last executing test programs: 4m10.30624773s ago: executing program 0 (id=822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000040)="be9b568311a6338b983777dd", 0xc) 4m10.042075681s ago: executing program 0 (id=827): r0 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$invalidate(0x15, r0) 2.277701762s ago: executing program 5 (id=4524): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000001e80)=[{&(0x7f0000000dc0)='c', 0x1}], 0x1) 2.271208557s ago: executing program 4 (id=4525): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT], 0xa) 2.128221713s ago: executing program 4 (id=4526): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) 1.401890425s ago: executing program 4 (id=4533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000005078874572dc2c2b08000300", @ANYRES32=r2], 0x24}}, 0x0) 1.264950168s ago: executing program 4 (id=4536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x6c, r1, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x5, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 1.142960281s ago: executing program 4 (id=4538): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0x0) 791.633879ms ago: executing program 3 (id=4546): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000240), 0x4) 775.798842ms ago: executing program 3 (id=4547): r0 = msgget$private(0x0, 0x1ba) msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_RMID(r0, 0x0) 667.614462ms ago: executing program 3 (id=4549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 667.419195ms ago: executing program 5 (id=4550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x2, 0x0, 0xae, {0x6000, 0x800c000}}, "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", "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"}) 639.614976ms ago: executing program 1 (id=4551): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) 491.374887ms ago: executing program 1 (id=4552): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002b9d7000fbdbdf252100200008000300", @ANYRES32=r1, @ANYBLOB="3c002c8008000000fdffffff0800"], 0x74}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 399.223026ms ago: executing program 1 (id=4553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x18, r2, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4050) 361.979709ms ago: executing program 3 (id=4554): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0xfffffffffffffffd}) 328.028372ms ago: executing program 1 (id=4555): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@any, 0x4}, 0x8b9, 0xe70, 0x7f, 0x10001, 0xe335, 0x100, 0x3, 0x3}) 277.558757ms ago: executing program 5 (id=4556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x20, 0x0, @ioapic={0x4, 0x0, 0x0, 0xeffffe02, 0x0, [{0x2, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x9, 0x0, '\x00', 0x7c}, {0xfc, 0x13, 0x4, '\x00', 0xbb}, {0x13, 0xb}, {}, {0xfe, 0x0, 0x6, '\x00', 0x2}, {0xfd, 0x1, 0x6}, {0x6f, 0x0, 0x0, '\x00', 0x7}, {0x0, 0x8f, 0x2, '\x00', 0xfc}, {0xb8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x82, '\x00', 0x1}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x3}, {0xc3, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x21, 0x84, '\x00', 0xff}, {0x3, 0x0, 0xfc}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xfe, 0x0, 0xd}, {0x0, 0x80, 0x0, '\x00', 0x1}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x0, '\x00', 0xfc}, {0x0, 0x2, 0x9}, {0x4a, 0xff, 0xfb}]}}) 211.055155ms ago: executing program 1 (id=4557): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 142.542747ms ago: executing program 3 (id=4558): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 17.506428ms ago: executing program 5 (id=4559): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x808025, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 618.022µs ago: executing program 1 (id=4567): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465d75b62a93bf7a438cce59f", @ANYRES64=r0]) 0s ago: executing program 3 (id=4560): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) kernel console output (not intermixed with test programs): x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.109575][T12532] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2848'. [ 303.112984][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 303.121375][ T50] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 303.130104][ T5966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.142983][T12532] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2848'. [ 303.147054][ T5966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 303.166694][ T5966] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.176520][ T5966] Buffer I/O error on dev nbd1, logical block 2, async page read [ 303.191527][ T5966] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.201532][ T5966] Buffer I/O error on dev nbd1, logical block 3, async page read [ 303.210547][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.220613][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 303.229728][ T5966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.241042][ T5966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 303.260867][T12516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.277749][ T5966] ldm_validate_partition_table(): Disk read failed. [ 303.286777][T12516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.286902][ T50] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 303.299882][ T5966] Dev nbd1: unable to read RDB block 0 [ 303.304684][ T50] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.325179][ T5966] nbd1: unable to read partition table [ 303.352703][ T50] usb 4-1: config 0 has no interface number 0 [ 303.357692][ T5966] ldm_validate_partition_table(): Disk read failed. [ 303.360110][ T50] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 303.382290][ T5966] Dev nbd1: unable to read RDB block 0 [ 303.393445][ T5966] nbd1: unable to read partition table [ 303.405042][ T50] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.428780][ T50] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 303.438420][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.447614][ T50] usb 4-1: Product: syz [ 303.452477][ T50] usb 4-1: Manufacturer: syz [ 303.457561][ T50] usb 4-1: SerialNumber: syz [ 303.466642][ T50] usb 4-1: config 0 descriptor?? [ 303.550928][ T5950] usb 2-1: USB disconnect, device number 29 [ 303.974648][ T5959] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 304.124491][ T5959] usb 3-1: Using ep0 maxpacket: 32 [ 304.132319][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.154173][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 304.166507][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.181300][ T5959] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.192035][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.203228][ T5959] usb 3-1: config 0 descriptor?? [ 304.211548][T12546] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.222742][ T5959] hub 3-1:0.0: USB hub found [ 304.386565][ T5948] usb 2-1: Service connection timeout for: 256 [ 304.393004][ T5948] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 304.402155][ T5948] ath9k_htc: Failed to initialize the device [ 304.410065][ T5950] usb 2-1: ath9k_htc: USB layer deinitialized [ 304.429825][ T5959] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 304.474815][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 304.477465][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 304.632416][ T5959] usbhid 3-1:0.0: can't add hid device: -71 [ 304.654667][ T5959] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 304.685527][ T5959] usb 3-1: USB disconnect, device number 40 [ 304.865248][ T1137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.955591][T12560] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2861'. [ 305.324490][ T5950] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 305.506615][ T5950] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 305.515165][ T5950] usb 5-1: config 0 has no interface number 0 [ 305.523590][ T5950] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 305.532878][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.541165][ T5950] usb 5-1: Product: syz [ 305.545553][ T5950] usb 5-1: Manufacturer: syz [ 305.550184][ T5950] usb 5-1: SerialNumber: syz [ 305.557441][ T5950] usb 5-1: config 0 descriptor?? [ 305.714768][ T5948] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 305.876116][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.887293][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.897233][ T5948] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 305.906911][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.925306][ T5948] usb 3-1: config 0 descriptor?? [ 305.931220][ T50] usb 4-1: USB disconnect, device number 39 [ 305.975776][ T5950] usb 5-1: Firmware: major: 100, minor: 126, hardware type: HULUSB (4) [ 306.188533][ T5950] usb 5-1: failed to fetch extended address, random address set [ 306.273489][ T5950] usb 5-1: USB disconnect, device number 20 [ 306.366523][ T5948] logitech 0003:046D:C29C.0031: unknown main item tag 0x0 [ 306.373755][ T5948] logitech 0003:046D:C29C.0031: unknown main item tag 0x0 [ 306.387861][ T5948] logitech 0003:046D:C29C.0031: unknown main item tag 0x0 [ 306.395193][ T5948] logitech 0003:046D:C29C.0031: unknown main item tag 0x0 [ 306.413241][ T5948] logitech 0003:046D:C29C.0031: unknown main item tag 0x0 [ 306.423718][ T5948] logitech 0003:046D:C29C.0031: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 306.563784][T12601] kvm: kvm [12600]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3030303030303030 [ 306.750174][ T5948] logitech 0003:046D:C29C.0031: no inputs found [ 306.780536][ T5948] usb 3-1: USB disconnect, device number 41 [ 307.290542][T12633] ªªªªªª: renamed from lo (while UP) [ 308.787949][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 308.994612][ T5948] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 309.164572][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 309.179096][ T5948] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 309.194247][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.209180][ T5948] usb 3-1: Product: syz [ 309.215602][ T5948] usb 3-1: Manufacturer: syz [ 309.220985][ T5948] usb 3-1: SerialNumber: syz [ 309.233413][ T5948] usb 3-1: config 0 descriptor?? [ 309.251344][ T5948] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 309.424505][ T49] wlan1: Trigger new scan to find an IBSS to join [ 309.729588][T12725] netlink: 'syz.3.2935': attribute type 12 has an invalid length. [ 309.737703][T12725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2935'. [ 310.062947][ T5948] gspca_ov534_9: reg_w failed -71 [ 310.163230][T12740] overlay: filesystem on ./file1 not supported [ 310.326090][T12744] netlink: 'syz.1.2944': attribute type 2 has an invalid length. [ 310.384946][ T5948] gspca_ov534_9: Unknown sensor 0000 [ 310.385077][ T5948] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 310.423795][ T5948] usb 3-1: USB disconnect, device number 42 [ 311.239921][T12780] [U] ©„ [ 311.257838][T12779] [U] © [ 311.264694][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 311.409499][T12788] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2963'. [ 311.472577][T12791] loop0: Can't mount, would change RO state [ 311.657053][T12801] netlink: 14478 bytes leftover after parsing attributes in process `syz.2.2969'. [ 311.876120][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2976'. [ 312.123849][T12822] netlink: 'syz.3.2981': attribute type 83 has an invalid length. [ 312.384871][ T13] wlan1: Trigger new scan to find an IBSS to join [ 312.661000][ T1137] Bluetooth: hci4: Frame reassembly failed (-84) [ 313.686452][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3018'. [ 313.842797][T12911] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3022'. [ 313.978533][T12917] debugfs: 'ttyS3' already exists in 'caif_serial' [ 314.706974][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 314.710885][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 315.106738][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 315.274535][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 315.283499][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.293876][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.307490][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.319344][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.332820][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.344945][ T13] wlan1: Trigger new scan to find an IBSS to join [ 315.351969][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.354523][ T5959] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 315.524476][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 315.535131][ T5959] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 315.544337][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.553472][ T5959] usb 3-1: Product: syz [ 315.558765][ T5959] usb 3-1: Manufacturer: syz [ 315.563400][ T5959] usb 3-1: SerialNumber: syz [ 315.577851][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 315.587556][ T5959] usb 3-1: config 0 descriptor?? [ 315.593208][ T10] usbtmc 4-1:16.0: can't read capabilities [ 315.620600][ T5959] gspca_main: sq930x-2.14.0 probing 2770:930c [ 315.790725][ T50] usb 4-1: USB disconnect, device number 40 [ 315.908686][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 316.244819][ T49] wlan1: Creating new IBSS network, BSSID 9a:85:41:5f:ce:3a [ 316.264651][ T10] kernel read not supported for file /video7 (pid: 10 comm: kworker/0:1) [ 316.396606][T13000] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3063'. [ 316.405828][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 316.420838][ T5959] gspca_sq930x: ucbus_write failed -71 [ 316.431869][ T5959] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 316.445861][ T5959] usb 3-1: USB disconnect, device number 43 [ 316.571836][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.582149][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.590213][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.599855][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.608234][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.616775][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.625424][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.632977][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.640909][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.649040][ T24] hid-generic 00A0:0008:0003.0032: unknown main item tag 0x0 [ 316.660386][ T24] hid-generic 00A0:0008:0003.0032: hidraw0: HID v0.05 Device [syz1] on syz0 [ 317.012076][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 317.234705][ T5950] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 317.293313][T13021] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 317.298088][T13022] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 317.314226][T13023] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 317.317173][T13024] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 317.326442][T13025] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 4 [ 317.339252][T13026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 5 [ 317.348880][T13027] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 6 [ 317.356579][T13028] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 7 [ 317.366472][T13029] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 8 [ 