last executing test programs: 6m32.567098221s ago: executing program 0 (id=727): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x10000000000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 6m32.41700843s ago: executing program 0 (id=730): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x80000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/102, 0x66}], 0x1, 0x1, 0x0) 6m32.322578709s ago: executing program 0 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d9fe32183b83651000008000300", @ANYRES32=r2], 0x28}}, 0x0) 6m32.229064349s ago: executing program 0 (id=733): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 6m32.161046465s ago: executing program 0 (id=734): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 6m31.85773733s ago: executing program 0 (id=735): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6m31.379579541s ago: executing program 32 (id=735): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2m32.726329113s ago: executing program 4 (id=4053): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2m32.098878095s ago: executing program 4 (id=4055): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m32.013760445s ago: executing program 4 (id=4057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 2m31.831083399s ago: executing program 4 (id=4060): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) 2m31.397586509s ago: executing program 4 (id=4064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000005c40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x1c, r2, 0x711, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x4000084}, 0x10) 2m31.347436648s ago: executing program 4 (id=4066): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 2m16.23723669s ago: executing program 33 (id=4066): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 3.094987447s ago: executing program 5 (id=5608): io_setup(0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x11) 2.952116706s ago: executing program 5 (id=5609): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x40, 0xd, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(0xffffffffffffffff, 0x0, 0xf0000232) 2.144208946s ago: executing program 1 (id=5626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {&(0x7f0000000500)="b03ef9b0e8", 0x5}], 0x3) 1.920084298s ago: executing program 1 (id=5628): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) 1.307221465s ago: executing program 2 (id=5630): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000000)={0x10, 0x0, r3}) 1.215229639s ago: executing program 5 (id=5632): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2}, 0x8) 1.135950043s ago: executing program 5 (id=5633): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.102023382s ago: executing program 2 (id=5634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 985.631235ms ago: executing program 5 (id=5637): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) 671.467837ms ago: executing program 5 (id=5642): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357) close(r0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x18, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 670.538686ms ago: executing program 2 (id=5643): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0xbf, 0x316575}}) 600.961028ms ago: executing program 1 (id=5644): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000400)='\x00\xd1\xd3\xe8\x1a\x82\x0e\xee\x8a\x94Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x84W\xfb\xc3\x0e\xce^~~1\x8c\xb2\xb4\xb2\xf8\xbd\xdbs\xe6\\#\x9a@\x94/', 0x30, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 589.502408ms ago: executing program 3 (id=5645): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000000)={0x10, 0x0, r3}) 500.101273ms ago: executing program 1 (id=5646): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 417.113024ms ago: executing program 3 (id=5647): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18) 411.330657ms ago: executing program 2 (id=5648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d4) 342.721985ms ago: executing program 1 (id=5649): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 313.428816ms ago: executing program 3 (id=5650): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a"], 0xb0}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) 274.205045ms ago: executing program 2 (id=5651): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x404) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x0, 0xfffffff8}]}) close_range(r0, 0xffffffffffffffff, 0x0) 169.55947ms ago: executing program 1 (id=5652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 169.367785ms ago: executing program 3 (id=5653): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff", 0x30}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 106.288605ms ago: executing program 3 (id=5654): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 87.833333ms ago: executing program 2 (id=5655): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4}) 0s ago: executing program 3 (id=5656): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046, 0x100000}) kernel console output (not intermixed with test programs): USB device number 58 using dummy_hcd [ 414.774956][T15740] netlink: 'syz.2.4144': attribute type 29 has an invalid length. [ 414.786876][T15740] netlink: 'syz.2.4144': attribute type 29 has an invalid length. [ 414.796157][T15740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4144'. [ 414.923104][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.936467][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.947175][ T986] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.963002][ T986] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.976235][ T986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.991011][ T986] usb 2-1: config 0 descriptor?? [ 415.261306][ T9] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 415.268946][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 415.293757][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 415.305958][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 415.324295][ T9] usb 4-1: USB disconnect, device number 50 [ 415.415523][ T986] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 415.446154][ T986] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 415.692272][ T9] usb 2-1: USB disconnect, device number 58 [ 415.966868][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 415.966887][ T30] audit: type=1326 audit(1751992903.981:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.2.4154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53fa38e929 code=0x0 [ 416.542928][T15790] input: syz0 as /devices/virtual/input/input52 [ 417.097493][T15815] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4177'. [ 417.969591][T15846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4190'. [ 418.794434][ T30] audit: type=1326 audit(1751992906.801:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15869 comm="syz.2.4201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53fa38e929 code=0x0 [ 419.400551][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 420.583418][T15934] (syz.3.4228,15934,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 421.050354][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 421.210642][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 421.227583][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 421.250371][ T24] usb 3-1: config 0 has no interface number 0 [ 421.270897][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 421.287339][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.301265][ T24] usb 3-1: Product: syz [ 421.305499][ T24] usb 3-1: Manufacturer: syz [ 421.324282][ T24] usb 3-1: SerialNumber: syz [ 421.352587][ T24] usb 3-1: config 0 descriptor?? [ 421.366966][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 421.590945][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 421.614465][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 421.732391][T15952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.740949][ T43] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 421.910243][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 421.917325][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 421.926463][ T43] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 421.935786][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.944485][ T43] usb 2-1: Product: syz [ 421.948710][ T43] usb 2-1: Manufacturer: syz [ 421.953400][ T43] usb 2-1: SerialNumber: syz [ 421.961802][ T43] usb 2-1: config 0 descriptor?? [ 421.990412][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 421.998348][ T24] usb 3-1: USB disconnect, device number 49 [ 422.012293][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 422.031001][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 422.049044][ T24] quatech2 3-1:0.51: device disconnected [ 422.090568][ T9] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 422.246938][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.257583][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 422.271272][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.281355][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 422.296038][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 422.305390][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 422.314192][ T9] usb 4-1: Manufacturer: syz [ 422.321728][ T9] usb 4-1: config 0 descriptor?? [ 422.376958][ T43] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 422.600496][ T9] rc_core: IR keymap rc-hauppauge not found [ 422.613197][ T9] Registered IR keymap rc-empty [ 422.618812][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.640365][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.661352][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 422.675307][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input53 [ 422.693187][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.720208][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.740318][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.760462][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.780429][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.801452][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.820233][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.841610][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.860517][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.880612][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 422.903009][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 422.915912][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 423.005557][ T43] usb 2-1: USB disconnect, device number 59 [ 423.006771][ T9] usb 4-1: USB disconnect, device number 51 [ 423.485498][ T55] block nbd0: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 240 seconds [ 423.502703][ T55] block nbd0: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 240 seconds [ 423.513828][ T55] block nbd0: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 240 seconds [ 423.524932][ T55] block nbd0: Possible stuck request ffff88802541e540: control (read@3072,1024B). Runtime 240 seconds [ 423.989013][T15996] input: syz0 as /devices/virtual/input/input54 [ 424.426846][T16009] dvmrp0: entered allmulticast mode [ 424.464779][ T5172] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.480450][ T5172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.490290][ T5172] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.506028][ T5172] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.514140][ T5172] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.183197][T16010] chnl_net:caif_netlink_parms(): no params data found [ 425.448665][T16010] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.472851][T16010] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.484926][T16010] bridge_slave_0: entered allmulticast mode [ 425.507576][T16010] bridge_slave_0: entered promiscuous mode [ 425.519781][T16010] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.530516][T16010] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.538682][T16010] bridge_slave_1: entered allmulticast mode [ 425.551888][T16010] bridge_slave_1: entered promiscuous mode [ 425.656572][T16010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.676698][T16010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.759433][T16063] autofs: Bad value for 'fd' [ 425.775895][T16010] team0: Port device team_slave_0 added [ 425.787839][T16010] team0: Port device team_slave_1 added [ 425.861610][T16010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.868623][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.910362][T16010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.924045][T16010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.941732][T16010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.967700][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.996013][T16010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.109437][T16010] hsr_slave_0: entered promiscuous mode [ 426.122246][T16010] hsr_slave_1: entered promiscuous mode [ 426.128726][T16010] debugfs: 'hsr0' already exists in 'hsr' [ 426.142063][T16010] Cannot create hsr debugfs directory [ 426.310526][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 426.426233][T16084] dvmrp0: entered allmulticast mode [ 426.483774][ T9] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 426.495266][ T9] usb 4-1: config 0 has no interface number 0 [ 426.516688][ T9] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 426.529596][ T9] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 