last executing test programs: 6m12.27273961s ago: executing program 1 (id=2708): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m12.27258884s ago: executing program 1 (id=2709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 6m12.202208074s ago: executing program 1 (id=2711): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0xfffffff9, 0x0, 0xff, 0x0, "00000008000000fe630500000000000000001f"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 6m12.128484881s ago: executing program 1 (id=2713): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 6m12.090884414s ago: executing program 1 (id=2715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x100000000001, 0x0, 0x1, r2, 0x1}) 6m11.696730812s ago: executing program 1 (id=2719): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x40000) 6m11.437279499s ago: executing program 32 (id=2719): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x40000) 1m27.634567349s ago: executing program 0 (id=7011): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m27.576752918s ago: executing program 0 (id=7012): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8000000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x6000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x80a0000}) 1m27.496376809s ago: executing program 0 (id=7013): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x10a, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m27.420832658s ago: executing program 0 (id=7014): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 1m27.418704783s ago: executing program 0 (id=7015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @loopback}, @redirect={0x5, 0x3, 0x0, @rand_addr=0x64010101, {0x5, 0x4, 0x2, 0x18, 0x2, 0x67, 0x0, 0x7, 0x16, 0x5, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x3e) 1m26.876710135s ago: executing program 0 (id=7026): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8) 1m26.687771311s ago: executing program 33 (id=7026): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8) 2.317448623s ago: executing program 2 (id=8138): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r1, 0x1) 2.164229876s ago: executing program 2 (id=8150): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.869623213s ago: executing program 2 (id=8148): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x0, 0xe7}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 955.854416ms ago: executing program 3 (id=8169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 927.321527ms ago: executing program 2 (id=8170): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fanotify_init(0x18, 0x1000) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x4000003b, r2, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1) 848.348746ms ago: executing program 3 (id=8171): mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0) fchown(r0, 0xee01, 0x0) 808.229533ms ago: executing program 3 (id=8173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) 749.429968ms ago: executing program 3 (id=8175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001380)=ANY=[@ANYBLOB="6684afeb112821ff00000000000000000000ffff"], 0x1150) 698.120514ms ago: executing program 4 (id=8176): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x1ff}, 0x8) 573.823687ms ago: executing program 5 (id=8178): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 541.264777ms ago: executing program 4 (id=8186): read(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) r1 = socket(0x22, 0x2, 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "0585e25b50281283", "120a42cf5e2f2876ba831e9449e9a53d", "a63f3947", "9c5d536f60067e46"}, 0x28) 540.651543ms ago: executing program 3 (id=8179): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x200000000000, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) 484.551324ms ago: executing program 2 (id=8180): r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_pwait2(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000700)={0x6000001c}) 455.031602ms ago: executing program 4 (id=8181): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x81) r2 = add_key$user(&(0x7f0000002c00), &(0x7f0000002c40)={'syz', 0x3}, &(0x7f0000002c80)="14bb5a", 0x3, r1) keyctl$unlink(0x9, r2, r1) 454.29252ms ago: executing program 3 (id=8182): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 383.541576ms ago: executing program 5 (id=8183): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa050102}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x8000, 0xfff7, 0x202, 0x1, 0x5, 0xc, 0x5, 0x2}, 0x20) 372.310929ms ago: executing program 4 (id=8184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003000030030"], 0xfdef) 343.660473ms ago: executing program 5 (id=8185): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write(r0, &(0x7f0000000080)="b6d4", 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) 251.079911ms ago: executing program 2 (id=8187): landlock_create_ruleset(0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 244.788967ms ago: executing program 5 (id=8195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x4, 0x0, 0x80, {0x10000, 0x6000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) 174.471821ms ago: executing program 4 (id=8188): r0 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x8800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 87.722794ms ago: executing program 5 (id=8189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x5) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) 437.986µs ago: executing program 4 (id=8190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 0s ago: executing program 5 (id=8191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000480000000000000006"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 18 [ 462.619159][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.628271][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 462.636423][ T5893] usb 3-1: SerialNumber: syz [ 462.647749][ T5893] hub 3-1:1.0: bad descriptor, ignoring hub [ 462.653665][ T5893] hub 3-1:1.0: probe with driver hub failed with error -5 [ 462.662693][ T5893] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 462.968082][ T9] usb 3-1: USB disconnect, device number 72 [ 463.583879][T19404] overlayfs: failed to clone upperpath [ 463.635804][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 463.807319][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 463.814465][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 463.823146][ T9] usb 5-1: config 0 has no interface number 0 [ 463.835770][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 463.845280][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.853783][ T9] usb 5-1: Product: syz [ 463.858384][ T9] usb 5-1: Manufacturer: syz [ 463.863021][ T9] usb 5-1: SerialNumber: syz [ 463.886820][ T9] usb 5-1: config 0 descriptor?? [ 463.906916][ T9] smsc95xx v2.0.0 [ 464.554419][T19434] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 464.569324][T19434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.581785][T19434] overlayfs: failed to set uuid (1296/file1, err=-13); falling back to uuid=null. [ 464.924753][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 464.945858][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 464.955343][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 464.977115][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 465.002551][ T9] usb 5-1: USB disconnect, device number 41 [ 465.144226][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6079'. [ 465.359077][T19464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.334009][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6103'. [ 466.945630][ T5876] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 467.117479][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 467.128637][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 467.138762][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 52, changing to 9 [ 467.149793][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8241, setting to 1024 [ 467.163094][ T5876] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 467.172395][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.180447][ T5876] usb 3-1: Product: syz [ 467.184611][ T5876] usb 3-1: Manufacturer: syz [ 467.189439][ T5876] usb 3-1: SerialNumber: syz [ 467.204091][ T5876] usb 3-1: config 0 descriptor?? [ 467.413210][ T5876] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 467.617060][ T936] usb 3-1: USB disconnect, device number 73 [ 468.499161][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6116'. [ 468.525171][T19556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.810845][ T5948] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 468.977724][ T5948] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 468.990541][ T5948] usb 5-1: config 0 has no interface number 0 [ 469.002807][ T5948] usb 5-1: config 0 interface 41 has no altsetting 0 [ 469.015465][ T5948] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 469.025004][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.033291][ T5948] usb 5-1: Product: syz [ 469.037855][ T5948] usb 5-1: Manufacturer: syz [ 469.042467][ T5948] usb 5-1: SerialNumber: syz [ 469.066652][ T5948] usb 5-1: config 0 descriptor?? [ 469.893245][ T5948] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 469.907241][ T5948] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 469.923101][ T5948] usb 5-1: USB disconnect, device number 42 [ 470.128238][T19607] IPVS: sh: UDP 224.0.0.2:20004 - no destination available [ 470.607222][T19633] IPVS: sh: UDP 224.0.0.2:20004 - no destination available [ 471.034516][T19660] IPVS: sh: UDP 224.0.0.2:20004 - no destination available [ 472.813550][T19688] IPVS: sh: UDP 224.0.0.2:20004 - no destination available [ 473.082414][T19699] program syz.0.6183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.805706][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 473.965971][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.010650][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.015735][ T5927] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 474.045019][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 474.057021][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.073531][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.082930][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.092617][ T9] usb 5-1: Product: syz [ 474.097079][ T9] usb 5-1: Manufacturer: syz [ 474.101689][ T9] usb 5-1: SerialNumber: syz [ 474.217227][ T5927] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 474.225354][ T5927] usb 3-1: config 0 has no interface number 0 [ 474.241587][ T5927] usb 3-1: config 0 interface 41 has no altsetting 0 [ 474.254358][ T5927] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 474.267041][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.275323][ T5927] usb 3-1: Product: syz [ 474.281525][ T5927] usb 3-1: Manufacturer: syz [ 474.287016][T19742] program syz.0.6200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.296537][ T5927] usb 3-1: SerialNumber: syz [ 474.303885][ T5927] usb 3-1: config 0 descriptor?? [ 474.322907][T19717] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.937502][T19717] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.148673][ T5927] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 475.164078][ T9] cdc_mbim 5-1:1.0: bind() failure [ 475.172837][ T5927] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 475.184281][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 475.188782][ T5927] usb 3-1: USB disconnect, device number 74 [ 475.201795][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 475.217253][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 475.235880][ T9] usb 5-1: USB disconnect, device number 43 [ 475.753895][T19758] program syz.4.6205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.104821][T19777] program syz.4.6215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.855835][ T5927] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 477.030371][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.051426][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.084980][ T5927] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.108299][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.135839][ T5927] usb 3-1: config 0 descriptor?? [ 477.153214][ T5927] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 478.225258][T19854] program syz.4.6258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.632991][ T5927] usb 3-1: USB disconnect, device number 75 [ 480.075655][ T5927] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 480.227289][ T5927] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.235391][ T5927] usb 3-1: config 0 has no interface number 0 [ 480.243728][ T5927] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 480.253035][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.261611][ T5927] usb 3-1: Product: syz [ 480.265996][ T5927] usb 3-1: Manufacturer: syz [ 480.270590][ T5927] usb 3-1: SerialNumber: syz [ 480.277850][ T5927] usb 3-1: config 0 descriptor?? [ 480.487770][ T5927] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 480.500247][ T5927] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 480.510805][ T5927] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 480.518990][ T5927] usb 3-1: media controller created [ 480.536600][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.908845][ T24] usb 3-1: USB disconnect, device number 76 [ 481.411184][T19908] netlink: 'syz.3.6277': attribute type 10 has an invalid length. [ 481.428424][T19908] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 481.459951][T19908] bond0: entered promiscuous mode [ 481.465156][T19908] bond_slave_0: entered promiscuous mode [ 481.471490][T19908] bond_slave_1: entered promiscuous mode [ 482.595633][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 482.757402][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 482.766201][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.776683][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 482.786100][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.798705][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 482.808151][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 482.816263][ T9] usb 5-1: Product: syz [ 482.820434][ T9] usb 5-1: Manufacturer: syz [ 482.831413][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 482.837111][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 482.843868][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 482.849842][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 482.896546][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 483.034797][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.043702][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.052649][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.061417][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.070205][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.079091][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.087910][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.096789][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.105569][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.114335][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.123127][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.132341][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.141140][ C0] cdc_wdm 5-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 483.363405][ T5927] usb 5-1: USB disconnect, device number 44 [ 483.741000][T19998] netlink: 'syz.0.6318': attribute type 10 has an invalid length. [ 483.765055][T19998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.784982][T19998] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 483.806963][T20001] bond0: entered promiscuous mode [ 483.812280][T20001] bond_slave_0: entered promiscuous mode [ 483.819880][T20001] bond_slave_1: entered promiscuous mode [ 483.827708][T20001] batadv0: entered promiscuous mode [ 484.154234][T20013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6333'. [ 484.554884][T20032] netlink: 'syz.2.6331': attribute type 10 has an invalid length. [ 484.600615][T20032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.610013][T20032] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 484.625067][T20033] bond0: entered promiscuous mode [ 484.645352][T20033] bond_slave_0: entered promiscuous mode [ 484.651548][T20033] bond_slave_1: entered promiscuous mode [ 484.657841][T20033] batadv0: entered promiscuous mode [ 485.105698][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 485.135196][T20058] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6345'. [ 485.267202][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 485.318276][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 485.335775][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.355061][ T9] usb 5-1: Product: syz [ 485.372160][ T9] usb 5-1: Manufacturer: syz [ 485.383419][ T9] usb 5-1: SerialNumber: syz [ 485.403676][ T9] usb 5-1: config 0 descriptor?? [ 485.430849][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 485.449932][T20068] netlink: 'syz.3.6348': attribute type 29 has an invalid length. [ 485.461784][T20068] netlink: 'syz.3.6348': attribute type 29 has an invalid length. [ 485.470813][T20068] netlink: 'syz.3.6348': attribute type 29 has an invalid length. [ 485.479814][T20068] netlink: 'syz.3.6348': attribute type 29 has an invalid length. [ 486.031222][T20089] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6355'. [ 486.460246][ T9] gspca_stk1135: reg_w 0x7 err -71 [ 486.474319][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.481127][ T9] gspca_stk1135: Sensor write failed [ 486.493231][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.499719][ T9] gspca_stk1135: Sensor write failed [ 486.505045][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.512295][ T9] gspca_stk1135: Sensor read failed [ 486.517686][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.524028][ T9] gspca_stk1135: Sensor read failed [ 486.529669][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 486.536537][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.542889][ T9] gspca_stk1135: Sensor read failed [ 486.548849][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.555202][ T9] gspca_stk1135: Sensor read failed [ 486.560506][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.569116][ T9] gspca_stk1135: Sensor write failed [ 486.574542][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 486.580961][ T9] gspca_stk1135: Sensor write failed [ 486.586488][ T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 486.599463][ T9] usb 5-1: USB disconnect, device number 45 [ 487.966048][ T5893] hid_parser_main: 5 callbacks suppressed [ 487.966068][ T5893] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 487.995133][ T5893] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 488.003042][ T5893] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 488.011568][ T5893] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 488.019292][ T5893] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 488.046717][ T5893] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz0] on syz0 [ 488.227210][T20146] fido_id[20146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 489.126482][ T30] audit: type=1326 audit(1750932225.412:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20185 comm="syz.3.6396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0866f8e929 code=0x0 [ 489.721810][T20200] syzkaller1: entered promiscuous mode [ 489.728072][T20200] syzkaller1: entered allmulticast mode [ 490.099535][ T30] audit: type=1800 audit(1750932226.392:137): pid=20219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6404" name="nullb0" dev="tmpfs" ino=2280 res=0 errno=0 [ 490.215643][ T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 490.398179][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 490.427012][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.453586][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 490.473810][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.490604][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.500387][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.520460][ T24] usb 3-1: Product: syz [ 490.524637][ T24] usb 3-1: Manufacturer: syz [ 490.578000][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 490.583227][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 490.606418][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 490.612419][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 490.789909][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.798726][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.807521][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.816463][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.825256][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.835716][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.844520][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.853324][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.862158][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.870955][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.880000][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.888833][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 490.897635][ C1] cdc_wdm 3-1:1.0: unknown notification 97 received: index 24929 len 24929 [ 491.070278][ T2347] pvrusb2: request_firmware fatal error with code=-110 [ 491.091280][ T2347] pvrusb2: Failure uploading firmware1 [ 491.111917][ T2347] pvrusb2: Device initialization was not successful. [ 491.119086][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 491.130762][ T5927] usb 3-1: USB disconnect, device number 77 [ 491.136762][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 491.148618][ T5923] pvrusb2: Device being rendered inoperable [ 491.625758][ T5923] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 491.795815][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 491.806304][ T30] audit: type=1326 audit(1750932228.092:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20267 comm="syz.4.6425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a8058e929 code=0x0 [ 491.834832][ T5923] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 491.844576][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.857257][ T5923] usb 1-1: Product: syz [ 491.861459][ T5923] usb 1-1: Manufacturer: syz [ 491.866597][ T5923] usb 1-1: SerialNumber: syz [ 491.876748][ T5923] usb 1-1: config 0 descriptor?? [ 491.897162][ T5923] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 492.903748][ T5923] gspca_stk1135: reg_w 0x7 err -71 [ 492.914786][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 492.934142][ T5923] gspca_stk1135: Sensor write failed [ 492.944309][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 492.955744][ T5923] gspca_stk1135: Sensor write failed [ 492.961079][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 492.986426][ T5923] gspca_stk1135: Sensor read failed [ 492.994171][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 493.002145][ T5923] gspca_stk1135: Sensor read failed [ 493.008341][ T5923] gspca_stk1135: Detected sensor type unknown (0x0) [ 493.014483][T20305] PID 20305 killed due to inadequate hugepage pool [ 493.015072][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 493.029749][ T5923] gspca_stk1135: Sensor read failed [ 493.035193][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 493.042598][ T5923] gspca_stk1135: Sensor read failed [ 493.065195][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 493.075574][ T5923] gspca_stk1135: Sensor write failed [ 493.081086][ T5923] gspca_stk1135: serial bus timeout: status=0x00 [ 493.097057][ T5923] gspca_stk1135: Sensor write failed [ 493.104171][ T5923] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 493.120271][ T5923] usb 1-1: USB disconnect, device number 51 [ 493.375724][ T5893] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 493.499703][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 493.545702][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 493.563504][ T5893] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 493.573439][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.583143][ T5893] usb 3-1: Product: syz [ 493.587564][ T5893] usb 3-1: Manufacturer: syz [ 493.592304][ T5893] usb 3-1: SerialNumber: syz [ 493.600084][ T5893] usb 3-1: config 0 descriptor?? [ 493.785636][ T5876] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 493.940343][ T5876] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 493.955647][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.975728][ T5876] usb 1-1: Product: syz [ 493.979983][ T5876] usb 1-1: Manufacturer: syz [ 493.984585][ T5876] usb 1-1: SerialNumber: syz [ 494.004875][ T5876] usb 1-1: config 0 descriptor?? [ 494.021892][ T5893] airspy 3-1:0.0: Board ID: 00 [ 494.028582][ T5876] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 494.035114][ T5893] airspy 3-1:0.0: Firmware version: [ 494.624708][ T5893] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 494.644430][ T5893] airspy 3-1:0.0: Registered as swradio24 [ 494.651863][ T5893] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 494.683406][ T5893] usb 3-1: USB disconnect, device number 78 [ 495.048069][ T5876] gspca_sunplus: reg_r err -71 [ 495.053110][ T5876] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 495.064526][ T5876] usb 1-1: USB disconnect, device number 52 [ 495.098200][ T50] Bluetooth: hci2: unexpected cc 0x2002 length: 65 > 4 [ 495.105124][ T50] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 495.355428][ T50] Bluetooth: hci0: unexpected event for opcode 0x203d [ 495.376427][ T5948] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 495.545628][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 495.553834][ T5948] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 495.579481][ T5948] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 495.595363][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 495.604082][ T5948] usb 5-1: Product: syz [ 495.609280][ T5948] usb 5-1: Manufacturer: syz [ 495.613900][ T5948] usb 5-1: SerialNumber: syz [ 495.622209][T20378] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.935240][ T5893] usb 5-1: USB disconnect, device number 46 [ 496.167726][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 496.315661][ T24] usb 1-1: device descriptor read/64, error -71 [ 496.555764][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 496.595118][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6495'. [ 496.697177][ T24] usb 1-1: device descriptor read/64, error -71 [ 496.819487][ T24] usb usb1-port1: attempt power cycle [ 496.994792][T20439] Set syz1 is full, maxelem 65536 reached [ 497.185911][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 497.216346][ T24] usb 1-1: device descriptor read/8, error -71 [ 497.406274][T20461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.455692][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 497.497761][ T24] usb 1-1: device descriptor read/8, error -71 [ 497.606065][ T24] usb usb1-port1: unable to enumerate USB device [ 497.993139][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6524'. [ 498.541418][T20494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.046750][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 499.066144][T20515] bridge0: entered allmulticast mode [ 499.079365][T20515] pim6reg: entered allmulticast mode [ 499.206153][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 499.218116][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 499.233031][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 499.250532][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.261303][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.274448][ T9] usb 5-1: Product: syz [ 499.279713][ T9] usb 5-1: Manufacturer: syz [ 499.284546][ T9] usb 5-1: SerialNumber: syz [ 499.365866][ T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 499.382447][ T50] Bluetooth: hci0: Injecting HCI hardware error event [ 499.390895][ T50] Bluetooth: hci0: hardware error 0x00 [ 499.723665][T20508] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.745833][T20508] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 499.825878][T20540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.178685][T20555] syzkaller1: entered promiscuous mode [ 500.184187][T20555] syzkaller1: entered allmulticast mode [ 500.360162][ T9] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 500.386788][ T9] cdc_ncm 5-1:1.0: bind() failure [ 500.408612][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 500.415436][ T9] cdc_ncm 5-1:1.1: bind() failure [ 500.472162][ T9] usb 5-1: USB disconnect, device number 47 [ 500.629647][T20573] input: syz1 as /devices/virtual/input/input41 [ 500.676441][T20576] syzkaller1: entered promiscuous mode [ 500.682020][T20576] syzkaller1: entered allmulticast mode [ 500.891163][T20584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.912361][T20586] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 501.289530][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.415611][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 501.447157][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 501.571422][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.583726][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 501.596757][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.605880][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 501.635119][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 501.657485][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.673347][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.690078][ T24] usb 5-1: Product: syz [ 501.696123][ T24] usb 5-1: Manufacturer: syz [ 501.715000][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 501.724431][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 501.737100][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 501.745552][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 502.293032][T20642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6595'. [ 502.493878][ T5893] usb 5-1: USB disconnect, device number 48 [ 502.855854][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 503.024149][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.035166][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.048464][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.057879][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.070111][ T24] usb 3-1: SerialNumber: syz [ 503.092453][T20679] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6611'. [ 503.321617][ T24] usb 3-1: 0:2 : does not exist [ 503.363276][ T24] usb 3-1: USB disconnect, device number 79 [ 503.414601][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.802841][T20699] batman_adv: batadv0: adding TT local entry 24:02:48:ff:05:00 to non-existent VLAN 1280 [ 504.007691][T20708] syzkaller1: entered promiscuous mode [ 504.023218][T20708] syzkaller1: entered allmulticast mode [ 504.194977][T20715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.020047][T20765] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6649'. [ 505.128737][T20765] syz.3.6649 (20765) used greatest stack depth: 17992 bytes left [ 505.410132][T20779] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6663'. [ 505.643534][T20786] batman_adv: batadv0: adding TT local entry 24:02:48:ff:05:00 to non-existent VLAN 1280 [ 505.772262][T20792] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.913117][T20802] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6666'. [ 506.375802][ T5893] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 506.527594][ T5893] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.536586][ T5893] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 506.547144][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.556200][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 506.567642][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 506.580241][ T5893] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.589600][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.597932][ T5893] usb 1-1: Product: syz [ 506.602131][ T5893] usb 1-1: Manufacturer: syz [ 506.612197][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 506.617552][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 506.624041][ T5893] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 506.630132][ T5893] cdc_wdm 1-1:1.0: Unknown control protocol [ 507.396448][ T24] usb 1-1: USB disconnect, device number 57 [ 507.648103][T20878] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6695'. [ 508.179356][T20895] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 508.216057][T20895] overlayfs: maximum fs stacking depth exceeded [ 510.266740][ T5948] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 510.427182][ T5948] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 510.441358][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.453823][ T5948] usb 3-1: Product: syz [ 510.458973][ T5948] usb 3-1: Manufacturer: syz [ 510.463779][ T5948] usb 3-1: SerialNumber: syz [ 510.472200][ T5948] usb 3-1: config 0 descriptor?? [ 510.496948][ T5948] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 510.650630][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6732'. [ 510.985974][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6740'. [ 511.521263][ T5948] gspca_sunplus: reg_r err -71 [ 511.540983][ T5948] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 511.552259][ T5948] usb 3-1: USB disconnect, device number 80 [ 511.895628][ T5893] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 512.046934][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 512.062982][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.086659][ T5893] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 512.097922][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.116827][ T5893] usb 5-1: config 0 descriptor?? [ 512.330921][ T5893] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 512.737037][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6765'. [ 512.790824][ T5893] usb 5-1: USB disconnect, device number 49 [ 513.028003][T21042] netlink: 'syz.3.6772': attribute type 29 has an invalid length. [ 513.039998][T21042] netlink: 'syz.3.6772': attribute type 29 has an invalid length. [ 513.050496][T21042] netlink: 'syz.3.6772': attribute type 29 has an invalid length. [ 513.060811][T21042] netlink: 'syz.3.6772': attribute type 29 has an invalid length. [ 513.245769][ T5893] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 513.405650][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 513.417259][ T5893] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 513.427341][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.435428][ T5893] usb 3-1: Product: syz [ 513.444821][ T5893] usb 3-1: Manufacturer: syz [ 513.449909][ T5893] usb 3-1: SerialNumber: syz [ 513.461192][ T5893] usb 3-1: config 0 descriptor?? [ 513.855206][T21065] program syz.4.6781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.080474][ T5893] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 514.106496][ T5893] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 514.113366][ T5893] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 514.186342][ T5893] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 514.290989][ T5948] usb 3-1: USB disconnect, device number 81 [ 514.404468][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6792'. [ 514.476040][T21097] netlink: 'syz.4.6795': attribute type 29 has an invalid length. [ 514.486527][T21097] netlink: 'syz.4.6795': attribute type 29 has an invalid length. [ 514.497648][T21097] netlink: 'syz.4.6795': attribute type 29 has an invalid length. [ 514.517916][T21097] netlink: 'syz.4.6795': attribute type 29 has an invalid length. [ 514.975132][T21124] syzkaller1: entered promiscuous mode [ 514.980914][T21124] syzkaller1: entered allmulticast mode [ 515.055429][T21128] netlink: 'syz.4.6809': attribute type 29 has an invalid length. [ 515.066133][T21128] netlink: 'syz.4.6809': attribute type 29 has an invalid length. [ 515.157302][T21132] program syz.2.6810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.518650][T21153] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x1 [ 515.826754][T21164] binder: 21163:21164 ioctl c0306201 200000000540 returned -22 [ 516.066067][T21180] netlink: 'syz.3.6831': attribute type 11 has an invalid length. [ 516.073898][T21180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6831'. [ 516.166564][T21184] overlayfs: failed to clone upperpath [ 516.265735][ T24] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 516.429204][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.443959][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 516.457538][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.468065][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 516.481589][ T24] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 516.490746][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.502042][ T24] usb 3-1: config 0 descriptor?? [ 516.655785][ T5893] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 516.727991][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 516.734234][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 516.749046][ T24] usb 3-1: USB disconnect, device number 82 [ 516.827106][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 516.850765][ T5893] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.861694][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.872842][ T5893] usb 5-1: config 0 descriptor?? [ 516.892988][ T5893] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 517.168937][ T5893] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 517.326926][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 517.346998][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.367193][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.382162][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.392459][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 517.425157][ T5893] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 517.435253][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.458343][ T5893] usb 3-1: config 0 descriptor?? [ 517.877313][ T5893] betop 0003:20BC:5500.0038: unknown main item tag 0x0 [ 517.887417][ T5893] betop 0003:20BC:5500.0038: unknown main item tag 0x0 [ 517.919297][ T5893] betop 0003:20BC:5500.0038: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.2-1/input0 [ 517.942039][ T5893] betop 0003:20BC:5500.0038: no inputs found [ 518.075886][ T5893] usb 3-1: USB disconnect, device number 83 [ 518.259570][T21247] validate_nla: 6 callbacks suppressed [ 518.259583][T21247] netlink: 'syz.0.6857': attribute type 29 has an invalid length. [ 518.274498][T21247] netlink: 'syz.0.6857': attribute type 29 has an invalid length. [ 518.284177][T21247] netlink: 'syz.0.6857': attribute type 29 has an invalid length. [ 518.292858][T21247] netlink: 'syz.0.6857': attribute type 29 has an invalid length. [ 518.392219][T21249] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.275612][ T5927] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 519.422344][ T9] usb 5-1: USB disconnect, device number 50 [ 519.425598][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 519.448798][ T5927] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 519.465826][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.481320][ T5927] usb 3-1: Product: syz [ 519.486311][ T5927] usb 3-1: Manufacturer: syz [ 519.490936][ T5927] usb 3-1: SerialNumber: syz [ 519.491021][T21284] IPVS: sh: UDP 224.0.0.2:20004 - no destination available [ 519.506819][ T5927] usb 3-1: config 0 descriptor?? [ 519.921298][ T5927] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 519.940320][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.954151][ T5927] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 519.987800][T21302] netlink: 624 bytes leftover after parsing attributes in process `syz.0.6880'. [ 519.991210][ T5927] usb 3-1: media controller created [ 520.035481][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.328631][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 520.384191][T21319] Invalid/unusable pipe [ 520.493383][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.512919][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 520.516412][T21325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6890'. [ 520.533511][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.558366][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.569884][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.579494][ T9] usb 1-1: Product: syz [ 520.583730][ T9] usb 1-1: Manufacturer: syz [ 520.589805][ T9] usb 1-1: SerialNumber: syz [ 520.600195][ T5927] zl10353_read_register: readreg error (reg=127, ret==0) [ 520.607508][T21282] dtv5100: wlen = 0, aborting. [ 520.627658][ T5927] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 520.646412][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 520.658476][ T5927] usb 3-1: USB disconnect, device number 84 [ 520.704643][ T5927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 521.236913][ T5876] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 521.410092][ T5876] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 521.428347][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.436683][ T5876] usb 5-1: Product: syz [ 521.440957][ T5876] usb 5-1: Manufacturer: syz [ 521.448936][ T5876] usb 5-1: SerialNumber: syz [ 521.457336][ T5876] usb 5-1: config 0 descriptor?? [ 521.626243][ T9] cdc_ncm 1-1:1.0: bind() failure [ 521.645660][ T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 521.666059][ T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 521.678528][ T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 521.694901][ T9] usb 1-1: USB disconnect, device number 58 [ 521.876190][ T5876] usb 5-1: Firmware version (0.0) predates our first public release. [ 521.884796][ T5876] usb 5-1: Please update to version 0.2 or newer [ 521.892724][ T5876] usb 5-1: Firmware: build [ 522.108087][ T5876] usb 5-1: USB disconnect, device number 51 [ 522.805926][ T5927] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 522.982228][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.005644][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.030158][ T5927] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 523.051214][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.065319][ T5927] usb 1-1: config 0 descriptor?? [ 523.237497][T21398] tipc: Started in network mode [ 523.255585][T21398] tipc: Node identity 4, cluster identity 4711 [ 523.261773][T21398] tipc: Node number set to 4 [ 523.502192][ T5927] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 523.519299][ T5927] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 523.665642][ T5876] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 523.691767][ T5927] cp2112 0003:10C4:EA90.0039: Part Number: 0x82 Device Version: 0xFE [ 523.765621][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 523.829355][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.847416][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.860819][ T5876] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 523.871917][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 523.880835][ T5876] usb 3-1: SerialNumber: syz [ 523.927858][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.939278][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.949442][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 523.958767][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 523.967009][ T9] usb 5-1: SerialNumber: syz [ 524.104047][ T5927] cp2112 0003:10C4:EA90.0039: error setting SMBus config [ 524.104182][ T5876] usb 3-1: 0:2 : does not exist [ 524.125182][ T5927] cp2112 0003:10C4:EA90.0039: probe with driver cp2112 failed with error -71 [ 524.143889][ T5927] usb 1-1: USB disconnect, device number 59 [ 524.148459][ T5876] usb 3-1: USB disconnect, device number 85 [ 524.195166][ T9] usb 5-1: 0:2 : does not exist [ 524.213734][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.244944][ T9] usb 5-1: USB disconnect, device number 52 [ 524.277100][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.235812][ T5927] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 525.399162][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.425666][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.435416][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.475563][ T5927] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.484614][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.497321][ T5927] usb 1-1: config 0 descriptor?? [ 525.597092][ T5893] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 525.758053][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.779879][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.799941][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 525.812085][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.830969][ T5893] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.842523][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.854540][ T5893] usb 5-1: config 0 descriptor?? [ 525.938942][ T5927] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 526.276760][ T5893] plantronics 0003:047F:FFFF.003B: ignoring exceeding usage max [ 526.292769][ T5893] plantronics 0003:047F:FFFF.003B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 526.732181][T21472] program syz.2.6953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.212849][T21490] overlayfs: failed to clone upperpath [ 527.236767][ T936] usb 5-1: USB disconnect, device number 53 [ 527.243039][T21490] overlayfs: failed to clone lowerpath [ 527.532415][T21504] program syz.2.6969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.844651][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6975'. [ 528.016670][ T5927] usb 1-1: USB disconnect, device number 60 [ 529.695631][ T936] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 