317.377549][T13030] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 9 [ 317.392442][T13031] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 10 [ 317.405432][T13032] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 11 [ 317.408306][T13033] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 12 [ 317.426377][T13034] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 13 [ 317.428419][T13035] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 14 [ 317.450520][T13036] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 15 [ 317.451994][T13037] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 16 [ 317.460981][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.472675][T13039] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 18 [ 317.482674][T13038] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 17 [ 317.497575][T13040] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 19 [ 317.502981][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.515887][T13041] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 20 [ 317.522450][ T5950] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 317.534134][T13042] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 21 [ 317.541576][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.555076][T13043] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 22 [ 317.565871][T13044] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 23 [ 317.581036][ T5950] usb 3-1: config 0 descriptor?? [ 317.586360][T13045] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 24 [ 317.600155][T13046] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 25 [ 317.607388][T13047] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 26 [ 317.612836][T13048] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 27 [ 317.624260][T13049] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 28 [ 317.634847][T13050] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 29 [ 317.642937][T13051] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 30 [ 317.652904][T13052] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 31 [ 317.662677][T13053] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 32 [ 317.682425][T13054] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 33 [ 317.685224][T13055] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 34 [ 317.693859][T13056] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 35 [ 317.714643][T13057] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 36 [ 317.725451][T13058] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 37 [ 317.726605][T13059] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 38 [ 317.740841][T13060] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 39 [ 317.746306][T13061] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 40 [ 317.757667][T13062] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 41 [ 317.767981][T13063] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 42 [ 317.780344][T13064] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 43 [ 317.791419][T13065] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 44 [ 317.806140][T13066] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 45 [ 317.808288][T13067] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 46 [ 317.820449][T13068] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 47 [ 317.829800][T13069] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 48 [ 317.849145][T13070] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 49 [ 317.850476][T13071] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 50 [ 317.862314][T13072] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 51 [ 317.873403][T13073] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 52 [ 317.881599][T13074] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 53 [ 317.891607][T13075] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 54 [ 317.905930][T13076] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 55 [ 317.916629][T13077] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 56 [ 317.921770][T13078] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 57 [ 317.932551][T13079] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 58 [ 317.943351][T13080] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 59 [ 317.953772][T13081] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 60 [ 317.971835][T13082] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 61 [ 317.972779][T13083] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 62 [ 317.984187][T13084] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 63 [ 317.994526][ T5872] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 318.002852][ T53] Bluetooth: hci4: command 0xfc11 tx timeout [ 318.029573][ T5950] steelseries 0003:1038:12B6.0033: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 318.280826][T13093] Bluetooth: MGMT ver 1.23 [ 318.438646][ T24] usb 3-1: USB disconnect, device number 44 [ 318.898637][T13114] netlink: 'syz.1.3086': attribute type 58 has an invalid length. [ 318.970600][T13120] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3088'. [ 319.024919][ T5869] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 319.024966][ T53] Bluetooth: hci5: command 0xfc11 tx timeout [ 319.754478][ T5950] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 319.924791][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 319.938411][ T5950] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 319.947857][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=121, SerialNumber=76 [ 319.958549][ T5950] usb 5-1: Product: syz [ 319.962942][ T5950] usb 5-1: Manufacturer: syz [ 319.974368][ T5950] usb 5-1: SerialNumber: syz [ 320.421460][ T5950] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.690593][ T5950] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 320.752439][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.769906][T13199] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 320.793991][ T30] audit: type=1326 audit(1758287787.168:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13198 comm="syz.1.3127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f219258ec29 code=0x0 [ 320.817274][T13199] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.822156][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 320.826849][T13199] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.862135][ T10] usb 5-1: USB disconnect, device number 21 [ 320.912342][T13199] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.919859][T13199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.929130][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.936445][T13199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.956180][T13199] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 320.965819][T13201] bridge0: port 3(batadv0) entered disabled state [ 320.987432][T13201] bridge_slave_1: left allmulticast mode [ 320.993157][T13201] bridge_slave_1: left promiscuous mode [ 320.999538][T13201] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.009974][T13201] bridge_slave_0: left promiscuous mode [ 321.017677][T13201] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.055195][T13201] bridge0 (unregistering): left allmulticast mode [ 321.062698][T13201] bond0: (slave bridge0): Releasing backup interface [ 321.573598][ T5959] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 321.713462][ T5950] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 321.725530][ T5959] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 321.743622][ T5959] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 321.763708][ T5959] usb 4-1: config 150 has no interface number 0 [ 321.776862][ T5959] usb 4-1: config 150 interface 204 has no altsetting 0 [ 321.795833][ T5959] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 321.813460][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.821763][ T5959] usb 4-1: Product: syz [ 321.826822][ T5959] usb 4-1: Manufacturer: syz [ 321.831611][ T5959] usb 4-1: SerialNumber: syz [ 321.843095][T13233] tap0: tun_chr_ioctl cmd 1074025675 [ 321.850639][T13233] tap0: persist enabled [ 321.875359][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.889951][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.901269][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.915597][ T5950] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 321.925565][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.942338][ T5950] usb 5-1: config 0 descriptor?? [ 322.013401][ T5931] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 322.048765][ T5959] xr_serial 4-1:150.204: skipping garbage [ 322.054801][ T5959] xr_serial 4-1:150.204: xr_serial converter detected [ 322.165391][ T5931] usb 2-1: config index 0 descriptor too short (expected 64706, got 72) [ 322.177579][ T5931] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 322.186935][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.193301][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 322.195098][ T5931] usb 2-1: Product: syz [ 322.208364][ T5931] usb 2-1: Manufacturer: syz [ 322.213049][ T5931] usb 2-1: SerialNumber: syz [ 322.228480][ T5931] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 322.246511][ T5948] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.356243][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.367446][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.377688][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 322.387634][ T5950] dragonrise 0003:0079:0011.0034: item fetching failed at offset 2/5 [ 322.388993][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.408317][ T5950] dragonrise 0003:0079:0011.0034: parse failed [ 322.411900][ T24] usb 3-1: config 0 descriptor?? [ 322.424654][ T5950] dragonrise 0003:0079:0011.0034: probe with driver dragonrise failed with error -22 [ 322.460791][ T50] usb 2-1: USB disconnect, device number 30 [ 322.609418][ T5931] usb 5-1: USB disconnect, device number 22 [ 322.658079][ T5959] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 322.667939][ T5959] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 322.681692][ T5959] usb 4-1: USB disconnect, device number 41 [ 322.692408][ T5959] xr_serial 4-1:150.204: device disconnected [ 322.796296][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.802746][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.838601][ T24] hid_parser_main: 12 callbacks suppressed [ 322.838620][ T24] arvo 0003:1E7D:30D4.0035: unknown main item tag 0x0 [ 322.853576][ T24] arvo 0003:1E7D:30D4.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 323.236111][ T24] usb 3-1: USB disconnect, device number 45 [ 323.342927][ T5948] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 323.350128][ T5948] ath9k_htc: Failed to initialize the device [ 323.382684][ T50] usb 2-1: ath9k_htc: USB layer deinitialized [ 323.495588][T13258] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 323.495588][T13258] The task syz.3.3150 (13258) triggered the difference, watch for misbehavior. [ 323.514063][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.988420][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'. [ 324.280797][T13298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3170'. [ 324.888645][T13326] sctp: [Deprecated]: syz.1.3182 (pid 13326) Use of int in max_burst socket option deprecated. [ 324.888645][T13326] Use struct sctp_assoc_value instead [ 325.107799][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.125284][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.143405][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.162713][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.172392][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.188860][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.196916][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.204818][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.212706][ T50] hid-generic 0006:0004:0009.0036: unknown main item tag 0x0 [ 325.224544][ T50] hid-generic 0006:0004:0009.0036: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 325.246430][T13341] kvm_intel: kvm [13340]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xcd [ 325.320044][T13345] fido_id[13345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 325.513324][ T50] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 325.701554][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 325.713161][ T50] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 325.724761][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.747148][ T50] pvrusb2: Hardware description: Terratec Grabster AV400 [ 325.763612][ T50] pvrusb2: ********** [ 325.767746][ T50] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 325.783631][ T50] pvrusb2: Important functionality might not be entirely working. [ 325.792609][ T50] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 325.804522][ T50] pvrusb2: ********** [ 325.811638][ T5948] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 325.943172][ T2345] pvrusb2: Invalid write control endpoint [ 325.971385][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 325.983758][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.994954][ T5948] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.006378][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.019997][ T5948] usb 5-1: config 0 descriptor?? [ 326.025273][ T5950] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 326.042036][ T2345] pvrusb2: Invalid write control endpoint [ 326.049087][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 326.062983][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 326.070617][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 326.081744][ T2345] pvrusb2: Device being rendered inoperable [ 326.090452][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 326.098797][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 326.113653][ T2345] pvrusb2: Attached sub-driver cx25840 [ 326.119769][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 326.131720][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 326.145418][ T50] usb 3-1: USB disconnect, device number 46 [ 326.184060][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 326.190684][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.202691][ T5950] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 326.213547][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.224625][ T5950] usb 2-1: config 0 descriptor?? [ 326.234329][ T5950] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 326.453486][ T5948] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 326.859619][ T5948] usb 5-1: USB disconnect, device number 23 [ 327.040115][ T5950] gspca_vc032x: reg_w err -71 [ 327.053211][ T5950] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 327.063783][ T5950] usb 2-1: USB disconnect, device number 31 [ 327.320682][ T50] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 327.470856][ T50] usb 3-1: Using ep0 maxpacket: 16 [ 327.479214][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.493012][ T50] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 327.509620][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.530752][ T50] usb 3-1: config 0 descriptor?? [ 327.660702][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 327.660788][ T5869] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 327.970102][ T50] kye 0003:0458:5016.0038: control desc unexpectedly large [ 328.004041][ T50] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0038/input/input36 [ 328.060889][ T50] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0038/input/input37 [ 328.085099][T13402] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3218'. [ 328.182446][ T50] kye 0003:0458:5016.0038: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 328.260475][ T50] usb 3-1: USB disconnect, device number 47 [ 328.394979][T13407] fido_id[13407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 328.462202][T13420] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3225'. [ 328.572149][T13424] serio: Serial port ptm0 [ 328.593200][T13425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.624940][T13427] tipc: Started in network mode [ 328.632849][T13427] tipc: Node identity ac14140f, cluster identity 4711 [ 328.640629][T13427] tipc: New replicast peer: 255.255.255.255 [ 328.652600][T13427] tipc: Enabled bearer , priority 10 [ 328.663846][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'. [ 328.673075][T13427] tipc: Disabling bearer [ 328.780114][T13434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3230'. [ 328.799254][T13434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3230'. [ 328.805151][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'. [ 328.829178][T13434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3230'. [ 328.842149][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3231'. [ 328.996532][T13443] blk_print_req_error: 138 callbacks suppressed [ 328.996553][T13443] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.029997][T13443] buffer_io_error: 138 callbacks suppressed [ 329.030018][T13443] Buffer I/O error on dev nbd1, logical block 0, async page read [ 329.044607][T13443] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.054723][T13448] block nbd1: NBD_DISCONNECT [ 329.065303][T13443] Buffer I/O error on dev nbd1, logical block 1, async page read [ 329.069838][T13448] block nbd1: Send disconnect failed -32 [ 329.192655][ T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 329.204735][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 329.213492][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 329.223369][T13443] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.258589][T13443] Buffer I/O error on dev nbd1, logical block 0, async page read [ 329.267369][T13443] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.276900][T13443] Buffer I/O error on dev nbd1, logical block 1, async page read [ 329.285483][T13443] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.297390][T13443] Buffer I/O error on dev nbd1, logical block 2, async page read [ 329.305678][T13443] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.317638][T13443] Buffer I/O error on dev nbd1, logical block 3, async page read [ 329.325931][T13443] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.335398][T13443] Buffer I/O error on dev nbd1, logical block 0, async page read [ 329.344203][T13443] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.353808][T13443] Buffer I/O error on dev nbd1, logical block 1, async page read [ 329.362075][T13443] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.389289][T13443] ldm_validate_partition_table(): Disk read failed. [ 329.399826][T13443] Dev nbd1: unable to read RDB block 0 [ 329.408209][T13443] nbd1: unable to read partition table [ 329.485198][T13463] tipc: Started in network mode [ 329.499735][T13463] tipc: Node identity ac14140f, cluster identity 4711 [ 329.506880][T13463] tipc: New replicast peer: 255.255.255.255 [ 329.525709][T13463] tipc: Enabled bearer , priority 10 [ 329.553387][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3243'. [ 329.576020][T13463] tipc: Disabling bearer [ 329.822916][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3251'. [ 329.999808][ T50] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 330.159269][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 330.166390][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.175292][ T50] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 330.185191][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.193451][ T50] usb 5-1: Product: syz [ 330.197727][ T50] usb 5-1: Manufacturer: syz [ 330.202568][ T50] usb 5-1: SerialNumber: syz [ 330.209582][ T50] usb 5-1: config 0 descriptor?? [ 330.279225][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 330.471410][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.481782][ T24] usb 3-1: config 0 has no interfaces? [ 330.487412][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.497676][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.509177][ T24] usb 3-1: config 0 descriptor?? [ 330.623758][ T50] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 330.726964][ T5948] usb 3-1: USB disconnect, device number 48 [ 331.028309][ T50] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 331.091869][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 331.112423][ T50] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 331.133876][ T50] usb 5-1: USB disconnect, device number 24 [ 331.208176][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3265'. [ 331.219525][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3265'. [ 331.248704][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 331.268102][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 331.281436][ T10] usb 4-1: config 0 has no interface number 0 [ 331.287690][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 331.299934][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 331.324351][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.333413][ T10] usb 4-1: Product: syz [ 331.336947][T13512] serio: Serial port ptm0 [ 331.338325][ T10] usb 4-1: Manufacturer: syz [ 331.346998][ T10] usb 4-1: SerialNumber: syz [ 331.367902][ T10] usb 4-1: config 0 descriptor?? [ 332.031297][T13540] virtiofs: Unknown parameter 'always 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 18 nlmon0 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 20 batadv0 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 21 vxcan0 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 22 vxcan1 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 23 veth0 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 24 veth1 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 25 wg0 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 26 wg1 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 27 wg2 : 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 28 veth0_to_bridge: 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 29 bridge_slave_0: 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 30 veth1_to_bridge: 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 31 bridge_slave_1: 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 32 veth0_to_bond: 1 V3 [ 332.031297][T13540] 010000E0 1 0:00000000 0 [ 332.031297][T13540] 33 bond_slave_0: 1 V3 [ 332.031297][T13540] 010000E0 1 0:0 [ 332.200427][ T10] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 332.396597][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 332.413156][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 332.421195][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 332.443972][ T10] usb 4-1: USB disconnect, device number 42 [ 332.947475][T13570] Bluetooth: MGMT ver 1.23 [ 333.159666][T13576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.011734][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 334.147288][ T5950] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 334.180341][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 334.187745][ T10] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.201142][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.208574][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 334.218387][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.234398][ T10] usb 3-1: config 0 descriptor?? [ 334.283137][T13626] input: syz1 as /devices/virtual/input/input38 [ 334.308253][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 334.319350][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.341002][ T5950] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 334.350827][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.371927][ T5950] usb 2-1: config 0 descriptor?? [ 334.434954][T13630] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3322'. [ 334.504731][T13632] netlink: 'syz.3.3323': attribute type 83 has an invalid length. [ 334.618005][T13638] pimreg: tun_chr_ioctl cmd 1074025672 [ 334.624565][T13638] pimreg: ignored: set checksum enabled [ 334.675367][ T10] hid_parser_main: 8 callbacks suppressed [ 334.675392][ T10] elecom 0003:056E:00E6.0039: unknown main item tag 0x7 [ 334.712436][ T10] elecom 0003:056E:00E6.0039: hidraw0: USB HID v10.00 Device [HID 056e:00e6] on usb-dummy_hcd.2-1/input0 [ 334.829844][ T5950] mcp2221 0003:04D8:00DD.003A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 334.875980][ T10] usb 3-1: USB disconnect, device number 49 [ 335.203666][ T5857] usb 2-1: USB disconnect, device number 32 [ 335.217743][ T5950] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 335.376750][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 335.384579][ T5950] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 335.403517][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.427753][ T5950] pvrusb2: Hardware description: Terratec Grabster AV400 [ 335.435604][ T5950] pvrusb2: ********** [ 335.440055][ T5950] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 335.453032][ T5950] pvrusb2: Important functionality might not be entirely working. [ 335.462962][ T5950] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 335.488439][ T5950] pvrusb2: ********** [ 335.625123][ T2345] pvrusb2: Invalid write control endpoint [ 335.708294][ T2345] pvrusb2: Invalid write control endpoint [ 335.714783][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 335.725937][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 335.758558][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 335.790144][ T2345] pvrusb2: Device being rendered inoperable [ 335.804606][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 335.824446][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 335.835982][ T5931] usb 5-1: USB disconnect, device number 25 [ 335.852765][ T2345] pvrusb2: Attached sub-driver cx25840 [ 335.863326][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 335.882061][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 336.086313][ T50] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 336.236260][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 336.243502][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.257071][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.267805][ T50] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 336.278126][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.290026][ T50] usb 2-1: config 0 descriptor?? [ 336.526397][ T50] usbhid 2-1:0.0: can't add hid device: -71 [ 336.536397][ T50] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 336.567599][ T50] usb 2-1: USB disconnect, device number 33 [ 336.610801][T13711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.859020][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.001255][T13731] Failed to get privilege flags for destination (handle=0x2:0x3) [ 338.400768][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3390'. [ 340.256243][T13869] netlink: 'syz.3.3436': attribute type 12 has an invalid length. [ 340.541085][ T30] audit: type=1326 audit(1758287806.938:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13888 comm="syz.3.3446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21ac78ec29 code=0x0 [ 341.054427][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 341.204598][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 341.217484][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 341.219540][T13910] sctp: [Deprecated]: syz.1.3456 (pid 13910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.219540][T13910] Use struct sctp_sack_info instead [ 341.229601][ T10] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 341.252919][ T10] usb 5-1: Product: syz [ 341.257988][ T10] usb 5-1: Manufacturer: syz [ 341.262896][ T10] usb 5-1: SerialNumber: syz [ 341.272333][ T10] usb 5-1: config 0 descriptor?? [ 341.287383][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 341.897358][ T10] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 342.099317][ T5931] usb 5-1: USB disconnect, device number 26 [ 342.549606][T13948] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3472'. [ 342.555580][ T5857] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 342.724730][ T5857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.737542][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 342.757178][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.786597][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 342.814923][ T5857] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.838404][ T5857] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.847069][ T5857] usb 2-1: Manufacturer: syz [ 342.862544][ T5857] usb 2-1: config 0 descriptor?? [ 343.014312][T13965] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3480'. [ 343.162733][ T5857] rc_core: IR keymap rc-hauppauge not found [ 343.168899][ T5857] Registered IR keymap rc-empty [ 343.176540][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.203261][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.224118][ T5857] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 343.241403][ T5857] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 343.298802][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.322851][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.362706][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.402671][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.422758][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.452749][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.472716][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.492718][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.512707][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.532697][ T5857] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.586150][ T5857] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 343.602516][ T5857] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 343.640286][ T5857] usb 2-1: USB disconnect, device number 34 [ 344.282316][ T5931] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 344.490776][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 344.501020][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 344.532785][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 344.553787][ T5931] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 344.567633][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.575969][ T5931] usb 4-1: Product: syz [ 344.580903][ T5931] usb 4-1: Manufacturer: syz [ 344.601123][ T5931] usb 4-1: SerialNumber: syz [ 344.614319][ T5931] usb 4-1: config 0 descriptor?? [ 344.620126][T13992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.640833][T13992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.661771][ T5931] usb 4-1: ucan: probing device on interface #0 [ 345.275652][ T5931] ucan 4-1:0.0: probe with driver ucan failed with error -22 [ 345.311658][ T5857] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 345.486232][ T24] usb 4-1: USB disconnect, device number 43 [ 