426.547155][ T9] usb 4-1: config 0 interface 230 has no altsetting 0 [ 426.559539][ T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 426.573753][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.582912][ T9] usb 4-1: Product: syz [ 426.587354][ T9] usb 4-1: Manufacturer: syz [ 426.597232][ T9] usb 4-1: SerialNumber: syz [ 426.607368][T16010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.608023][ T9] usb 4-1: config 0 descriptor?? [ 426.615378][ T5856] Bluetooth: hci4: command tx timeout [ 426.630671][T16072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 426.643441][T16010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.649775][T16072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 426.664906][T16010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.671475][ T9] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 426.692499][T16010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.696322][ T9] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 426.877020][T16010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.917975][T16010] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.946276][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.953586][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.982146][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.989587][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.347448][T16010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.836832][T16010] veth0_vlan: entered promiscuous mode [ 427.872934][T16010] veth1_vlan: entered promiscuous mode [ 427.974562][T16010] veth0_macvtap: entered promiscuous mode [ 427.988842][T16010] veth1_macvtap: entered promiscuous mode [ 428.011624][T16010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.034759][T16010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.051571][ T210] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.062704][ T210] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.078141][ T210] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.090346][ T210] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.199994][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.223233][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.297825][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.318245][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.570499][ T5916] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 428.690361][ T5856] Bluetooth: hci4: command tx timeout [ 428.767669][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 428.779133][ T5916] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 428.788627][ T5916] usb 2-1: config 0 has no interface number 0 [ 428.798355][ T5916] usb 2-1: config 0 interface 184 has no altsetting 0 [ 428.809649][ T5916] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 428.822914][ T5916] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 428.832757][ T5916] usb 2-1: Product: syz [ 428.836955][ T5916] usb 2-1: Manufacturer: syz [ 428.853667][ T5916] usb 2-1: SerialNumber: syz [ 428.878916][ T5916] usb 2-1: config 0 descriptor?? [ 428.897044][ T5916] smsc75xx v1.0.0 [ 428.989667][ T9] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 429.136518][ T9] usb 4-1: USB disconnect, device number 52 [ 429.210381][T16127] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 429.373012][T16127] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 429.384678][T16127] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 429.396956][T16127] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 429.406799][T16127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.417115][T16127] usb 3-1: Product: syz [ 429.421467][T16127] usb 3-1: Manufacturer: syz [ 429.426114][T16127] usb 3-1: SerialNumber: syz [ 429.434131][T16127] usb 3-1: config 0 descriptor?? [ 429.440604][T16145] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 429.448445][T16145] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 429.505083][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 429.516217][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 429.688438][T16145] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 429.702329][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4299'. [ 429.741963][T16145] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 429.742533][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 429.786489][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 429.829399][ T5916] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 429.839940][ T5916] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 429.854725][ T5916] usb 2-1: USB disconnect, device number 60 [ 430.608497][T16127] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 430.635972][T16127] dm9601 3-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 5e:85:7c:36:c3:b1 [ 430.668026][T16127] usb 3-1: USB disconnect, device number 50 [ 430.676907][T16127] dm9601 3-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 430.760568][ T5856] Bluetooth: hci4: command tx timeout [ 431.329843][T16179] Invalid ELF header magic: != ELF [ 431.571098][T16189] syzkaller1: entered promiscuous mode [ 431.599055][T16189] syzkaller1: entered allmulticast mode [ 432.654630][T16216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.830794][T16221] input: syz0 as /devices/virtual/input/input56 [ 432.851068][ T5856] Bluetooth: hci4: command tx timeout [ 432.880220][ T5916] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 433.076104][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 433.117521][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 433.220125][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 433.252380][ T5916] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 433.272953][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.293019][ T5916] usb 4-1: Product: syz [ 433.298175][ T5916] usb 4-1: Manufacturer: syz [ 433.307441][ T5916] usb 4-1: SerialNumber: syz [ 433.331898][ T5916] usb 4-1: config 0 descriptor?? [ 433.344982][T16215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 433.360457][T16215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 433.406526][ T5916] usb 4-1: ucan: probing device on interface #0 [ 433.543335][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 433.723600][ T43] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 433.741732][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.780098][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 433.810904][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 433.836000][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.870169][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.879311][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.927988][ T43] usb 6-1: config 0 descriptor?? [ 433.944422][T16235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 434.137700][ T5916] ucan 4-1:0.0 can0: registered device [ 434.234858][ T5916] ucan 4-1:0.0 can0: firmware string: unknown [ 434.267251][ T5916] usb 4-1: USB disconnect, device number 53 [ 434.385577][ T43] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xd [ 434.461736][ T43] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 434.647731][ T43] usb 6-1: USB disconnect, device number 2 [ 434.734139][T16265] fido_id[16265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 434.984616][T16279] netlink: 'syz.3.4344': attribute type 39 has an invalid length. [ 435.164720][T16127] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 435.179396][T16127] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 436.179896][T16320] overlayfs: conflicting lowerdir path [ 436.480669][ T5865] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 436.654642][ T5865] usb 3-1: config 0 has no interfaces? [ 436.665014][ T5865] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.684243][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.704321][ T5865] usb 3-1: config 0 descriptor?? [ 437.139832][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.161010][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.209971][ T5865] usb 3-1: USB disconnect, device number 51 [ 437.802410][ T5172] Bluetooth: hci1: command 0x0405 tx timeout [ 437.820713][T16127] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 437.826859][T16127] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 437.869120][T16372] syzkaller1: entered promiscuous mode [ 437.901157][T16372] syzkaller1: entered allmulticast mode [ 438.181123][T16385] netlink: 'syz.2.4379': attribute type 29 has an invalid length. [ 438.301645][T16385] netlink: 'syz.2.4379': attribute type 29 has an invalid length. [ 438.345880][T16385] netlink: 'syz.2.4379': attribute type 29 has an invalid length. [ 438.367174][T16385] netlink: 'syz.2.4379': attribute type 29 has an invalid length. [ 438.660285][ T5939] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 438.820267][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 438.838534][ T5939] usb 2-1: config 0 has no interfaces? [ 438.886118][ T5939] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 438.913824][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.960197][ T986] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 438.990927][ T5939] usb 2-1: Product: syz [ 439.001440][ T5939] usb 2-1: Manufacturer: syz [ 439.007729][ T5939] usb 2-1: SerialNumber: syz [ 439.021373][ T5939] usb 2-1: config 0 descriptor?? [ 439.150632][ T986] usb 3-1: Using ep0 maxpacket: 32 [ 439.162137][ T986] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 439.186509][ T986] usb 3-1: config 0 has no interface number 0 [ 439.196670][ T986] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.222919][ T986] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 439.244707][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.263161][ T986] usb 3-1: Product: syz [ 439.267387][ T986] usb 3-1: Manufacturer: syz [ 439.280364][ T986] usb 3-1: SerialNumber: syz [ 439.301320][ T986] usb 3-1: config 0 descriptor?? [ 439.317820][ T986] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 439.340267][ T986] em28xx 3-1:0.132: Video interface 132 found: [ 439.370577][ T5939] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 439.388574][T16410] program syz.3.4383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.440891][T16391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.460184][T16391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.482159][ T24] usb 2-1: USB disconnect, device number 61 [ 439.541108][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 439.559653][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.590159][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.607680][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.621908][ T5939] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.631190][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.660748][ T5939] usb 6-1: config 0 descriptor?? [ 439.714879][ T986] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 439.770367][ T5865] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 439.930443][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 439.948626][ T5865] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 439.964961][ T5865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.979528][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 439.990642][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.001437][ T5865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.015324][ T5865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 440.035710][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.092254][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.099863][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.114221][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.136367][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.149606][ T986] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 440.175300][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.183576][ T986] em28xx 3-1:0.132: board has no eeprom [ 440.189833][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.197754][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.205550][T16127] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 440.210344][ T5172] Bluetooth: hci2: command 0x0c1a tx timeout [ 440.212146][T16127] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 440.226087][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.242079][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.249802][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.250765][ T986] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 440.274395][ T5865] usb 4-1: usb_control_msg returned -32 [ 440.295125][ T5939] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 440.304871][ T5865] usbtmc 4-1:16.0: can't read capabilities [ 440.312126][ T986] em28xx 3-1:0.132: analog set to bulk mode. [ 440.318209][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 440.354690][ T5939] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002D/input/input58 [ 440.387591][ T986] usb 3-1: USB disconnect, device number 52 [ 440.395201][ T986] em28xx 3-1:0.132: Disconnecting em28xx [ 440.443091][ T5939] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 440.513115][ T5939] usb 6-1: USB disconnect, device number 3 [ 440.597748][T16430] fido_id[16430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 440.699542][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 440.708411][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 440.716249][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 440.745270][ T10] usb 