529.855759][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 529.864130][ T936] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 529.874718][ T936] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.902681][ T936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.920161][ T936] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.950690][ T936] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.967140][ T936] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.976271][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.995681][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 530.171076][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 530.183542][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.199880][ T9] usb 5-1: config 0 descriptor?? [ 530.213101][ T936] usb 1-1: usb_control_msg returned -32 [ 530.217702][ T9] cp210x 5-1:0.0: cp210x converter detected [ 530.232276][ T936] usbtmc 1-1:16.0: can't read capabilities [ 530.588149][T21619] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 530.630419][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 530.796014][T18605] usb 1-1: USB disconnect, device number 61 [ 530.815711][ T936] psmouse serio3: Failed to reset mouse on : -5 [ 530.861112][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 531.048885][ T5927] usb 5-1: USB disconnect, device number 54 [ 531.066796][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 531.099000][ T5927] cp210x 5-1:0.0: device disconnected [ 531.370672][T21635] netlink: 'syz.0.7011': attribute type 4 has an invalid length. [ 532.066373][T21661] TCP: TCP_TX_DELAY enabled [ 532.153125][ T1169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.260519][ T1169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.369277][ T1169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.538863][ T1169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.822389][ T1169] bridge_slave_1: left allmulticast mode [ 532.836698][ T1169] bridge_slave_1: left promiscuous mode [ 532.842481][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.877011][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.923982][T17169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.937399][T17169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.945461][T17169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 532.955935][T17169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 532.966215][T17169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.397367][ T1169] bridge0 (unregistering): left allmulticast mode [ 533.579740][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.588963][ T1169] bond_slave_0: left promiscuous mode [ 533.597728][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.615980][ T1169] bond_slave_1: left promiscuous mode [ 533.631621][ T1169] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 533.642457][ T1169] batadv0: left promiscuous mode [ 533.659912][ T1169] bond0 (unregistering): Released all slaves [ 534.464566][T21684] chnl_net:caif_netlink_parms(): no params data found [ 534.548693][T21739] netlink: 'syz.3.7046': attribute type 21 has an invalid length. [ 534.561535][ T1169] hsr_slave_0: left promiscuous mode [ 534.569725][ T1169] hsr_slave_1: left promiscuous mode [ 534.576492][T21739] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7046'. [ 534.589185][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.605924][ T936] misc userio: Buffer overflowed, userio client isn't keeping up [ 534.614021][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.630771][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.649010][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.706861][ T1169] veth1_macvtap: left promiscuous mode [ 534.712433][ T1169] veth0_macvtap: left promiscuous mode [ 534.728099][ T1169] veth1_vlan: left promiscuous mode [ 534.733504][ T1169] veth0_vlan: left promiscuous mode [ 534.869617][ T1169] pim6reg (unregistering): left allmulticast mode [ 534.948453][T21749] loop6: detected capacity change from 0 to 63 [ 534.960656][ T5847] buffer_io_error: 31 callbacks suppressed [ 534.960670][ T5847] Buffer I/O error on dev loop6, logical block 0, async page read [ 534.987865][T21749] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 535.009807][T21749] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 535.018575][T21749] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 535.031268][T21750] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 535.040369][T21749] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 535.048869][T17169] Bluetooth: hci3: command tx timeout [ 535.065665][T21749] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 535.074191][T21749] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 535.082852][T21749] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 535.396491][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 535.432315][ T1169] team0 (unregistering): Port device C removed [ 535.683265][ T936] input: PS/2 Generic Mouse as /devices/serio3/input/input42 [ 535.931896][ T936] psmouse serio3: Failed to enable mouse on [ 536.110586][T21684] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.126087][T21684] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.136400][T21684] bridge_slave_0: entered allmulticast mode [ 536.144214][T21684] bridge_slave_0: entered promiscuous mode [ 536.153591][T21684] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.161179][T21684] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.168718][T21684] bridge_slave_1: entered allmulticast mode [ 536.183208][T21684] bridge_slave_1: entered promiscuous mode [ 536.299315][T21684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.334214][T21684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.443740][T21774] bond0: (slave rose0): Enslaving as an active interface with an up link [ 536.483212][T21684] team0: Port device team_slave_0 added [ 536.501877][T21684] team0: Port device team_slave_1 added [ 536.595811][ T1169] IPVS: stop unused estimator thread 0... [ 536.660169][T21684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.684021][T21684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.747860][T21684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.781544][T21790] netlink: 'syz.3.7061': attribute type 29 has an invalid length. [ 536.824969][T21684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.832046][T21684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.869937][T21684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.914239][T21794] netlink: 'syz.3.7061': attribute type 29 has an invalid length. [ 536.949172][T21790] netlink: 'syz.3.7061': attribute type 29 has an invalid length. [ 537.127278][T17169] Bluetooth: hci3: command tx timeout [ 537.221188][T21684] hsr_slave_0: entered promiscuous mode [ 537.242491][T21684] hsr_slave_1: entered promiscuous mode [ 537.258682][T21684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.275002][T21684] Cannot create hsr debugfs directory [ 537.644781][T21819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7070'. [ 537.653889][ T5893] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 537.737931][T21684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.766733][T21684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.789473][T21684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 537.812618][T21684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 537.829034][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.847903][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0 [ 537.876977][ T5893] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 537.897705][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.909239][ T5893] usb 3-1: Product: syz [ 537.922663][ T5893] usb 3-1: Manufacturer: syz [ 537.934444][ T5893] usb 3-1: SerialNumber: syz [ 537.952041][ T5893] usb 3-1: config 0 descriptor?? [ 537.978773][ T5893] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 538.012629][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 538.038266][ T5893] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 538.082493][ T5893] usb 3-1: media controller created [ 538.109338][T21684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.143348][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.155880][T21684] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.191109][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.198298][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.223107][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.230299][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.306937][ T5876] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 538.335121][ T5893] DVB: Unable to find symbol tda10046_attach() [ 538.442206][ T5893] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 538.470105][ T5893] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 538.506947][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.543893][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 538.601413][ T5876] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.625814][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.656896][ T5876] usb 5-1: config 0 descriptor?? [ 538.680974][ T5876] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 539.010370][T21684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.139909][ T5893] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 539.173812][ T5893] usb 3-1: USB disconnect, device number 86 [ 539.205803][T17169] Bluetooth: hci3: command tx timeout [ 539.427930][T21684] veth0_vlan: entered promiscuous mode [ 539.442589][T21684] veth1_vlan: entered promiscuous mode [ 539.485063][T21684] veth0_macvtap: entered promiscuous mode [ 539.501997][T21684] veth1_macvtap: entered promiscuous mode [ 539.538117][T21684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.559662][T21684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.579583][ T1169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.592265][ T1169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.615094][ T1169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.648482][ T1169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.752245][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.778384][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.869376][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.882991][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.275912][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7085'. [ 540.456406][T21917] loop6: detected capacity change from 0 to 63 [ 540.475080][T21917] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 540.501069][T21917] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 540.525288][T21917] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 540.542754][T21917] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 540.552635][T21917] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 540.552820][T21922] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 540.561449][T21917] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 540.587723][T21917] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 540.989937][T21933] syzkaller1: entered promiscuous mode [ 540.996507][T21933] syzkaller1: entered allmulticast mode [ 541.095947][ T5876] usb 5-1: USB disconnect, device number 55 [ 541.285972][T17169] Bluetooth: hci3: command tx timeout [ 541.600656][T21961] program syz.4.7100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.742230][T21969] netlink: 'syz.5.7102': attribute type 4 has an invalid length. [ 541.946433][T21982] batadv_slave_0: entered promiscuous mode [ 541.966263][T21979] batadv_slave_0: left promiscuous mode [ 543.287276][ T5876] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 543.376462][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 543.447613][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 543.458529][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.490077][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.513892][ T5876] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.524401][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.538434][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 543.557318][ T5906] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 543.581095][ T5876] usb 3-1: Product: syz [ 543.585443][ T5876] usb 3-1: Manufacturer: syz [ 543.590336][ T5906] usb 6-1: config 0 has no interface number 0 [ 543.601275][ T5876] usb 3-1: SerialNumber: syz [ 543.605043][T22034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.609138][ T5906] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 543.623967][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.627185][T22034] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 543.644998][ T5906] usb 6-1: Product: syz [ 543.649535][ T5906] usb 6-1: Manufacturer: syz [ 543.654272][ T5906] usb 6-1: SerialNumber: syz [ 543.674296][T22034] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 543.675438][ T5906] usb 6-1: config 0 descriptor?? [ 543.697664][ T5906] smsc95xx v2.0.0 [ 543.701194][T22034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 543.713251][T22034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 543.724916][T22034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 543.742499][T22034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 543.751059][T22034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 543.779911][T22034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 544.053826][ T5876] usb 3-1: 0:2 : does not exist [ 544.247620][T22058] netlink: 'syz.4.7128': attribute type 29 has an invalid length. [ 544.262017][T22058] netlink: 'syz.4.7128': attribute type 29 has an invalid length. [ 544.272463][T22058] netlink: 'syz.4.7128': attribute type 29 has an invalid length. [ 544.286996][T22058] netlink: 'syz.4.7128': attribute type 29 has an invalid length. [ 544.673171][ T24] usb 3-1: USB disconnect, device number 87 [ 544.706638][ T5906] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 544.718704][ T5906] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 544.729497][ T5906] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 544.742561][ T5906] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 544.754559][ T5906] usb 6-1: USB disconnect, device number 2 [ 544.846418][ T936] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 545.008065][ T936] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 545.017377][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.028004][ T936] usb 5-1: config 0 descriptor?? [ 545.036245][ T936] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 545.283219][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7141'. [ 545.441291][ T936] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 545.615649][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 545.656068][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 545.770035][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 545.770047][T17169] Bluetooth: hci2: command 0x0405 tx timeout [ 545.835629][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 545.847702][ T936] gspca_cpia1: usb_control_msg 02, error -32 [ 545.858953][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 545.875761][ T24] usb 3-1: config 0 has no interface number 0 [ 545.882082][ T936] gspca_cpia1: usb_control_msg 02, error -71 [ 545.894766][ T936] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 