last executing test programs: 7.625733046s ago: executing program 2 (id=1978): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28031, 0xffffffffffffffff, 0x1f15d000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000340)) 6.260389336s ago: executing program 2 (id=1989): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x844, &(0x7f0000000200)={0x11, 0x16, r1, 0x1, 0x4b}, 0x14) 4.62303719s ago: executing program 2 (id=2001): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xd, 0x10, "f21d64911c4132db21fee26903f96d36"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.640424467s ago: executing program 1 (id=2017): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2b780af2}]}]}], {0x14}}, 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.305943057s ago: executing program 1 (id=2022): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}}]}, 0x54}}, 0x0) 2.231327567s ago: executing program 2 (id=2023): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0x100007}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.084759624s ago: executing program 3 (id=2025): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40800, 0x0) getdents(r1, 0x0, 0x0) 2.083917122s ago: executing program 1 (id=2026): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='9\x00\x00', 0x3}], 0x1}, 0x0) 1.862951907s ago: executing program 4 (id=2028): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) read$FUSE(r1, 0x0, 0x0) 1.77990916s ago: executing program 1 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x34}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @local}, {{0xc00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8"}}}}, 0x44) 1.72002918s ago: executing program 4 (id=2031): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 1.500273763s ago: executing program 0 (id=2032): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x3}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) 1.499696223s ago: executing program 4 (id=2033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0xf6}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x65, 0x0, 0x0, 0x84, 0x0, @remote, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x5fe, 0x0, 0x1c}, {"60a665991d5d9e210dfc815c6ac6beb7220dd33dfb4176"}}}}}, 0x4d) 1.314843907s ago: executing program 1 (id=2034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16=r0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.314019382s ago: executing program 0 (id=2035): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 1.196136388s ago: executing program 4 (id=2036): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) 1.10657253s ago: executing program 3 (id=2037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.043672432s ago: executing program 1 (id=2038): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000780)=[{0x4, 0x800, 0x0, 0x0}, {0x3, 0x1000, 0x0, 0x0}], 0x2}) syz_usb_control_io$hid(r0, 0x0, 0x0) 856.182726ms ago: executing program 3 (id=2039): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 855.463683ms ago: executing program 0 (id=2040): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 670.845928ms ago: executing program 0 (id=2041): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000200)={0x10, 0x0, r3}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10, 0x0) 592.345607ms ago: executing program 3 (id=2042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x401}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 592.081007ms ago: executing program 4 (id=2043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x1c, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009b02"]) 497.518592ms ago: executing program 0 (id=2044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000910400000000000005"]) 392.626941ms ago: executing program 3 (id=2045): socket$netlink(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 382.039705ms ago: executing program 2 (id=2046): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)=""/86, 0x56}], 0x2}, 0x7f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4) 278.184025ms ago: executing program 4 (id=2047): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r2, 0x81, 0x30, 0xfffffffffffff10c, 0x100}, &(0x7f0000000180)=0x18) 151.60074ms ago: executing program 3 (id=2048): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) 17.856646ms ago: executing program 0 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x10a, 0x0, 0xef85}]}) 0s ago: executing program 2 (id=2050): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) kernel console output (not intermixed with test programs): 4.998778][ T979] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 155.019211][ T979] usb 5-1: config 0 has no interface number 0 [ 155.044661][ T979] usb 5-1: config 0 interface 160 has no altsetting 0 [ 155.070454][ T979] usb 5-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 155.080773][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.088783][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.089319][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.181136][ T979] usb 5-1: Product: syz [ 155.190865][ T979] usb 5-1: Manufacturer: syz [ 155.202448][ T5938] usb 1-1: USB disconnect, device number 4 [ 155.212210][ T5938] em28xx 1-1:0.0: Disconnecting em28xx [ 155.224597][ T979] usb 5-1: SerialNumber: syz [ 155.256757][ T979] usb 5-1: config 0 descriptor?? [ 155.269132][ T5938] em28xx 1-1:0.0: Freeing device [ 155.286339][ T979] usb-storage 5-1:0.160: USB Mass Storage device detected [ 155.299760][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 155.315187][ T5922] usb 2-1: USB disconnect, device number 8 [ 155.382774][ T5922] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 155.433856][ T5922] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 155.461814][ T5922] quatech2 2-1:0.51: device disconnected [ 155.533913][ T5938] usb 5-1: USB disconnect, device number 7 [ 156.671424][ T7322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.610'. [ 157.876136][ T7361] netlink: 'syz.2.628': attribute type 11 has an invalid length. [ 159.524597][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 159.708579][ T5922] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 159.740495][ T5922] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.809034][ T5922] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 159.833689][ T5922] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.865202][ T5922] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.885199][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.940126][ T5922] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.996579][ T5922] usb 5-1: invalid MIDI out EP 0 [ 160.331183][ T5922] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 160.447123][ T5922] usb 5-1: USB disconnect, device number 8 [ 160.986492][ T7460] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 161.784376][ T7487] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 162.268090][ T7501] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 162.288785][ T7501] syzkaller0: owner set to 0 [ 162.623610][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 162.633165][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 163.037896][ T30] audit: type=1326 audit(1754211365.021:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.060190][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.075905][ T5929] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.125390][ T30] audit: type=1326 audit(1754211365.021:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.158617][ T30] audit: type=1326 audit(1754211365.021:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.192314][ T30] audit: type=1326 audit(1754211365.021:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.215600][ T30] audit: type=1326 audit(1754211365.021:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.238387][ T30] audit: type=1326 audit(1754211365.021:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.262480][ T30] audit: type=1326 audit(1754211365.021:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.265308][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.315167][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 163.319086][ T30] audit: type=1326 audit(1754211365.021:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.326182][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.402334][ T5929] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 163.419606][ T5929] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 163.431057][ T30] audit: type=1326 audit(1754211365.021:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbf4178eb69 code=0x7ffc0000 [ 163.431116][ T30] audit: type=1326 audit(1754211365.021:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.1.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 163.493409][ T5929] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 163.511518][ T5929] usb 4-1: config 128 has no interface number 0 [ 163.520176][ T5929] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 163.540234][ T5929] usb 4-1: config 128 interface 127 has no altsetting 0 [ 163.552399][ T5929] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 163.567655][ T44] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 163.581214][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.602939][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.626324][ T44] usb 1-1: config 0 descriptor?? [ 163.631581][ T5929] usb 4-1: Product: syz [ 163.639241][ T44] cp210x 1-1:0.0: cp210x converter detected [ 163.645959][ T5929] usb 4-1: Manufacturer: syz [ 163.650920][ T5929] usb 4-1: SerialNumber: syz [ 163.708473][ T7523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.963173][ T5929] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.044369][ T44] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 164.095397][ T44] usb 1-1: cp210x converter now attached to ttyUSB0 [ 164.110298][ T5929] usb 4-1: USB disconnect, device number 10 [ 164.174705][ T5938] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.260268][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.275115][ T44] usb 1-1: USB disconnect, device number 5 [ 164.328910][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.364738][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 164.365825][ T44] cp210x 1-1:0.0: device disconnected [ 164.379646][ T5938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 164.438168][ T5938] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 164.455508][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 164.494204][ T5938] usb 2-1: Product: syz [ 164.502023][ T5938] usb 2-1: Manufacturer: syz [ 164.517177][ T5938] usb 2-1: SerialNumber: syz [ 164.532586][ T5938] usb 2-1: config 0 descriptor?? [ 164.538648][ T7544] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 164.684681][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.831418][ T44] usb 2-1: USB disconnect, device number 9 [ 164.858651][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 164.870144][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.916835][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.943343][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.981698][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.997006][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.035803][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.202832][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.714'. [ 165.300935][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 165.309985][ T10] usbtmc 3-1:16.0: can't read capabilities [ 165.345666][ T44] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.520350][ T44] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 165.540710][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.556823][ T10] usb 3-1: USB disconnect, device number 7 [ 165.582192][ T44] usb 1-1: Product: syz [ 165.590683][ T44] usb 1-1: Manufacturer: syz [ 165.617116][ T44] usb 1-1: SerialNumber: syz [ 165.625877][ T44] usb 1-1: config 0 descriptor?? [ 165.847796][ T44] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 165.912455][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 165.929916][ T7575] netlink: 39 bytes leftover after parsing attributes in process `syz.1.718'. [ 166.251182][ T44] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 166.463973][ T44] usb 1-1: USB disconnect, device number 6 [ 167.139561][ T5922] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 167.351226][ T5922] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.375220][ T5922] usb 2-1: config 0 has no interface number 0 [ 167.381889][ T5922] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 167.451841][ T5922] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.477091][ T5922] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.495937][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.563061][ T5922] usb 2-1: config 0 descriptor?? [ 167.617103][ T5922] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.814735][ T7601] iowarrior 2-1:0.1: Error -90 while submitting URB [ 167.857334][ T10] usb 2-1: USB disconnect, device number 10 [ 167.945814][ T7620] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 168.161496][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 168.174021][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 168.187974][ T7624] netlink: 58 bytes leftover after parsing attributes in process `syz.2.742'. [ 168.266071][ T5929] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.427391][ T5929] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 168.462255][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.501792][ T5929] usb 1-1: config 0 descriptor?? [ 168.563032][ T5929] gspca_main: spca508-2.14.0 probing 8086:0110 [ 168.759146][ T5929] gspca_spca508: reg_read err -32 [ 168.780807][ T5929] gspca_spca508: reg_read err -32 [ 169.002140][ T5929] gspca_spca508: reg_read err -71 [ 169.033581][ T5929] gspca_spca508: reg_read err -71 [ 169.045403][ T5929] gspca_spca508: reg write: error -71 [ 169.051008][ T5929] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 169.072890][ T5929] usb 1-1: USB disconnect, device number 7 [ 169.413498][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 169.984890][ T5936] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.083125][ T7664] netlink: 'syz.4.761': attribute type 3 has an invalid length. [ 170.098120][ T7664] netlink: 188 bytes leftover after parsing attributes in process `syz.4.761'. [ 170.151002][ T5936] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.162476][ T5938] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.177805][ T5936] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.188011][ T5936] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.197570][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.224912][ T7650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.251047][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.305524][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 170.345736][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.381719][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.407603][ T5938] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 170.427159][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.475404][ T5938] usb 3-1: config 0 descriptor?? [ 170.504902][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.541215][ T5929] usb 1-1: USB disconnect, device number 8 [ 170.545691][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 170.594174][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.639523][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.664307][ T10] usb 2-1: config 0 descriptor?? [ 170.682898][ T7663] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 170.704236][ T10] hub 2-1:0.0: USB hub found [ 170.930060][ T10] hub 2-1:0.0: 2 ports detected [ 171.026890][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.108797][ T5938] hid-led 0003:1D34:000A.0008: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 171.158666][ T10] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 171.188109][ T10] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 171.209322][ T5938] hid-led 0003:1D34:000A.0008: Dream Cheeky Webmail Notifier initialized [ 171.236176][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 171.255064][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.296644][ T10] usb 2-1: USB disconnect, device number 11 [ 171.348274][ T5929] usb 3-1: USB disconnect, device number 8 [ 171.417257][ T7689] fido_id[7689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 171.672632][ T7700] tap0: tun_chr_ioctl cmd 1074025673 [ 172.060731][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 172.102844][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 173.036181][ T7757] loop6: detected capacity change from 0 to 8388608 [ 173.065870][ T7757] buffer_io_error: 15 callbacks suppressed [ 173.065892][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.145893][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.157531][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.170891][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.214074][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.249840][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.282112][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.310446][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.360953][ T7757] ldm_validate_partition_table(): Disk read failed. [ 173.387824][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.431184][ T7757] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.466381][ T7757] Dev loop6: unable to read RDB block 0 [ 173.484053][ T7757] loop6: unable to read partition table [ 173.510146][ T7757] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 174.078850][ T7785] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 174.615106][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 174.829130][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.854557][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.884578][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.901707][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 174.934517][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.979739][ T10] usb 2-1: config 0 descriptor?? [ 175.405700][ T5922] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 175.568860][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 175.584003][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.606876][ T5922] usb 5-1: config 0 descriptor?? [ 175.626852][ T5922] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 175.795461][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.958603][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.001633][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.043896][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 176.066969][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.095364][ T24] usb 4-1: config 0 descriptor?? [ 176.141090][ T10] usb 2-1: USB disconnect, device number 12 [ 176.454326][ T5922] usb 5-1: USB disconnect, device number 9 [ 176.543147][ T24] sony 0003:054C:024B.000A: unknown main item tag 0x0 [ 176.573032][ T24] sony 0003:054C:024B.000A: unknown main item tag 0x0 [ 176.602556][ T24] sony 0003:054C:024B.000A: unexpected long global item [ 176.642802][ T24] sony 0003:054C:024B.000A: parse failed [ 176.656547][ T24] sony 0003:054C:024B.000A: probe with driver sony failed with error -22 [ 176.771104][ T5922] usb 4-1: USB disconnect, device number 11 [ 177.199044][ T7858] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 177.845140][ T5938] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 177.885686][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 178.004625][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 178.017496][ T5938] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 178.036809][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.062890][ T5938] usb 5-1: config 0 descriptor?? [ 178.076416][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 178.086822][ T5938] as10x_usb: device has been detected [ 178.097736][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 178.107452][ T5938] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 178.134515][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 178.172731][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.205297][ T5938] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 178.221953][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.254714][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.273221][ T24] usb 1-1: SerialNumber: syz [ 178.298814][ T7863] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 178.400624][ T5938] as10x_usb: error during firmware upload part1 [ 178.441862][ T5938] Registered device nBox DVB-T Dongle [ 178.486832][ T5938] usb 5-1: USB disconnect, device number 10 [ 178.572582][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 178.597177][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 178.662927][ T24] usb 1-1: USB disconnect, device number 9 [ 178.673986][ T5938] Unregistered device nBox DVB-T Dongle [ 178.698358][ T5938] as10x_usb: device has been disconnected [ 179.069588][ T7900] netlink: 165 bytes leftover after parsing attributes in process `syz.4.864'. [ 179.349323][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 179.349344][ T30] audit: type=1326 audit(1754211381.331:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.0.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1660b8eb69 code=0x0 [ 182.795746][ T8003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.862333][ T8005] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 182.901540][ T8005] macsec1: entered promiscuous mode [ 182.927726][ T8005] macsec1: entered allmulticast mode [ 182.949452][ T8005] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 183.899859][ T8036] netlink: 'syz.3.924': attribute type 4 has an invalid length. [ 184.624875][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.795430][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 184.811107][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 184.822237][ T10] usb 4-1: config 0 has no interface number 0 [ 184.836986][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 184.849825][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.865348][ T10] usb 4-1: Product: syz [ 184.872240][ T10] usb 4-1: Manufacturer: syz [ 184.891694][ T10] usb 4-1: SerialNumber: syz [ 184.916168][ T10] usb 4-1: config 0 descriptor?? [ 184.942596][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 185.177850][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 185.265184][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 185.595653][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 185.608101][ T5938] usb 4-1: USB disconnect, device number 12 [ 185.653573][ T5938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 185.731350][ T5938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 185.753914][ T5938] quatech2 4-1:0.51: device disconnected [ 186.076852][ T8086] syz.1.946 uses obsolete (PF_INET,SOCK_PACKET) [ 186.186875][ T8088] capability: warning: `syz.0.937' uses deprecated v2 capabilities in a way that may be insecure [ 186.396497][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 186.416624][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 186.475482][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.950'. [ 186.534729][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'. [ 187.561320][ T8127] pimreg: entered allmulticast mode [ 187.619342][ T8126] pimreg: left allmulticast mode [ 187.724705][ T5938] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.924619][ T5938] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.932396][ T5938] usb 1-1: no configurations [ 187.982807][ T5938] usb 1-1: can't read configurations, error -22 [ 188.482085][ T8156] sctp: [Deprecated]: syz.4.975 (pid 8156) Use of int in maxseg socket option. [ 188.482085][ T8156] Use struct sctp_assoc_value instead [ 189.033398][ T8169] gtp0: entered promiscuous mode [ 189.042967][ T8169] gtp0: entered allmulticast mode [ 189.167931][ T8171] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 189.195832][ T8171] syzkaller1: persist disabled [ 189.529841][ T8182] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 189.550141][ T8182] syzkaller1: linktype set to 32 [ 192.490525][ T30] audit: type=1326 audit(1754211394.471:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.1.1022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf4178eb69 code=0x0 [ 192.866911][ T8282] bridge0: entered promiscuous mode [ 193.372923][ T8297] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.1035'. [ 193.745248][ T5922] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 193.914168][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 193.924654][ T5922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 193.949640][ T5922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 193.974349][ T5922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.978765][ T979] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 194.000555][ T5922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.031964][ T5922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.055979][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.184826][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 194.205686][ T979] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.229144][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.259168][ T979] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.268631][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.278982][ T979] usb 1-1: Product: syz [ 194.288848][ T979] usb 1-1: Manufacturer: syz [ 194.293510][ T979] usb 1-1: SerialNumber: syz [ 194.303267][ T5922] usb 3-1: GET_CAPABILITIES returned 0 [ 194.311535][ T5922] usbtmc 3-1:16.0: can't read capabilities [ 194.349135][ T979] usb 1-1: config 0 descriptor?? [ 194.392664][ T979] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.430849][ T979] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 194.522728][ T5922] usb 3-1: USB disconnect, device number 9 [ 194.618076][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1049'. [ 194.654700][ T5938] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.814657][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 194.823762][ T5938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 194.835830][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 194.846541][ T5938] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.856891][ T5938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.882119][ T5938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.892045][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.979126][ T979] em28xx 1-1:0.0: unknown em28xx chip ID (175) [ 195.125521][ T5938] usb 4-1: GET_CAPABILITIES returned 0 [ 195.147980][ T5938] usbtmc 4-1:16.0: can't read capabilities [ 195.189968][ T979] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 195.211672][ T979] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 195.222645][ T979] em28xx 1-1:0.0: No AC97 audio processor [ 195.242980][ T979] usb 1-1: USB disconnect, device number 12 [ 195.265677][ T979] em28xx 1-1:0.0: Disconnecting em28xx [ 195.287035][ T979] em28xx 1-1:0.0: Freeing device [ 195.335178][ T5936] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 195.369193][ T5922] usb 4-1: USB disconnect, device number 13 [ 195.489859][ T8350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.494711][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 195.513893][ T5936] usb 2-1: config 0 has no interfaces? [ 195.524006][ T5936] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.547809][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.587530][ T5936] usb 2-1: config 0 descriptor?? [ 195.863774][ T5936] usb 2-1: USB disconnect, device number 13 [ 196.055449][ T8371] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 196.495071][ T5936] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 196.514575][ T979] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 196.665543][ T24] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 196.744576][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 196.751578][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 196.765661][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 196.777494][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.788129][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.799731][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.810877][ T979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.821895][ T979] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.835823][ T5938] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 196.844677][ T5936] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 196.855082][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.863367][ T5936] usb 4-1: Product: syz [ 196.870701][ T5936] usb 4-1: Manufacturer: syz [ 196.878220][ T5936] usb 4-1: SerialNumber: syz [ 196.883408][ T979] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.893280][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 196.894569][ T979] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.907546][ T24] usb 5-1: config 0 has no interface number 0 [ 196.912336][ T5936] usb 4-1: config 0 descriptor?? [ 196.929603][ T5936] hub 4-1:0.0: bad descriptor, ignoring hub [ 196.936083][ T979] usb 1-1: Manufacturer: syz [ 196.937975][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.945497][ T5936] hub 4-1:0.0: probe with driver hub failed with error -5 [ 196.960279][ T979] usb 1-1: config 0 descriptor?? [ 196.972398][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 