3-1: Decoder not found [ 440.757625][ T10] em28xx 3-1:0.132: failed to create media graph [ 440.767196][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 440.786644][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 440.799313][ T986] em28xx 3-1:0.132: Closing input extension [ 440.851957][ T986] em28xx 3-1:0.132: Freeing device [ 442.440323][T16127] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 442.443832][ T5172] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.446661][T16127] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 442.551130][ T43] usb 4-1: USB disconnect, device number 54 [ 444.520283][ T5172] Bluetooth: hci4: command 0x0c1a tx timeout [ 444.527492][T16127] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 444.534622][T16127] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 445.440170][ T43] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 445.497234][T16508] netlink: 'syz.5.4411': attribute type 10 has an invalid length. [ 445.512276][T16508] team0: Device hsr_slave_0 failed to register rx_handler [ 445.616587][ T43] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 445.650902][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.672652][ T43] usb 3-1: config 0 descriptor?? [ 445.708783][T16513] syzkaller1: entered promiscuous mode [ 445.715007][T16513] syzkaller1: entered allmulticast mode [ 446.592814][ T5916] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 446.727738][ T43] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 446.752331][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.770765][ T43] usb 3-1: USB disconnect, device number 53 [ 446.782707][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.804137][ T5916] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 446.840709][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.908081][ T5916] usb 4-1: config 0 descriptor?? [ 447.336727][ T5916] ntrig 0003:1B96:000F.002E: unknown main item tag 0x0 [ 447.357275][ T5916] ntrig 0003:1B96:000F.002E: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.3-1/input0 [ 447.391015][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 447.528381][ T5916] ntrig 0003:1B96:000F.002E: Firmware version: 5.10.12.37.6 (a9eb a68c) [ 447.540229][T16127] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 447.574964][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 447.582328][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 447.592621][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.604217][ T9] usb 2-1: config 0 descriptor?? [ 447.702804][T16127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.713145][T16127] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 447.726965][T16127] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 447.739772][T16127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.757837][T16127] usb 6-1: config 0 descriptor?? [ 447.762753][ T5916] usb 4-1: USB disconnect, device number 55 [ 448.205616][T16127] kovaplus 0003:1E7D:2D50.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 448.651847][ T9] video4linux radio48: keene_cmd_set failed (-71) [ 448.684073][ T9] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 448.694765][ T9] usb 2-1: USB disconnect, device number 62 [ 448.820249][T16127] kovaplus 0003:1E7D:2D50.002F: couldn't init struct kovaplus_device [ 448.840555][T16127] kovaplus 0003:1E7D:2D50.002F: couldn't install mouse [ 448.860505][T16127] kovaplus 0003:1E7D:2D50.002F: probe with driver kovaplus failed with error -71 [ 448.896885][T16127] usb 6-1: USB disconnect, device number 4 [ 449.161120][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 449.320623][ T986] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 449.329317][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 449.337460][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.347979][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.362351][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.372834][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.388254][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.397773][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.516309][ T986] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 449.553040][ T986] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 449.562972][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.582117][ T986] usb 3-1: Product: syz [ 449.586434][ T986] usb 3-1: Manufacturer: syz [ 449.596321][ T986] usb 3-1: SerialNumber: syz [ 449.623483][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 449.629102][ T9] usbtmc 4-1:16.0: can't read capabilities [ 449.644064][ T986] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 449.700917][T16127] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 449.859569][ T9] usb 4-1: USB disconnect, device number 56 [ 449.966076][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.016454][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.089480][ T5916] usb 3-1: USB disconnect, device number 54 [ 450.319475][T16612] bridge0: entered allmulticast mode [ 450.686630][T16628] netlink: 'syz.5.4465': attribute type 29 has an invalid length. [ 450.701648][T16628] netlink: 'syz.5.4465': attribute type 29 has an invalid length. [ 450.717335][T16628] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4465'. [ 450.764667][T16127] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 450.802146][T16127] ath9k_htc: Failed to initialize the device [ 450.814304][ T5916] usb 3-1: ath9k_htc: USB layer deinitialized [ 451.150161][ T5916] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 451.180248][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 451.320938][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 451.335661][ T5916] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 451.350250][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 451.359160][ T5916] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 451.370519][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.380686][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.388733][ T5916] usb 3-1: Product: syz [ 451.393111][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.403539][ T5916] usb 3-1: Manufacturer: syz [ 451.408171][ T5916] usb 3-1: SerialNumber: syz [ 451.412997][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.435151][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.459019][ T5916] mos7840 3-1:1.0: missing endpoints [ 451.476785][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.488302][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.579304][T16652] netlink: 'syz.3.4483': attribute type 4 has an invalid length. [ 451.597455][T16652] netlink: 'syz.3.4483': attribute type 27 has an invalid length. [ 451.607323][T16652] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.4483'. [ 451.708762][T16127] usb 3-1: USB disconnect, device number 55 [ 451.714656][ T43] usb 6-1: GET_CAPABILITIES returned 0 [ 451.743315][ T43] usbtmc 6-1:16.0: can't read capabilities [ 451.937725][ T43] usb 6-1: USB disconnect, device number 5 [ 453.378868][T16717] input: syz0 as /devices/virtual/input/input59 [ 453.567024][ T55] block nbd0: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 270 seconds [ 453.578125][ T55] block nbd0: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 270 seconds [ 453.589266][ T55] block nbd0: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 270 seconds [ 453.600464][ T55] block nbd0: Possible stuck request ffff88802541e540: control (read@3072,1024B). Runtime 270 seconds [ 454.415159][T16742] sg_write: data in/out 2013/126 bytes for SCSI command 0x0-- guessing data in; [ 454.415159][T16742] program syz.1.4518 not setting count and/or reply_len properly [ 454.823083][T16754] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 456.337577][T16778] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 458.440671][T16825] syzkaller1: entered promiscuous mode [ 458.446834][T16825] syzkaller1: entered allmulticast mode [ 458.631722][T16831] overlayfs: invalid origin (0000) [ 458.720513][T16127] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 458.882928][T16127] usb 4-1: Using ep0 maxpacket: 32 [ 458.913050][T16127] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 458.943471][T16127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.968602][T16127] usb 4-1: config 0 descriptor?? [ 458.997961][T16127] as10x_usb: device has been detected [ 459.016118][T16127] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 459.080735][T16127] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 459.124666][T16127] as10x_usb: error during firmware upload part1 [ 459.157522][T16127] Registered device nBox DVB-T Dongle [ 459.218602][T16127] usb 4-1: USB disconnect, device number 57 [ 459.318409][T16127] Unregistered device nBox DVB-T Dongle [ 459.329644][T16127] as10x_usb: device has been disconnected [ 459.388503][T16853] syzkaller1: entered promiscuous mode [ 459.394738][T16853] syzkaller1: entered allmulticast mode [ 461.050863][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 461.212558][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.224878][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.235808][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.260428][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.269519][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.285364][T16127] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 461.296686][ T10] usb 4-1: config 0 descriptor?? [ 461.442402][T16127] usb 6-1: Using ep0 maxpacket: 32 [ 461.449695][T16127] usb 6-1: config 0 interface 0 has no altsetting 0 [ 461.463119][T16127] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 461.472788][T16127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.481508][T16127] usb 6-1: Product: syz [ 461.486248][T16127] usb 6-1: Manufacturer: syz [ 461.491804][T16127] usb 6-1: SerialNumber: syz [ 461.499480][T16127] usb 6-1: config 0 descriptor?? [ 461.729638][ T10] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 461.781448][ T10] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 461.899762][T16919] netlink: 'syz.2.4600': attribute type 21 has an invalid length. [ 461.928798][T16919] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.4600'. [ 461.947019][T16127] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 462.023167][ T10] usb 4-1: USB disconnect, device number 58 [ 462.575714][T16127] usb 6-1: USB disconnect, device number 6 [ 463.386116][T16960] syzkaller1: entered promiscuous mode [ 463.403664][T16960] syzkaller1: entered allmulticast mode [ 464.780524][T17012] syzkaller1: entered promiscuous mode [ 464.817417][T17012] syzkaller1: entered allmulticast mode [ 465.052897][T17025] Invalid ELF header magic: != ELF [ 465.509634][ T984] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 465.545751][T17047] loop8: detected capacity change from 0 to 7 [ 465.558054][T17047] Dev loop8: unable to read RDB block 7 [ 465.576310][T17047] loop8: unable to read partition table [ 465.583933][T17047] loop8: partition table beyond EOD, truncated [ 465.590634][T17047] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 465.680278][ T984] usb 6-1: Using ep0 maxpacket: 32 [ 465.693062][ T984] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 465.704930][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.728283][ T984] usb 6-1: config 0 descriptor?? [ 465.736620][T17051] netlink: 'syz.3.4646': attribute type 29 has an invalid length. [ 465.747345][T17051] netlink: 'syz.3.4646': attribute type 29 has an invalid length. [ 465.756679][T17051] netlink: 'syz.3.4646': attribute type 29 has an invalid length. [ 465.769576][T17051] netlink: 'syz.3.4646': attribute type 29 has an invalid length. [ 465.780483][ T984] as10x_usb: device has been detected [ 465.786764][ T984] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 465.842436][ T984] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 465.875489][ T984] as10x_usb: error during firmware upload part1 [ 465.882910][ T984] Registered device nBox DVB-T Dongle [ 465.971805][ T43] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 465.992185][T17057] syzkaller1: entered promiscuous mode [ 465.997908][T17057] syzkaller1: entered allmulticast mode [ 466.005201][ T984] usb 6-1: USB disconnect, device number 7 [ 466.040807][ T984] Unregistered device nBox DVB-T Dongle [ 466.046256][ T984] as10x_usb: device has been disconnected [ 466.155048][ T43] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 466.164372][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.172810][ T43] usb 2-1: Product: syz [ 466.177028][ T43] usb 2-1: Manufacturer: syz [ 466.182036][ T43] usb 2-1: SerialNumber: syz [ 466.189030][ T43] usb 2-1: config 0 descriptor?? [ 466.816522][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 466.974630][T17064] syzkaller1: entered promiscuous mode [ 466.982102][T17064] syzkaller1: entered allmulticast mode [ 467.110455][ T984] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 467.218540][ T43] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 467.242681][ T43] usb 2-1: USB disconnect, device number 63 [ 467.294193][ T984] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.315480][ T984] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.364502][ T984] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.387829][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.414947][T17062] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 467.434996][ T984] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.727060][ T43] usb 3-1: USB disconnect, device number 56 [ 