345.512011][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 345.528106][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.540728][ T5857] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 345.550271][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.663198][ T5857] usb 5-1: config 0 descriptor?? [ 346.103461][ T5857] mcp2221 0003:04D8:00DD.003B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 346.300361][ T1137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.336161][T14063] input: syz0 as /devices/virtual/input/input42 [ 346.506028][ T5857] usb 5-1: USB disconnect, device number 27 [ 347.520865][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 347.670512][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 347.678603][ T24] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 347.701217][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.741829][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.751358][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.759429][ T24] usb 4-1: Product: syz [ 347.771975][ T24] usb 4-1: Manufacturer: syz [ 347.780817][ T24] usb 4-1: SerialNumber: syz [ 347.890439][ T5931] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 348.005787][ T24] usb 4-1: 0:2 : does not exist [ 348.023276][ T24] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 348.074128][ T24] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 348.088149][ T5931] usb 3-1: config 0 has no interfaces? [ 348.130321][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 348.150413][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.174967][ T24] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 348.238113][ T5931] usb 3-1: config 0 descriptor?? [ 348.289686][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 348.442935][ T24] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 348.469666][ T24] usb 4-1: USB disconnect, device number 44 [ 348.490820][ T5959] usb 3-1: USB disconnect, device number 50 [ 350.310879][T14198] input: syz1 as /devices/virtual/input/input43 [ 350.456658][T14203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3587'. [ 350.808337][T14222] ucma_write: process 1959 (syz.1.3594) changed security contexts after opening file descriptor, this is not allowed. [ 350.942061][T14226] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3595'. [ 350.957801][T14229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3597'. [ 353.384846][T14313] overlay: ./file0 is not a directory [ 353.918771][T14330] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3640'. [ 354.397315][ T5931] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 354.427139][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 354.570473][ T5931] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 354.579825][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.596275][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.609612][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.621729][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 354.635284][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.647193][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 354.656628][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.670841][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.679222][ T5931] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.691548][ T10] usb 4-1: config 0 descriptor?? [ 354.707180][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.746385][ T5931] usb 2-1: config 0 descriptor?? [ 355.139240][ T10] kovaplus 0003:1E7D:2D50.003C: unknown main item tag 0x0 [ 355.151332][ T10] kovaplus 0003:1E7D:2D50.003C: unknown main item tag 0x0 [ 355.161539][ T10] kovaplus 0003:1E7D:2D50.003C: unknown main item tag 0x0 [ 355.169259][ T10] kovaplus 0003:1E7D:2D50.003C: unknown main item tag 0x0 [ 355.177980][ T10] kovaplus 0003:1E7D:2D50.003C: unknown main item tag 0x0 [ 355.199615][ T5931] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 355.201639][ T10] kovaplus 0003:1E7D:2D50.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 355.221271][ T5931] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 355.246724][ T5931] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 355.276740][ T5931] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 355.284665][ T5931] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 355.321256][ T5931] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 355.397422][ T5931] usb 2-1: USB disconnect, device number 35 [ 355.483695][T14376] fido_id[14376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 355.572353][ T10] kovaplus 0003:1E7D:2D50.003C: couldn't init struct kovaplus_device [ 355.581752][ T10] kovaplus 0003:1E7D:2D50.003C: couldn't install mouse [ 355.594550][ T10] kovaplus 0003:1E7D:2D50.003C: probe with driver kovaplus failed with error -71 [ 355.609366][ T10] usb 4-1: USB disconnect, device number 45 [ 356.068591][T14391] bond0: entered promiscuous mode [ 357.179997][T14439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.915019][ T5931] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 359.003920][T14510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.032165][T14510] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 359.075344][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 359.106411][ T5931] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.124978][ T5931] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.135220][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.141970][ T5931] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 359.161846][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.175244][ T5931] usb 5-1: config 0 descriptor?? [ 359.660560][ T5931] kye 0003:0458:0138.003E: collection stack underflow [ 359.680594][ T5931] kye 0003:0458:0138.003E: item 0 0 0 12 parsing failed [ 359.691280][ T5931] kye 0003:0458:0138.003E: parse failed [ 359.697958][ T5931] kye 0003:0458:0138.003E: probe with driver kye failed with error -22 [ 359.856039][ T5931] usb 5-1: USB disconnect, device number 28 [ 359.868440][T14545] netlink: 'syz.1.3717': attribute type 12 has an invalid length. [ 360.724378][ T5931] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 360.876407][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.902476][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 360.920589][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 360.940676][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 360.958425][ T5931] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.973244][ T5931] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 361.001930][ T5931] usb 5-1: Manufacturer: syz [ 361.021230][ T5931] usb 5-1: config 0 descriptor?? [ 361.323740][ T5931] rc_core: IR keymap rc-hauppauge not found [ 361.332835][ T5931] Registered IR keymap rc-empty [ 361.344362][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.379216][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.397223][T14606] binder: 14604:14606 ioctl c018620c 200000000340 returned -1 [ 361.415930][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 361.441445][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 361.485306][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.504398][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.533985][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.549231][T14614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.559502][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.584872][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.605154][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.626227][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.644590][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.663778][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.701871][ T5931] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 361.727731][ T5931] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 361.736666][ T5931] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 361.759543][ T5931] usb 5-1: USB disconnect, device number 29 [ 362.123794][ T5959] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 362.293196][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 362.315611][ T5959] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 362.343581][ T5959] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 362.380766][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 362.411298][ T5959] usb 2-1: config 1 has no interface number 0 [ 362.433199][ T5959] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.447402][ T5959] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 362.513293][ T5959] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 362.527832][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.567309][ T5959] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 362.779820][ T5959] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 363.221441][ T5959] usb 2-1: USB disconnect, device number 36 [ 363.241330][ T5959] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 363.384277][T14687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.502894][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3786'. [ 363.871326][T14707] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3793'. [ 364.813007][T14745] program syz.4.3813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.024265][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.035354][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.043814][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.053418][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.061138][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.382480][T14753] chnl_net:caif_netlink_parms(): no params data found [ 365.551589][ T5959] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 365.565309][T14753] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.573098][T14753] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.580395][T14753] bridge_slave_0: entered allmulticast mode [ 365.590876][T14753] bridge_slave_0: entered promiscuous mode [ 365.601343][T14753] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.609569][T14753] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.617868][T14753] bridge_slave_1: entered allmulticast mode [ 365.626090][T14753] bridge_slave_1: entered promiscuous mode [ 365.711158][T14753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.720779][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 365.728316][ T5959] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 365.741485][ T5959] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 365.750834][T14753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.770954][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 365.790421][ T5959] usb 4-1: config 1 has no interface number 0 [ 365.803173][ T5959] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.815270][ T5959] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 365.828606][ T5959] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 365.837838][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.879589][ T5959] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 365.895659][T14753] team0: Port device team_slave_0 added [ 365.914211][ T30] audit: type=1326 audit(1758287832.321:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14784 comm="syz.4.3826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f672b18ec29 code=0x0 [ 365.916472][T14753] team0: Port device team_slave_1 added [ 365.994659][T14753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.001858][T14753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.033755][T14753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.048408][T14753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.057446][T14753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.096641][ T5959] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 366.103776][T14753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.220202][T14753] hsr_slave_0: entered promiscuous mode [ 366.227757][T14753] hsr_slave_1: entered promiscuous mode [ 366.237346][T14753] debugfs: 'hsr0' already exists in 'hsr' [ 366.244572][T14753] Cannot create hsr debugfs directory [ 366.526530][ T5959] usb 4-1: USB disconnect, device number 46 [ 366.543828][ T5959] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 366.558072][T14753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.573666][T14753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.585579][T14753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.596738][T14753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.678574][T14753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.700595][T14753] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.716581][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.723822][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.745863][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.753311][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.036900][T14753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.090800][ T53] Bluetooth: hci3: command tx timeout [ 367.220835][ T5950] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 367.336406][T14753] veth0_vlan: entered promiscuous mode [ 367.354701][T14753] veth1_vlan: entered promiscuous mode [ 367.381238][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 367.390233][T14753] veth0_macvtap: entered promiscuous mode [ 367.397669][ T5950] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.406763][T14753] veth1_macvtap: entered promiscuous mode [ 367.417304][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 367.420990][ T5959] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 367.426344][ T5950] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 367.441704][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.460229][ T5950] usb 2-1: config 0 descriptor?? [ 367.463550][T14753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.488878][T14753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.508386][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.518266][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.535118][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.544750][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.603569][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 367.613160][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.626720][ T5959] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 367.652858][ T5959] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 367.664451][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.684393][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.695950][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 367.731286][ T5959] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.741358][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.750289][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.759339][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 367.772168][ T5959] usb 4-1: SerialNumber: syz [ 367.790926][T14818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 367.798940][T14818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 367.810182][ T5959] hub 4-1:1.0: bad descriptor, ignoring hub [ 367.823635][ T5959] hub 4-1:1.0: probe with driver hub failed with error -5 [ 367.901093][ T5950] hid_parser_main: 663 callbacks suppressed [ 367.901117][ T5950] corsair-cpro 0003:1B1C:0C10.003F: unknown main item tag 0x0 [ 367.917272][ T5950] corsair-cpro 