196.992621][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 196.999453][ T5936] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 197.016695][ T5938] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 197.026713][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 197.027005][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.064039][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 197.092376][ T5938] usb 3-1: config 0 descriptor?? [ 197.094159][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.113931][ T5938] gspca_main: spca508-2.14.0 probing 8086:0110 [ 197.142841][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.190710][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.249802][ T24] usb 5-1: config 0 descriptor?? [ 197.286016][ T8386] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 197.293697][ T8386] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 197.318715][ T5938] gspca_spca508: reg_read err -71 [ 197.346496][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 197.356356][ T5938] gspca_spca508: reg_read err -71 [ 197.369548][ T5938] gspca_spca508: reg_read err -71 [ 197.383886][ T5938] gspca_spca508: reg_read err -71 [ 197.394670][ T979] rc_core: IR keymap rc-hauppauge not found [ 197.407118][ T5938] gspca_spca508: reg_read err -71 [ 197.412350][ T979] Registered IR keymap rc-empty [ 197.418961][ T5938] gspca_spca508: reg write: error -71 [ 197.429177][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.436743][ T5938] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 197.447820][ T5938] usb 3-1: USB disconnect, device number 10 [ 197.464608][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.485890][ T8379] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 197.498523][ T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 197.515306][ T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 197.548527][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.573416][ T8386] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 197.574728][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.587065][ T24] usb 5-1: USB disconnect, device number 11 [ 197.607973][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 197.614820][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.634905][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.665552][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.685093][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.704762][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.724711][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.744970][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.777794][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.804732][ T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 197.843812][ T979] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 197.871782][ T979] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.906684][ T979] usb 1-1: USB disconnect, device number 13 [ 198.405690][ T5922] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.444616][ T979] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.553774][ T8426] MPI: mpi too large (16392 bits) [ 198.586003][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 198.606988][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 198.617570][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.626561][ T979] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.650119][ T979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.652492][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.680887][ T979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.710602][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.726368][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.742406][ T979] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.744976][ T5922] usb 2-1: Product: syz [ 198.784761][ T979] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.791727][ T5922] usb 2-1: Manufacturer: syz [ 198.818110][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.825165][ T5922] usb 2-1: SerialNumber: syz [ 199.080285][ T979] usb 3-1: GET_CAPABILITIES returned 0 [ 199.110549][ T979] usbtmc 3-1:16.0: can't read capabilities [ 199.281167][ T5922] usb 2-1: 0:2 : does not exist [ 199.299745][ T5938] usb 3-1: USB disconnect, device number 11 [ 199.577672][ T5937] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 199.589839][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.596329][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.625428][ T5937] usb 4-1: device reset changed ep0 maxpacket size! [ 199.711212][ T5922] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 199.751718][ T24] usb 4-1: USB disconnect, device number 14 [ 199.861018][ T5922] usb 2-1: USB disconnect, device number 14 [ 199.901665][ T6067] udevd[6067]: setting mode of /dev/bus/usb/002/014 to 020664 failed: No such file or directory [ 199.969419][ T6067] udevd[6067]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 200.056118][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.111565][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.250071][ T24] usb 4-1: config 0 has no interfaces? [ 200.280939][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 200.315545][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.346737][ T24] usb 4-1: Product: syz [ 200.351085][ T24] usb 4-1: Manufacturer: syz [ 200.389155][ T24] usb 4-1: SerialNumber: syz [ 200.416279][ T24] usb 4-1: config 0 descriptor?? [ 200.681315][ T5929] usb 4-1: USB disconnect, device number 15 [ 203.143054][ T8533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1141'. [ 204.627049][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'. [ 204.700551][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'. [ 205.355520][ T5922] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 205.528194][ T5922] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 205.546203][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.576035][ T5922] usb 5-1: config 0 descriptor?? [ 205.600289][ T5922] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 205.732539][ T8604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.742742][ T5929] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.939286][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 205.957970][ T5929] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.981704][ T5929] usb 4-1: config 0 has no interface number 0 [ 205.990886][ T5929] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.003419][ T5929] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.022490][ T5929] usb 4-1: config 0 interface 1 has no altsetting 0 [ 206.031413][ T5929] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 206.041738][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.103278][ T5929] usb 4-1: config 0 descriptor?? [ 206.222230][ T5922] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 206.271383][ T5922] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 206.328736][ T8620] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1180'. [ 206.448907][ T5938] usb 5-1: USB disconnect, device number 12 [ 206.488582][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 206.550439][ T5929] chicony 0003:04F2:0418.000B: item fetching failed at offset 0/4 [ 206.583871][ T5929] chicony 0003:04F2:0418.000B: Chicony hid parse failed: -22 [ 206.610271][ T5929] chicony 0003:04F2:0418.000B: probe with driver chicony failed with error -22 [ 206.757731][ T5929] usb 4-1: USB disconnect, device number 16 [ 207.126458][ T5922] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 207.285330][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 207.300642][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 207.337569][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.407634][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400 [ 207.466994][ T5922] pvrusb2: ********** [ 207.471038][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 207.512705][ T5922] pvrusb2: Important functionality might not be entirely working. [ 207.568890][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 207.615438][ T5922] pvrusb2: ********** [ 207.628383][ T2344] pvrusb2: Invalid write control endpoint [ 207.837690][ T8636] pvrusb2: Invalid write control endpoint [ 207.863469][ T5938] usb 2-1: USB disconnect, device number 15 [ 207.959216][ T2344] pvrusb2: Invalid write control endpoint [ 208.014538][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 208.062240][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 208.089096][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 208.114362][ T2344] pvrusb2: Device being rendered inoperable [ 208.171069][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 208.189738][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 208.223939][ T2344] pvrusb2: Attached sub-driver cx25840 [ 208.245661][ T5929] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 208.256106][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 208.279518][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 208.428287][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.459276][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.498936][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.544384][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.553776][ T5929] usb 4-1: Product: syz [ 208.594631][ T5929] usb 4-1: Manufacturer: syz [ 208.605688][ T5929] usb 4-1: SerialNumber: syz [ 208.834048][ T5929] usb 4-1: 0:2 : does not exist [ 208.883350][ T5929] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 208.942230][ T5929] usb 4-1: USB disconnect, device number 17 [ 209.021088][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.111983][ T8693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.082838][ T8727] capability: warning: `syz.4.1228' uses 32-bit capabilities (legacy support in use) [ 210.935191][ T8751] ipvlan3: entered promiscuous mode [ 210.958237][ T8751] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 211.016540][ T8751] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.088462][ T5922] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 211.170351][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 211.247056][ T5922] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 211.268717][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.294907][ T5938] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 211.298387][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 211.335202][ T5980] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.349591][ T5922] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 211.376139][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.392687][ T5922] usb 4-1: config 0 descriptor?? [ 211.475482][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 211.487914][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.514677][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.535515][ T5980] usb 3-1: Using ep0 maxpacket: 8 [ 211.544579][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.554266][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.562815][ T5980] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.574545][ T5938] usb 1-1: config 0 descriptor?? [ 211.593593][ T5980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.608294][ T5938] hub 1-1:0.0: USB hub found [ 211.626549][ T5980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.645335][ T5980] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.673339][ T5980] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.691653][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.812785][ T5938] hub 1-1:0.0: 1 port detected [ 211.839638][ T5922] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 211.851647][ T5922] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 211.875696][ T5922] holtek_kbd 0003:04D9:A055.000C: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 211.914682][ T979] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 211.924086][ T5980] usb 3-1: GET_CAPABILITIES returned 0 [ 211.935300][ T5980] usbtmc 3-1:16.0: can't read capabilities [ 212.024221][ T5938] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 212.035772][ T5938] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 212.062162][ T5980] usb 4-1: USB disconnect, device number 18 [ 212.062857][ T5938] usbhid 1-1:0.0: can't add hid device: -71 [ 212.139812][ T5922] usb 3-1: USB disconnect, device number 12 [ 212.195347][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 212.226376][ T979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.236689][ T5938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.255435][ T979] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 212.266983][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.284546][ T979] usb 2-1: Product: syz [ 212.288772][ T979] usb 2-1: Manufacturer: syz [ 212.295597][ T5938] usb 1-1: USB disconnect, device number 14 [ 212.304542][ T979] usb 2-1: SerialNumber: syz [ 212.328733][ T979] usb 2-1: config 0 descriptor?? [ 212.762998][ T979] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 212.950100][ T8791] netlink: 'syz.3.1258': attribute type 29 has an invalid length. [ 213.105664][ T5922] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.167954][ T5938] usb 2-1: USB disconnect, device number 16 [ 213.184571][ T979] IPVS: starting estimator thread 0... [ 213.278227][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 213.284663][ T8797] IPVS: using max 25 ests per chain, 60000 per kthread [ 213.312283][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 213.345675][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 213.381631][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.459024][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 213.483123][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 213.525371][ T5922] usb 5-1: Product: syz [ 213.529650][ T5922] usb 5-1: Manufacturer: syz [ 213.566582][ T5922] usb 5-1: SerialNumber: syz [ 213.643779][ T5922] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input14 [ 213.910252][ T5936] usb 5-1: USB disconnect, device number 13 [ 213.916569][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 213.978486][ T8821] netlink: 'syz.1.1270': attribute type 4 has an invalid length. [ 214.024647][ T8821] netlink: 'syz.1.1270': attribute type 4 has an invalid length. [ 214.032439][ T8821] netlink: 'syz.1.1270': attribute type 2 has an invalid length. [ 214.102582][ T8821] netlink: 'syz.1.1270': attribute type 2 has an invalid length. [ 214.125652][ T5936] appletouch 5-1:1.0: input: appletouch disconnected [ 214.143718][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 214.445810][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 214.605504][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 214.828085][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 