: conflicting options: userxattr,metacopy=on [ 297.255304][T12635] netlink: 'syz.2.3059': attribute type 3 has an invalid length. [ 297.266468][T12635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3059'. [ 297.278839][ T1212] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 297.437606][T12643] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 297.469206][T12643] overlayfs: overlapping lowerdir path [ 297.658543][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 297.818579][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 297.827734][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 297.836713][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 297.846547][ T9] usb 4-1: config 0 has no interface number 0 [ 297.858946][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 297.873043][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 297.886954][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.897194][ T9] usb 4-1: Product: syz [ 297.903747][ T9] usb 4-1: Manufacturer: syz [ 297.910775][ T9] usb 4-1: SerialNumber: syz [ 297.920567][ T9] usb 4-1: config 0 descriptor?? [ 297.934760][ T9] smsc75xx v1.0.0 [ 297.983312][ T10] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 297.992731][ T10] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 298.007567][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 298.021822][ T10] usb 3-1: config 8 has no interface number 0 [ 298.029668][ T10] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 298.042231][ T10] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.059194][ T10] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 298.069815][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.077863][ T10] usb 3-1: Product: syz [ 298.082322][ T10] usb 3-1: Manufacturer: syz [ 298.087286][ T10] usb 3-1: SerialNumber: syz [ 298.319485][ T10] usb 3-1: USB disconnect, device number 26 [ 298.337759][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 298.351909][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 298.364391][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 298.377967][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 298.394575][ T9] usb 4-1: USB disconnect, device number 28 [ 298.715155][T12670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3074'. [ 298.726498][T12670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3074'. [ 299.778565][ T5941] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 299.818697][ T42] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 299.961944][ T5941] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 299.971300][ T5941] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 299.985290][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 300.001087][ T5941] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 300.018527][ T42] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 300.037213][ T42] usb 3-1: config 0 has no interface number 0 [ 300.058979][ T5941] usb 4-1: config 8 has no interface number 0 [ 300.065786][ T5941] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 300.078782][ T42] usb 3-1: config 0 interface 184 has no altsetting 0 [ 300.097285][ T5941] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.120292][ T42] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 300.139063][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.161060][ T5941] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 300.178629][ T42] usb 3-1: Product: syz [ 300.182943][ T42] usb 3-1: Manufacturer: syz [ 300.187767][ T42] usb 3-1: SerialNumber: syz [ 300.192558][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.208466][ T5941] usb 4-1: Product: syz [ 300.213040][ T5941] usb 4-1: Manufacturer: syz [ 300.217677][ T5941] usb 4-1: SerialNumber: syz [ 300.239524][ T42] usb 3-1: config 0 descriptor?? [ 300.261640][ T42] smsc75xx v1.0.0 [ 300.524659][ T5941] usb 4-1: USB disconnect, device number 29 [ 300.662230][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 300.677512][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 300.689572][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 300.702669][ T42] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 300.737574][ T42] usb 3-1: USB disconnect, device number 27 [ 301.419023][ T1212] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 301.565673][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 301.604442][ T1212] usb 1-1: Using ep0 maxpacket: 32 [ 301.624069][ T1212] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 301.653224][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.665889][ T1212] usb 1-1: config 0 descriptor?? [ 301.682572][ T1212] gspca_main: sunplus-2.14.0 probing 041e:400b [ 302.418548][ T9] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 302.499530][ T1212] gspca_sunplus: reg_r err -71 [ 302.504812][ T1212] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 302.537935][ T1212] usb 1-1: USB disconnect, device number 26 [ 302.621928][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.640194][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 302.656739][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 302.668445][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 302.684506][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.695950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.708762][ T9] usb 3-1: Product: syz [ 302.713348][ T9] usb 3-1: Manufacturer: syz [ 302.718991][ T9] usb 3-1: SerialNumber: syz [ 302.740184][T12804] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 302.766359][T12816] netlink: 'syz.1.3127': attribute type 58 has an invalid length. [ 303.055237][ T9] cdc_ncm 3-1:1.0: bind() failure [ 303.075573][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 303.091540][ T9] cdc_ncm 3-1:1.1: bind() failure [ 303.115327][ T9] usb 3-1: USB disconnect, device number 28 [ 303.620120][T12850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'. [ 303.631413][T12850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'. [ 303.808849][ T5911] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 303.914529][T12864] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3150'. [ 303.978797][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 303.997120][ T5911] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 304.019783][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.037237][ T5911] usb 4-1: config 0 descriptor?? [ 304.066096][ T5911] gspca_main: sunplus-2.14.0 probing 041e:400b [ 304.498569][ T5941] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 304.661522][ T5941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.676181][ T5941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 304.690239][ T5941] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 304.702824][ T5941] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 304.720145][ T5941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.731148][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.740972][ T5941] usb 1-1: Product: syz [ 304.746558][ T5941] usb 1-1: Manufacturer: syz [ 304.753000][ T5941] usb 1-1: SerialNumber: syz [ 304.765676][T12875] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 304.892233][ T5911] gspca_sunplus: reg_r err -71 [ 304.898944][ T5911] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 304.912553][ T5911] usb 4-1: USB disconnect, device number 30 [ 305.022994][ T5941] cdc_ncm 1-1:1.0: bind() failure [ 305.033918][ T5941] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 305.042456][ T5941] cdc_ncm 1-1:1.1: bind() failure [ 305.055979][ T5941] usb 1-1: USB disconnect, device number 27 [ 305.426747][ T29] audit: type=1326 audit(1769512179.720:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.2.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ab59aeb9 code=0x7fc00000 [ 306.390016][T12935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.403601][T12937] usb usb8: usbfs: process 12937 (syz.3.3187) did not claim interface 0 before use [ 307.073961][ T5903] kernel read not supported for file /radio0 (pid: 5903 comm: kworker/0:3) [ 307.248144][T12979] usb usb8: usbfs: process 12979 (syz.0.3216) did not claim interface 0 before use [ 307.889106][T13011] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 308.057971][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 308.798777][ T5941] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 308.842441][T13058] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 308.970632][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 308.990363][ T5941] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 309.008681][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.050687][ T5941] usb 4-1: config 0 descriptor?? [ 309.071981][ T5941] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 309.355688][T13081] netlink: 'syz.2.3256': attribute type 83 has an invalid length. [ 309.758633][T13099] dvmrp12: entered allmulticast mode [ 309.885471][ T5941] gspca_vc032x: reg_w err -71 [ 