0003:1B1C:0C10.003F: item fetching failed at offset 1/5 [ 367.927157][ T5950] corsair-cpro 0003:1B1C:0C10.003F: probe with driver corsair-cpro failed with error -22 [ 368.028932][T14818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.036934][T14818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 368.107700][ T5950] usb 2-1: USB disconnect, device number 37 [ 368.464863][ T5959] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 368.760759][ T10] usb 4-1: USB disconnect, device number 47 [ 368.786442][ T10] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 368.851236][ T1163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.161773][ T53] Bluetooth: hci3: command tx timeout [ 369.351958][T14864] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3848'. [ 369.752739][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 370.896821][T14916] random: crng reseeded on system resumption [ 371.239793][ T53] Bluetooth: hci3: command tx timeout [ 371.628633][ T5857] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 371.790580][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 371.797729][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.811250][ T5857] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 371.821016][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.838673][ T5857] usb 5-1: config 0 descriptor?? [ 372.088283][ T5931] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 372.264830][ T5931] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 372.272239][ T5857] mcp2221 0003:04D8:00DD.0040: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 372.289639][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.298782][ T5931] usb 4-1: Product: syz [ 372.303184][ T5931] usb 4-1: Manufacturer: syz [ 372.307897][ T5931] usb 4-1: SerialNumber: syz [ 372.329015][ T5931] r8152-cfgselector 4-1: Unknown version 0x0000 [ 372.335391][ T5931] r8152-cfgselector 4-1: config 0 descriptor?? [ 372.554623][ T5931] r8152-cfgselector 4-1: Needed 2 retries to read version [ 372.569098][ T5931] r8152-cfgselector 4-1: Unknown version 0x4080 [ 372.575921][ T5931] r8152-cfgselector 4-1: bad CDC descriptors [ 372.677520][ T5931] usb 5-1: USB disconnect, device number 30 [ 372.762172][ T10] r8152-cfgselector 4-1: USB disconnect, device number 48 [ 373.226213][T14979] binder: 14978:14979 ioctl c018620c 200000000580 returned -22 [ 373.321462][ T53] Bluetooth: hci3: command tx timeout [ 373.406187][ T30] audit: type=1326 audit(1758287839.815:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.1.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219258ec29 code=0x7fc00000 [ 373.428787][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.607364][T14996] tmpfs: Cannot change global quota limit on remount [ 373.777094][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 373.977310][ T5959] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 374.127340][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 374.139968][ T5959] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 374.158923][ T5959] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 374.170733][ T5959] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.197271][ T5959] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.267231][ T5959] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.288799][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.313804][T15014] sctp: Trying to GSO but underlying device doesn't support it. [ 374.333047][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 374.525076][ T5959] usb 2-1: GET_CAPABILITIES returned 0 [ 374.534778][ T5959] usbtmc 2-1:16.0: can't read capabilities [ 374.728011][ T10] usb 2-1: USB disconnect, device number 38 [ 375.513480][T15043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3925'. [ 375.616839][ T5931] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 375.761622][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 375.778919][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 375.791414][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 375.801723][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 375.811798][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 375.825607][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 375.841091][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.857963][ T5931] usb 4-1: config 0 descriptor?? [ 376.084714][ T5931] hdpvr 4-1:0.0: firmware version 0x0 dated [ 376.096575][ T5931] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 376.439390][ T30] audit: type=1326 audit(1758287842.846:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.5.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 376.529703][ T5931] hdpvr 4-1:0.0: Could not setup controls [ 376.561701][ T5931] hdpvr 4-1:0.0: registering videodev failed [ 376.615539][ T5931] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 376.641501][ T5931] usb 4-1: USB disconnect, device number 49 [ 376.724863][T15095] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 376.736232][T15095] syzkaller1: linktype set to 776 [ 377.015954][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 377.198147][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 377.220461][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.242190][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.253499][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 377.262691][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.278511][ T9] usb 6-1: config 0 descriptor?? [ 377.445594][ T5857] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 377.607340][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 377.621244][ T5857] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.662763][ T5857] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.673800][ T5857] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 377.687575][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.700595][ T5857] usb 5-1: config 0 descriptor?? [ 377.724873][ T9] apple 0003:05AC:024B.0041: unknown global tag 0xe [ 377.746807][ T9] apple 0003:05AC:024B.0041: item 0 1 1 14 parsing failed [ 377.761040][ T9] apple 0003:05AC:024B.0041: parse failed [ 377.767666][ T9] apple 0003:05AC:024B.0041: probe with driver apple failed with error -22 [ 377.911947][ T9] usb 6-1: USB disconnect, device number 2 [ 378.141850][ T5857] nzxt-smart2 0003:1E71:2009.0042: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 378.435764][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.540177][ T5857] usb 5-1: USB disconnect, device number 31 [ 378.699804][T15154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3975'. [ 378.712296][T15154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3975'. [ 378.729684][T15154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3975'. [ 379.895437][ T5857] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 380.014320][ T50] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 380.064578][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 380.071692][ T5857] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.083142][ T5857] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 380.093498][ T5857] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 380.106929][ T5857] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 380.118540][ T5857] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 380.128005][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.151005][ T5857] hub 4-1:1.0: bad descriptor, ignoring hub [ 380.157437][ T5857] hub 4-1:1.0: probe with driver hub failed with error -5 [ 380.167258][ T5857] cdc_wdm 4-1:1.0: skipping garbage [ 380.172678][ T5857] cdc_wdm 4-1:1.0: skipping garbage [ 380.183986][ T5857] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 380.190249][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 380.200184][ T5857] cdc_wdm 4-1:1.0: Unknown control protocol [ 380.209023][ T50] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 380.219942][ T50] usb 5-1: config 0 has no interface number 0 [ 380.228708][ T50] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 380.239618][ T50] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 380.253153][ T50] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 380.262681][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.271010][ T50] usb 5-1: Product: syz [ 380.275848][ T50] usb 5-1: Manufacturer: syz [ 380.281242][ T50] usb 5-1: SerialNumber: syz [ 380.291799][ T50] usb 5-1: config 0 descriptor?? [ 380.298733][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 380.306386][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 380.383458][T15227] netlink: 'syz.1.4010': attribute type 25 has an invalid length. [ 380.391965][T15227] netlink: 'syz.1.4010': attribute type 1 has an invalid length. [ 380.448200][T15229] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.454585][ T9] usb 4-1: USB disconnect, device number 50 [ 380.455783][T15229] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 380.519734][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 380.532993][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 380.813908][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 380.964087][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 380.972013][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.981311][ T9] usb 2-1: config 0 has no interface number 0 [ 380.989678][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.009308][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.019422][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 381.030175][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.045130][ T9] usb 2-1: config 0 descriptor?? [ 381.154015][ T50] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 381.181689][ T50] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 381.214015][ T50] asix 5-1:0.251: probe with driver asix failed with error -71 [ 381.238898][ T50] usb 5-1: USB disconnect, device number 32 [ 381.453777][ T10] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 381.615509][ T10] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 381.623896][ T10] usb 4-1: config 0 has no interface number 0 [ 381.632584][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 381.647890][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.656027][ T10] usb 4-1: Product: syz [ 381.661278][ T10] usb 4-1: Manufacturer: syz [ 381.666219][ T10] usb 4-1: SerialNumber: syz [ 381.672329][ T9] uclogic 0003:28BD:0071.0043: pen parameters not found [ 381.683864][ T10] usb 4-1: config 0 descriptor?? [ 381.700341][ T9] uclogic 0003:28BD:0071.0043: interface is invalid, ignoring [ 381.730415][ T9] usb 2-1: USB disconnect, device number 39 [ 381.894000][ T10] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 381.914361][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 381.935191][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 381.953670][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 381.964015][ T10] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 382.302392][ T5857] usb 4-1: USB disconnect, device number 51 [ 382.320154][ T5857] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 382.332962][ T5857] keyspan 4-1:0.133: device disconnected [ 382.403154][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 382.555984][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 382.566642][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 382.576777][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 382.587633][ T10] usb 6-1: config 220 has no interface number 2 [ 382.594451][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 382.612769][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 382.619799][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 382.628120][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 382.639538][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 382.649140][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.660200][ T10] usb 6-1: Product: syz [ 382.664932][ T10] usb 6-1: Manufacturer: syz [ 382.669613][ T10] usb 6-1: SerialNumber: syz [ 382.894553][ T10] usb 6-1: selecting invalid altsetting 0 [ 382.908203][ T10] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 382.916565][ T10] uvcvideo 6-1:220.0: No valid video chain found. [ 382.934137][ T10] usb 6-1: selecting invalid altsetting 0 [ 382.939948][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 382.957486][ T10] usb 6-1: USB disconnect, device number 3 [ 382.983212][ T5857] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 383.132972][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 383.141255][ T5857] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 383.154546][ T5857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 383.164762][ T5857] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.174982][ T5857] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.188074][ T5857] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.197218][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.272717][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 383.417441][ T5857] usb 2-1: GET_CAPABILITIES returned 0 [ 383.423206][ T5857] usbtmc 2-1:16.0: can't read capabilities [ 383.433173][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 383.447524][ T9] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 383.457193][ T9] usb 5-1: config 0 has no interface number 0 [ 383.476630][ T9] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 383.489961][ T9] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 383.499349][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.507741][ T9] usb 5-1: Product: syz [ 383.511977][ T9] usb 5-1: Manufacturer: syz [ 383.516675][ T9] usb 5-1: SerialNumber: syz [ 383.524289][ T9] usb 5-1: config 0 descriptor?? [ 383.627162][ T10] usb 2-1: USB disconnect, device number 40 [ 383.692136][T15295] misc userio: Can't change port type on an already running userio instance [ 384.139099][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input46 [ 384.196657][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.204987][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.351145][ T5857] usb 5-1: USB disconnect, device number 33 [ 384.881108][T15336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.097747][T15343] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 385.132516][T15343] overlayfs: overlapping lowerdir path [ 385.394159][T15358] netlink: 'syz.4.4068': attribute type 21 has an invalid length. [ 385.402982][T15358] netlink: 13562 bytes leftover after parsing attributes in process `syz.4.4068'. [ 385.711569][ T5948] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 385.861369][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 385.869962][ T5948] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.886703][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 385.898551][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 385.910847][ T5948] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 385.920645][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.937435][ T5948] usb 5-1: config 0 descriptor?? [ 385.952243][T15360] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 385.974344][ T5948] hub 5-1:0.0: USB hub found [ 386.117883][T15381] sctp: [Deprecated]: syz.1.4076 (pid 15381) Use of int in max_burst socket option. [ 386.117883][T15381] Use struct sctp_assoc_value instead [ 386.188227][ T5948] hub 5-1:0.0: 8 ports detected [ 386.200046][ T5948] hub 5-1:0.0: insufficient