214.846799][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 214.895674][ T24] usb 4-1: config 220 has no interface number 2 [ 214.932682][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 215.009204][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 215.022005][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 215.030820][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 215.041972][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 215.055225][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.063278][ T24] usb 4-1: Product: syz [ 215.082458][ T24] usb 4-1: Manufacturer: syz [ 215.094944][ T24] usb 4-1: SerialNumber: syz [ 215.360024][ T24] usb 4-1: selecting invalid altsetting 0 [ 215.423295][ T24] usb 4-1: selecting invalid altsetting 0 [ 215.432613][ T24] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 215.440662][ T24] usb 4-1: No valid video chain found. [ 215.443732][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.457168][ T24] usb 4-1: selecting invalid altsetting 0 [ 215.463113][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 215.515896][ T24] usb 4-1: USB disconnect, device number 19 [ 215.546563][ T8867] raw_sendmsg: syz.4.1287 forgot to set AF_INET. Fix it! [ 216.069435][ T8883] input: syz0 as /devices/virtual/input/input15 [ 216.767848][ T8907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1301'. [ 217.026489][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 217.034576][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 217.042214][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 217.048854][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 217.055260][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 218.846582][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 219.409429][ T8980] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1332' resets device [ 219.816391][ T8988] team_slave_0: entered promiscuous mode [ 219.822374][ T8988] team_slave_1: entered promiscuous mode [ 219.825535][ T8997] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 219.876562][ T8988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.996268][ T9003] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 220.003195][ T9003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.048385][ T9003] vhci_hcd vhci_hcd.0: Device attached [ 220.147666][ T9004] vhci_hcd: connection closed [ 220.207080][ T12] vhci_hcd: stop threads [ 220.229201][ T12] vhci_hcd: release socket [ 220.245923][ T5922] vhci_hcd: vhci_device speed not set [ 220.265229][ T12] vhci_hcd: disconnect device [ 220.455271][ T9017] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 220.508694][ T5980] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 220.685881][ T9023] fuse: Invalid gid '00000000000000000003' [ 220.715193][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 220.726623][ T5980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.785575][ T5980] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 220.830029][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.870918][ T5980] usb 1-1: Product: syz [ 220.888645][ T5980] usb 1-1: Manufacturer: syz [ 220.906990][ T5980] usb 1-1: SerialNumber: syz [ 220.929606][ T5980] usb 1-1: config 0 descriptor?? [ 221.140896][ T9036] syz.4.1356 (9036) used greatest stack depth: 19128 bytes left [ 221.155182][ T5938] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 221.314582][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 221.332679][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.358255][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.377189][ T5980] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 221.384494][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.417576][ T5938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.438736][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.481577][ T5938] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 221.494236][ T5938] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 221.502980][ T5938] usb 2-1: Manufacturer: syz [ 221.520594][ T5938] usb 2-1: config 0 descriptor?? [ 221.578638][ T5980] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 221.615141][ T5980] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 221.808622][ T979] usb 1-1: USB disconnect, device number 15 [ 222.114560][ T5938] rc_core: IR keymap rc-hauppauge not found [ 222.132449][ T5938] Registered IR keymap rc-empty [ 222.150974][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.194684][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.237551][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 222.289911][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 222.348823][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.404617][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.454904][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.494679][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.547863][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.614698][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.664583][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.714636][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.754098][ T9086] sock: sock_set_timeout: `syz.0.1378' (pid 9086) tries to set negative timeout [ 222.763659][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.794992][ T5938] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 222.837612][ T5938] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.864935][ T5938] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.915590][ T24] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 222.924913][ T5938] usb 2-1: USB disconnect, device number 17 [ 222.983528][ T9092] input: syz0 as /devices/virtual/input/input17 [ 223.109370][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.149069][ T24] usb 3-1: config 0 has no interface number 0 [ 223.175760][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 223.217150][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 223.258154][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.303815][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.354041][ T24] usb 3-1: config 0 descriptor?? [ 223.393606][ T9082] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.454027][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 223.704283][ T5980] usb 3-1: USB disconnect, device number 13 [ 223.704349][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 224.220785][ T9127] netlink: 'syz.4.1397': attribute type 9 has an invalid length. [ 224.232994][ T9127] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.1397'. [ 225.085139][ T5922] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 225.172207][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 225.275527][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 225.297920][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.320554][ T5922] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 225.365426][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.407283][ T5922] usb 3-1: config 0 descriptor?? [ 225.454660][ T979] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 225.617017][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 225.631301][ T979] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 225.647962][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.705708][ T979] pvrusb2: Hardware description: Terratec Grabster AV400 [ 225.730945][ T979] pvrusb2: ********** [ 225.738292][ T979] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 225.777785][ T979] pvrusb2: Important functionality might not be entirely working. [ 225.793664][ T979] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 225.818394][ T979] pvrusb2: ********** [ 225.858800][ T5922] wacom 0003:056A:00BA.000D: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 225.890806][ T5922] wacom 0003:056A:00BA.000D: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.2-1/input0 [ 225.918768][ T2344] pvrusb2: Invalid write control endpoint [ 225.949105][ T5922] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BA.000D/input/input18 [ 226.018332][ T9180] loop6: detected capacity change from 0 to 524288000 [ 226.072878][ T5922] usb 3-1: USB disconnect, device number 14 [ 226.115084][ T9182] support for the xor transformation has been removed. [ 226.162125][ T9179] fido_id[9179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 226.188241][ T9158] pvrusb2: Invalid write control endpoint [ 226.201898][ T5980] usb 2-1: USB disconnect, device number 18 [ 226.263728][ T2344] pvrusb2: Invalid write control endpoint [ 226.285504][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 226.345950][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 226.354148][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 226.400803][ T2344] pvrusb2: Device being rendered inoperable [ 226.426006][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 226.455421][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 226.490605][ T2344] pvrusb2: Attached sub-driver cx25840 [ 226.514504][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 226.538403][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 228.374948][ T5938] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 228.393659][ T30] audit: type=1326 audit(1754211430.371:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.3.1454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9ca38eb69 code=0x0 [ 228.540191][ T5938] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 228.551605][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.567030][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.581987][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.599869][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.631141][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.662996][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.671913][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.692773][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.718131][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.736053][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.747495][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.774911][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.783230][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.794797][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.827923][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.846045][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.855744][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.877801][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.895975][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.912575][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 228.934749][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.950985][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 228.983089][ T5938] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.005704][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.020502][ T5938] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 229.034580][ T5938] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 229.053508][ T5938] usb 5-1: Product: syz [ 229.063674][ T5938] usb 5-1: Manufacturer: syz [ 229.073832][ T5938] usb 5-1: SerialNumber: syz [ 229.085200][ T5938] usb 5-1: config 0 descriptor?? [ 229.111234][ T5938] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 229.432367][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 229.433016][ T5980] usb 5-1: USB disconnect, device number 14 [ 229.489573][ T5980] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 230.195116][ T5938] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 230.354577][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 230.372558][ T5938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.396624][ T5938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.427628][ T5938] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.447472][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.487732][ T5938] usb 3-1: Product: syz [ 230.491966][ T5938] usb 3-1: Manufacturer: syz [ 230.529085][ T5938] usb 3-1: SerialNumber: syz [ 230.605392][ T5980] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 230.784747][ T5980] usb 5-1: Using ep0 maxpacket: 16 [ 230.825923][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 230.863162][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.902714][ T5980] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 230.915785][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.951830][ T5980] usb 5-1: Product: syz [ 230.969713][ T5980] usb 5-1: Manufacturer: syz [ 230.981792][ T5980] usb 5-1: SerialNumber: syz [ 230.997381][ T5938] usb 3-1: 0:2 : does not exist [ 231.026868][ T5980] usb 5-1: config 0 descriptor?? [ 231.051065][ T5980] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.077413][ T5980] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 231.405731][ T5938] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 231.489124][ T5938] usb 3-1: USB disconnect, device number 15 [ 231.613018][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.672514][ T5980] em28xx 5-1:0.0: chip ID is em2860 [ 231.879806][ T5980] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 231.890149][ T5980] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 231.898249][ T5980] em28xx 5-1:0.0: No AC97 audio processor [ 231.912417][ T5980] usb 5-1: USB disconnect, device number 15 [ 231.929067][ T5980] em28xx 5-1:0.0: Disconnecting em28xx [ 231.945450][ T5980] em28xx 5-1:0.0: Freeing device [ 231.997118][ T5938] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 232.006705][ T9331] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 232.017984][ T9331] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 232.176400][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 232.184328][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.196808][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 232.209516][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 232.221206][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 232.231683][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.255240][ T5938] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 232.277879][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 232.290302][ T5938] usb 4-1: Product: syz [ 232.304223][ T5938] usb 4-1: Manufacturer: syz [ 232.309791][ T5938] usb 4-1: SerialNumber: syz [ 232.321430][ T5938] usb 4-1: config 0 descriptor?? [ 232.524702][ T5980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 232.546981][ T5938] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 232.574673][ T5938] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 232.699328][ T5980] usb 3-1: Using ep0 maxpacket: 16 [ 232.720347][ T5980] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 232.747871][ T5980] usb 3-1: config 0 has