545.910144][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 545.929885][ T936] usb 5-1: USB disconnect, device number 56 [ 545.936006][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.958509][ T24] usb 3-1: Product: syz [ 545.962719][ T24] usb 3-1: Manufacturer: syz [ 545.978028][ T24] usb 3-1: SerialNumber: syz [ 545.994834][ T24] usb 3-1: config 0 descriptor?? [ 546.008324][ T24] smsc95xx v2.0.0 [ 546.820959][T22135] syzkaller1: entered promiscuous mode [ 546.827335][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 546.833325][T17169] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 546.840538][T22135] syzkaller1: entered allmulticast mode [ 546.983859][T22139] netlink: 'syz.4.7163': attribute type 29 has an invalid length. [ 547.000092][T22139] netlink: 'syz.4.7163': attribute type 29 has an invalid length. [ 547.010945][T22139] netlink: 'syz.4.7163': attribute type 29 has an invalid length. [ 547.020504][T22139] netlink: 'syz.4.7163': attribute type 29 has an invalid length. [ 547.040086][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 547.057595][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 547.070264][ T24] usb 3-1: USB disconnect, device number 88 [ 547.235597][ T5906] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 547.303312][T22149] syzkaller1: entered promiscuous mode [ 547.309041][T22149] syzkaller1: entered allmulticast mode [ 547.388367][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.403914][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 547.423334][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 547.433327][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.452323][ T5906] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.461659][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.477523][ T5906] usb 6-1: config 0 descriptor?? [ 547.595287][T22155] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 547.688541][T17169] Bluetooth: hci1: command 0x0406 tx timeout [ 547.766640][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 547.798305][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7175'. [ 547.846882][T17169] Bluetooth: hci3: command 0x0c1a tx timeout [ 547.852978][ T50] Bluetooth: hci2: command 0x0405 tx timeout [ 547.921665][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 547.934493][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 547.941810][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 547.954075][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 547.961654][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 547.969728][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 547.978066][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 547.985755][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 547.993254][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 548.001193][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 548.009456][ T5906] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 548.017555][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 548.026772][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.034776][ T9] usb 5-1: Product: syz [ 548.041401][ T9] usb 5-1: Manufacturer: syz [ 548.049119][T22174] syzkaller1: entered promiscuous mode [ 548.054631][T22174] syzkaller1: entered allmulticast mode [ 548.064829][ T5906] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 548.086993][ T9] usb 5-1: SerialNumber: syz [ 548.106537][ T9] usb 5-1: config 0 descriptor?? [ 548.183528][ T5923] usb 6-1: USB disconnect, device number 3 [ 548.243024][T22177] fido_id[22177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 548.542523][T22189] netlink: 'syz.3.7185': attribute type 29 has an invalid length. [ 548.557416][T22189] netlink: 'syz.3.7185': attribute type 29 has an invalid length. [ 548.639808][T22192] syzkaller1: entered promiscuous mode [ 548.645356][T22192] syzkaller1: entered allmulticast mode [ 548.649363][T22194] netlink: 624 bytes leftover after parsing attributes in process `syz.3.7188'. [ 548.735940][ T9] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 548.762631][ T9] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 548.779852][ T9] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 548.877061][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 548.970806][ T5923] usb 5-1: USB disconnect, device number 57 [ 549.169231][T22213] syzkaller1: entered promiscuous mode [ 549.185441][T22213] syzkaller1: entered allmulticast mode [ 549.765657][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 549.926411][ T50] Bluetooth: hci2: command 0x0405 tx timeout [ 549.933588][T17169] Bluetooth: hci3: command 0x0c1a tx timeout [ 549.955596][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 550.117072][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.127145][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.140564][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 550.150150][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.375685][ T9] usb 6-1: usb_control_msg returned -32 [ 550.381327][ T9] usbtmc 6-1:16.0: can't read capabilities [ 550.518745][T22250] validate_nla: 2 callbacks suppressed [ 550.518762][T22250] netlink: 'syz.4.7212': attribute type 10 has an invalid length. [ 550.533468][T22250] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7212'. [ 550.552244][T22266] syzkaller1: entered promiscuous mode [ 550.557841][T22266] syzkaller1: entered allmulticast mode [ 550.751983][T22270] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 551.101834][T22286] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7230'. [ 551.843610][T22319] input: syz1 as /devices/virtual/input/input43 [ 551.926217][ T5893] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 552.081165][ T5893] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 552.090667][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.109532][ T5893] usb 5-1: Product: syz [ 552.118713][ T5893] usb 5-1: Manufacturer: syz [ 552.123396][ T5893] usb 5-1: SerialNumber: syz [ 552.140625][ T5893] usb 5-1: config 0 descriptor?? [ 552.153102][ T5893] ch341 5-1:0.0: ch341-uart converter detected [ 552.247211][ T5923] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 552.419086][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 552.445435][ T5923] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 552.470171][ T5923] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.505524][ T5923] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.540434][ T5923] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 552.577523][ T5923] usb 3-1: config 7 interface 0 has no altsetting 0 [ 552.594336][ T5923] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 552.649949][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.789799][ T936] usb 6-1: USB disconnect, device number 4 [ 553.044549][T22351] netlink: 'syz.5.7241': attribute type 29 has an invalid length. [ 553.086776][T22351] netlink: 'syz.5.7241': attribute type 29 has an invalid length. [ 553.105976][T22351] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7241'. [ 553.184206][ T5893] ch341-uart ttyUSB0: failed to read break control: -71 [ 553.205933][ T5893] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 553.232674][ T5923] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.003D/input/input44 [ 553.267251][ T5893] usb 5-1: USB disconnect, device number 58 [ 553.310861][ T5893] ch341 5-1:0.0: device disconnected [ 553.419472][ T5923] kye 0003:0458:5010.003D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 553.492539][ T5923] usb 3-1: USB disconnect, device number 89 [ 553.556214][ T5927] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 553.584474][T22358] fido_id[22358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 553.714242][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.741233][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.777622][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.795547][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 553.818739][ T5927] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 553.828155][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.880202][ T5927] usb 6-1: config 0 descriptor?? [ 554.112548][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 554.145763][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 554.176956][ T5927] usb 6-1: USB disconnect, device number 5 [ 554.669469][ T5927] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 554.855557][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 554.870585][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.891916][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.913175][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.937085][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 554.973574][ T5927] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 555.013083][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.044790][ T5927] usb 6-1: config 0 descriptor?? [ 555.050736][ T5923] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 555.221598][ T5923] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 555.251492][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.264208][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.281192][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 555.311158][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 555.330765][ T5923] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 555.356311][ T5923] usb 3-1: Manufacturer: syz [ 555.376880][ T5923] usb 3-1: config 0 descriptor?? [ 555.491011][ T5927] betop 0003:20BC:5500.003E: unknown main item tag 0x0 [ 555.517164][ T5927] betop 0003:20BC:5500.003E: unknown main item tag 0x0 [ 555.562616][ T5927] betop 0003:20BC:5500.003E: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.5-1/input0 [ 555.580118][ T5927] betop 0003:20BC:5500.003E: no inputs found [ 555.713970][ T5927] usb 6-1: USB disconnect, device number 6 [ 555.782756][T22436] fido_id[22436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 555.803906][ T5923] appleir 0003:05AC:8243.003F: unknown main item tag 0x0 [ 555.832073][ T5923] appleir 0003:05AC:8243.003F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 556.057039][ T5927] usb 3-1: USB disconnect, device number 90 [ 557.018680][T22484] overlayfs: conflicting lowerdir path [ 557.520826][T22509] netlink: 'syz.3.7287': attribute type 29 has an invalid length. [ 557.541589][T22509] netlink: 'syz.3.7287': attribute type 29 has an invalid length. [ 557.562185][T22509] netlink: 'syz.3.7287': attribute type 29 has an invalid length. [ 557.577668][T22509] netlink: 'syz.3.7287': attribute type 29 has an invalid length. [ 558.362553][T22553] syzkaller1: entered promiscuous mode [ 558.390842][T22553] syzkaller1: entered allmulticast mode [ 558.415912][T22557] program syz.4.7303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.530973][T22613] program syz.5.7321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.685427][ T30] audit: type=1800 audit(1750932295.972:139): pid=22622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7325" name="nullb0" dev="tmpfs" ino=2280 res=0 errno=0 [ 560.059161][T22639] dvmrp0: entered allmulticast mode [ 560.435572][ T5923] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 560.614171][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.637322][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.664355][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 560.674650][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.692452][ T5923] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.702365][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.735364][ T5923] usb 3-1: config 0 descriptor?? [ 561.200976][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.224801][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.240640][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.248860][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.257477][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.265146][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.277803][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.291534][T22698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.301914][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.313932][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.328290][ T5923] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 561.362141][ T5923] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 561.375905][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 561.462053][T18605] usb 3-1: USB disconnect, device number 91 [ 561.495396][T22701] fido_id[22701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 561.565759][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 561.579567][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 561.599563][ T9] usb 5-1: config 179 has no interface number 0 [ 561.626795][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 561.656905][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 561.681560][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 561.694379][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 561.713400][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 561.731596][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 561.744971][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 561.769103][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.807040][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input45 [ 561.857050][ T5188] input input45: unable to receive magic message: -110 [ 561.870942][ T5188] input input45: unable to receive magic message: -32 [ 561.887577][ T5188] input input45: unable to receive magic message: -32 [ 561.900519][ T6269] input input45: unable to receive magic message: -32 [ 561.905648][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 561.926117][ T5188] input input45: unable to receive magic message: -32 [ 561.934373][ T5188] input input45: unable to receive magic message: -32 [ 562.065638][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 562.082870][ T5923] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 562.105557][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.137030][ T5923] usb 6-1: config 0 descriptor?? [ 562.154116][ T5923] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 562.203023][ T9] usb 5-1: USB disconnect, device number 59 [ 562.209199][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 562.241570][ T9] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 562.675747][ T936] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 562.715828][T22730] netlink: 'syz.3.7361': attribute type 21 has an invalid length. [ 562.724000][T22730] netlink: 'syz.3.7361': attribute type 13 has an invalid length. [ 562.737755][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.746764][T22730] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7361'. [ 562.837799][ T936] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 562.855633][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.877837][ T936] usb 3-1: config 0 descriptor?? [ 562.897467][ T936] cp210x 3-1:0.0: cp210x converter detected [ 562.963061][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 562.984156][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.000733][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.014759][T22738] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 