467.933452][T17087] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4660'. [ 468.390189][ T5916] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 468.560876][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 468.567618][ T5916] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 468.575992][ T5916] usb 2-1: config 0 has no interface number 0 [ 468.584295][ T5916] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 468.593670][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.602755][ T5916] usb 2-1: Product: syz [ 468.606944][ T5916] usb 2-1: Manufacturer: syz [ 468.611691][ T5916] usb 2-1: SerialNumber: syz [ 468.618767][ T5916] usb 2-1: config 0 descriptor?? [ 468.628378][ T5916] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 468.837317][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 468.855067][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 469.266830][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 469.267349][ T10] usb 2-1: USB disconnect, device number 64 [ 469.290543][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 469.293624][ T5916] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 469.318807][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 469.335807][ T10] quatech2 2-1:0.51: device disconnected [ 469.470151][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 469.477351][ T5916] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 469.486662][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.498201][ T5916] usb 6-1: config 0 descriptor?? [ 469.929633][ T5916] logitech 0003:046D:C29C.0031: unknown main item tag 0x1 [ 469.961498][ T5916] logitech 0003:046D:C29C.0031: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 470.145681][T17111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4670'. [ 470.323077][ T5916] logitech 0003:046D:C29C.0031: no inputs found [ 470.372782][ T5916] usb 6-1: USB disconnect, device number 8 [ 470.427126][T17120] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4675'. [ 471.678145][T17157] netlink: 'syz.3.4699': attribute type 21 has an invalid length. [ 471.691278][T17157] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4699'. [ 472.800062][T17186] netlink: 'syz.5.4702': attribute type 29 has an invalid length. [ 472.803054][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 472.824965][T17186] netlink: 'syz.5.4702': attribute type 29 has an invalid length. [ 472.870879][T17186] netlink: 'syz.5.4702': attribute type 29 has an invalid length. [ 472.893472][T17186] netlink: 'syz.5.4702': attribute type 29 has an invalid length. [ 472.971955][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 472.980651][T17191] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4705'. [ 472.997642][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.040420][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.060258][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.090530][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.116172][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.126325][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4707'. [ 473.140236][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.199880][ T10] usb 2-1: config 0 descriptor?? [ 473.221505][T17180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.702875][ T10] plantronics 0003:047F:FFFF.0032: reserved main item tag 0xd [ 473.761340][ T10] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 474.018764][ T986] usb 2-1: USB disconnect, device number 65 [ 474.064714][T17206] fido_id[17206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 474.432507][T17218] program syz.5.4714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.553524][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4717'. [ 474.922809][T17243] syzkaller1: entered promiscuous mode [ 474.928600][T17243] syzkaller1: entered allmulticast mode [ 474.944866][T17242] netlink: 'syz.5.4726': attribute type 2 has an invalid length. [ 475.865516][T17275] netlink: 'syz.3.4739': attribute type 3 has an invalid length. [ 475.880151][T17275] netlink: 'syz.3.4739': attribute type 4 has an invalid length. [ 475.896766][T17275] netlink: 'syz.3.4739': attribute type 5 has an invalid length. [ 475.905153][T17275] netlink: 'syz.3.4739': attribute type 6 has an invalid length. [ 475.913304][T17275] netlink: 12902 bytes leftover after parsing attributes in process `syz.3.4739'. [ 476.236929][ T30] audit: type=1326 audit(1751992964.251:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.3.4742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa9b38e929 code=0x0 [ 476.311433][T17287] syzkaller1: entered promiscuous mode [ 476.327734][T17287] syzkaller1: entered allmulticast mode [ 476.754963][ T984] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 476.806159][T17304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.915212][ T984] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 476.924674][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.934347][ T984] usb 2-1: Product: syz [ 476.939461][ T984] usb 2-1: Manufacturer: syz [ 476.944296][ T984] usb 2-1: SerialNumber: syz [ 476.952310][ T984] usb 2-1: config 0 descriptor?? [ 476.962115][ T984] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 477.696625][ T5172] block nbd2: Receive control failed (result -32) [ 477.696949][T17306] block nbd2: shutting down sockets [ 477.940233][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 477.968941][ T984] gspca_sunplus: reg_r err -71 [ 477.979490][ T984] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 477.997798][ T984] usb 2-1: USB disconnect, device number 66 [ 478.120418][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 478.128302][ T24] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.139777][ T24] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 478.150023][ T24] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 478.160642][ T24] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 478.173974][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 478.191216][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.208279][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.216646][ T24] usb 6-1: SerialNumber: syz [ 478.228844][T17319] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 478.238458][T17319] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 478.469072][T17319] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 478.481541][T17319] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 478.514681][T17342] syzkaller1: entered promiscuous mode [ 478.522904][T17342] syzkaller1: entered allmulticast mode [ 478.779884][T17351] tmpfs: Invalid gid '0x00000000ffffffff' [ 478.917918][ T24] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 478.930157][ T986] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 479.093816][ T986] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 479.110197][ T984] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 479.123680][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.142367][ T986] usb 4-1: Product: syz [ 479.160697][ T986] usb 4-1: Manufacturer: syz [ 479.165361][ T986] usb 4-1: SerialNumber: syz [ 479.195021][ T986] usb 4-1: config 0 descriptor?? [ 479.296788][ T984] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 479.325066][ T984] usb 2-1: config 0 has no interface number 0 [ 479.354885][ T984] usb 2-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 479.369650][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.378831][ T984] usb 2-1: Product: syz [ 479.383490][ T984] usb 2-1: Manufacturer: syz [ 479.388124][ T984] usb 2-1: SerialNumber: syz [ 479.414346][ T984] usb 2-1: config 0 descriptor?? [ 479.633388][T17355] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4773'. [ 479.667792][ T984] pl2303 2-1:0.161: required endpoints missing [ 479.691248][ T984] usb 2-1: USB disconnect, device number 67 [ 479.897662][ C0] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 68! [ 479.907066][ C0] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 01! [ 480.131670][ T24] usb 6-1: USB disconnect, device number 9 [ 480.153946][ T24] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 480.229941][ T986] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 480.265479][ T986] asix 4-1:0.0: probe with driver asix failed with error -71 [ 480.305588][ T986] usb 4-1: USB disconnect, device number 59 [ 480.352923][T17389] netlink: 372 bytes leftover after parsing attributes in process `syz.2.4779'. [ 481.186244][T17420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.317449][T17427] tmpfs: Invalid gid '0x00000000ffffffff' [ 482.093945][ T986] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 482.182276][T17461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.293063][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.334770][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.375611][ T986] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.418474][ T986] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.429623][T17466] netlink: 372 bytes leftover after parsing attributes in process `syz.5.4804'. [ 482.449306][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.471882][ T986] usb 3-1: config 0 descriptor?? [ 482.900626][ T986] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 482.923125][ T986] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 482.941336][ T986] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 482.952762][ T986] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 482.961457][ T986] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 482.969131][ T986] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 483.015462][ T986] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 483.641316][ T55] block nbd0: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 300 seconds [ 483.653003][ T55] block nbd0: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 300 seconds [ 483.664321][ T55] block nbd0: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 300 seconds [ 483.675843][ T55] block nbd0: Possible stuck request ffff88802541e540: control (read@3072,1024B). Runtime 300 seconds [ 483.850462][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 484.003386][ T24] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 484.016242][ T24] usb 6-1: config 0 has no interface number 0 [ 484.022629][ T24] usb 6-1: config 0 interface 255 has no altsetting 0 [ 484.029653][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 484.038898][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.051513][ T24] usb 6-1: config 0 descriptor?? [ 484.059861][ T24] cp210x 6-1:0.255: cp210x converter detected [ 484.070173][ T43] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 484.230440][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 484.237696][ T43] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 484.246253][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.256430][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.270153][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.284521][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.298430][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 484.307909][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.501051][ T24] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 484.528349][ T43] usb 2-1: GET_CAPABILITIES returned 0 [ 484.534123][ T43] usbtmc 2-1:16.0: can't read capabilities [ 484.713981][ T24] cp210x 6-1:0.255: GPIO initialisation failed: -19 [ 484.744697][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 484.798269][ T24] usb 2-1: USB disconnect, device number 68 [ 484.922528][T16127] usb 6-1: USB disconnect, device number 10 [ 484.942905][T16127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 484.956480][T16127] cp210x 6-1:0.255: device disconnected [ 485.220198][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 485.240336][ T986] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 485.251645][ T986] usb 3-1: device reset changed ep0 maxpacket size! [ 485.260526][ T984] usb 3-1: USB disconnect, device number 57 [ 485.370365][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 485.377659][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.390723][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.401167][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.411393][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.424498][ T984] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 485.424775][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.460204][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.577723][ T30] audit: type=1326 audit(1751992973.591:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17520 comm="syz.5.4822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668ff8e929 code=0x0 [ 485.605834][ T984] usb 3-1: Using ep0 maxpacket: 16 [ 485.626391][ T984] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 485.646455][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.657483][ T984] usb 3-1: Product: syz [ 485.663001][ T984] usb 3-1: Manufacturer: syz [ 485.669399][ T984] usb 3-1: SerialNumber: syz [ 485.677681][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 485.685010][ T10] usbtmc 4-1:16.0: can't read capabilities [ 485.692132][ T984] usb 3-1: config 0 descriptor?? [ 485.711927][ T984] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 485.888712][ T10] usb 4-1: USB disconnect, device number 60 [ 485.907039][ T984] gp8psk: usb in 128 operation failed. [ 485.915353][ T984] gp8psk: usb in 137 operation failed. [ 485.924247][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.938466][ T984] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 485.948906][ T984] usb 3-1: media controller created [ 485.975249][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.995406][ T984] gp8psk_fe: Frontend revision 1 attached [ 486.001299][ T984] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 486.010229][ T984] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 486.020493][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 486.206468][ T24] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 486.216438][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.224560][ T24] usb 2-1: Product: syz [ 486.228807][ T24] usb 2-1: Manufacturer: syz [ 486.233567][ T24] usb 2-1: SerialNumber: syz [ 486.243530][ T24] usb 2-1: config 0 descriptor?? [ 486.267745][ T984] gp8psk: usb in 137 operation failed. [ 486.276937][ T984] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 486.292090][ T984] gp8psk: found Genpix USB device pID = 201 (hex) [ 486.306714][ T984] usb 3-1: USB disconnect, device number 58 [ 486.493267][ T984] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 486.680155][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 486.842295][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 486.861873][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 486.875659][ T10] usb 6-1: config 0 has no interface number 0 [ 486.885326][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 486.901260][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.909506][ T10] usb 6-1: Product: syz [ 486.921827][ T10] usb 6-1: Manufacturer: syz [ 486.926494][ T10] usb 6-1: SerialNumber: syz [ 486.937352][ T10] usb 6-1: config 0 descriptor?? [ 486.955144][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 487.166601][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 487.194906][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 487.245389][ T30] audit: type=1326 audit(1751992975.251:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17549 comm="syz.2.4834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53fa38e929 code=0x0 [ 487.277678][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 487.302385][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 487.324172][ T24] usb 2-1: USB disconnect, device number 69 [ 487.584407][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 487.598664][ T986] usb 6-1: USB disconnect, device number 11 [ 487.615198][ T986] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 487.633580][ T986] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 487.650866][ T5896] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 487.659702][ T986] quatech2 6-1:0.51: device disconnected [ 487.835636][ T5896] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 487.844262][ T5896] usb 4-1: config 0 has no interface number 0 [ 487.852998][ T5896] usb 4-1: config 0 interface 255 has no altsetting 0 [ 487.860323][ T5896] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.870521][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.885317][ T5896] usb 4-1: config 0 descriptor?? [ 487.895640][ T5896] cp210x 4-1:0.255: cp210x converter detected [ 488.310712][ T5896] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 488.530531][ T5896] cp210x 4-1:0.255: GPIO initialisation failed: -19 [ 488.552712][ T5896] usb 4-1: cp210x converter now attached to ttyUSB0 [ 488.739491][ T5896] usb 4-1: USB disconnect, device number 61 [ 488.785317][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 488.815827][ T5896] cp210x 4-1:0.255: device disconnected [ 489.220245][T16127] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 489.380315][T16127] usb 2-1: Using ep0 maxpacket: 32 [ 489.396192][T16127] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 489.406722][T16127] usb 2-1: config 0 has no interface number 0 [ 489.429946][T16127] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 489.457706][T16127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.478981][T16127] usb 2-1: Product: syz [ 489.493951][T16127] usb 2-1: Manufacturer: syz [ 489.504374][T16127] usb 2-1: SerialNumber: syz [ 489.521573][T16127] usb 2-1: config 0 descriptor?? [ 489.538773][T16127] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 489.605887][ T986] IPVS: starting estimator thread 0... [ 489.711358][T17620] IPVS: using max 26 ests per chain, 62400 per kthread [ 489.747228][T16127] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 489.775059][T16127] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 489.975266][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4870'. [ 490.166148][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 490.185848][ T986] usb 2-1: USB disconnect, device number 70 [ 490.231266][ T986] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 490.258511][ T986] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 490.285441][ T986] quatech2 2-1:0.51: device disconnected [ 491.185350][T17678] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.460275][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 491.590569][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4900'. [ 491.640383][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 491.655855][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 491.679986][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 491.697892][ T24] usb 2-1: can't read configurations, error -71 [ 492.900479][T16127] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 493.092207][T16127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.120121][T16127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.151328][T16127] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.180137][T16127] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.210133][T16127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.230951][T16127] usb 4-1: config 0 descriptor?? [ 493.280132][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 493.293792][T17738] syzkaller1: entered promiscuous mode [ 493.299370][T17738] syzkaller1: entered allmulticast mode [ 493.440330][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 493.490508][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 493.499294][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.529828][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.555301][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.565163][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.581015][ T10] usb 3-1: Product: syz [ 493.590503][ T10] usb 3-1: Manufacturer: syz [ 493.595196][ T10] usb 3-1: SerialNumber: syz [ 493.672577][T16127] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 493.690164][T16127] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 493.697667][T16127] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 493.720830][T16127] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 493.728377][T16127] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 493.750193][T16127] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0 [ 493.797325][T16127] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 494.045625][ T10] usb 3-1: 0:2 : does not exist [ 494.520620][T16127] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 494.694931][T16127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.710492][ T10] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 494.721126][T16127] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.735190][T16127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.790489][T16127] usb 6-1: config 0 descriptor?? [ 494.800916][ T10] usb 3-1: USB disconnect, device number 59 [ 495.229276][T16127] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 495.265381][T16127] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0035/input/input62 [ 495.336650][T17768] sctp: [Deprecated]: syz.2.4934 (pid 17768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.336650][T17768] Use struct sctp_sack_info instead [ 495.413721][T16127] keytouch 0003:0926:3333.0035: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 495.441728][T17750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.477667][T17750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.751731][ T5896] usb 4-1: USB disconnect, device number 62 [ 495.759002][T17780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.839503][ T24] usb 6-1: USB disconnect, device number 12 [ 496.209585][T17796] sctp: [Deprecated]: syz.3.4944 (pid 17796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.209585][T17796] Use struct sctp_sack_info instead [ 496.411854][T17801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.652472][T17813] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4953'. [ 497.509460][T17846] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4967'. [ 497.540218][T16127] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 497.707512][T16127] usb 4-1: Using ep0 maxpacket: 16 [ 497.732340][T16127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.750434][T16127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.773052][T16127] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.784668][T17854] syzkaller1: entered promiscuous mode [ 497.787495][T16127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.805690][T17854] syzkaller1: entered allmulticast mode [ 497.829180][T16127] usb 4-1: Product: syz [ 497.837753][T16127] usb 4-1: Manufacturer: syz [ 497.850950][T16127] usb 4-1: SerialNumber: syz [ 498.081454][T16127] usb 4-1: 0:2 : does not exist [ 498.110297][T16127] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 498.177946][T16127] usb 4-1: USB disconnect, device number 63 [ 498.277229][T16816] udevd[16816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.041219][T16127] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 499.200486][T16127] usb 4-1: Using ep0 maxpacket: 16 [ 499.238471][T16127] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 499.249867][T16127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.271707][T16127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.285692][T16127] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.303925][T16127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.321071][T16127] usb 4-1: Product: syz [ 499.334641][T16127] usb 4-1: Manufacturer: syz [ 499.367483][T16127] usb 4-1: SerialNumber: syz [ 499.537827][T17889] netlink: 'syz.1.4987': attribute type 11 has an invalid length. [ 499.844504][T16127] usb 4-1: 0:2 : does not exist [ 500.076551][ T30] audit: type=1326 audit(1751992988.091:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17892 comm="syz.2.4988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53fa38e929 code=0x0 [ 500.537708][T16127] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 500.599733][T16127] usb 4-1: USB disconnect, device number 64 [ 500.666306][T16816] udevd[16816]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.720363][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 500.880482][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 500.931932][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.950256][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.970197][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.990075][ T43] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 501.037442][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.079298][ T43] usb 6-1: config 0 descriptor?? [ 501.528649][ T43] hid-multitouch 0003:0457:07DA.0036: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 501.565711][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.716706][ T43] usb 6-1: USB disconnect, device number 13 [ 502.300152][ T43] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 502.452071][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 502.461455][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.480625][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.497553][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.507198][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.515647][ T43] usb 3-1: Product: syz [ 502.520982][ T43] usb 3-1: Manufacturer: syz [ 502.525758][ T43] usb 3-1: SerialNumber: syz [ 502.540160][ T5896] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 502.713592][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.727337][ T5896] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.745421][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.758410][ T43] usb 3-1: 0:2 : does not exist [ 502.780334][ T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 502.797589][ T5896] usb 6-1: config 0 descriptor?? [ 502.816839][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 502.851967][ T43] usb 3-1: USB disconnect, device number 60 [ 502.906115][T16816] udevd[16816]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.041269][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 503.219481][ T30] audit: type=1326 audit(1751992991.231:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17950 comm="syz.3.5012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa9b38e929 code=0x0 [ 503.244665][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.262647][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.274839][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.287552][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 503.297220][ T24] usb 2-1: SerialNumber: syz [ 503.426779][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 503.436828][ T5896] pwc: recv_control_msg error -71 req 02 val 2c00 [ 503.446297][ T5896] pwc: recv_control_msg error -71 req 04 val 1000 [ 503.453974][ T5896] pwc: recv_control_msg error -71 req 04 val 1300 [ 503.462772][ T5896] pwc: recv_control_msg error -71 req 04 val 1400 [ 503.469965][ T5896] pwc: recv_control_msg error -71 req 02 val 2000 [ 503.485714][ T5896] pwc: recv_control_msg error -71 req 02 val 2100 [ 503.497680][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 503.509701][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 503.520425][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 503.528831][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 503.538346][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 503.546984][ T24] usb 2-1: 0:2 : does not exist [ 503.552922][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 503.579493][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 503.590496][ T24] usb 2-1: USB disconnect, device number 73 [ 503.605073][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 503.627232][ T5896] pwc: Registered as video103. [ 503.646986][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 503.685610][ T5896] usb 6-1: USB disconnect, device number 14 [ 503.728363][T16816] udevd[16816]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.176440][ T30] audit: type=1326 audit(1751992992.191:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17967 comm="syz.1.5020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac38d8e929 code=0x0 [ 504.730309][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 504.890207][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 504.897457][ T24] usb 4-1: config 0 has no interfaces? [ 504.903530][ T24] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 504.916321][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.937057][ T24] usb 4-1: config 0 descriptor?? [ 505.158060][T17974] validate_nla: 2 callbacks suppressed [ 505.158083][T17974] netlink: 'syz.3.5022': attribute type 3 has an invalid length. [ 505.185276][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'. [ 505.195091][ T30] audit: type=1326 audit(1751992993.211:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17983 comm="syz.5.5027" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f668ff8e929 code=0x0 [ 505.621784][T17995] syzkaller1: entered promiscuous mode [ 505.630171][T17995] syzkaller1: entered allmulticast mode [ 505.735441][T16127] usb 4-1: USB disconnect, device number 65 [ 506.023263][ T5939] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 506.085084][T18006] loop3: detected capacity change from 0 to 1 [ 506.095741][T18006] Dev loop3: unable to read RDB block 1 [ 506.102423][T18006] loop3: unable to read partition table [ 506.108571][T18006] loop3: partition table beyond EOD, truncated [ 506.120360][T18006] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 506.185469][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 506.229153][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.260137][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.283122][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.300533][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.310117][ T5939] usb 3-1: Product: syz [ 506.314341][ T5939] usb 3-1: Manufacturer: syz [ 506.332762][ T5939] usb 3-1: SerialNumber: syz [ 506.442737][T18014] netlink: 'syz.3.5038': attribute type 10 has an invalid length. [ 506.471803][T18014] team0: Port device dummy0 added [ 506.708923][T18024] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5044'. [ 506.719713][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5044'. [ 506.770785][ T5939] usb 3-1: 0:2 : does not exist [ 506.784653][T18026] veth0_vlan: entered allmulticast mode [ 506.804371][T18026] veth0_vlan: left allmulticast mode [ 506.836292][T18029] loop3: detected capacity change from 0 to 1 [ 506.852259][T18029] Dev loop3: unable to read RDB block 1 [ 506.864106][T18029] loop3: unable to read partition table [ 506.874034][T18029] loop3: partition table beyond EOD, truncated [ 506.884940][T18029] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 506.931730][ T5222] Dev loop3: unable to read RDB block 1 [ 506.937471][ T5222] loop3: unable to read partition table [ 506.949284][ T5222] loop3: partition table beyond EOD, truncated [ 507.413224][ T984] usb 3-1: USB disconnect, device number 61 [ 507.658219][T18053] netlink: 'syz.5.5056': attribute type 10 has an invalid length. [ 507.678110][T18053] team0: Port device dummy0 added [ 507.800434][ T5939] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 507.969758][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.985725][ T5939] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 507.997635][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.020192][ T5939] usb 2-1: config 0 descriptor?? [ 508.025472][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 508.036900][ T5939] pwc: Askey VC010 type 2 USB webcam detected. [ 508.190274][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 508.200868][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.217813][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.229057][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 508.247014][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 508.257386][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.291486][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.304073][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.312327][ T10] usb 6-1: Manufacturer: syz [ 508.323279][ T10] usb 6-1: config 0 descriptor?? [ 508.360878][T18063] syzkaller1: entered promiscuous mode [ 508.366571][T18063] syzkaller1: entered allmulticast mode [ 508.528597][T18066] loop8: detected capacity change from 0 to 79 [ 508.659285][ T5939] pwc: recv_control_msg error -32 req 02 val 2700 [ 508.671288][ T10] rc_core: IR keymap rc-hauppauge not found [ 508.683268][ T5939] pwc: recv_control_msg error -71 req 02 val 2c00 [ 508.690417][ T10] Registered IR keymap rc-empty [ 508.696018][ T5939] pwc: recv_control_msg error -71 req 04 val 1000 [ 508.702717][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 508.711925][ T5939] pwc: recv_control_msg error -71 req 04 val 1300 [ 508.718889][ T5939] pwc: recv_control_msg error -71 req 04 val 1400 [ 508.726865][ T5939] pwc: recv_control_msg error -71 req 02 val 2000 [ 508.733691][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 508.742233][ T5939] pwc: recv_control_msg error -71 req 02 val 2100 [ 508.749211][ T5939] pwc: recv_control_msg error -71 req 04 val 1500 [ 508.756749][ T5939] pwc: recv_control_msg error -71 req 02 val 2500 [ 508.764990][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 508.777254][ T5939] pwc: recv_control_msg error -71 req 02 val 2400 [ 508.784765][ T5939] pwc: recv_control_msg error -71 req 02 val 2600 [ 508.793942][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input64 [ 508.806813][ T5939] pwc: recv_control_msg error -71 req 02 val 2900 [ 508.814457][ T5939] pwc: recv_control_msg error -71 req 02 val 2800 [ 508.826108][ T5939] pwc: recv_control_msg error -71 req 04 val 1100 [ 508.833234][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 508.841442][ T5939] pwc: recv_control_msg error -71 req 04 val 1200 [ 508.860220][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 508.872396][ T5939] pwc: Registered as video103. [ 508.899662][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 508.909771][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 508.937177][ T5939] usb 2-1: USB disconnect, device number 74 [ 508.943499][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.017301][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.050505][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.095546][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.126790][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.161078][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.182369][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.243838][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 509.290727][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 509.320553][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 509.350613][ T10] usb 6-1: USB disconnect, device number 15 [ 510.728297][T18117] syzkaller1: entered promiscuous mode [ 510.738774][T18117] syzkaller1: entered allmulticast mode [ 511.005910][T18131] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5092'. [ 512.104634][T18174] netlink: 'syz.5.5109': attribute type 4 has an invalid length. [ 512.365001][T18184] netlink: 'syz.2.5115': attribute type 29 has an invalid length. [ 512.375848][T18184] netlink: 'syz.2.5115': attribute type 29 has an invalid length. [ 512.386433][T18184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5115'. [ 513.515250][T18196] netlink: 'syz.5.5120': attribute type 4 has an invalid length. [ 513.726434][ T55] block nbd0: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 330 seconds [ 513.737638][ T55] block nbd0: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 330 seconds [ 513.748891][ T55] block nbd0: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 330 seconds [ 513.760304][ T55] block nbd0: Possible stuck request ffff88802541e540: control (read@3072,1024B). Runtime 330 seconds [ 514.268608][T18215] syzkaller1: entered promiscuous mode [ 514.304014][T18215] syzkaller1: entered allmulticast mode [ 514.420335][ T5939] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 514.611615][ T5939] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 514.621347][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.632844][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.633087][T18232] syzkaller1: entered promiscuous mode [ 514.644409][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.657137][T18232] syzkaller1: entered allmulticast mode [ 514.688355][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.698849][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.711055][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.719221][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.728509][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.740939][ T5896] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 514.745983][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.767804][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.787823][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.799382][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.817258][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.834396][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.848622][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.857379][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.866928][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.878303][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.886595][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.896228][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.907872][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.916129][ T5939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 514.925628][ T5939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 514.937170][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 514.940173][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 514.947187][ T5939] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 514.958480][ T5939] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 514.962261][ T5896] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 514.967402][ T5939] usb 3-1: Product: syz [ 514.979054][ T5939] usb 3-1: Manufacturer: syz [ 514.984054][ T5939] usb 3-1: SerialNumber: syz [ 514.986692][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.001069][ T5939] usb 3-1: config 0 descriptor?? [ 515.009366][ T5939] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 515.031057][ T5896] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.056172][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.086501][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.119409][ T5896] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 515.127234][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.160137][ T5896] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.190230][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.225755][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.247261][ T24] usb 3-1: USB disconnect, device number 62 [ 515.264286][ T24] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 515.286569][ T5896] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 515.304835][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.331066][ T5896] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.345608][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.358676][ T5896] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.376558][ T5896] usb 4-1: string descriptor 0 read error: -22 [ 515.383374][ T5896] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 515.392871][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.419841][ T5896] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 515.424191][T18248] program syz.1.5143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.648124][ T24] usb 4-1: USB disconnect, device number 66 [ 515.750496][T16127] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 515.924688][T16127] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 515.938829][T16127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.948281][T16127] usb 2-1: Product: syz [ 515.953267][T16127] usb 2-1: Manufacturer: syz [ 515.958280][T16127] usb 2-1: SerialNumber: syz [ 515.974725][T16127] usb 2-1: config 0 descriptor?? [ 516.930134][ T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 516.999044][T16127] usb 2-1: Firmware version (0.0) predates our first public release. [ 517.019847][T16127] usb 