no interface number 0 [ 232.748025][ T5938] radio-si470x 4-1:0.0: software version 253, hardware version 55 [ 232.777240][ T5980] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.794516][ T5938] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 232.808552][ T5980] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 232.810875][ T5980] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 232.900428][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 232.949832][ T5980] usb 3-1: Product: syz [ 232.955493][ T5938] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 232.972876][ T5980] usb 3-1: SerialNumber: syz [ 232.974387][ T5938] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 233.000118][ T5938] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 233.021108][ T5938] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 233.079892][ T5980] usb 3-1: config 0 descriptor?? [ 233.091858][ T5938] usb 4-1: USB disconnect, device number 20 [ 233.097471][ T5980] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 233.170540][ T5980] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input21 [ 233.399262][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 233.400475][ T979] usb 3-1: USB disconnect, device number 16 [ 233.406542][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 233.541042][ T979] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 233.605344][ T9361] netem: change failed [ 233.659836][ T9364] bridge0: entered allmulticast mode [ 233.675983][ T9364] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 233.805844][ T5980] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 233.975598][ T5980] usb 2-1: Using ep0 maxpacket: 32 [ 234.007196][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.055149][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.103994][ T5980] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.140137][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.189567][ T5980] usb 2-1: config 0 descriptor?? [ 234.238601][ T5980] hub 2-1:0.0: USB hub found [ 234.446865][ T5980] hub 2-1:0.0: 1 port detected [ 234.726882][ T9398] veth0: entered promiscuous mode [ 234.811781][ T9398] veth0: left promiscuous mode [ 234.867481][ T5980] usb 2-1: USB disconnect, device number 19 [ 235.864011][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 236.056961][ T979] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 236.224858][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 236.240697][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.263207][ T979] usb 5-1: no configurations [ 236.269376][ T979] usb 5-1: can't read configurations, error -22 [ 236.325555][ T5922] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.485721][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 236.501555][ T5922] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 236.512948][ T5922] usb 1-1: config 0 has no interface number 0 [ 236.528592][ T5922] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 236.543421][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.559563][ T5922] usb 1-1: Product: syz [ 236.564004][ T5922] usb 1-1: Manufacturer: syz [ 236.578994][ T5922] usb 1-1: SerialNumber: syz [ 236.602815][ T5922] usb 1-1: config 0 descriptor?? [ 236.612833][ T5922] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 236.835500][ T5922] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 236.876055][ T5922] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 236.934664][ T5938] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 237.115944][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 237.132702][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.163849][ T5938] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 237.207357][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.253853][ T5938] usb 3-1: config 0 descriptor?? [ 237.262522][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 237.276339][ T5922] usb 1-1: USB disconnect, device number 16 [ 237.309704][ T5922] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 237.372378][ T5922] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 237.417838][ T5922] quatech2 1-1:0.51: device disconnected [ 237.500680][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 237.705327][ T5938] kye 0003:0458:5016.000E: control desc unexpectedly large [ 237.756001][ T5938] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000E/input/input22 [ 237.889724][ T5938] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000E/input/input23 [ 238.070599][ T5938] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 238.125532][ T5922] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 238.134752][ T5938] usb 3-1: USB disconnect, device number 17 [ 238.293784][ T9510] fido_id[9510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 238.368768][ T5922] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 238.414464][ T5922] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 238.469240][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.561051][ T5922] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 238.571296][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.595245][ T5922] usb 5-1: Product: syz [ 238.599498][ T5922] usb 5-1: Manufacturer: syz [ 238.631274][ T5922] usb 5-1: SerialNumber: syz [ 238.664786][ T5182] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 238.679040][ T5182] CPU: 1 UID: 0 PID: 5182 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 238.679076][ T5182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.679092][ T5182] Workqueue: hci2 hci_rx_work [ 238.679152][ T5182] Call Trace: [ 238.679162][ T5182] [ 238.679174][ T5182] dump_stack_lvl+0x189/0x250 [ 238.679210][ T5182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.679237][ T5182] ? __pfx__printk+0x10/0x10 [ 238.679275][ T5182] ? kernfs_path_from_node+0x250/0x290 [ 238.679298][ T5182] ? kernfs_path_from_node+0x2f/0x290 [ 238.679328][ T5182] sysfs_create_dir_ns+0x259/0x280 [ 238.679355][ T5182] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.679381][ T5182] ? do_raw_spin_unlock+0x122/0x240 [ 238.679414][ T5182] kobject_add_internal+0x59f/0xb40 [ 238.679450][ T5182] kobject_add+0x155/0x220 [ 238.679480][ T5182] ? __pfx_kobject_add+0x10/0x10 [ 238.679505][ T5182] ? _raw_spin_unlock+0x28/0x50 [ 238.679543][ T5182] ? get_device_parent+0x366/0x3a0 [ 238.679577][ T5182] device_add+0x408/0xb50 [ 238.679610][ T5182] hci_conn_add_sysfs+0xd5/0x1e0 [ 238.679643][ T5182] le_conn_complete_evt+0xc3a/0x1220 [ 238.679681][ T5182] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 238.679706][ T5182] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 238.679737][ T5182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 238.679758][ T5182] ? skb_pull_data+0xfb/0x200 [ 238.679795][ T5182] hci_le_enh_conn_complete_evt+0x189/0x470 [ 238.679833][ T5182] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 238.679875][ T5182] hci_event_packet+0x78f/0x1200 [ 238.679909][ T5182] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 238.679947][ T5182] ? __pfx_hci_event_packet+0x10/0x10 [ 238.679980][ T5182] ? kcov_remote_start+0x4d3/0x7f0 [ 238.680009][ T5182] ? warn_bogus_irq_restore+0x20/0x40 [ 238.680034][ T5182] ? hci_send_to_monitor+0xe2/0x570 [ 238.680061][ T5182] hci_rx_work+0x46a/0xe80 [ 238.680102][ T5182] ? process_scheduled_works+0x9ef/0x17b0 [ 238.680139][ T5182] process_scheduled_works+0xade/0x17b0 [ 238.680217][ T5182] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.680273][ T5182] worker_thread+0x8a0/0xda0 [ 238.680299][ T5182] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.680342][ T5182] ? __kthread_parkme+0x7b/0x200 [ 238.680378][ T5182] kthread+0x711/0x8a0 [ 238.680408][ T5182] ? __pfx_worker_thread+0x10/0x10 [ 238.680429][ T5182] ? __pfx_kthread+0x10/0x10 [ 238.680459][ T5182] ? _raw_spin_unlock_irq+0x23/0x50 [ 238.680491][ T5182] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.680509][ T5182] ? __pfx_kthread+0x10/0x10 [ 238.680537][ T5182] ret_from_fork+0x3f9/0x770 [ 238.680563][ T5182] ? __pfx_ret_from_fork+0x10/0x10 [ 238.680593][ T5182] ? __switch_to_asm+0x39/0x70 [ 238.680620][ T5182] ? __switch_to_asm+0x33/0x70 [ 238.680647][ T5182] ? __pfx_kthread+0x10/0x10 [ 238.680675][ T5182] ret_from_fork_asm+0x1a/0x30 [ 238.680724][ T5182] [ 238.680759][ T5182] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 239.002015][ T5182] Bluetooth: hci2: failed to register connection device [ 239.054100][ T5922] usb 5-1: config 0 descriptor?? [ 239.063322][ T5922] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 239.082491][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 239.129443][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 239.164100][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 239.182669][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 239.212004][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 239.233381][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 239.260058][ T5922] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 239.301846][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 239.340902][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 239.364046][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 239.393237][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 239.411966][ T5922] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 239.442670][ T5922] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 239.491299][ T5922] usb 5-1: USB disconnect, device number 18 [ 239.542624][ T5922] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 239.599474][ T5922] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 239.629860][ T5922] keyspan 5-1:0.0: device disconnected [ 239.855282][ T5929] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 240.033611][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.081884][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.135593][ T5929] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 240.186619][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.246020][ T5929] usb 4-1: config 0 descriptor?? [ 240.414797][ T5952] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 240.598046][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.614475][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.632387][ T5952] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 240.690589][ T5929] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 240.694382][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.729247][ T5952] usb 3-1: config 0 descriptor?? [ 240.755452][ T5929] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected [ 240.806421][ T5929] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 240.883082][ T5929] usb 4-1: USB disconnect, device number 21 [ 240.944142][ T5929] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected [ 241.033610][ T9575] fido_id[9575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 241.183525][ T5952] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 241.213869][ T5952] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 241.230081][ T5952] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 241.256364][ T5922] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 241.259672][ T5952] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 241.290058][ T5952] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 241.311159][ T5952] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 241.403284][ T5952] playstation 0003:054C:0DF2.0011: Invalid reportID received, expected 9 got 169 [ 241.418885][ T5922] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 241.441112][ T5952] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -22 [ 241.443722][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.464688][ T5952] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 241.483545][ T5952] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 241.516117][ T5952] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 241.543956][ T5922] usb 1-1: config 0 descriptor?? [ 241.618881][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 241.662424][ T5952] usb 3-1: USB disconnect, device number 18 [ 241.793090][ T5922] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 241.955530][ T9602] netlink: 'syz.4.1611': attribute type 3 has an invalid length. [ 241.999147][ T5922] [drm:udl_init] *ERROR* Selecting channel failed [ 242.083677][ T5922] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 242.091648][ T5922] [drm] Initialized udl on minor 2 [ 242.104053][ T5922] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 242.116162][ T9608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1615'. [ 242.133849][ T5922] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 242.166592][ T5929] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 242.189260][ T5922] usb 1-1: USB disconnect, device number 17 [ 242.216523][ T5929] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 242.958185][ T9636] openvswitch: netlink: IP tunnel TTL not specified. [ 243.524575][ T5952] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 243.558208][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 243.603244][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 243.685039][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 243.695334][ T5952] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 243.713162][ T5952] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 243.742391][ T5952] usb 4-1: Product: syz [ 243.752130][ T5952] usb 4-1: Manufacturer: syz [ 243.771024][ T5952] usb 4-1: SerialNumber: syz [ 243.809079][ T5952] usb 4-1: config 0 descriptor?? [ 243.843048][ T5952] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 244.439775][ T5952] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 244.555476][ T5980] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 244.640490][ T979] usb 4-1: USB disconnect, device number 22 [ 244.738129][ T5980] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 244.761724][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.802914][ T5980] usb 3-1: config 0 descriptor?? [ 245.051508][ T5980] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 245.285078][ T5980] [drm:udl_init] *ERROR* Selecting channel failed [ 245.341031][ T5980] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 245.353646][ T5980] [drm] Initialized udl on minor 2 [ 245.363889][ T5980] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 245.384295][ T5980] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 245.393670][ T5922] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 245.410060][ T5980] usb 3-1: USB disconnect, device number 19 [ 245.417159][ T5922] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 245.428055][ T5922] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 245.978814][ T5929] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 