563.039882][T22738] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 563.108912][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.118076][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.128098][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.139483][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.159260][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.167308][T22738] syzkaller0 speed is unknown, defaulting to 1000 [ 563.192718][T18605] usb 6-1: USB disconnect, device number 7 [ 563.292637][ T936] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 563.315403][ T936] usb 3-1: cp210x converter now attached to ttyUSB0 [ 563.334422][T22743] syzkaller1: entered promiscuous mode [ 563.350852][T22743] syzkaller1: entered allmulticast mode [ 563.520501][ T936] usb 3-1: USB disconnect, device number 92 [ 563.543522][ T936] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 563.560892][ T936] cp210x 3-1:0.0: device disconnected [ 564.766130][T18605] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 564.783628][T22796] syzkaller1: entered promiscuous mode [ 564.789300][T22796] syzkaller1: entered allmulticast mode [ 564.798674][T22797] syzkaller1: entered promiscuous mode [ 564.804316][T22797] syzkaller1: entered allmulticast mode [ 564.942000][T18605] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 564.954641][T18605] usb 5-1: config 0 has no interface number 0 [ 564.970279][T18605] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 564.989176][T18605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.016182][T18605] usb 5-1: Product: syz [ 565.020375][T18605] usb 5-1: Manufacturer: syz [ 565.025088][T18605] usb 5-1: SerialNumber: syz [ 565.041881][T18605] usb 5-1: config 0 descriptor?? [ 565.050697][T18605] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 565.865842][T18605] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 566.071401][ T9] usb 5-1: USB disconnect, device number 60 [ 566.397388][T22823] netlink: 'syz.3.7403': attribute type 29 has an invalid length. [ 566.414860][T22823] netlink: 'syz.3.7403': attribute type 29 has an invalid length. [ 567.477289][T22859] netlink: 'syz.5.7419': attribute type 39 has an invalid length. [ 567.657338][T22869] netlink: 'syz.2.7424': attribute type 29 has an invalid length. [ 567.669965][T22869] netlink: 'syz.2.7424': attribute type 29 has an invalid length. [ 567.683736][T22869] netlink: 'syz.2.7424': attribute type 29 has an invalid length. [ 567.702015][T22869] netlink: 'syz.2.7424': attribute type 29 has an invalid length. [ 567.730600][T22871] syzkaller1: entered promiscuous mode [ 567.736823][T22871] syzkaller1: entered allmulticast mode [ 567.858348][T22877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.221469][T22896] netlink: 'syz.4.7436': attribute type 29 has an invalid length. [ 568.251062][T22896] netlink: 'syz.4.7436': attribute type 29 has an invalid length. [ 568.263302][T22898] 9pnet_fd: Insufficient options for proto=fd [ 568.267905][T22896] netlink: 'syz.4.7436': attribute type 29 has an invalid length. [ 568.297795][T22896] netlink: 'syz.4.7436': attribute type 29 has an invalid length. [ 568.345734][T18605] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 568.418683][T22908] batadv_slave_1: entered promiscuous mode [ 568.429918][T22907] batadv_slave_1: left promiscuous mode [ 568.538263][T18605] usb 6-1: Using ep0 maxpacket: 32 [ 568.557239][T18605] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 568.568783][T18605] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 568.578456][T18605] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 568.588273][T18605] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.600271][T18605] usb 6-1: config 0 descriptor?? [ 568.834309][ T5893] usb 6-1: USB disconnect, device number 8 [ 569.805718][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 569.825651][ T5893] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 569.977323][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 569.984214][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 569.993555][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.003640][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 570.016450][ T5923] usb 6-1: config 0 descriptor?? [ 570.023463][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 570.041674][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 570.054761][ T5893] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 570.067563][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.076744][ T5893] usb 5-1: Product: syz [ 570.080930][ T5893] usb 5-1: Manufacturer: syz [ 570.088760][ T5893] usb 5-1: SerialNumber: syz [ 570.097410][ T5893] usb 5-1: config 0 descriptor?? [ 570.103062][T22962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 570.110618][T22962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 570.121635][ T5893] usb 5-1: ucan: probing device on interface #0 [ 570.145629][ T936] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 570.316694][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 570.340219][ T936] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 570.355895][ T936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 570.364166][ T936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 570.372912][ T936] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 570.381502][ T936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 570.393759][ T936] usb 3-1: config 0 has no interface number 0 [ 570.400271][ T936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 570.413685][ T936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 570.423952][ T936] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 570.435052][ T936] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.449345][ T936] usb 3-1: config 0 interface 125 has no altsetting 0 [ 570.456596][ T936] usb 3-1: config 0 interface 125 has no altsetting 2 [ 570.471251][ T936] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 570.482584][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.497290][ T936] usb 3-1: Product: syz [ 570.501644][ T936] usb 3-1: Manufacturer: syz [ 570.510258][ T936] usb 3-1: SerialNumber: syz [ 570.526880][ T936] usb 3-1: config 0 descriptor?? [ 570.539785][ T936] usb 3-1: selecting invalid altsetting 2 [ 570.765021][ T5893] ucan 5-1:0.0 can0: registered device [ 570.960514][ T5893] ucan 5-1:0.0 can0: firmware string: unknown [ 570.973884][ T5893] usb 5-1: USB disconnect, device number 61 [ 571.042799][ T5923] video4linux radio48: keene_cmd_set failed (-71) [ 571.051863][ T5923] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 571.066333][ T5923] usb 6-1: USB disconnect, device number 9 [ 571.569872][ T5923] usb 3-1: USB disconnect, device number 93 [ 572.126231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 572.415631][ T5876] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 572.587902][ T5876] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 572.615629][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.636625][ T5876] usb 3-1: config 0 descriptor?? [ 572.650261][ T5876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 573.053537][ T5876] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 573.332177][T23033] tmpfs: Invalid gid '0x00000000ffffffff' [ 573.456691][ T5876] gspca_cpia1: usb_control_msg 02, error -32 [ 573.468894][ T5876] gspca_cpia1: usb_control_msg 02, error -71 [ 573.475204][ T5876] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 573.499553][ T5876] usb 3-1: USB disconnect, device number 94 [ 575.605716][T23038] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 575.605766][T17169] Bluetooth: hci1: command 0x0406 tx timeout [ 576.496140][T23038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.503267][T23038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.748490][ T5893] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 576.919877][ T5893] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 576.945590][ T5893] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 576.979715][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.995586][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.010853][ T5893] usb 3-1: Product: syz [ 577.015131][ T5893] usb 3-1: Manufacturer: syz [ 577.024302][ T5893] usb 3-1: SerialNumber: syz [ 577.121669][T23089] syzkaller1: entered promiscuous mode [ 577.127556][T23089] syzkaller1: entered allmulticast mode [ 577.268089][ T5893] cdc_ncm 3-1:1.0: bind() failure [ 577.283502][ T5893] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 577.291515][ T5893] cdc_ncm 3-1:1.1: bind() failure [ 577.309248][ T5893] usb 3-1: USB disconnect, device number 95 [ 577.688210][T17169] Bluetooth: hci2: command 0x0405 tx timeout [ 578.575659][T17169] Bluetooth: hci3: command 0x0c1a tx timeout [ 578.959751][T23150] syzkaller0 speed is unknown, defaulting to 1000 [ 579.075657][ T5893] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 579.250027][ T5893] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 579.264918][ T5893] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 579.287807][ T5893] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.313748][T23166] syzkaller1: entered promiscuous mode [ 579.320871][T23166] syzkaller1: entered allmulticast mode [ 579.328863][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 579.342558][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.351835][ T5893] usb 3-1: Product: syz [ 579.356392][ T5893] usb 3-1: Manufacturer: syz [ 579.361007][ T5893] usb 3-1: SerialNumber: syz [ 579.539538][T23175] netlink: 'syz.5.7558': attribute type 29 has an invalid length. [ 579.548936][T23175] netlink: 'syz.5.7558': attribute type 29 has an invalid length. [ 579.557636][T23175] netlink: 'syz.5.7558': attribute type 29 has an invalid length. [ 579.570883][T23175] netlink: 'syz.5.7558': attribute type 29 has an invalid length. [ 579.584571][ T5893] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 579.820010][ T5893] usb 3-1: USB disconnect, device number 96 [ 579.836105][ T5893] usblp0: removed [ 579.876411][ T5876] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 580.035560][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 580.047394][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.093946][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.116950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 580.125569][ T5876] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 580.138055][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.189948][ T5876] usb 6-1: config 0 descriptor?? [ 580.539579][ T5927] hid_parser_main: 5 callbacks suppressed [ 580.539600][ T5927] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 580.583445][ T5927] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 580.674302][ T5876] ft260 0003:0403:6030.0042: unknown main item tag 0x0 [ 580.676209][T23192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7565'. [ 580.776789][T23198] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 580.860634][ T5876] ft260 0003:0403:6030.0042: chip code: 6424 8183 [ 581.276632][T18605] usb 6-1: USB disconnect, device number 10 [ 581.444266][T23217] 9pnet_fd: Insufficient options for proto=fd [ 581.540377][T23221] netlink: 'syz.3.7579': attribute type 29 has an invalid length. [ 581.550130][T23221] netlink: 'syz.3.7579': attribute type 29 has an invalid length. [ 581.570553][T23221] netlink: 'syz.3.7579': attribute type 29 has an invalid length. [ 581.581022][T23221] netlink: 'syz.3.7579': attribute type 29 has an invalid length. [ 581.799312][T23236] program syz.2.7585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.341588][T22345] Bluetooth: (null): Invalid header checksum [ 582.349425][T22345] Bluetooth: (null): Invalid header checksum [ 582.425811][ T5876] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 582.456025][ T12] Bluetooth: (null): Invalid header checksum [ 582.469128][T18605] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 582.569488][ T12] Bluetooth: (null): Invalid header checksum [ 582.587021][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 582.590510][T23274] loop8: detected capacity change from 0 to 7 [ 582.599269][ T5876] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 582.606970][T23274] Dev loop8: unable to read RDB block 7 [ 582.612867][T23274] loop8: unable to read partition table [ 582.622452][ T5876] usb 3-1: config 0 has no interface number 0 [ 582.631417][T23274] loop8: partition table beyond EOD, truncated [ 582.641080][ T5876] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.658940][T23274] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 582.675997][ T12] Bluetooth: (null): Invalid header checksum [ 582.682289][T18605] usb 5-1: Using ep0 maxpacket: 8 [ 582.687447][ T5876] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.710234][T18605] usb 5-1: config 0 has no interfaces? [ 582.719828][ T5876] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 582.734323][T18605] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.755265][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.764010][T18605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.786566][ T1169] Bluetooth: (null): Invalid header checksum [ 582.801244][ T5876] usb 3-1: config 0 descriptor?? [ 582.811176][T18605] usb 5-1: config 0 descriptor?? [ 582.896042][ T1169] Bluetooth: (null): Invalid header checksum [ 583.008441][T20209] Bluetooth: (null): Invalid header checksum [ 583.042403][T18605] usb 5-1: USB disconnect, device number 62 [ 583.443911][ T5876] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0043/input/input47 [ 583.495844][ T5876] uclogic 0003:28BD:0094.0043: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 583.640880][ T5893] usb 3-1: USB disconnect, device number 97 [ 583.715601][ T5927] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 583.831348][T23314] loop8: detected capacity change from 0 to 79 [ 583.899800][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.915581][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 583.945607][ T5927] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 583.961873][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.976491][ T5927] usb 6-1: config 0 descriptor?? [ 584.246430][T23320] program syz.2.7621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.350145][T23324] loop6: detected capacity change from 0 to 524287999 [ 584.420558][ T5927] kovaplus 0003:1E7D:2D50.0044: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 584.665849][ T5876] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 584.822748][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 584.840977][ T5876] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.865826][ T5876] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.898252][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 584.904997][ T5876] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 584.937054][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.958205][ T5876] usb 5-1: config 0 descriptor?? [ 585.004759][ T5927] kovaplus 0003:1E7D:2D50.0044: couldn't init struct kovaplus_device [ 585.019735][ T5927] kovaplus 0003:1E7D:2D50.0044: couldn't install mouse [ 585.041399][ T5927] kovaplus 0003:1E7D:2D50.0044: probe with driver kovaplus failed with error -71 [ 585.068319][ T5927] usb 6-1: USB disconnect, device number 11 [ 585.384087][ T5876] kye 0003:0458:0138.0045: unknown main item tag 0x4 [ 