309.901372][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.907002][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.916009][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.924777][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.936280][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.942813][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.948918][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.955213][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.965358][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.974675][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.985288][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.994048][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.003164][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.018541][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.024606][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.037162][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.044662][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.050415][ T5941] gspca_vc032x: I2c Bus Busy Wait 00 [ 310.056781][ T5941] gspca_vc032x: Unknown sensor... [ 310.062784][ T5941] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 310.081306][ T5941] usb 4-1: USB disconnect, device number 31 [ 310.118264][T13113] netlink: 'syz.0.3268': attribute type 83 has an invalid length. [ 310.415507][T13124] dvmrp12: entered allmulticast mode [ 311.327221][T13164] sp0: Synchronizing with TNC [ 313.079537][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 313.270154][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 313.280724][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.323201][ T9] usb 2-1: config 0 descriptor?? [ 313.341601][ T9] cp210x 2-1:0.0: cp210x converter detected [ 313.746580][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 313.792577][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 313.949670][T13236] sp0: Synchronizing with TNC [ 313.983929][ T5911] usb 2-1: USB disconnect, device number 24 [ 314.004836][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 314.070854][ T5911] cp210x 2-1:0.0: device disconnected [ 314.474452][ T5941] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 314.640487][ T5941] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 314.655690][ T5941] usb 4-1: config 0 has no interface number 0 [ 314.675359][ T5941] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 314.696939][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.713347][ T5941] usb 4-1: Product: syz [ 314.724679][ T5941] usb 4-1: Manufacturer: syz [ 314.735797][ T5941] usb 4-1: SerialNumber: syz [ 314.747777][ T5941] usb 4-1: config 0 descriptor?? [ 315.214875][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3338'. [ 315.581655][ T5941] usb 4-1: Firmware version (0.0) predates our first public release. [ 315.601882][ T5941] usb 4-1: Please update to version 0.2 or newer [ 315.720378][ T5941] usb 4-1: USB disconnect, device number 32 [ 317.539216][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.545919][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.700184][ T1212] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 319.868604][ T1212] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 319.887571][ T1212] usb 3-1: config 0 has no interface number 0 [ 319.896647][ T1212] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 319.908853][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.917624][ T1212] usb 3-1: Product: syz [ 319.923968][ T1212] usb 3-1: Manufacturer: syz [ 319.933528][ T1212] usb 3-1: SerialNumber: syz [ 319.941775][ T1212] usb 3-1: config 0 descriptor?? [ 320.792589][ T1212] usb 3-1: Firmware version (0.0) predates our first public release. [ 320.814664][ T1212] usb 3-1: Please update to version 0.2 or newer [ 320.871398][ T1212] usb 3-1: USB disconnect, device number 29 [ 322.944006][T13561] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3475'. [ 323.493427][T13592] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3489'. [ 323.755590][T13602] batadv_slave_1: entered promiscuous mode [ 323.771967][T13602] batadv_slave_1: left promiscuous mode [ 323.875061][T13611] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 323.885588][ T3526] Bluetooth: hci4: Frame reassembly failed (-84) [ 324.072461][T13618] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3504'. [ 324.538590][ T5911] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 324.692605][ T5911] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 324.701015][ T5911] usb 4-1: config 0 has no interface number 0 [ 324.707500][ T5911] usb 4-1: config 0 interface 41 has no altsetting 0 [ 324.717322][ T5911] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 324.726804][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.735186][ T5911] usb 4-1: Product: syz [ 324.739575][ T5911] usb 4-1: Manufacturer: syz [ 324.744376][ T5911] usb 4-1: SerialNumber: syz [ 324.751686][ T5911] usb 4-1: config 0 descriptor?? [ 325.567943][ T5911] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 325.582199][ T5911] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 325.594506][ T5911] usb 4-1: USB disconnect, device number 33 [ 325.928621][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 325.928725][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 327.190181][T13698] nbd2: detected capacity change from 0 to 127 [ 327.226530][ T5848] block nbd2: Receive control failed (result -104) [ 327.701770][T13725] nbd3: detected capacity change from 0 to 127 [ 327.729713][ T5848] block nbd3: Receive control failed (result -104) [ 328.229575][T13757] loop4: detected capacity change from 0 to 524287936 [ 328.361635][T13759] nbd4: detected capacity change from 0 to 127 [ 328.381741][ T5848] block nbd4: Receive control failed (result -32) [ 328.383066][ T5976] block nbd4: Send control failed (result -32) [ 328.407008][ T5976] block nbd4: Request send failed, requeueing [ 328.435110][ T50] block nbd4: Dead connection, failed to find a fallback [ 328.455716][ T50] block nbd4: shutting down sockets [ 328.463278][ T50] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.474303][ T50] Buffer I/O error on dev nbd4, logical block 0, async page read [ 328.482708][ T5976] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.494153][ T5976] Buffer I/O error on dev nbd4, logical block 1, async page read [ 328.503767][ T5976] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.513461][ T5976] Buffer I/O error on dev nbd4, logical block 2, async page read [ 328.521720][ T5976] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.531766][ T5976] Buffer I/O error on dev nbd4, logical block 3, async page read [ 328.539886][ T5976] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.549514][ T5976] Buffer I/O error on dev nbd4, logical block 0, async page read [ 328.557693][ T5976] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.567968][ T5976] Buffer I/O error on dev nbd4, logical block 1, async page read [ 328.576310][ T5976] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.594121][ T5976] Buffer I/O error on dev nbd4, logical block 2, async page read [ 328.606684][ T5976] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.616523][ T5976] Buffer I/O error on dev nbd4, logical block 3, async page read [ 328.627846][ T5976] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.659337][ T5976] Buffer I/O error on dev nbd4, logical block 0, async page read [ 328.671592][ T5976] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.685903][ T5976] Buffer I/O error on dev nbd4, logical block 1, async page read [ 328.719513][ T5976] ldm_validate_partition_table(): Disk read failed. [ 328.732330][ T5976] Dev nbd4: unable to read RDB block 0 [ 328.752375][ T5976] nbd4: unable to read partition table [ 328.770599][ T5976] ldm_validate_partition_table(): Disk read failed. [ 328.803266][ T5976] Dev nbd4: unable to read RDB block 0 [ 328.816722][ T5976] nbd4: unable to read partition table [ 329.638141][T13814] sctp: [Deprecated]: syz.0.3600 (pid 13814) Use of int in maxseg socket option. [ 329.638141][T13814] Use struct sctp_assoc_value instead [ 329.640025][T13816] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 329.665769][T13816] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 329.674303][T13816] CPU: 1 UID: 0 PID: 13816 Comm: syz.1.3599 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.685768][T13816] Tainted: [L]=SOFTLOCKUP [ 329.690099][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 329.700163][T13816] RIP: 0010:__queue_work+0xa2/0xf90 [ 329.705656][T13816] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 329.725703][T13816] RSP: 0018:ffffc900185e7438 EFLAGS: 00010002 [ 329.731787][T13816] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 329.739980][T13816] RDX: ffffc9000c0a9000 RSI: 00000000000003b7 RDI: 00000000000003b8 [ 329.748321][T13816] RBP: 0000000000000000 R08: ffff8880223dd017 R09: 1ffff1100447ba02 [ 329.756425][T13816] R10: dffffc0000000000 R11: ffffed100447ba03 R12: dffffc0000000000 [ 329.765135][T13816] R13: ffff8880223dd010 R14: 00000000000001c0 R15: 0000000000000000 [ 329.773159][T13816] FS: 00007fcdc64796c0(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 329.782608][T13816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.789403][T13816] CR2: 0000001b31923ffc CR3: 0000000020796000 CR4: 00000000003526f0 [ 329.797579][T13816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.805760][T13816] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 329.814123][T13816] Call Trace: [ 329.817603][T13816] [ 