246.155445][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 246.167615][ T5929] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 246.185136][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.231046][ T5929] pvrusb2: Hardware description: Terratec Grabster AV400 [ 246.268930][ T5929] pvrusb2: ********** [ 246.289879][ T5929] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 246.341494][ T5929] pvrusb2: Important functionality might not be entirely working. [ 246.466760][ T5929] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 246.480337][ T5929] pvrusb2: ********** [ 246.486392][ T2344] pvrusb2: Invalid write control endpoint [ 246.649557][ T2344] pvrusb2: Invalid write control endpoint [ 246.672645][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 246.739697][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 246.769781][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 246.808599][ T2344] pvrusb2: Device being rendered inoperable [ 246.827449][ T9711] pvrusb2: Attempted to execute control transfer when device not ok [ 246.845577][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 246.853055][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 246.860253][ T5952] usb 2-1: USB disconnect, device number 20 [ 246.874175][ T2344] pvrusb2: Attached sub-driver cx25840 [ 246.880441][ T9741] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1672'. [ 246.900742][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 246.925921][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 247.202432][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 247.525042][ T979] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 247.695722][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 247.716319][ T979] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 247.736320][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.747119][ T979] usb 3-1: Product: syz [ 247.751350][ T979] usb 3-1: Manufacturer: syz [ 247.756357][ T979] usb 3-1: SerialNumber: syz [ 247.789992][ T979] r8152-cfgselector 3-1: Unknown version 0x0000 [ 247.803430][ T979] r8152-cfgselector 3-1: config 0 descriptor?? [ 248.232937][ T5952] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 248.255498][ T5929] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 248.405781][ T5922] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 248.427382][ T5929] usb 1-1: config 0 has no interfaces? [ 248.435738][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 248.456287][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.481555][ T5929] usb 1-1: config 0 descriptor?? [ 248.586971][ T5922] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 248.608741][ T5922] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.625965][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.644266][ T5922] usb 4-1: Product: syz [ 248.651527][ T5922] usb 4-1: Manufacturer: syz [ 248.659458][ T5922] usb 4-1: SerialNumber: syz [ 248.683164][ T5922] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 248.724132][ T5980] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 248.726959][ T979] usb 1-1: USB disconnect, device number 18 [ 248.975699][ T9779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.019704][ T9779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.034998][ T5952] usb 4-1: USB disconnect, device number 23 [ 249.347585][ T9802] cifs: Unknown parameter 'f' [ 249.383816][ T9804] loop6: detected capacity change from 0 to 524287999 [ 249.826215][ T5980] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 249.854102][ T5980] ath9k_htc: Failed to initialize the device [ 249.895425][ T5952] usb 4-1: ath9k_htc: USB layer deinitialized [ 250.012108][ T9822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1709'. [ 250.135499][ T9824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.167246][ T9824] bond0: (slave bond1): Enslaving as an active interface with an up link [ 250.175932][ T979] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 250.224644][ T5952] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 250.336392][ T979] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 250.346677][ T979] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 250.368128][ T979] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 250.384610][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.392964][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 250.404803][ T979] usb 3-1: Product: syz [ 250.409793][ T979] usb 3-1: Manufacturer: syz [ 250.415915][ T5952] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 250.426495][ T979] usb 3-1: SerialNumber: syz [ 250.440283][ T5952] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= 1.a2 [ 250.449797][ T979] usb 3-1: config 0 descriptor?? [ 250.454774][ T5922] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 250.467582][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.477709][ T5952] usb 4-1: Product: syz [ 250.482413][ T9818] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 250.490092][ T5952] usb 4-1: Manufacturer: syz [ 250.494768][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 250.503086][ T9818] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 250.510910][ T5952] usb 4-1: SerialNumber: syz [ 250.535642][ T5952] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 250.555117][ T5952] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 250.562923][ T5952] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 250.578756][ T5952] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 250.588308][ T5952] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 250.596159][ T5952] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 250.607363][ T5952] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 250.608374][ T5922] usb 1-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 250.645454][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 250.656614][ T5922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.669025][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.693799][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.706549][ T5922] usb 1-1: config 1 has no interface number 0 [ 250.712932][ T5922] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.742674][ T24] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 250.762721][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.782199][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.787838][ T9818] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 250.794265][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.822380][ T5936] usb 4-1: USB disconnect, device number 24 [ 250.822577][ T24] usb 5-1: config 0 descriptor?? [ 250.834101][ T9818] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 250.849688][ T5922] usb 1-1: Product: syz [ 250.856499][ T5922] usb 1-1: Manufacturer: syz [ 250.879695][ T5922] usb 1-1: SerialNumber: syz [ 250.893255][ T5936] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 250.919836][ T5936] keyspan 4-1:1.0: device disconnected [ 250.947118][ T5922] cdc_ncm 1-1:1.1: skipping garbage [ 250.962199][ T5922] usb 1-1: selecting invalid altsetting 1 [ 250.977090][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.118262][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 251.124595][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.157832][ T24] usb 5-1: USB disconnect, device number 19 [ 251.242653][ T979] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 251.453548][ T979] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 251.507560][ T979] usb 3-1: USB disconnect, device number 21 [ 251.569310][ T5922] cdc_ncm 1-1:1.1: SET_CRC_MODE failed [ 251.597150][ T5922] cdc_ncm 1-1:1.1: SET_NTB_FORMAT failed [ 251.627639][ T5922] usb 1-1: selecting invalid altsetting 1 [ 251.633632][ T5922] cdc_ncm 1-1:1.1: bind() failure [ 251.694941][ T5922] usb 1-1: USB disconnect, device number 19 [ 252.045353][ T30] audit: type=1326 audit(1754211454.021:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.4.1728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6baad8eb69 code=0x0 [ 252.443491][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 253.050362][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 253.113539][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1741'. [ 253.894629][ T979] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.237207][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.257961][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.310088][ T979] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 254.327330][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.355851][ T979] usb 1-1: config 0 descriptor?? [ 254.801238][ T979] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 254.834369][ T979] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 255.002118][ T979] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 255.206090][ T979] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 255.251666][ T979] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 255.294852][ T979] usb 1-1: USB disconnect, device number 20 [ 255.763781][ T9970] misc userio: Can't change port type on an already running userio instance [ 256.834576][ T5936] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 256.868861][T10005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1783'. [ 256.947034][T10009] netlink: 'syz.2.1785': attribute type 9 has an invalid length. [ 256.961975][T10009] netlink: 146708 bytes leftover after parsing attributes in process `syz.2.1785'. [ 257.014581][ T5952] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 257.033286][ T5936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.060338][ T5936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.083590][ T5936] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.105396][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.115655][ T5936] usb 2-1: SerialNumber: syz [ 257.220290][ T5952] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.250256][ T5952] usb 4-1: config 1 interface 0 has no altsetting 0 [ 257.273390][ T5952] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.284245][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.299423][ T5952] usb 4-1: SerialNumber: syz [ 257.366721][ T5936] usb 2-1: 0:2 : does not exist [ 257.439714][ T5936] usb 2-1: USB disconnect, device number 21 [ 257.475113][ T979] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 257.518768][ T5952] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 257.563373][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.603287][ T5952] usb 4-1: USB disconnect, device number 25 [ 257.647252][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.662516][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 257.679397][ T979] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 257.715433][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.766683][ T979] usb 5-1: config 0 descriptor?? [ 258.281261][ T979] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0013/input/input27 [ 258.351895][T10049] tap0: tun_chr_ioctl cmd 1074025677 [ 258.358360][T10049] tap0: linktype set to 776 [ 258.403323][ T979] sony 0003:054C:03D5.0013: input,hidraw0: USB HID v40.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 258.453220][ T979] usb 5-1: USB disconnect, device number 20 [ 258.694287][T10053] fido_id[10053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 260.530363][T10119] netlink: 'syz.0.1830': attribute type 25 has an invalid length. [ 260.558526][T10119] netlink: 'syz.0.1830': attribute type 7 has an invalid length. [ 260.792908][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1833'. [ 260.948097][T10129] openvswitch: netlink: Multiple metadata blocks provided [ 261.030254][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.037669][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.614553][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 261.794889][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 261.818424][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.841313][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.865130][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.889066][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 261.913353][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.947853][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 261.961837][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 261.970897][ T24] usb 3-1: Manufacturer: syz [ 261.990256][ T24] usb 3-1: config 0 descriptor?? [ 262.024510][ T5936] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 262.184674][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 262.197516][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.211422][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.232175][ T5936] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 262.243171][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.261824][ T5936] usb 1-1: config 0 descriptor?? [ 262.336095][ T24] rc_core: IR keymap rc-hauppauge not found [ 262.345599][ T24] Registered IR keymap rc-empty [ 262.350682][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.374659][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.415992][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 262.440613][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 262.460879][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.485197][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.504814][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.524632][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.545111][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.565121][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.597197][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.645571][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.684986][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.718339][ T5936] corsair 0003:1B1C:1B02.