585.394155][ T5876] kye 0003:0458:0138.0045: unexpected long global item [ 585.401870][ T5876] kye 0003:0458:0138.0045: parse failed [ 585.407646][ T5876] kye 0003:0458:0138.0045: probe with driver kye failed with error -22 [ 586.443091][T23365] netlink: 'syz.2.7642': attribute type 29 has an invalid length. [ 586.455209][T23365] netlink: 'syz.2.7642': attribute type 29 has an invalid length. [ 586.469720][T23365] netlink: 'syz.2.7642': attribute type 29 has an invalid length. [ 586.478978][T23365] netlink: 'syz.2.7642': attribute type 29 has an invalid length. [ 587.161242][T23402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7659'. [ 587.436018][ T5927] usb 5-1: USB disconnect, device number 63 [ 587.476168][ T5893] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 587.546963][T23412] netlink: 'syz.4.7663': attribute type 29 has an invalid length. [ 587.572207][T23412] netlink: 'syz.4.7663': attribute type 29 has an invalid length. [ 587.586207][T23412] netlink: 'syz.4.7663': attribute type 29 has an invalid length. [ 587.602837][T23412] netlink: 'syz.4.7663': attribute type 29 has an invalid length. [ 587.674035][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 587.696507][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 587.716288][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 587.741780][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.759583][ T5893] usb 3-1: Product: syz [ 587.763760][ T5893] usb 3-1: Manufacturer: syz [ 587.769051][ T5893] usb 3-1: SerialNumber: syz [ 587.785743][ T5893] usb 3-1: config 0 descriptor?? [ 587.827047][T23422] netlink: 'syz.3.7668': attribute type 29 has an invalid length. [ 587.838444][T23422] netlink: 'syz.3.7668': attribute type 29 has an invalid length. [ 587.901008][T23424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7669'. [ 588.099183][ T5893] usb 3-1: USB disconnect, device number 98 [ 588.486792][T23451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.679484][T23454] block nbd2: shutting down sockets [ 588.787388][T23465] sctp: [Deprecated]: syz.3.7688 (pid 23465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.787388][T23465] Use struct sctp_sack_info instead [ 588.902833][T23457] block nbd5: shutting down sockets [ 589.902430][T23530] (syz.2.7717,23530,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 590.473915][T23554] program syz.5.7728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.495920][T18605] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 590.655937][T18605] usb 3-1: Using ep0 maxpacket: 8 [ 590.665034][T18605] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 590.695916][T18605] usb 3-1: config 179 has no interface number 0 [ 590.702236][T18605] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 590.725007][T18605] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 590.759212][T18605] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 590.788795][T18605] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 590.800888][T18605] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 590.856592][T18605] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 590.865917][T18605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.887658][T23567] overlayfs: failed to clone upperpath [ 590.900401][T23544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 590.927991][T23567] overlayfs: failed to clone upperpath [ 591.158684][T18605] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input48 [ 591.375274][T23544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7724'. [ 591.500902][T18605] usb 3-1: USB disconnect, device number 99 [ 591.506982][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 591.507064][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 591.556490][T18605] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 591.995854][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 592.163361][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 592.201893][ T9] usb 6-1: config 1 has no interface number 0 [ 592.235625][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.268496][ T9] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 592.280516][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6302, setting to 1024 [ 592.313998][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 592.333959][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.353750][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.366977][ T9] usb 6-1: Product: syz [ 592.373390][ T9] usb 6-1: Manufacturer: syz [ 592.381452][ T9] usb 6-1: SerialNumber: syz [ 592.626043][T23595] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 593.106195][T23633] validate_nla: 6 callbacks suppressed [ 593.106214][T23633] netlink: 'syz.4.7763': attribute type 29 has an invalid length. [ 593.124451][T23633] netlink: 'syz.4.7763': attribute type 29 has an invalid length. [ 593.136502][T23633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7763'. [ 593.256554][T23595] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 593.278987][ T9] cdc_ncm 6-1:1.1: bind() failure [ 593.473508][ T936] usb 6-1: USB disconnect, device number 12 [ 594.209548][T23656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7772'. [ 594.297241][T18605] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 594.495975][T18605] usb 6-1: Using ep0 maxpacket: 32 [ 594.504398][T18605] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 594.513988][T18605] usb 6-1: config 0 has no interface number 0 [ 594.533276][T18605] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 594.542852][T18605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.575598][T18605] usb 6-1: Product: syz [ 594.579801][T18605] usb 6-1: Manufacturer: syz [ 594.584404][T18605] usb 6-1: SerialNumber: syz [ 594.603289][T18605] usb 6-1: config 0 descriptor?? [ 594.615362][T18605] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 594.846625][T18605] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 594.886639][T18605] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 595.193667][T23694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 595.241313][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 595.256442][T18605] usb 6-1: USB disconnect, device number 13 [ 595.273418][T18605] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 595.308152][T18605] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 595.330796][T18605] quatech2 6-1:0.51: device disconnected [ 595.518328][T23707] syzkaller1: entered promiscuous mode [ 595.523940][T23707] syzkaller1: entered allmulticast mode [ 595.984769][T23720] binder: 23718:23720 ioctl c0306201 200000001a80 returned -14 [ 596.289593][T18605] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 596.458280][T18605] usb 6-1: Using ep0 maxpacket: 32 [ 596.469585][T18605] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 596.480608][T18605] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.492826][T18605] usb 6-1: config 0 descriptor?? [ 596.517536][T18605] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 597.266104][T23788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7832'. [ 597.395968][T23788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.408771][T23788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.420297][T23788] bond0 (unregistering): Released all slaves [ 597.455895][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 597.533416][T18605] gspca_nw80x: reg_w err -71 [ 597.543809][T18605] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 597.554021][T18605] usb 6-1: USB disconnect, device number 14 [ 597.615756][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 597.623250][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 597.632056][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 597.642493][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 597.653144][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 597.663675][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.677140][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 597.686608][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.901664][ T9] usb 3-1: usb_control_msg returned -32 [ 597.907762][ T9] usbtmc 3-1:16.0: can't read capabilities [ 598.261604][T23817] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 598.269477][ T9] usb 3-1: USB disconnect, device number 100 [ 598.373385][T23823] vxcan0: tx address claim with different name [ 598.773690][T23833] input: syz0 as /devices/virtual/input/input49 [ 599.510894][T23868] netlink: 'syz.5.7862': attribute type 21 has an invalid length. [ 599.547057][T23868] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.7862'. [ 600.427287][T23915] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 600.621644][ T9] IPVS: starting estimator thread 0... [ 600.735790][T23927] IPVS: using max 31 ests per chain, 74400 per kthread [ 600.916267][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 601.045655][ T5893] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 601.046456][T17169] Bluetooth: hci1: command 0x0406 tx timeout [ 601.060611][ T5893] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 601.095633][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 601.103926][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 601.127406][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 601.145617][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 601.164243][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 601.193893][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 601.224522][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.246320][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 601.260451][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.503721][ T9] usb 3-1: usb_control_msg returned -32 [ 601.504709][T23931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.515888][ T9] usbtmc 3-1:16.0: can't read capabilities [ 601.534514][T23931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.592785][ T5927] usb 3-1: USB disconnect, device number 101 [ 602.002691][T23980] vivid-004: disconnect [ 602.013438][T23980] vivid-004: reconnect [ 602.856952][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7904'. [ 603.205652][T17169] Bluetooth: hci2: command 0x0405 tx timeout [ 603.212625][ T5893] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 603.226404][ T5893] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 603.363565][T24040] 9pnet_fd: Insufficient options for proto=fd [ 603.945287][T24055] netlink: 372 bytes leftover after parsing attributes in process `syz.3.7913'. [ 604.752366][T24069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 604.763912][T24069] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 605.365750][T17169] Bluetooth: hci3: command 0x0c1a tx timeout [ 605.371877][ T5893] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 605.385525][ T5893] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 605.659415][T24099] syzkaller1: entered promiscuous mode [ 605.665060][T24099] syzkaller1: entered allmulticast mode [ 605.715396][T24101] syzkaller1: entered promiscuous mode [ 605.721216][T24101] syzkaller1: entered allmulticast mode [ 605.933913][T24111] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 606.047657][T24119] syzkaller1: entered promiscuous mode [ 606.053196][T24119] syzkaller1: entered allmulticast mode [ 607.043183][T24171] syzkaller0 speed is unknown, defaulting to 1000 [ 607.446063][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 607.448984][T17169] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 608.012696][T24207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.775658][ T5876] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 608.945889][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 608.952759][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.962639][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.972743][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.982876][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.995968][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 609.004987][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.242114][ T5876] usb 5-1: GET_CAPABILITIES returned 0 [ 609.248792][ T5876] usbtmc 5-1:16.0: can't read capabilities [ 609.423794][T24269] loop2: detected capacity change from 0 to 7 [ 609.433452][T24269] Dev loop2: unable to read RDB block 7 [ 609.439908][T24269] loop2: AHDI p2 p3 [ 609.443946][T24269] loop2: partition table partially beyond EOD, truncated [ 609.445750][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.452423][T24269] loop2: p2 size 150995456 extends beyond EOD, truncated [ 609.473579][ T936] usb 5-1: USB disconnect, device number 64 [ 609.536831][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 609.671576][T24275] input: syz1 as /devices/virtual/input/input50 [ 610.435580][T18605] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 610.504257][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8028'. [ 610.596310][T18605] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 610.620359][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.637061][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.653959][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.673204][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.683959][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.705681][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.714346][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.724171][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.739452][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.747596][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.768121][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.779350][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.787328][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.796359][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.810508][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.820890][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.830196][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.847944][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.863292][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.873055][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.884269][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.905954][T18605] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 610.915005][T18605] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 610.926512][T18605] usb 6-1: config 0 interface 0 has no altsetting 0 [ 610.935414][T18605] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 610.939793][T24332] syzkaller1: entered promiscuous mode [ 610.950316][T24332] syzkaller1: entered allmulticast mode [ 610.952181][T18605] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 610.965386][T18605] usb 6-1: Product: syz [ 610.970044][T18605] usb 6-1: Manufacturer: syz [ 610.974747][T18605] usb 6-1: SerialNumber: syz [ 610.982669][T18605] usb 6-1: config 0 descriptor?? [ 611.000899][T18605] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 611.263221][T24340] program syz.4.8038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.325934][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 611.326411][ T5893] usb 6-1: USB disconnect, device number 15 [ 611.371399][ T5893] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 612.195749][ T5893] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 