power available to use all downstream ports [ 386.594437][ T5948] hub 5-1:0.0: set hub depth failed [ 386.616529][ T5948] usb 5-1: USB disconnect, device number 34 [ 386.952566][T15403] overlay: filesystem on ./file0 not supported as upperdir [ 387.582494][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 387.681425][ T5857] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 387.757402][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 387.779844][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 387.804914][ T9] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 387.817821][ T9] usb 2-1: config 220 has no interface number 2 [ 387.827204][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 387.834391][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 387.844587][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 387.847964][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.853115][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 387.864620][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.882588][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 387.883583][ T5857] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 387.894155][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 387.900426][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.916936][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.925509][ T9] usb 2-1: Product: syz [ 387.929791][ T9] usb 2-1: Manufacturer: syz [ 387.935019][ T9] usb 2-1: SerialNumber: syz [ 387.951327][ T5857] usb 4-1: config 0 descriptor?? [ 388.174545][ T9] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 388.195095][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 388.205224][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 388.213809][ T9] usb 2-1: selecting invalid altsetting 0 [ 388.234346][ T9] usb 2-1: selecting invalid altsetting 0 [ 388.240244][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 388.259214][ T9] usb 2-1: USB disconnect, device number 41 [ 388.351064][ T5948] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 388.400472][ T5857] hid-multitouch 0003:1FD2:6007.0044: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 388.503251][ T5948] usb 6-1: Using ep0 maxpacket: 32 [ 388.511142][ T5948] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 388.519386][ T5948] usb 6-1: config 0 has no interface number 0 [ 388.525902][ T5948] usb 6-1: config 0 interface 184 has no altsetting 0 [ 388.535247][ T5948] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 388.544497][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.552756][ T5948] usb 6-1: Product: syz [ 388.556952][ T5948] usb 6-1: Manufacturer: syz [ 388.561736][ T5948] usb 6-1: SerialNumber: syz [ 388.568483][ T5948] usb 6-1: config 0 descriptor?? [ 388.577403][ T5948] smsc75xx v1.0.0 [ 388.614338][ T9] usb 4-1: USB disconnect, device number 52 [ 388.640143][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 388.802867][ T10] usb 5-1: config index 0 descriptor too short (expected 8028, got 92) [ 388.811640][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.822235][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.841429][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.851257][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.859331][ T10] usb 5-1: Product: syz [ 388.863713][ T10] usb 5-1: Manufacturer: syz [ 388.868377][ T10] usb 5-1: SerialNumber: syz [ 389.394724][ T5948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 389.416017][ T5948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 389.427105][ T5948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 389.438749][ T5948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 389.470030][ T5948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 389.488074][ T5948] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 389.513231][ T5948] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 389.546402][ T5948] usb 6-1: USB disconnect, device number 4 [ 389.598514][T15471] tun0: tun_chr_ioctl cmd 21731 [ 389.715012][ T10] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 389.734324][ T10] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 389.760058][ T10] cdc_ncm 5-1:1.0: bind() failure [ 389.772654][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 389.780403][ T10] cdc_ncm 5-1:1.1: bind() failure [ 389.797630][ T10] usb 5-1: USB disconnect, device number 35 [ 390.038333][T15491] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4130'. [ 390.491848][T15516] netlink: 'syz.3.4142': attribute type 11 has an invalid length. [ 390.667776][T15526] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 391.012458][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4156'. [ 391.022031][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4156'. [ 391.348718][T15562] Falling back ldisc for ptm0. [ 391.370073][ T5959] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 391.539324][ T5959] usb 6-1: Using ep0 maxpacket: 8 [ 391.549121][ T5959] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 391.578598][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.586700][ T5959] usb 6-1: Product: syz [ 391.618482][ T5959] usb 6-1: Manufacturer: syz [ 391.623197][ T5959] usb 6-1: SerialNumber: syz [ 391.638059][ T5959] usb 6-1: config 0 descriptor?? [ 391.885456][ T5959] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 392.224854][T15609] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 392.485044][ T5959] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 392.522375][ T5959] usb 6-1: USB disconnect, device number 5 [ 394.391412][T15704] net veth1_virt_wifi : renamed from virt_wifi0 [ 395.462058][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4228'. [ 395.674460][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4232'. [ 396.320762][T15765] netlink: 'syz.4.4242': attribute type 3 has an invalid length. [ 396.336216][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'. [ 396.456090][ T30] audit: type=1326 audit(1758287862.876:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.3.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ac78ec29 code=0x7fc00000 [ 396.791452][T15788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4253'. [ 396.826374][ T5948] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 396.976513][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 397.026213][ T5948] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.085287][ T5948] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.103148][ T5948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 397.124630][ T5948] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 397.147929][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.227016][ T5948] usb 4-1: config 0 descriptor?? [ 397.507668][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4257'. [ 397.684653][ T5948] apple 0003:05AC:0247.0045: fixing up Magic Keyboard JIS report descriptor [ 397.712096][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.719640][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.726928][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.734081][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.741646][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.748914][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.758782][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.781640][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.805762][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.812802][ T5948] apple 0003:05AC:0247.0045: unknown main item tag 0x0 [ 397.835011][ T5948] apple 0003:05AC:0247.0045: unexpected long global item [ 397.844086][ T5948] apple 0003:05AC:0247.0045: parse failed [ 397.850447][ T5948] apple 0003:05AC:0247.0045: probe with driver apple failed with error -22 [ 397.895690][ T5948] usb 4-1: USB disconnect, device number 53 [ 398.060293][T15817] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4264'. [ 399.071604][T15877] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4291'. [ 399.087443][T15875] kvm: kvm [15874]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xfffffffffffffffd [ 399.436866][T15893] netdevsim netdevsim1: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 399.714556][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 399.756917][ T5959] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 399.823237][T15910] delete_channel: no stack [ 399.884426][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 399.897770][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.909785][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.924770][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 399.930114][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 399.938233][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.954152][ T5931] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 399.963732][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.979932][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 399.997483][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 400.002961][T15917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.010852][ T5959] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 400.025740][ T5931] usb 6-1: config 0 descriptor?? [ 400.027286][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.049279][ T5959] usb 2-1: config 0 descriptor?? [ 400.058251][T15899] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 400.084335][T15919] netlink: 'syz.4.4312': attribute type 31 has an invalid length. [ 400.090159][ T5959] hub 2-1:0.0: USB hub found [ 400.092612][T15919] netlink: 'syz.4.4312': attribute type 1 has an invalid length. [ 400.107139][T15919] bridge0: port 1(bridge_slave_0) entered learning state [ 400.180410][T15922] netlink: 'syz.3.4313': attribute type 5 has an invalid length. [ 400.188647][T15922] netlink: 'syz.3.4313': attribute type 10 has an invalid length. [ 400.282950][ T5959] hub 2-1:0.0: 8 ports detected [ 400.293078][ T5959] hub 2-1:0.0: insufficient power available to use all downstream ports [ 400.338951][T15928] netlink: 'syz.3.4316': attribute type 37 has an invalid length. [ 400.455272][ T5931] logitech 0003:046D:C293.0046: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.5-1/input0 [ 400.479696][ T5931] logitech 0003:046D:C293.0046: no inputs found [ 400.541528][T15938] netlink: 'syz.4.4321': attribute type 10 has an invalid length. [ 400.578859][T15938] netlink: 'syz.4.4321': attribute type 4 has an invalid length. [ 400.591053][T15938] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4321'. [ 400.611030][T15938] wlan1: mtu less than device minimum [ 400.657184][ T5948] usb 6-1: USB disconnect, device number 6 [ 400.790122][T15946] kvm: kvm [15945]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003a) = 0x0 [ 400.913431][ T5959] usb 2-1: USB disconnect, device number 42 [ 400.998423][T15954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input48 [ 401.164762][ T5948] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 401.333720][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 401.347960][ T5948] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 401.358872][ T5948] usb 4-1: config 0 has no interface number 0 [ 401.384844][ T5948] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 401.400407][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.411121][ T5948] usb 4-1: Product: syz [ 401.420252][ T5948] usb 4-1: Manufacturer: syz [ 401.428558][ T5948] usb 4-1: SerialNumber: syz [ 401.435679][ T5959] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 401.457062][ T5948] usb 4-1: config 0 descriptor?? [ 401.473199][ T5948] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 401.605101][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4334'. [ 401.614699][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 401.620662][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4334'. [ 401.636766][ T5959] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 401.645450][ T5959] usb 5-1: config 0 has no interface number 0 [ 401.651602][ T5959] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 401.673459][ T5959] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 401.684731][ T5948] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 401.713513][ T5959] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 401.726009][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.752527][ T5959] usb 5-1: Product: syz [ 401.754051][ T5948] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 401.758575][ T5959] usb 5-1: Manufacturer: syz [ 401.771070][ T5959] usb 5-1: SerialNumber: syz [ 401.785696][ T5959] usb 5-1: config 0 descriptor?? [ 401.792877][T15960] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 401.822623][T15960] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 402.037024][T15981] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4339'. [ 402.064665][T15960] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 402.077571][T15960] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 402.081636][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 402.101757][ T24] usb 4-1: USB disconnect, device number 54 [ 402.155262][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 402.180979][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 402.198063][ T24] quatech2 4-1:0.51: device disconnected [ 402.396319][ T5931] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 402.553939][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 402.561505][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.571883][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.584723][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 402.595325][ T5931] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 402.606431][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.645033][ T5931] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 402.657241][ T5931] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 402.674310][ T5931] usb 6-1: Manufacturer: syz [ 402.695479][ T5931] usb 6-1: config 0 descriptor?? [ 402.698846][ T5959] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 402.725106][ T5959] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 402.754780][ T5959] asix 5-1:0.251: probe with driver asix failed with error -71 [ 402.781371][ T5959] usb 5-1: USB disconnect, device number 36 [ 402.927716][T16010] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4353'. [ 402.985864][ T5931] rc_core: IR keymap rc-hauppauge not found [ 402.991931][ T5931] Registered IR keymap rc-empty [ 402.998771][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.034477][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.056065][ T5931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 403.093019][ T5931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49 [ 403.117727][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.125392][ C0] mceusb 6-1:0.0: long-range (0x1) receiver active [ 403.175055][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.215694][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.262783][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.294867][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.333341][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.358231][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.395446][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.422706][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.464788][ T5931] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 