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 262.734678][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.793077][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 262.832103][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 262.874695][ T24] usb 3-1: USB disconnect, device number 22 [ 262.991889][ T5936] corsair 0003:1B1C:1B02.0014: Failed to get K90 initial state (error -71). [ 263.046072][ T5936] usb 1-1: USB disconnect, device number 21 [ 263.105117][ T44] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 263.294601][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 263.303951][ T44] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 263.324022][ T44] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 263.324917][ T979] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 263.342365][ T44] usb 4-1: config 0 has no interface number 0 [ 263.352204][ T44] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.378130][ T44] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 263.416018][ T44] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.436973][ T44] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 263.447235][ T44] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 263.456380][ T44] usb 4-1: Product: syz [ 263.460840][ T44] usb 4-1: Manufacturer: syz [ 263.475553][ T44] usb 4-1: config 0 descriptor?? [ 263.483180][T10185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.517637][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.539645][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.572102][ T979] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 263.620411][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.647741][ T979] usb 2-1: config 0 descriptor?? [ 264.076254][ T979] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 264.137481][ T44] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input29 [ 264.156294][ T5980] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 264.356708][ T5980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.390274][ T5980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.407689][ T5952] usb 4-1: USB disconnect, device number 26 [ 264.407846][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 264.442952][ T5980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.463624][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.475079][ T979] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 264.495550][ T979] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 264.519512][ T5980] usb 5-1: Product: syz [ 264.523915][ T5980] usb 5-1: Manufacturer: syz [ 264.531042][ T5980] usb 5-1: SerialNumber: syz [ 264.536218][ T979] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -71 [ 264.569306][ T979] usb 2-1: USB disconnect, device number 22 [ 264.797667][T10219] could not allocate digest TFM handle cryptd(blake2b-160) [ 264.812822][ T5980] usb 5-1: 0:2 : does not exist [ 264.835532][ T5980] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 264.916200][ T5980] usb 5-1: USB disconnect, device number 21 [ 265.021585][ T6155] udevd[6155]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.221866][T10234] netlink: 'syz.0.1878': attribute type 29 has an invalid length. [ 265.245683][T10234] netlink: 'syz.0.1878': attribute type 29 has an invalid length. [ 265.269392][T10234] netlink: 'syz.0.1878': attribute type 29 has an invalid length. [ 265.401782][T10241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.503705][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 265.552378][ T5929] IPVS: starting estimator thread 0... [ 265.644569][T10249] IPVS: using max 27 ests per chain, 64800 per kthread [ 265.829900][T10258] input: syz0 as /devices/virtual/input/input30 [ 266.601874][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 266.989294][T10295] syzkaller1: tun_chr_ioctl cmd 35111 [ 267.295600][ T5936] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 267.485960][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 267.499227][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.514375][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.528163][ T5936] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 267.537842][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.584162][ T5936] usb 2-1: config 0 descriptor?? [ 267.604539][ T5980] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 267.677261][ T5929] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 267.778091][ T5980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.801370][ T5980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.843417][ T5980] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.860484][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.881627][ T5929] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 267.894701][ T5980] usb 1-1: SerialNumber: syz [ 267.899553][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.927786][ T5929] usb 5-1: config 0 descriptor?? [ 268.051412][ T5936] ft260 0003:0403:6030.0016: unknown main item tag 0x7 [ 268.134201][ T5980] usb 1-1: 0:2 : does not exist [ 268.214978][ T5980] usb 1-1: USB disconnect, device number 22 [ 268.236669][ T5929] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 268.249305][ T5936] ft260 0003:0403:6030.0016: failed to retrieve chip version [ 268.263656][T10328] netlink: 'syz.2.1920': attribute type 1 has an invalid length. [ 268.281447][ T5936] ft260 0003:0403:6030.0016: probe with driver ft260 failed with error -71 [ 268.317956][ T5936] usb 2-1: USB disconnect, device number 23 [ 268.345604][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.466339][ T5929] [drm:udl_init] *ERROR* Selecting channel failed [ 268.502587][ T5929] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 268.516511][ T5929] [drm] Initialized udl on minor 2 [ 268.533331][ T5929] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 268.564274][ T5929] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 268.594982][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 268.614218][ T5929] usb 5-1: USB disconnect, device number 22 [ 268.622231][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 268.984821][ T24] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 269.167550][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.212112][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 269.231494][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 269.241642][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 269.269468][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 269.288858][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 269.312342][ T24] usb 3-1: Manufacturer: syz [ 269.331553][ T24] usb 3-1: config 0 descriptor?? [ 269.364846][ T5936] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 269.416614][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1932'. [ 269.529319][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.555141][ T5936] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.564102][ T5936] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 269.614900][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.685788][ T5936] usb 2-1: config 0 descriptor?? [ 269.719768][ T5936] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 269.739599][ T24] rc_core: IR keymap rc-hauppauge not found [ 269.754642][ T5936] dvb-usb: bulk message failed: -22 (3/0) [ 269.756211][ T24] Registered IR keymap rc-empty [ 269.779508][ T5936] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 269.788557][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.821513][ T5936] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 269.836220][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.852619][ T5936] usb 2-1: media controller created [ 269.863858][T10370] loop8: detected capacity change from 0 to 7 [ 269.867354][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.872207][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 269.913460][T10370] Dev loop8: unable to read RDB block 7 [ 269.921100][ T5936] dvb-usb: bulk message failed: -22 (6/0) [ 269.945037][T10370] loop8: AHDI p1 p3 p4 [ 269.955259][ T5936] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 269.957377][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 269.964071][T10370] loop8: partition table partially beyond EOD, [ 269.975056][ T5980] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 269.998056][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 270.020591][T10370] truncated [ 270.027802][T10370] loop8: p1 start 975770946 is beyond EOD, truncated [ 270.040736][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.043293][ T5936] dvb-usb: schedule remote query interval to 150 msecs. [ 270.055613][T10370] loop8: p3 start 6514546 is beyond EOD, truncated [ 270.098043][ T5936] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 270.119394][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.147267][ T5980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.181741][ T5980] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.206904][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.233522][ T5980] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.244749][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.256756][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 270.262903][ T5936] dvb-usb: error while querying for an remote control event. [ 270.276549][ T5980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.286785][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.315609][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.328661][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.357513][ T5980] usb 5-1: Product: syz [ 270.361744][ T5980] usb 5-1: Manufacturer: syz [ 270.385032][ T5980] usb 5-1: SerialNumber: syz [ 270.394939][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.425116][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.464688][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.484482][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 270.514651][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.559565][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 270.575432][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 270.688130][ T24] usb 3-1: USB disconnect, device number 23 [ 270.757439][ T5936] dvb-usb: error while querying for an remote control event. [ 270.876559][ T5936] usb 2-1: USB disconnect, device number 24 [ 271.039163][ T5936] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 271.120535][T10390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.265881][ T5929] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 271.427372][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.450998][ T5980] cdc_ncm 5-1:1.0: bind() failure [ 271.468934][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.493868][ T5980] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 271.513579][ T5929] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 271.534257][ T5980] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 271.543292][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.561781][ T5980] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 271.578635][ T5929] usb 1-1: config 0 descriptor?? [ 271.612362][ T5980] usb 5-1: USB disconnect, device number 23 [ 272.046337][ T5929] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 272.053920][ T5929] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 272.114564][ T5929] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 272.121937][ T5929] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 272.149996][T10402] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 272.172975][ T5929] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 272.206810][ T5929] cm6533_jd 0003:0D8C:0022.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 272.318540][ T5980] usb 1-1: USB disconnect, device number 23 [ 272.381076][T10407] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 272.412432][T10407] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 272.498716][T10405] fido_id[10405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 272.718760][T10417] loop6: detected capacity change from 0 to 63 [ 272.756878][T10417] buffer_io_error: 7 callbacks suppressed [ 272.756900][T10417] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.816141][T10417] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.859847][ T6155] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.886797][ T6155] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.934277][T10417] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.955773][T10417] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.988048][ T6155] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.005340][ T6155] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.014332][ T6155] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.977180][ T44] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 274.026022][ T44] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.254734][ T979] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 274.407268][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 274.428107][ T979] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.444111][ T979] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 274.466967][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.485632][ T979] usb 1-1: config 0 descriptor?? [ 274.677936][T10471] input: syz1 as /devices/virtual/input/input33 [ 274.919135][ T979] wacom 0003:056A:00BA.0019: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 274.975131][ T979] wacom 0003:056A:00BA.0019: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.0-1/input0 [ 275.034775][ T979] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BA.0019/input/input34 [ 275.166340][ T979] usb 1-1: USB disconnect, device number 24 [ 275.194619][ T5936] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 275.245159][T10481] fido_id[10481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 275.358131][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.401384][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.433658][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.465761][ T5936] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.475093][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.505647][ T5936] usb 5-1: config 0 descriptor?? [ 275.980094][ T5936] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 276.207281][ T5936] usb 5-1: USB disconnect, device number 24 [ 276.336350][T10499] fido_id[10499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 276.950528][T10512] input: syz0 as /devices/virtual/input/input37 [ 277.125286][T10517] input: syz0 as /devices/virtual/input/input38 [ 277.294773][ T5936] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 277.490726][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.507571][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 277.521840][ T5936] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 277.531629][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.545552][ T5936] usb 3-1: config 0 descriptor?? [ 277.799595][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2007'. [ 278.027876][ T5936] kovaplus 0003:1E7D:2D50.