2-1: Please update to version 0.2 or newer [ 517.118173][T16127] usb 2-1: USB disconnect, device number 75 [ 517.120098][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 517.142041][ T43] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 517.160045][ T43] usb 4-1: config 1 has no interface number 0 [ 517.166217][ T43] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 517.190595][ T43] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 517.210266][ T43] usb 4-1: config 1 interface 105 has no altsetting 0 [ 517.243386][ T43] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 517.262890][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.280064][ T43] usb 4-1: Product: syz [ 517.290102][ T43] usb 4-1: Manufacturer: syz [ 517.300053][ T43] usb 4-1: SerialNumber: syz [ 517.330780][T18287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 517.346942][T18287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 517.780332][T18287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 517.789637][T18287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 518.010294][T16127] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 518.172247][T16127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.187546][T16127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.197451][T16127] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 518.210145][T16127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.226004][T16127] usb 2-1: config 0 descriptor?? [ 518.405660][ T43] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 518.418329][ T43] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 518.440236][ T5856] Bluetooth: hci5: command 0x1003 tx timeout [ 518.446933][ T5172] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 518.449736][ T43] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 518.472153][ T43] usb 4-1: USB disconnect, device number 67 [ 518.507383][ T43] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 518.611243][ T43] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 518.628871][ T43] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 518.647263][ T43] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 519.116027][T16127] uclogic 0003:5543:0781.0037: reserved main item tag 0xd [ 519.145271][T16127] uclogic 0003:5543:0781.0037: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 519.220202][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 519.315824][ T5896] usb 2-1: USB disconnect, device number 76 [ 519.380834][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 519.388301][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.398306][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.408138][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.418453][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.434748][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.443912][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.665152][ T43] usb 6-1: usb_control_msg returned -32 [ 519.671363][ T43] usbtmc 6-1:16.0: can't read capabilities [ 519.942591][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5181'. [ 520.042446][T18331] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 520.160165][ T5896] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 520.243885][ T24] usb 6-1: USB disconnect, device number 16 [ 520.338448][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 520.352299][ T5896] usb 2-1: config index 0 descriptor too short (expected 59154, got 18) [ 520.362607][ T5896] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 520.380105][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 520.398242][ T5896] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 520.417859][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.443897][ T5896] usb 2-1: Product: syz [ 520.448131][ T5896] usb 2-1: Manufacturer: syz [ 520.463742][ T5896] usb 2-1: SerialNumber: syz [ 520.485901][ T5896] usb 2-1: config 0 descriptor?? [ 520.497619][ T5896] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 521.161280][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 521.240662][T16127] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 521.333809][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.346622][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.357053][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 521.366905][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.381375][ T24] usb 3-1: config 0 descriptor?? [ 521.400372][T16127] usb 6-1: Using ep0 maxpacket: 8 [ 521.433816][T16127] usb 6-1: unable to get BOS descriptor or descriptor too short [ 521.446251][T16127] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 521.459308][T16127] usb 6-1: can't read configurations, error -71 [ 521.516025][ T5896] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 521.556783][ T5896] usb 2-1: USB disconnect, device number 77 [ 521.826500][ T24] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 521.839518][ T24] cm6533_jd 0003:0D8C:0022.0038: unknown main item tag 0x0 [ 521.865790][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0038/input/input66 [ 521.901534][ T24] cm6533_jd 0003:0D8C:0022.0038: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 522.118515][ T5896] usb 3-1: USB disconnect, device number 63 [ 522.314912][T18392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5211'. [ 522.364718][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5212'. [ 522.486992][T18398] syzkaller1: entered promiscuous mode [ 522.494145][T18398] syzkaller1: entered allmulticast mode [ 522.527155][T18400] netlink: 277 bytes leftover after parsing attributes in process `syz.5.5223'. [ 522.622559][T18404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5216'. [ 522.636243][T18404] netlink: 'syz.5.5216': attribute type 1 has an invalid length. [ 522.644751][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5216'. [ 522.782651][T16127] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 522.950091][T16127] usb 2-1: Using ep0 maxpacket: 8 [ 522.982413][T16127] usb 2-1: unable to get BOS descriptor or descriptor too short [ 523.011721][T16127] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 523.019398][T16127] usb 2-1: can't read configurations, error -71 [ 523.093616][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5224'. [ 523.225415][T18426] syzkaller1: entered promiscuous mode [ 523.231265][T18426] syzkaller1: entered allmulticast mode [ 523.505868][T18436] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 523.529877][T18436] overlayfs: maximum fs stacking depth exceeded [ 523.850136][ T5896] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 524.042356][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 524.059471][ T5896] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 524.086960][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 524.120605][ T5896] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 524.128854][ T5896] usb 4-1: Product: syz [ 524.134396][ T5896] usb 4-1: Manufacturer: syz [ 524.139149][ T5896] usb 4-1: SerialNumber: syz [ 524.188122][ T5896] usb 4-1: config 0 descriptor?? [ 524.214027][ T5896] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 525.015419][ T5896] gspca_zc3xx: reg_w_i err -71 [ 525.620155][ T5896] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 525.631679][ T5896] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 525.649059][ T5896] usb 4-1: USB disconnect, device number 68 [ 525.850552][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 526.022488][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 526.048584][ T10] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 526.075109][ T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 526.124496][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 526.155726][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 526.175616][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.187525][ T10] usb 6-1: Product: syz [ 526.192977][ T10] usb 6-1: Manufacturer: syz [ 526.197841][ T10] usb 6-1: SerialNumber: syz [ 526.211590][ T10] usb 6-1: config 0 descriptor?? [ 526.240420][ T10] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 526.840228][T16127] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 527.000754][T16127] usb 2-1: Using ep0 maxpacket: 8 [ 527.014435][T16127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.025806][T16127] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.035592][T16127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.055804][T16127] usb 2-1: config 0 descriptor?? [ 527.246442][ T10] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 527.268902][ T10] usb 6-1: USB disconnect, device number 19 [ 527.303486][T16127] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 527.381702][T18542] syzkaller1: entered promiscuous mode [ 527.387213][T18542] syzkaller1: entered allmulticast mode [ 527.770574][ T10] usb 2-1: USB disconnect, device number 80 [ 528.073179][T18562] netlink: 'syz.2.5289': attribute type 29 has an invalid length. [ 528.100336][T18562] netlink: 'syz.2.5289': attribute type 29 has an invalid length. [ 528.109936][T18562] netlink: 'syz.2.5289': attribute type 29 has an invalid length. [ 528.126113][T18562] netlink: 'syz.2.5289': attribute type 29 has an invalid length. [ 528.263992][T18568] program syz.2.5292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.265186][T18607] syzkaller1: entered promiscuous mode [ 529.271157][T18607] syzkaller1: entered allmulticast mode [ 530.587448][T18632] netlink: 'syz.1.5322': attribute type 29 has an invalid length. [ 530.621122][T18632] netlink: 'syz.1.5322': attribute type 29 has an invalid length. [ 530.633119][T18632] netlink: 'syz.1.5322': attribute type 29 has an invalid length. [ 530.663291][T18632] netlink: 'syz.1.5322': attribute type 29 has an invalid length. [ 530.730118][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 530.890232][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 530.903962][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 530.913051][T18645] block nbd2: shutting down sockets [ 530.925932][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 530.935562][ T24] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 530.944291][ T24] usb 6-1: Product: syz [ 530.948652][ T24] usb 6-1: Manufacturer: syz [ 530.953920][ T24] usb 6-1: SerialNumber: syz [ 530.962160][ T24] usb 6-1: config 0 descriptor?? [ 530.980570][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 531.063481][ T5896] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 531.250223][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 531.258204][ T5896] usb 2-1: config 0 has no interfaces? [ 531.267406][ T5896] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 531.276800][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.285184][ T5896] usb 2-1: Product: syz [ 531.289406][ T5896] usb 2-1: Manufacturer: syz [ 531.295040][ T5896] usb 2-1: SerialNumber: syz [ 531.303307][ T5896] usb 2-1: config 0 descriptor?? [ 531.360968][ T984] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 531.524238][ T984] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 531.533573][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.545060][ T984] usb 3-1: config 0 descriptor?? [ 531.553463][ T984] cp210x 3-1:0.0: cp210x converter detected [ 531.718845][T18640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.728145][T18640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.744021][ T5939] usb 2-1: USB disconnect, device number 81 [ 531.784192][ T24] gspca_zc3xx: reg_w_i err -71 [ 531.959037][ T984] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 532.173240][ T984] usb 3-1: cp210x converter now attached to ttyUSB0 [ 532.370751][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 532.377158][ T24] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 532.392817][ T5939] usb 3-1: USB disconnect, device number 64 [ 532.394838][ T24] usb 6-1: USB disconnect, device number 20 [ 532.437690][ T5939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 532.466447][ T5939] cp210x 3-1:0.0: device disconnected [ 532.497958][T18655] program syz.3.5333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.860143][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 533.024355][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.050503][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.065125][ T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 533.078021][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.090762][ T24] usb 6-1: config 0 descriptor?? [ 533.539267][ T24] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 533.588040][ T24] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 533.732129][ T24] cp2112 0003:10C4:EA90.0039: Part Number: 0x00 Device Version: 0x00 [ 534.134785][ T24] cp2112 0003:10C4:EA90.0039: error setting SMBus config [ 534.159427][ T24] cp2112 0003:10C4:EA90.0039: probe with driver cp2112 failed with error -71 [ 534.198885][ T24] usb 6-1: USB disconnect, device number 21 [ 535.139366][T18754] netlink: 'syz.1.5376': attribute type 29 has an invalid length. [ 535.172004][T18754] netlink: 'syz.1.5376': attribute type 29 has an invalid length. [ 535.181452][T18754] netlink: 'syz.1.5376': attribute type 29 has an invalid length. [ 535.190466][T18754] netlink: 'syz.1.5376': attribute type 29 has an invalid length. [ 535.394683][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 535.822317][T18768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.012179][T18768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.141952][T18768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.262879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 