403.491050][ T5931] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 403.521575][ T5931] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 403.553245][ T5931] usb 6-1: USB disconnect, device number 7 [ 403.963147][T16038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.349207][T16055] netlink: 'syz.4.4375': attribute type 1 has an invalid length. [ 404.517550][T16064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.743615][T16076] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4385'. [ 405.521543][ T5948] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 405.546155][T16108] IPVS: persistence engine module ip_vs_pe_ not found [ 405.683685][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.698968][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.709735][ T5948] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 405.719132][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.739838][ T5948] usb 2-1: config 0 descriptor?? [ 405.802397][ T5931] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 405.993913][ T5931] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 406.006711][ T5931] usb 4-1: config 0 has no interface number 0 [ 406.026045][ T5931] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 406.035654][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.061110][ T5931] usb 4-1: Product: syz [ 406.065544][ T5931] usb 4-1: Manufacturer: syz [ 406.070266][ T5931] usb 4-1: SerialNumber: syz [ 406.089107][ T5931] usb 4-1: config 0 descriptor?? [ 406.104002][ T5931] usb 4-1: Expected 3 endpoints, found: 0 [ 406.165819][ T5948] hid_parser_main: 829 callbacks suppressed [ 406.165846][ T5948] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 406.181838][ T53] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 406.182349][ T5948] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 406.188657][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 406.220513][ T5948] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 406.240058][ T5948] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 406.254813][ T5948] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 406.265039][ T5948] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 406.273622][ T5948] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 406.284934][ T5948] cp2112 0003:10C4:EA90.0047: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 406.311511][ T30] audit: type=1326 audit(1758287872.741:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.375994][ T5959] usb 4-1: USB disconnect, device number 55 [ 406.397272][ T30] audit: type=1326 audit(1758287872.741:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.434359][ T5948] cp2112 0003:10C4:EA90.0047: Part Number: 0x00 Device Version: 0x00 [ 406.459515][ T30] audit: type=1326 audit(1758287872.741:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.489326][ T30] audit: type=1326 audit(1758287872.741:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.511834][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.519110][ T30] audit: type=1326 audit(1758287872.741:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.541425][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.558109][ T30] audit: type=1326 audit(1758287872.741:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.590092][ T30] audit: type=1326 audit(1758287872.741:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.612393][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.622866][ T30] audit: type=1326 audit(1758287872.741:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.645159][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.653910][ T5948] cp2112 0003:10C4:EA90.0047: error requesting SMBus config [ 406.669101][ T5948] cp2112 0003:10C4:EA90.0047: probe with driver cp2112 failed with error -71 [ 406.702223][ T5948] usb 2-1: USB disconnect, device number 43 [ 406.720936][ T30] audit: type=1326 audit(1758287872.741:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16131 comm="syz.5.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d458ec29 code=0x7fc00000 [ 406.743237][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.152861][ T5959] kernel read not supported for file /dsp1 (pid: 5959 comm: kworker/1:4) [ 407.331620][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 407.492962][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.501648][ T24] usb 4-1: config 0 has no interface number 0 [ 407.508021][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.520377][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.534019][ T24] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 407.543202][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.569566][ T24] usb 4-1: config 0 descriptor?? [ 407.614120][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4434'. [ 408.051804][ T24] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0048/input/input50 [ 408.210552][ T5959] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 408.220952][ T24] holtek_kbd 0003:04D9:A055.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 408.274773][T16208] GUP no longer grows the stack in syz.5.4446 (16208): 200000005000-200000008000 (200000001000) [ 408.282706][ T24] usb 4-1: USB disconnect, device number 56 [ 408.287714][T16208] CPU: 0 UID: 0 PID: 16208 Comm: syz.5.4446 Not tainted syzkaller #0 PREEMPT(full) [ 408.287748][T16208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.287767][T16208] Call Trace: [ 408.287777][T16208] [ 408.287786][T16208] dump_stack_lvl+0x189/0x250 [ 408.287823][T16208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.287847][T16208] ? __pfx__printk+0x10/0x10 [ 408.287877][T16208] ? find_vma+0xe7/0x160 [ 408.287909][T16208] ? vma_is_secretmem+0xd/0x50 [ 408.287938][T16208] ? check_vma_flags+0x50d/0x580 [ 408.287970][T16208] __get_user_pages+0x2470/0x2a00 [ 408.288038][T16208] __gup_longterm_locked+0x3dc/0x1660 [ 408.288086][T16208] ? trace_kmalloc+0x1f/0xd0 [ 408.288109][T16208] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 408.288144][T16208] pin_user_pages+0x9e/0xd0 [ 408.288173][T16208] xdp_umem_pin_pages+0x11c/0x350 [ 408.288206][T16208] xdp_umem_create+0x677/0x8e0 [ 408.288242][T16208] xsk_setsockopt+0x7b0/0x8d0 [ 408.288280][T16208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.288328][T16208] ? __pfx_aa_sk_perm+0x10/0x10 [ 408.288358][T16208] ? aa_sock_opt_perm+0xff/0x1b0 [ 408.288392][T16208] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.288426][T16208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.288464][T16208] do_sock_setsockopt+0x17c/0x1b0 [ 408.288501][T16208] __x64_sys_setsockopt+0x13f/0x1b0 [ 408.288538][T16208] do_syscall_64+0xfa/0xfa0 [ 408.288562][T16208] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.288586][T16208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.288609][T16208] ? clear_bhb_loop+0x60/0xb0 [ 408.288639][T16208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.288663][T16208] RIP: 0033:0x7f31d458ec29 [ 408.288696][T16208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.288716][T16208] RSP: 002b:00007f31d53a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.288747][T16208] RAX: ffffffffffffffda RBX: 00007f31d47d5fa0 RCX: 00007f31d458ec29 [ 408.288765][T16208] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 408.288779][T16208] RBP: 00007f31d4611e41 R08: 0000000000000020 R09: 0000000000000000 [ 408.288794][T16208] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 408.288810][T16208] R13: 00007f31d47d6038 R14: 00007f31d47d5fa0 R15: 00007ffec4c36a58 [ 408.288851][T16208] [ 408.581880][T16214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.619979][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 408.631099][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.631137][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.631179][ T5959] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 408.631204][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.640373][ T5959] usb 2-1: config 0 descriptor?? [ 408.701139][T16215] fido_id[16215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 409.015019][T16223] binder: 16222:16223 ioctl 40046205 0 returned -22 [ 409.061968][ T5959] hid-multitouch 0003:1FD2:6007.0049: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 409.117765][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4456'. [ 409.258630][ T5857] usb 2-1: USB disconnect, device number 44 [ 409.385741][T16240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 409.462625][ T5857] rtc_cmos 00:00: Alarms can be up to one day in the future [ 409.479945][ T5857] rtc_cmos 00:00: Alarms can be up to one day in the future [ 409.495545][ T5857] rtc_cmos 00:00: Alarms can be up to one day in the future [ 409.514170][ T5857] rtc_cmos 00:00: Alarms can be up to one day in the future [ 409.529773][ T5857] rtc rtc0: __rtc_set_alarm: err=-22 [ 409.764664][T16258] sp0: Synchronizing with TNC [ 410.042543][T16268] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 410.402870][ T53] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 410.411218][ T53] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 410.949031][ T5948] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 411.111110][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 411.117457][T16332] binder: 16331:16332 ioctl 4018620d 0 returned -22 [ 411.118270][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.137044][ T5948] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 411.146778][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.162264][ T5948] usb 5-1: config 0 descriptor?? [ 411.575646][T16344] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 411.582700][T16344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 411.601661][T16344] vhci_hcd vhci_hcd.0: Device attached [ 411.616770][ T5948] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 411.626080][ T5948] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 411.637930][T16344] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 411.640969][ T5948] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 411.644591][T16344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.645717][T16344] vhci_hcd vhci_hcd.0: Device attached [ 411.672337][ T5948] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 411.680091][ T5948] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0 [ 411.687819][T16344] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 411.694385][T16344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 411.703414][ T5948] mcp2221 0003:04D8:00DD.004A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 411.724014][T16344] vhci_hcd vhci_hcd.0: Device attached [ 411.736013][T16352] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 411.742680][T16352] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 411.755242][T16352] vhci_hcd vhci_hcd.0: Device attached [ 411.765472][T16349] vhci_hcd: connection closed [ 411.770017][ T36] vhci_hcd: stop threads [ 411.779939][ T5931] vhci_hcd: vhci_device speed not set [ 411.807882][T16347] vhci_hcd: connection closed [ 411.811071][T16345] vhci_hcd: connection closed [ 411.813453][T16354] vhci_hcd: connection closed [ 411.826205][ T36] vhci_hcd: release socket [ 411.841597][ T36] vhci_hcd: disconnect device [ 411.842755][ T5931] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 411.846517][ T36] vhci_hcd: stop threads [ 411.860258][ T36] vhci_hcd: release socket [ 411.864872][ T36] vhci_hcd: disconnect device [ 411.874983][ T36] vhci_hcd: stop threads [ 411.881998][T16346] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 411.888021][ T36] vhci_hcd: release socket [ 411.893369][ T36] vhci_hcd: disconnect device [ 411.898860][ T36] vhci_hcd: stop threads [ 411.903230][ T36] vhci_hcd: release socket [ 411.908121][ T36] vhci_hcd: disconnect device [ 412.045501][ T5959] usb 5-1: USB disconnect, device number 37 [ 412.084904][T16359] sp0: Synchronizing with TNC [ 412.253863][T16365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4513'. [ 412.987813][ T5948] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 413.026782][T16403] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4529'. [ 413.176847][ T5948] usb 6-1: Using ep0 maxpacket: 8 [ 413.194400][ T5948] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.214771][ T5948] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.235100][ T5948] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.255459][ T5948] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.277644][ T5948] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.300165][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.531716][ T5948] usb 6-1: GET_CAPABILITIES returned 0 [ 413.537328][ T5948] usbtmc 6-1:16.0: can't read capabilities [ 413.625656][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'. [ 413.736881][ T5948] usb 6-1: USB disconnect, device number 8 [ 413.739658][T16421] netlink: 'syz.4.4536': attribute type 1 has an invalid length. [ 413.937156][T16431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4540'. [ 414.097660][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 414.185936][T16441] block device autoloading is deprecated and will be removed. [ 414.267275][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 414.274888][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 414.284753][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.330705][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 414.346182][T16449] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4549'. [ 414.347155][ T9] pvrusb2: ********** [ 414.369410][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 414.379966][ T9] pvrusb2: Important functionality might not be entirely working. [ 414.392256][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 414.419498][ T9] pvrusb2: ********** [ 414.422103][ T53] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 414.436881][ T53] Bluetooth: hci1: Injecting HCI hardware error event [ 414.447705][ T53] Bluetooth: hci1: hardware error 0x00 [ 414.514605][T16456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4552'. [ 414.554073][ T2345] pvrusb2: Invalid write control endpoint [ 414.657870][T16462] Context (ID=0x4d4) not attached to queue pair (handle=0xffffffff:0x4) [ 414.681303][ T2345] pvrusb2: Invalid write control endpoint [ 414.689494][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 414.700121][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 414.717368][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 414.744924][ T2345] pvrusb2: Device being rendered inoperable [ 414.759293][ T5959] usb 5-1: USB disconnect, device number 38 [ 414.766878][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 414.779297][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 414.817571][ T2345] pvrusb2: Attached sub-driver cx25840 [ 414.820817][T16467] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4557'. [ 414.823095][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 414.823133][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 415.009357][T16475] sp0: Synchronizing with TNC [ 415.016257][ T36] [ 415.018600][ T36] ===================================================== [ 415.025527][ T36] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 415.033242][ T36] syzkaller #0 Not tainted [ 415.037771][ T36] ----------------------------------------------------- [ 415.044710][ T36] kworker/u8:2/36 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 415.052433][ T36] ffffffff8f1143d8 (disc_data_lock#3){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 [ 415.062106][ T36] [ 415.062106][ T36] and this task is already holding: [ 415.069462][ T36] ffffffff9a26ee18 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 415.078787][ T36] which would create a new lock dependency: [ 415.084676][ T36] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3} [ 415.092546][ T36] [ 415.092546][ T36] but this new dependency connects a HARDIRQ-irq-safe lock: [ 415.101991][ T36] (&port_lock_key){-.