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 278.141226][T10544] input: syz1 as /devices/virtual/input/input39 [ 278.601582][ T5936] kovaplus 0003:1E7D:2D50.001B: couldn't init struct kovaplus_device [ 278.654595][ T5936] kovaplus 0003:1E7D:2D50.001B: couldn't install mouse [ 278.678486][ T5936] kovaplus 0003:1E7D:2D50.001B: probe with driver kovaplus failed with error -71 [ 278.762553][ T5936] usb 3-1: USB disconnect, device number 24 [ 278.995702][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 279.022090][T10565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.424816][ T5182] Bluetooth: hci0: command 0x0406 tx timeout [ 279.431549][ T979] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 279.492491][ T979] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 279.528369][ T30] audit: type=1326 audit(1754211481.511:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10587 comm="syz.3.2025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9ca38eb69 code=0x0 [ 279.695337][ T5980] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 279.857826][ T5980] usb 3-1: Using ep0 maxpacket: 8 [ 279.872852][ T5980] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.890062][ T5980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.905544][T10607] syzkaller1: entered promiscuous mode [ 279.922178][T10607] syzkaller1: entered allmulticast mode [ 279.930424][ T5980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.960033][ T5980] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.000493][ T5980] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.022709][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.269194][ T5980] usb 3-1: GET_CAPABILITIES returned 0 [ 280.294662][ T5980] usbtmc 3-1:16.0: can't read capabilities [ 280.491510][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 280.504010][ T5980] usb 3-1: USB disconnect, device number 25 [ 280.837692][ T44] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 280.951416][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 281.033493][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 281.056001][ T44] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.090850][ T44] usb 2-1: config 0 has no interface number 0 [ 281.138087][ T44] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 281.189469][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.214651][ T44] usb 2-1: Product: syz [ 281.218997][ T44] usb 2-1: Manufacturer: syz [ 281.223632][ T44] usb 2-1: SerialNumber: syz [ 281.306533][ T44] usb 2-1: config 0 descriptor?? [ 281.326164][ T44] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 281.384862][ T44] usb 2-1: selecting invalid altsetting 1 [ 281.390679][ T44] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 281.430029][ T44] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.463863][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 281.482812][ T44] usb 2-1: media controller created [ 281.600846][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.664648][ T30] audit: type=1326 audit(1754211483.641:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10656 comm="syz.3.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9ca32ad69 code=0x7ffc0000 [ 281.687457][ T979] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 281.687511][ T979] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 281.687591][ C1] ------------[ cut here ]------------ [ 281.687737][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 281.687859][ C1] WARNING: CPU: 1 PID: 30 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0 [ 281.687894][ C1] Modules linked in: [ 281.687937][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 281.687965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.687981][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 281.688008][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 b3 e3 98 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 80 dd 89 8b 4c 89 fa e8 c9 3a f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 6a 90 35 00 90 0f 0b 90 e9 dd fc ff [ 281.688029][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 281.688050][ C1] RAX: 5a1999bef6b6cb00 RBX: 0000000000000100 RCX: ffff88801def3c00 [ 281.688068][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 281.688083][ C1] RBP: 1ffff11004d83a38 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 281.688101][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 281.688119][ C1] R13: ffff8880327fc988 R14: 0000000000000008 R15: ffff888026c1d178 [ 281.688137][ C1] FS: 0000000000000000(0000) GS:ffff888125d2a000(0000) knlGS:0000000000000000 [ 281.688155][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.688170][ C1] CR2: 00007f95a6754286 CR3: 000000005c3f8000 CR4: 00000000003526f0 [ 281.688190][ C1] Call Trace: [ 281.688200][ C1] [ 281.688224][ C1] call_timer_fn+0x17b/0x5f0 [ 281.688260][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.688285][ C1] ? call_timer_fn+0xbe/0x5f0 [ 281.688318][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 281.688362][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 281.688392][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.688421][ C1] __run_timer_base+0x646/0x860 [ 281.688451][ C1] ? ktime_get+0x3e/0x1f0 [ 281.688487][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 281.688517][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 281.688565][ C1] run_timer_softirq+0xb7/0x180 [ 281.688597][ C1] handle_softirqs+0x286/0x870 [ 281.688627][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 281.688656][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 281.688686][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 281.688728][ C1] __irq_exit_rcu+0xca/0x1f0 [ 281.688751][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 281.688785][ C1] irq_exit_rcu+0x9/0x30 [ 281.688806][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 281.688844][ C1] [ 281.688853][ C1] [ 281.688864][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.688891][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 281.688920][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 c5 3e 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 b6 3e 1f 00 eb 06 e8 af 3e 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ba 91 82 00 48 8b 1b 48 8b 44 24 [ 281.688941][ C1] RSP: 0018:ffffc90000a67760 EFLAGS: 00000293 [ 281.688962][ C1] RAX: 1ffffffff1d35d3f RBX: ffffffff8e9ae9f8 RCX: ffff88801def3c00 [ 281.688979][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.688994][ C1] RBP: ffffc90000a678b0 R08: ffffffff8fa32537 R09: 1ffffffff1f464a6 [ 281.689013][ C1] R10: dffffc0000000000 R11: fffffbfff1f464a7 R12: dffffc0000000000 [ 281.689032][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9ae9a0 [ 281.689073][ C1] ? console_flush_all+0x13a/0xc40 [ 281.689110][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 281.689140][ C1] ? __switch_to+0xdae/0x1670 [ 281.689183][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 281.689218][ C1] console_unlock+0xc4/0x270 [ 281.689246][ C1] ? __pfx_console_unlock+0x10/0x10 [ 281.689276][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 281.689312][ C1] vprintk_emit+0x5b7/0x7a0 [ 281.689340][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 281.689362][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 281.689400][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.689456][ C1] _printk+0xcf/0x120 [ 281.689487][ C1] ? __pfx____ratelimit+0x10/0x10 [ 281.689513][ C1] ? __pfx__printk+0x10/0x10 [ 281.689550][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 281.689590][ C1] ? netlink_has_listeners+0x339/0x3f0 [ 281.689631][ C1] kauditd_hold_skb+0x1c8/0x210 [ 281.689662][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.689691][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.689725][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 281.689758][ C1] kauditd_send_queue+0x2a1/0x2f0 [ 281.689791][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.689820][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 281.689852][ C1] ? kauditd_thread+0xba/0x9a0 [ 281.689876][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.689909][ C1] kauditd_thread+0x74e/0x9a0 [ 281.689942][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 281.689984][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.690022][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 281.690050][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 281.690081][ C1] ? __kthread_parkme+0x7b/0x200 [ 281.690107][ C1] ? __kthread_parkme+0x1a1/0x200 [ 281.690140][ C1] kthread+0x711/0x8a0 [ 281.690174][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 281.690202][ C1] ? __pfx_kthread+0x10/0x10 [ 281.690231][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.690266][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.690287][ C1] ? __pfx_kthread+0x10/0x10 [ 281.690316][ C1] ret_from_fork+0x3f9/0x770 [ 281.690344][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 281.690374][ C1] ? __switch_to_asm+0x39/0x70 [ 281.690404][ C1] ? __switch_to_asm+0x33/0x70 [ 281.690433][ C1] ? __pfx_kthread+0x10/0x10 [ 281.690464][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.690514][ C1] [ 281.690526][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 281.690544][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 281.690571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.690586][ C1] Call Trace: [ 281.690596][ C1] [ 281.690619][ C1] dump_stack_lvl+0x99/0x250 [ 281.690649][ C1] ? __asan_memcpy+0x40/0x70 [ 281.690676][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.690710][ C1] ? __pfx__printk+0x10/0x10 [ 281.690757][ C1] vpanic+0x27a/0x730 [ 281.690784][ C1] ? __pfx__printk+0x10/0x10 [ 281.690815][ C1] ? __pfx_vpanic+0x10/0x10 [ 281.690843][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 281.690890][ C1] panic+0xb9/0xc0 [ 281.690916][ C1] ? __pfx_panic+0x10/0x10 [ 281.690962][ C1] __warn+0x31b/0x4b0 [ 281.690986][ C1] ? __queue_work+0xd38/0xfb0 [ 281.691013][ C1] ? __queue_work+0xd38/0xfb0 [ 281.691037][ C1] report_bug+0x2be/0x4f0 [ 281.691072][ C1] ? __queue_work+0xd38/0xfb0 [ 281.691096][ C1] ? __queue_work+0xd38/0xfb0 [ 281.691119][ C1] ? __queue_work+0xd3a/0xfb0 [ 281.691143][ C1] handle_bug+0x84/0x160 [ 281.691171][ C1] exc_invalid_op+0x1a/0x50 [ 281.691198][ C1] asm_exc_invalid_op+0x1a/0x20 [ 281.691219][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 281.691243][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 b3 e3 98 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 80 dd 89 8b 4c 89 fa e8 c9 3a f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 6a 90 35 00 90 0f 0b 90 e9 dd fc ff [ 281.691264][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 281.691286][ C1] RAX: 5a1999bef6b6cb00 RBX: 0000000000000100 RCX: ffff88801def3c00 [ 281.691303][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 281.691318][ C1] RBP: 1ffff11004d83a38 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 281.691336][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 281.691354][ C1] R13: ffff8880327fc988 R14: 0000000000000008 R15: ffff888026c1d178 [ 281.691405][ C1] call_timer_fn+0x17b/0x5f0 [ 281.691438][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.691463][ C1] ? call_timer_fn+0xbe/0x5f0 [ 281.691496][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 281.691541][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 281.691569][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 281.691598][ C1] __run_timer_base+0x646/0x860 [ 281.691627][ C1] ? ktime_get+0x3e/0x1f0 [ 281.691667][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 281.691695][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 281.691744][ C1] run_timer_softirq+0xb7/0x180 [ 281.691774][ C1] handle_softirqs+0x286/0x870 [ 281.691802][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 281.691832][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 281.691861][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 281.691895][ C1] __irq_exit_rcu+0xca/0x1f0 [ 281.691918][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 281.691951][ C1] irq_exit_rcu+0x9/0x30 [ 281.691978][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 281.692014][ C1] [ 281.692023][ C1] [ 281.692033][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.692058][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 281.692086][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 c5 3e 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 b6 3e 1f 00 eb 06 e8 af 3e 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ba 91 82 00 48 8b 1b 48 8b 44 24 [ 281.692106][ C1] RSP: 0018:ffffc90000a67760 EFLAGS: 00000293 [ 281.692127][ C1] RAX: 1ffffffff1d35d3f RBX: ffffffff8e9ae9f8 RCX: ffff88801def3c00 [ 281.692146][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.692160][ C1] RBP: ffffc90000a678b0 R08: ffffffff8fa32537 R09: 1ffffffff1f464a6 [ 281.692178][ C1] R10: dffffc0000000000 R11: fffffbfff1f464a7 R12: dffffc0000000000 [ 281.692196][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9ae9a0 [ 281.692235][ C1] ? console_flush_all+0x13a/0xc40 [ 281.692271][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 281.692301][ C1] ? __switch_to+0xdae/0x1670 [ 281.692341][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 281.692377][ C1] console_unlock+0xc4/0x270 [ 281.692405][ C1] ? __pfx_console_unlock+0x10/0x10 [ 281.692434][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 281.692470][ C1] vprintk_emit+0x5b7/0x7a0 [ 281.692498][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 281.692525][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 281.692561][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.692616][ C1] _printk+0xcf/0x120 [ 281.692648][ C1] ? __pfx____ratelimit+0x10/0x10 [ 281.692673][ C1] ? __pfx__printk+0x10/0x10 [ 281.692716][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 281.692755][ C1] ? netlink_has_listeners+0x339/0x3f0 [ 281.692796][ C1] kauditd_hold_skb+0x1c8/0x210 [ 281.692825][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.692853][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.692882][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 281.692914][ C1] kauditd_send_queue+0x2a1/0x2f0 [ 281.692953][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.692982][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 281.693013][ C1] ? kauditd_thread+0xba/0x9a0 [ 281.693038][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 281.693070][ C1] kauditd_thread+0x74e/0x9a0 [ 281.693101][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 281.693137][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.693174][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 281.693202][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 281.693233][ C1] ? __kthread_parkme+0x7b/0x200 [ 281.693259][ C1] ? __kthread_parkme+0x1a1/0x200 [ 281.693292][ C1] kthread+0x711/0x8a0 [ 281.693330][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 281.693359][ C1] ? __pfx_kthread+0x10/0x10 [ 281.693390][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.693424][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.693444][ C1] ? __pfx_kthread+0x10/0x10 [ 281.693474][ C1] ret_from_fork+0x3f9/0x770 [ 281.693501][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 281.693532][ C1] ? __switch_to_asm+0x39/0x70 [ 281.693561][ C1] ? __switch_to_asm+0x33/0x70 [ 281.693591][ C1] ? __pfx_kthread+0x10/0x10 [ 281.693620][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.693669][ C1] [ 281.694165][ C1] Kernel Offset: disabled