329.820554][T13816] ? __asan_memcpy+0x40/0x70 [ 329.825549][T13816] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 329.831979][T13816] queue_work_on+0x106/0x1d0 [ 329.836597][T13816] puts_queue+0xa3/0xe0 [ 329.841006][T13816] ? __pfx_puts_queue+0x10/0x10 [ 329.846129][T13816] ? __perf_event_task_sched_in+0xf2/0x1800 [ 329.852222][T13816] ? lock_acquire+0x106/0x330 [ 329.857218][T13816] k_pad+0x781/0xa90 [ 329.861156][T13816] ? lock_acquire+0x106/0x330 [ 329.866032][T13816] ? atomic_notifier_call_chain+0x26/0x180 [ 329.872217][T13816] ? __pfx_k_pad+0x10/0x10 [ 329.877032][T13816] ? atomic_notifier_call_chain+0x26/0x180 [ 329.882981][T13816] ? atomic_notifier_call_chain+0x26/0x180 [ 329.888954][T13816] kbd_event+0x2ec1/0x40d0 [ 329.893481][T13816] ? __pfx_kbd_event+0x10/0x10 [ 329.898270][T13816] ? finish_task_switch+0x240/0x920 [ 329.903673][T13816] ? lockdep_hardirqs_on+0x7a/0x110 [ 329.908883][T13816] ? __lock_acquire+0x6b5/0x2cf0 [ 329.913914][T13816] ? __lock_acquire+0x6b5/0x2cf0 [ 329.919038][T13816] ? __lock_acquire+0x6b5/0x2cf0 [ 329.924240][T13816] ? __lock_acquire+0x6b5/0x2cf0 [ 329.929445][T13816] ? __lock_acquire+0x6b5/0x2cf0 [ 329.934391][T13816] ? input_pass_values+0x8d/0x890 [ 329.939769][T13816] ? lock_acquire+0x106/0x330 [ 329.944555][T13816] ? input_pass_values+0x8d/0x890 [ 329.949724][T13816] input_handle_events_default+0xd4/0x1a0 [ 329.955635][T13816] ? input_pass_values+0x8d/0x890 [ 329.960855][T13816] input_pass_values+0x288/0x890 [ 329.965977][T13816] ? input_handle_event+0x70c/0xf30 [ 329.971220][T13816] input_event_dispose+0x330/0x6b0 [ 329.976473][T13816] input_inject_event+0x1dd/0x340 [ 329.981666][T13816] ? input_inject_event+0xb6/0x340 [ 329.986852][T13816] evdev_write+0x325/0x4c0 [ 329.991366][T13816] ? __lock_acquire+0x6b5/0x2cf0 [ 329.996398][T13816] ? __pfx_evdev_write+0x10/0x10 [ 330.001341][T13816] ? bpf_lsm_file_permission+0x9/0x20 [ 330.006808][T13816] ? security_file_permission+0x75/0x260 [ 330.012483][T13816] ? rw_verify_area+0x255/0x4d0 [ 330.017343][T13816] ? __pfx_evdev_write+0x10/0x10 [ 330.022461][T13816] vfs_write+0x29a/0xb90 [ 330.026746][T13816] ? __pfx_vfs_write+0x10/0x10 [ 330.031546][T13816] ? __fget_files+0x2a/0x420 [ 330.036158][T13816] ? __fget_files+0x2a/0x420 [ 330.040932][T13816] ? __fget_files+0x3a0/0x420 [ 330.045929][T13816] ? __fget_files+0x2a/0x420 [ 330.050605][T13816] ksys_write+0x150/0x270 [ 330.055309][T13816] ? __pfx_ksys_write+0x10/0x10 [ 330.060347][T13816] do_syscall_64+0xe2/0xf80 [ 330.064956][T13816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.071147][T13816] ? trace_irq_disable+0x37/0x100 [ 330.076449][T13816] ? clear_bhb_loop+0x40/0x90 [ 330.081563][T13816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.087636][T13816] RIP: 0033:0x7fcdc559aeb9 [ 330.092073][T13816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.112317][T13816] RSP: 002b:00007fcdc6479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 330.121219][T13816] RAX: ffffffffffffffda RBX: 00007fcdc5815fa0 RCX: 00007fcdc559aeb9 [ 330.129921][T13816] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 330.138361][T13816] RBP: 00007fcdc5608c1f R08: 0000000000000000 R09: 0000000000000000 [ 330.146718][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.154921][T13816] R13: 00007fcdc5816038 R14: 00007fcdc5815fa0 R15: 00007ffca2054838 [ 330.163285][T13816] [ 330.166325][T13816] Modules linked in: [ 330.170229][T13816] ---[ end trace 0000000000000000 ]--- [ 330.175875][T13816] RIP: 0010:__queue_work+0xa2/0xf90 [ 330.181311][T13816] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 330.201972][T13816] RSP: 0018:ffffc900185e7438 EFLAGS: 00010002 [ 330.208933][T13816] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 330.217262][T13816] RDX: ffffc9000c0a9000 RSI: 00000000000003b7 RDI: 00000000000003b8 [ 330.225779][T13816] RBP: 0000000000000000 R08: ffff8880223dd017 R09: 1ffff1100447ba02 [ 330.234219][T13816] R10: dffffc0000000000 R11: ffffed100447ba03 R12: dffffc0000000000 [ 330.242482][T13816] R13: ffff8880223dd010 R14: 00000000000001c0 R15: 0000000000000000 [ 330.251197][T13816] FS: 00007fcdc64796c0(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 330.260491][T13816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.267360][T13816] CR2: 0000001b31923ffc CR3: 0000000020796000 CR4: 00000000003526f0 [ 330.275451][T13816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.283804][T13816] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 330.291895][T13816] Kernel panic - not syncing: Fatal exception [ 330.298681][T13816] Kernel Offset: disabled [ 330.303114][T13816] Rebooting in 86400 seconds..