-.}-{3:3} [ 415.102014][ T36] [ 415.102014][ T36] ... which became HARDIRQ-irq-safe at: [ 415.114731][ T36] lock_acquire+0x120/0x360 [ 415.119323][ T36] _raw_spin_lock_irqsave+0xa7/0xf0 [ 415.124604][ T36] serial8250_handle_irq+0x6b/0xbb0 [ 415.129885][ T36] serial8250_default_handle_irq+0xbf/0x200 [ 415.136035][ T36] serial8250_interrupt+0x8d/0x180 [ 415.141235][ T36] __handle_irq_event_percpu+0x295/0xab0 [ 415.146956][ T36] handle_irq_event+0x8b/0x1e0 [ 415.151809][ T36] handle_edge_irq+0x23b/0xa10 [ 415.156661][ T36] __common_interrupt+0x141/0x1f0 [ 415.161778][ T36] common_interrupt+0xb6/0xe0 [ 415.166554][ T36] asm_common_interrupt+0x26/0x40 [ 415.171663][ T36] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 415.177557][ T36] uart_port_unlock_deref+0x111/0x2f0 [ 415.183119][ T36] uart_write+0xe8/0x130 [ 415.187452][ T36] n_tty_write+0xd27/0x1200 [ 415.192040][ T36] file_tty_write+0x559/0xa20 [ 415.196856][ T36] vfs_write+0x5c9/0xb30 [ 415.201213][ T36] ksys_write+0x145/0x250 [ 415.205653][ T36] do_syscall_64+0xfa/0xfa0 [ 415.210254][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.216244][ T36] [ 415.216244][ T36] to a HARDIRQ-irq-unsafe lock: [ 415.223251][ T36] (disc_data_lock#3){.+.+}-{3:3} [ 415.223283][ T36] [ 415.223283][ T36] ... which became HARDIRQ-irq-unsafe at: [ 415.236171][ T36] ... [ 415.236177][ T36] lock_acquire+0x120/0x360 [ 415.243348][ T36] _raw_read_lock+0x36/0x50 [ 415.247932][ T36] sixpack_receive_buf+0x5c/0x1450 [ 415.253231][ T36] tty_ldisc_receive_buf+0x119/0x160 [ 415.258599][ T36] tty_port_default_receive_buf+0x6e/0xa0 [ 415.264492][ T36] flush_to_ldisc+0x24a/0x6e0 [ 415.269253][ T36] process_scheduled_works+0xae1/0x17b0 [ 415.274887][ T36] worker_thread+0x8a0/0xda0 [ 415.279563][ T36] kthread+0x711/0x8a0 [ 415.283722][ T36] ret_from_fork+0x4bc/0x870 [ 415.288393][ T36] ret_from_fork_asm+0x1a/0x30 [ 415.293237][ T36] [ 415.293237][ T36] other info that might help us debug this: [ 415.293237][ T36] [ 415.303457][ T36] Possible interrupt unsafe locking scenario: [ 415.303457][ T36] [ 415.311860][ T36] CPU0 CPU1 [ 415.317220][ T36] ---- ---- [ 415.322586][ T36] lock(disc_data_lock#3); [ 415.327154][ T36] local_irq_disable(); [ 415.333937][ T36] lock(&port_lock_key); [ 415.340793][ T36] lock(disc_data_lock#3); [ 415.347842][ T36] [ 415.351302][ T36] lock(&port_lock_key); [ 415.355822][ T36] [ 415.355822][ T36] *** DEADLOCK *** [ 415.355822][ T36] [ 415.363963][ T36] 6 locks held by kworker/u8:2/36: [ 415.369068][ T36] #0: ffff88813fe09148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 415.380728][ T36] #1: ffffc90000ac7ba0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 415.392388][ T36] #2: ffff888142338ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x6e0 [ 415.401462][ T36] #3: ffff888076db60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 415.410780][ T36] #4: ffffffff9a26ee18 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 415.420532][ T36] #5: ffff888076db60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 415.429847][ T36] [ 415.429847][ T36] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 415.440251][ T36] -> (&port_lock_key){-.-.}-{3:3} { [ 415.445476][ T36] IN-HARDIRQ-W at: [ 415.449465][ T36] lock_acquire+0x120/0x360 [ 415.455623][ T36] _raw_spin_lock_irqsave+0xa7/0xf0 [ 415.462480][ T36] serial8250_handle_irq+0x6b/0xbb0 [ 415.469341][ T36] serial8250_default_handle_irq+0xbf/0x200 [ 415.476977][ T36] serial8250_interrupt+0x8d/0x180 [ 415.483748][ T36] __handle_irq_event_percpu+0x295/0xab0 [ 415.491130][ T36] handle_irq_event+0x8b/0x1e0 [ 415.497603][ T36] handle_edge_irq+0x23b/0xa10 [ 415.504243][ T36] __common_interrupt+0x141/0x1f0 [ 415.510924][ T36] common_interrupt+0xb6/0xe0 [ 415.517347][ T36] asm_common_interrupt+0x26/0x40 [ 415.524018][ T36] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 415.531413][ T36] uart_port_unlock_deref+0x111/0x2f0 [ 415.538450][ T36] uart_write+0xe8/0x130 [ 415.544454][ T36] n_tty_write+0xd27/0x1200 [ 415.550630][ T36] file_tty_write+0x559/0xa20 [ 415.557150][ T36] vfs_write+0x5c9/0xb30 [ 415.563048][ T36] ksys_write+0x145/0x250 [ 415.569053][ T36] do_syscall_64+0xfa/0xfa0 [ 415.575214][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.582756][ T36] IN-SOFTIRQ-W at: [ 415.586818][ T36] lock_acquire+0x120/0x360 [ 415.593094][ T36] _raw_spin_lock_irqsave+0xa7/0xf0 [ 415.599948][ T36] serial8250_handle_irq+0x6b/0xbb0 [ 415.606803][ T36] serial8250_default_handle_irq+0xbf/0x200 [ 415.614373][ T36] serial8250_interrupt+0x8d/0x180 [ 415.621157][ T36] __handle_irq_event_percpu+0x295/0xab0 [ 415.628452][ T36] handle_irq_event+0x8b/0x1e0 [ 415.634983][ T36] handle_edge_irq+0x23b/0xa10 [ 415.641397][ T36] __common_interrupt+0x141/0x1f0 [ 415.648158][ T36] common_interrupt+0x5e/0xe0 [ 415.654497][ T36] asm_common_interrupt+0x26/0x40 [ 415.661257][ T36] lock_release+0x2b5/0x3e0 [ 415.667496][ T36] unwind_next_frame+0x19a9/0x2390 [ 415.674261][ T36] arch_stack_walk+0x11c/0x150 [ 415.680699][ T36] stack_trace_save+0x9c/0xe0 [ 415.687029][ T36] kasan_save_track+0x3e/0x80 [ 415.693359][ T36] __kasan_save_free_info+0x46/0x50 [ 415.700239][ T36] __kasan_slab_free+0x5c/0x80 [ 415.706683][ T36] slab_free_after_rcu_debug+0x12c/0x2a0 [ 415.713977][ T36] rcu_core+0xcab/0x1770 [ 415.719879][ T36] handle_softirqs+0x286/0x870 [ 415.726296][ T36] __irq_exit_rcu+0xca/0x1f0 [ 415.732541][ T36] irq_exit_rcu+0x9/0x30 [ 415.738458][ T36] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 415.745747][ T36] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.753375][ T36] pv_native_safe_halt+0x13/0x20 [ 415.759955][ T36] default_idle+0x13/0x20 [ 415.766016][ T36] default_idle_call+0x73/0xb0 [ 415.772435][ T36] do_idle+0x1e7/0x510 [ 415.778187][ T36] cpu_startup_entry+0x44/0x60 [ 415.784602][ T36] rest_init+0x2de/0x300 [ 415.790497][ T36] start_kernel+0x3ae/0x410 [ 415.796655][ T36] x86_64_start_reservations+0x24/0x30 [ 415.803766][ T36] x86_64_start_kernel+0x143/0x1c0 [ 415.810526][ T36] common_startup_64+0x13e/0x147 [ 415.817365][ T36] INITIAL USE at: [ 415.821341][ T36] lock_acquire+0x120/0x360 [ 415.827449][ T36] _raw_spin_lock_irqsave+0xa7/0xf0 [ 415.834227][ T36] serial8250_do_set_termios+0x4d1/0x1c30 [ 415.841613][ T36] uart_set_options+0x3c2/0x5b0 [ 415.848102][ T36] serial8250_console_setup+0x2f4/0x3c0 [ 415.855221][ T36] univ8250_console_setup+0x43a/0x540 [ 415.862179][ T36] try_enable_preferred_console+0x4e4/0x650 [ 415.869655][ T36] register_console+0x551/0xf90 [ 415.876084][ T36] univ8250_console_init+0x3a/0x70 [ 415.882857][ T36] console_init+0x10e/0x430 [ 415.889007][ T36] start_kernel+0x254/0x410 [ 415.895075][ T36] x86_64_start_reservations+0x24/0x30 [ 415.902090][ T36] x86_64_start_kernel+0x143/0x1c0 [ 415.908780][ T36] common_startup_64+0x13e/0x147 [ 415.915303][ T36] } [ 415.917798][ T36] ... key at: [] port_lock_key+0x0/0x20 [ 415.925532][ T36] [ 415.925532][ T36] the dependencies between the lock to be acquired [ 415.925543][ T36] and HARDIRQ-irq-unsafe lock: [ 415.939213][ T36] -> (disc_data_lock#3){.+.+}-{3:3} { [ 415.944617][ T36] HARDIRQ-ON-R at: [ 415.948596][ T36] lock_acquire+0x120/0x360 [ 415.954757][ T36] _raw_read_lock+0x36/0x50 [ 415.960932][ T36] sixpack_receive_buf+0x5c/0x1450 [ 415.967717][ T36] tty_ldisc_receive_buf+0x119/0x160 [ 415.974656][ T36] tty_port_default_receive_buf+0x6e/0xa0 [ 415.982047][ T36] flush_to_ldisc+0x24a/0x6e0 [ 415.988387][ T36] process_scheduled_works+0xae1/0x17b0 [ 415.995579][ T36] worker_thread+0x8a0/0xda0 [ 416.001828][ T36] kthread+0x711/0x8a0 [ 416.007648][ T36] ret_from_fork+0x4bc/0x870 [ 416.013884][ T36] ret_from_fork_asm+0x1a/0x30 [ 416.020296][ T36] SOFTIRQ-ON-R at: [ 416.024276][ T36] lock_acquire+0x120/0x360 [ 416.030423][ T36] _raw_read_lock+0x36/0x50 [ 416.036598][ T36] sixpack_receive_buf+0x5c/0x1450 [ 416.043379][ T36] tty_ldisc_receive_buf+0x119/0x160 [ 416.050324][ T36] tty_port_default_receive_buf+0x6e/0xa0 [ 416.057686][ T36] flush_to_ldisc+0x24a/0x6e0 [ 416.064023][ T36] process_scheduled_works+0xae1/0x17b0 [ 416.071349][ T36] worker_thread+0x8a0/0xda0 [ 416.077611][ T36] kthread+0x711/0x8a0 [ 416.083335][ T36] ret_from_fork+0x4bc/0x870 [ 416.089585][ T36] ret_from_fork_asm+0x1a/0x30 [ 416.096008][ T36] INITIAL USE at: [ 416.099907][ T36] lock_acquire+0x120/0x360 [ 416.105979][ T36] _raw_write_lock_irq+0xa2/0xf0 [ 416.112479][ T36] sixpack_close+0x2c/0x280 [ 416.118553][ T36] tty_ldisc_kill+0xa3/0x1a0 [ 416.124714][ T36] tty_ldisc_hangup+0x3a2/0x4b0 [ 416.131127][ T36] __tty_hangup+0x40c/0x680 [ 416.137205][ T36] tty_ioctl+0x757/0xde0 [ 416.143029][ T36] __se_sys_ioctl+0xfc/0x170 [ 416.149221][ T36] do_syscall_64+0xfa/0xfa0 [ 416.155386][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.162857][ T36] INITIAL READ USE at: [ 416.167186][ T36] lock_acquire+0x120/0x360 [ 416.174028][ T36] _raw_read_lock+0x36/0x50 [ 416.180529][ T36] sixpack_receive_buf+0x5c/0x1450 [ 416.187640][ T36] tty_ldisc_receive_buf+0x119/0x160 [ 416.194913][ T36] tty_port_default_receive_buf+0x6e/0xa0 [ 416.202621][ T36] flush_to_ldisc+0x24a/0x6e0 [ 416.209300][ T36] process_scheduled_works+0xae1/0x17b0 [ 416.216840][ T36] worker_thread+0x8a0/0xda0 [ 416.223423][ T36] kthread+0x711/0x8a0 [ 416.229507][ T36] ret_from_fork+0x4bc/0x870 [ 416.236111][ T36] ret_from_fork_asm+0x1a/0x30 [ 416.242886][ T36] } [ 416.245382][ T36] ... key at: [] disc_data_lock+0x18/0x100 [ 416.253281][ T36] ... acquired at: [ 416.257085][ T36] lock_acquire+0x120/0x360 [ 416.261768][ T36] _raw_read_lock+0x36/0x50 [ 416.266443][ T36] sixpack_write_wakeup+0x30/0x480 [ 416.271750][ T36] tty_wakeup+0xbe/0x100 [ 416.276171][ T36] tty_port_default_wakeup+0xfb/0x170 [ 416.281712][ T36] serial8250_tx_chars+0x72e/0x970 [ 416.287004][ T36] __start_tx+0x33b/0x480 [ 416.291517][ T36] __uart_start+0x23f/0x460 [ 416.296238][ T36] uart_write+0xdc/0x130 [ 416.300688][ T36] sixpack_receive_buf+0x447/0x1450 [ 416.306066][ T36] tty_ldisc_receive_buf+0x119/0x160 [ 416.311522][ T36] tty_port_default_receive_buf+0x6e/0xa0 [ 416.317411][ T36] flush_to_ldisc+0x24a/0x6e0 [ 416.322272][ T36] process_scheduled_works+0xae1/0x17b0 [ 416.328013][ T36] worker_thread+0x8a0/0xda0 [ 416.333369][ T36] kthread+0x711/0x8a0 [ 416.337627][ T36] ret_from_fork+0x4bc/0x870 [ 416.342407][ T36] ret_from_fork_asm+0x1a/0x30 [ 416.347361][ T36] [ 416.349684][ T36] [ 416.349684][ T36] stack backtrace: [ 416.355588][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 416.355606][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.355618][ T36] Workqueue: events_unbound flush_to_ldisc [ 416.355638][ T36] Call Trace: [ 416.355646][ T36] [ 416.355653][ T36] dump_stack_lvl+0x189/0x250 [ 416.355669][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.355683][ T36] ? __pfx__printk+0x10/0x10 [ 416.355707][ T36] validate_chain+0x1f05/0x2140 [ 416.355735][ T36] __lock_acquire+0xab9/0xd20 [ 416.355752][ T36] ? sixpack_write_wakeup+0x30/0x480 [ 416.355770][ T36] lock_acquire+0x120/0x360 [ 416.355785][ T36] ? sixpack_write_wakeup+0x30/0x480 [ 416.355804][ T36] ? ldsem_down_read_trylock+0x137/0x1a0 [ 416.355820][ T36] ? tty_ldisc_ref+0x1c/0x90 [ 416.355840][ T36] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 416.355859][ T36] _raw_read_lock+0x36/0x50 [ 416.355872][ T36] ? sixpack_write_wakeup+0x30/0x480 [ 416.355889][ T36] sixpack_write_wakeup+0x30/0x480 [ 416.355909][ T36] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 416.355926][ T36] tty_wakeup+0xbe/0x100 [ 416.355945][ T36] tty_port_default_wakeup+0xfb/0x170 [ 416.355960][ T36] serial8250_tx_chars+0x72e/0x970 [ 416.355989][ T36] __start_tx+0x33b/0x480 [ 416.356003][ T36] __uart_start+0x23f/0x460 [ 416.356024][ T36] uart_write+0xdc/0x130 [ 416.356046][ T36] sixpack_receive_buf+0x447/0x1450 [ 416.356072][ T36] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 416.356089][ T36] tty_ldisc_receive_buf+0x119/0x160 [ 416.356104][ T36] tty_port_default_receive_buf+0x6e/0xa0 [ 416.356120][ T36] flush_to_ldisc+0x24a/0x6e0 [ 416.356135][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 416.356155][ T36] process_scheduled_works+0xae1/0x17b0 [ 416.356181][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.356204][ T36] worker_thread+0x8a0/0xda0 [ 416.356222][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.356238][ T36] ? __kthread_parkme+0x7b/0x200 [ 416.356260][ T36] kthread+0x711/0x8a0 [ 416.356282][ T36] ? __pfx_worker_thread+0x10/0x10 [ 416.356299][ T36] ? __pfx_kthread+0x10/0x10 [ 416.356319][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.356332][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.356346][ T36] ? __pfx_kthread+0x10/0x10 [ 416.356366][ T36] ret_from_fork+0x4bc/0x870 [ 416.356383][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 416.356401][ T36] ? __switch_to_asm+0x39/0x70 [ 416.356416][ T36] ? __switch_to_asm+0x33/0x70 [ 416.356430][ T36] ? __pfx_kthread+0x10/0x10 [ 416.356450][ T36] ret_from_fork_asm+0x1a/0x30 [ 416.356471][ T36] [ 416.651298][ T53] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 416.746290][ T5950] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 416.916424][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 416.922933][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.933132][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.944033][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 416.953759][ T5950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 416.963539][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.976748][ T5931] vhci_hcd: vhci_device speed not set [ 416.983097][ T5950] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 416.992358][ T5950] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 417.000495][ T5950] usb 2-1: Manufacturer: syz [ 417.006500][ T5950] usb 2-1: config 0 descriptor?? [ 417.265675][ T5950] rc_core: IR keymap rc-hauppauge not found [ 417.271626][ T5950] Registered IR keymap rc-empty [ 417.276751][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.296282][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.316159][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 417.328960][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 417.342425][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.365634][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.385613][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.405603][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.425646][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.445656][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.465653][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.485553][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.506132][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.525573][ T5950] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 417.546758][ T5950] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 417.555951][ T5950] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 417.694206][ T5959] usb 2-1: USB disconnect, device number 45