612.347066][ T5893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 612.365535][ T5893] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 612.390331][ T5893] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 612.400613][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.446423][ T5893] usb 5-1: Product: syz [ 612.450613][ T5893] usb 5-1: Manufacturer: syz [ 612.455220][ T5893] usb 5-1: SerialNumber: syz [ 612.481737][ T5893] usb 5-1: config 0 descriptor?? [ 612.494969][T24375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 612.507554][T24375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 612.729418][T24375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 612.741314][T24375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 612.931158][T24424] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 613.163164][ T5893] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 613.367292][ T5893] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 613.393164][ T5893] usb 5-1: USB disconnect, device number 65 [ 613.406507][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 613.415095][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 613.432833][T24431] ceph: No mds server is up or the cluster is laggy [ 613.541032][T24438] syzkaller1: entered promiscuous mode [ 613.546685][T24438] syzkaller1: entered allmulticast mode [ 613.783810][T24444] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8086'. [ 614.256627][T24461] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 614.446730][T24471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8097'. [ 614.855548][ T5927] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 614.872320][T24491] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 615.019039][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.036880][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.064138][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 615.083900][T24500] syzkaller0 speed is unknown, defaulting to 1000 [ 615.090726][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 615.121582][ T30] audit: type=1800 audit(1750932351.412:140): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8114" name="nullb0" dev="tmpfs" ino=2280 res=0 errno=0 [ 615.142403][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.155585][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.173612][ T5927] usb 5-1: config 0 descriptor?? [ 615.617291][ T5927] plantronics 0003:047F:FFFF.0046: reserved main item tag 0xd [ 615.697317][ T5927] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 615.881015][T18605] usb 5-1: USB disconnect, device number 66 [ 615.893781][T24524] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 616.045459][T24532] (syz.5.8124,24532,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 616.112235][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 616.119670][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 616.151666][T24534] ceph: No mds server is up or the cluster is laggy [ 616.278784][T24543] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 616.774250][T24568] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8139'. [ 617.901853][T24628] syzkaller1: entered promiscuous mode [ 617.907597][T24628] syzkaller1: entered allmulticast mode [ 618.641383][T24671] syzkaller1: entered promiscuous mode [ 618.649302][T24671] syzkaller1: entered allmulticast mode [ 618.809975][T24677] syzkaller0 speed is unknown, defaulting to 1000 [ 619.004043][T24685] ================================================================== [ 619.012155][T24685] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 619.020082][T24685] Read of size 8 at addr ffff888029267130 by task syz.4.8190/24685 [ 619.027992][T24685] [ 619.030434][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.4.8190 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 619.030459][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.030478][T24685] Call Trace: [ 619.030487][T24685] [ 619.030494][T24685] dump_stack_lvl+0x189/0x250 [ 619.030518][T24685] ? __virt_addr_valid+0x1c8/0x5c0 [ 619.030542][T24685] ? rcu_is_watching+0x15/0xb0 [ 619.030559][T24685] ? __kasan_check_byte+0x12/0x40 [ 619.030580][T24685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.030601][T24685] ? rcu_is_watching+0x15/0xb0 [ 619.030619][T24685] ? lock_release+0x4b/0x3e0 [ 619.030649][T24685] ? __virt_addr_valid+0x1c8/0x5c0 [ 619.030671][T24685] ? __virt_addr_valid+0x4a5/0x5c0 [ 619.030694][T24685] print_report+0xd2/0x2b0 [ 619.030719][T24685] ? pause_parse_request+0x40/0x160 [ 619.030739][T24685] kasan_report+0x118/0x150 [ 619.030759][T24685] ? pause_parse_request+0x40/0x160 [ 619.030782][T24685] ? __pfx_pause_parse_request+0x10/0x10 [ 619.030802][T24685] pause_parse_request+0x40/0x160 [ 619.030823][T24685] ? __pfx_pause_parse_request+0x10/0x10 [ 619.030843][T24685] ethnl_default_set_doit+0x2be/0xa40 [ 619.030868][T24685] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 619.030902][T24685] genl_family_rcv_msg_doit+0x212/0x300 [ 619.030934][T24685] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.030969][T24685] ? bpf_lsm_capable+0x9/0x20 [ 619.030988][T24685] ? security_capable+0x7e/0x2e0 [ 619.031012][T24685] genl_rcv_msg+0x60e/0x790 [ 619.031042][T24685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.031068][T24685] ? ref_tracker_free+0x63a/0x7d0 [ 619.031088][T24685] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 619.031113][T24685] ? __pfx_ref_tracker_free+0x10/0x10 [ 619.031143][T24685] netlink_rcv_skb+0x205/0x470 [ 619.031165][T24685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.031193][T24685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.031223][T24685] ? down_read+0x1ad/0x2e0 [ 619.031248][T24685] genl_rcv+0x28/0x40 [ 619.031273][T24685] netlink_unicast+0x758/0x8d0 [ 619.031297][T24685] netlink_sendmsg+0x805/0xb30 [ 619.031323][T24685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.031347][T24685] ? aa_sock_msg_perm+0xf1/0x1d0 [ 619.031370][T24685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.031396][T24685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.031419][T24685] __sock_sendmsg+0x219/0x270 [ 619.031439][T24685] ____sys_sendmsg+0x505/0x830 [ 619.031467][T24685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.031498][T24685] ? import_iovec+0x74/0xa0 [ 619.031517][T24685] ___sys_sendmsg+0x21f/0x2a0 [ 619.031544][T24685] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.031586][T24685] ? __fget_files+0x2a/0x420 [ 619.031610][T24685] ? __fget_files+0x3a0/0x420 [ 619.031638][T24685] __x64_sys_sendmsg+0x19b/0x260 [ 619.031666][T24685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.031697][T24685] ? rcu_is_watching+0x15/0xb0 [ 619.031717][T24685] ? do_syscall_64+0xbe/0x3b0 [ 619.031741][T24685] do_syscall_64+0xfa/0x3b0 [ 619.031761][T24685] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.031780][T24685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.031799][T24685] ? clear_bhb_loop+0x60/0xb0 [ 619.031820][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.031844][T24685] RIP: 0033:0x7f3a8058e929 [ 619.031865][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.031883][T24685] RSP: 002b:00007f3a81490038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.031904][T24685] RAX: ffffffffffffffda RBX: 00007f3a807b5fa0 RCX: 00007f3a8058e929 [ 619.031918][T24685] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 619.031949][T24685] RBP: 00007f3a80610b39 R08: 0000000000000000 R09: 0000000000000000 [ 619.031963][T24685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.031977][T24685] R13: 0000000000000000 R14: 00007f3a807b5fa0 R15: 00007ffebed3be48 [ 619.032002][T24685] [ 619.032010][T24685] [ 619.414376][T24685] Allocated by task 24685: [ 619.418785][T24685] kasan_save_track+0x3e/0x80 [ 619.423474][T24685] __kasan_kmalloc+0x93/0xb0 [ 619.428058][T24685] __kmalloc_noprof+0x27a/0x4f0 [ 619.432903][T24685] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 619.438983][T24685] genl_family_rcv_msg_doit+0xb8/0x300 [ 619.444441][T24685] genl_rcv_msg+0x60e/0x790 [ 619.448945][T24685] netlink_rcv_skb+0x205/0x470 [ 619.453708][T24685] genl_rcv+0x28/0x40 [ 619.457690][T24685] netlink_unicast+0x758/0x8d0 [ 619.462446][T24685] netlink_sendmsg+0x805/0xb30 [ 619.467214][T24685] __sock_sendmsg+0x219/0x270 [ 619.471887][T24685] ____sys_sendmsg+0x505/0x830 [ 619.476686][T24685] ___sys_sendmsg+0x21f/0x2a0 [ 619.481372][T24685] __x64_sys_sendmsg+0x19b/0x260 [ 619.486313][T24685] do_syscall_64+0xfa/0x3b0 [ 619.490817][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.496703][T24685] [ 619.499030][T24685] The buggy address belongs to the object at ffff888029267100 [ 619.499030][T24685] which belongs to the cache kmalloc-64 of size 64 [ 619.512908][T24685] The buggy address is located 8 bytes to the right of [ 619.512908][T24685] allocated 40-byte region [ffff888029267100, ffff888029267128) [ 619.527398][T24685] [ 619.529728][T24685] The buggy address belongs to the physical page: [ 619.536139][T24685] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29267 [ 619.544912][T24685] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 619.552022][T24685] page_type: f5(slab) [ 619.556008][T24685] raw: 00fff00000000000 ffff88801a8418c0 ffffea0001a9c1c0 dead000000000004 [ 619.564585][T24685] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 619.573166][T24685] page dumped because: kasan: bad access detected [ 619.579575][T24685] page_owner tracks the page as allocated [ 619.585278][T24685] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 12854006661, free_ts 0 [ 619.603423][T24685] post_alloc_hook+0x240/0x2a0 [ 619.608186][T24685] get_page_from_freelist+0x21e4/0x22c0 [ 619.613730][T24685] __alloc_frozen_pages_noprof+0x181/0x370 [ 619.619553][T24685] alloc_pages_mpol+0x232/0x4a0 [ 619.624401][T24685] allocate_slab+0x8a/0x370 [ 619.628901][T24685] ___slab_alloc+0xbeb/0x1410 [ 619.633570][T24685] __kmalloc_noprof+0x305/0x4f0 [ 619.638411][T24685] security_task_alloc+0x4d/0x360 [ 619.643424][T24685] copy_process+0x1530/0x3c00 [ 619.648101][T24685] kernel_clone+0x21e/0x870 [ 619.652604][T24685] user_mode_thread+0xdd/0x140 [ 619.657370][T24685] call_usermodehelper_exec_work+0x5c/0x230 [ 619.663265][T24685] process_scheduled_works+0xade/0x17b0 [ 619.668810][T24685] worker_thread+0x8a0/0xda0 [ 619.673392][T24685] kthread+0x711/0x8a0 [ 619.677457][T24685] ret_from_fork+0x3fc/0x770 [ 619.682053][T24685] page_owner free stack trace missing [ 619.687421][T24685] [ 619.689751][T24685] Memory state around the buggy address: [ 619.695366][T24685] ffff888029267000: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 619.703415][T24685] ffff888029267080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 619.711467][T24685] >ffff888029267100: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 619.719520][T24685] ^ [ 619.725143][T24685] ffff888029267180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 619.733203][T24685] ffff888029267200: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 619.741257][T24685] ================================================================== [ 619.749384][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.770857][T24685] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 619.778076][T24685] CPU: 0 UID: 0 PID: 24685 Comm: syz.4.8190 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 619.789629][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.799691][T24685] Call Trace: [ 619.802972][T24685] [ 619.805908][T24685] dump_stack_lvl+0x99/0x250 [ 619.810503][T24685] ? __asan_memcpy+0x40/0x70 [ 619.815099][T24685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.820293][T24685] ? __pfx__printk+0x10/0x10 [ 619.824915][T24685] panic+0x2db/0x790 [ 619.828815][T24685] ? __pfx_panic+0x10/0x10 [ 619.833227][T24685] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 619.839119][T24685] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 619.845444][T24685] ? print_memory_metadata+0x314/0x400 [ 619.850924][T24685] ? pause_parse_request+0x40/0x160 [ 619.856119][T24685] check_panic_on_warn+0x89/0xb0 [ 619.861068][T24685] ? pause_parse_request+0x40/0x160 [ 619.866260][T24685] end_report+0x78/0x160 [ 619.870504][T24685] kasan_report+0x129/0x150 [ 619.875013][T24685] ? pause_parse_request+0x40/0x160 [ 619.880239][T24685] ? __pfx_pause_parse_request+0x10/0x10 [ 619.885874][T24685] pause_parse_request+0x40/0x160 [ 619.890902][T24685] ? __pfx_pause_parse_request+0x10/0x10 [ 619.896531][T24685] ethnl_default_set_doit+0x2be/0xa40 [ 619.901937][T24685] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 619.908285][T24685] genl_family_rcv_msg_doit+0x212/0x300 [ 619.913841][T24685] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.919919][T24685] ? bpf_lsm_capable+0x9/0x20 [ 619.924595][T24685] ? security_capable+0x7e/0x2e0 [ 619.929540][T24685] genl_rcv_msg+0x60e/0x790 [ 619.934055][T24685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.939080][T24685] ? ref_tracker_free+0x63a/0x7d0 [ 619.944112][T24685] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 619.950014][T24685] ? __pfx_ref_tracker_free+0x10/0x10 [ 619.955391][T24685] netlink_rcv_skb+0x205/0x470 [ 619.960260][T24685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.965297][T24685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.970639][T24685] ? down_read+0x1ad/0x2e0 [ 619.975153][T24685] genl_rcv+0x28/0x40 [ 619.979142][T24685] netlink_unicast+0x758/0x8d0 [ 619.983915][T24685] netlink_sendmsg+0x805/0xb30 [ 619.988690][T24685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.993973][T24685] ? aa_sock_msg_perm+0xf1/0x1d0 [ 619.998918][T24685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.004217][T24685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.009507][T24685] __sock_sendmsg+0x219/0x270 [ 620.014274][T24685] ____sys_sendmsg+0x505/0x830 [ 620.019052][T24685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.024342][T24685] ? import_iovec+0x74/0xa0 [ 620.028842][T24685] ___sys_sendmsg+0x21f/0x2a0 [ 620.033525][T24685] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.038745][T24685] ? __fget_files+0x2a/0x420 [ 620.043341][T24685] ? __fget_files+0x3a0/0x420 [ 620.048024][T24685] __x64_sys_sendmsg+0x19b/0x260 [ 620.052984][T24685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.058469][T24685] ? rcu_is_watching+0x15/0xb0 [ 620.063232][T24685] ? do_syscall_64+0xbe/0x3b0 [ 620.067905][T24685] do_syscall_64+0xfa/0x3b0 [ 620.072407][T24685] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.077613][T24685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.083685][T24685] ? clear_bhb_loop+0x60/0xb0 [ 620.088359][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.094247][T24685] RIP: 0033:0x7f3a8058e929 [ 620.098663][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.118265][T24685] RSP: 002b:00007f3a81490038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.126676][T24685] RAX: ffffffffffffffda RBX: 00007f3a807b5fa0 RCX: 00007f3a8058e929 [ 620.134651][T24685] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 620.142626][T24685] RBP: 00007f3a80610b39 R08: 0000000000000000 R09: 0000000000000000 [ 620.150599][T24685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.158571][T24685] R13: 0000000000000000 R14: 00007f3a807b5fa0 R15: 00007ffebed3be48 [ 620.166553][T24685] [ 620.169897][T24685] Kernel Offset: disabled [ 620.174229][T24685] Rebooting in 86400 seconds..