536.321157][T18768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.494641][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.524585][T18773] block nbd5: shutting down sockets [ 536.594595][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.637627][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.661453][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.844679][T18780] syzkaller1: entered promiscuous mode [ 536.863431][T18780] syzkaller1: entered allmulticast mode [ 537.402986][ T5172] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 539.616987][T18867] x_tables: duplicate underflow at hook 4 [ 539.743883][T18872] program syz.5.5431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.120183][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 540.240321][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 540.271927][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.290151][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.306448][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 540.315599][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.350074][ T24] usb 3-1: config 0 descriptor?? [ 540.390103][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 540.405716][ T10] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 540.421214][ T10] usb 2-1: config 0 has no interface number 0 [ 540.439046][ T10] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 540.452247][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.463413][ T10] usb 2-1: Product: syz [ 540.467806][ T10] usb 2-1: Manufacturer: syz [ 540.474286][ T10] usb 2-1: SerialNumber: syz [ 540.493723][ T10] usb 2-1: config 0 descriptor?? [ 540.778268][ T24] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 540.815894][ T24] cp2112 0003:10C4:EA90.003A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 540.824357][T18897] sp0: Synchronizing with TNC [ 540.859454][T18897] sp0: Found TNC [ 540.972539][ T24] cp2112 0003:10C4:EA90.003A: Part Number: 0x00 Device Version: 0x00 [ 540.992091][ T984] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 541.114981][ T10] mos7840 2-1:0.225: required endpoints missing [ 541.131505][ T10] usb 2-1: USB disconnect, device number 82 [ 541.164671][ T984] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.178309][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.189929][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.199884][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.214633][ T984] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.226468][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.237283][ T984] usb 6-1: config 0 descriptor?? [ 541.379352][ T24] cp2112 0003:10C4:EA90.003A: error setting SMBus config [ 541.393742][ T24] cp2112 0003:10C4:EA90.003A: probe with driver cp2112 failed with error -71 [ 541.413731][ T24] usb 3-1: USB disconnect, device number 65 [ 541.684492][ T984] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 541.911709][ T984] usb 6-1: USB disconnect, device number 22 [ 542.708834][T18933] vcan0: tx drop: invalid sa for name 0x000003fffffffffd [ 543.381124][T18959] syzkaller1: entered promiscuous mode [ 543.387320][T18959] syzkaller1: entered allmulticast mode [ 543.390314][ T984] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 543.554598][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 543.567158][ T984] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 543.604840][ T984] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 543.615225][ T984] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 543.640352][ T984] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 543.665429][ T984] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 543.693255][ T984] usb 2-1: config 0 has no interface number 0 [ 543.699427][ T984] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 543.720990][ T984] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 543.731606][ T984] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 543.746828][ T984] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.761309][ T984] usb 2-1: config 0 interface 125 has no altsetting 0 [ 543.768183][ T984] usb 2-1: config 0 interface 125 has no altsetting 2 [ 543.801245][T18972] sp0: Synchronizing with TNC [ 543.807393][ T55] block nbd0: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 360 seconds [ 543.819143][ T55] block nbd0: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 360 seconds [ 543.830723][ T55] block nbd0: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 360 seconds [ 543.842521][ T55] block nbd0: Possible stuck request ffff88802541e540: control (read@3072,1024B). Runtime 360 seconds [ 543.857033][ T984] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 543.869532][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.872449][T18972] sp0: Found TNC [ 543.878298][ T984] usb 2-1: Product: syz [ 543.886548][ T984] usb 2-1: Manufacturer: syz [ 543.892606][ T984] usb 2-1: SerialNumber: syz [ 543.917295][ T984] usb 2-1: config 0 descriptor?? [ 543.929342][ T984] usb 2-1: selecting invalid altsetting 2 [ 543.991547][T18973] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.174221][T18973] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.285498][T18973] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.407092][T18973] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.607833][ T210] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.633427][ T3037] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.665706][ T3037] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.727923][ T3037] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.947174][ T5939] usb 2-1: USB disconnect, device number 83 [ 545.070170][T16127] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 545.231990][T16127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.250183][T16127] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 545.259284][T16127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.284406][T16127] usb 6-1: config 0 descriptor?? [ 545.305488][T16127] pwc: Askey VC010 type 2 USB webcam detected. [ 545.352373][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5491'. [ 545.510194][ T984] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 545.665483][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 545.677472][ T984] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 545.689701][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 545.704889][ T984] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 545.714846][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.719371][T16127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 545.723725][ T984] usb 4-1: Product: syz [ 545.734747][ T984] usb 4-1: Manufacturer: syz [ 545.739695][T16127] pwc: recv_control_msg error -32 req 02 val 2700 [ 545.745561][ T984] usb 4-1: SerialNumber: syz [ 545.761324][ T984] usb 4-1: config 0 descriptor?? [ 545.767736][T19005] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.780575][T19005] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.789891][ T984] usb 4-1: ucan: probing device on interface #0 [ 545.854285][ T30] audit: type=1326 audit(1751993033.871:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19019 comm="syz.1.5497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac38d8e929 code=0x0 [ 545.954377][T16127] pwc: recv_control_msg error -71 req 04 val 1000 [ 545.971618][T16127] pwc: recv_control_msg error -71 req 04 val 1300 [ 545.978620][T16127] pwc: recv_control_msg error -71 req 04 val 1400 [ 545.989928][T16127] pwc: recv_control_msg error -71 req 02 val 2000 [ 545.998580][T16127] pwc: recv_control_msg error -71 req 02 val 2100 [ 546.008534][T16127] pwc: recv_control_msg error -71 req 04 val 1500 [ 546.018252][T16127] pwc: recv_control_msg error -71 req 02 val 2500 [ 546.028124][T16127] pwc: recv_control_msg error -71 req 02 val 2400 [ 546.037487][T16127] pwc: recv_control_msg error -71 req 02 val 2600 [ 546.047564][T16127] pwc: recv_control_msg error -71 req 02 val 2900 [ 546.059003][T16127] pwc: recv_control_msg error -71 req 02 val 2800 [ 546.069446][T16127] pwc: recv_control_msg error -71 req 04 val 1100 [ 546.079253][T16127] pwc: recv_control_msg error -71 req 04 val 1200 [ 546.093881][T16127] pwc: Registered as video103. [ 546.110660][T16127] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 546.165221][T16127] usb 6-1: USB disconnect, device number 23 [ 546.414964][ T984] ucan 4-1:0.0 can0: registered device [ 546.618327][ T984] ucan 4-1:0.0 can0: firmware string: $c4ÁÆ [ 546.624820][ T5896] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 546.810190][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 546.825954][ T5939] usb 4-1: USB disconnect, device number 69 [ 546.831318][ T5896] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 546.858698][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.887834][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.916390][ T5896] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.931162][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.964644][ T5896] usb 3-1: Product: syz [ 546.968875][ T5896] usb 3-1: Manufacturer: syz [ 546.981041][ T5896] usb 3-1: SerialNumber: syz [ 547.421760][ T5896] usb 3-1: 0:2 : does not exist [ 548.095824][ T5896] usb 3-1: USB disconnect, device number 66 [ 549.492168][T19102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.293852][T19139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.320141][ T5896] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 550.550561][ T5896] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.581570][ T5896] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.655196][ T5896] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 550.697669][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.975380][ T5896] usb 6-1: GET_CAPABILITIES returned 0 [ 550.990382][ T5896] usbtmc 6-1:16.0: can't read capabilities [ 551.168834][ T5896] usb 6-1: USB disconnect, device number 24 [ 551.987392][T19217] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5555'. [ 552.190369][ T5896] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 552.352422][ T5896] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 552.368871][ T5896] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 552.379841][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 552.391356][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 552.420117][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 552.440449][ T5896] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.449771][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.458455][ T5896] usb 4-1: Product: syz [ 552.463029][ T5896] usb 4-1: Manufacturer: syz [ 552.481631][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 552.486910][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 552.504405][ T5896] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 552.513303][ T5896] cdc_wdm 4-1:1.0: Unknown control protocol [ 552.699806][ T5896] usb 4-1: USB disconnect, device number 70 [ 552.841461][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 553.007484][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 553.027324][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.042027][ T9] usb 3-1: Product: syz [ 553.051605][ T9] usb 3-1: Manufacturer: syz [ 553.056356][ T9] usb 3-1: SerialNumber: syz [ 553.067217][ T9] usb 3-1: config 0 descriptor?? [ 553.088321][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 553.411795][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 553.580280][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 553.588044][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 553.597306][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.607966][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.620074][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.629376][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.638735][ T10] usb 2-1: Product: syz [ 553.643186][ T10] usb 2-1: Manufacturer: syz [ 553.647919][ T10] usb 2-1: SerialNumber: syz [ 553.688440][ T9] gspca_sunplus: reg_r err -71 [ 553.694126][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 553.710111][ T9] usb 3-1: USB disconnect, device number 67 [ 554.074008][ T10] usb 2-1: 0:2 : does not exist [ 554.373175][T19272] Falling back ldisc for ttyS3. [ 554.709603][ T10] usb 2-1: USB disconnect, device number 84 [ 555.930152][ T24] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 556.095220][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.127820][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.172808][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 556.200162][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.439105][ T24] usb 4-1: usb_control_msg returned -32 [ 556.447142][ T24] usbtmc 4-1:16.0: can't read capabilities [ 556.808314][T19357] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 556.826978][ T24] usb 4-1: USB disconnect, device number 71 [ 556.845675][T19359] Falling back ldisc for ttyS3. [ 557.007475][T19367] batadv_slave_0: entered promiscuous mode [ 557.015264][T19366] batadv_slave_0: left promiscuous mode [ 557.200338][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 557.354511][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 557.381257][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.410885][ T10] usb 6-1: Product: syz [ 557.415114][ T10] usb 6-1: Manufacturer: syz [ 557.440156][ T10] usb 6-1: SerialNumber: syz [ 557.452737][ T10] usb 6-1: config 0 descriptor?? [ 557.480959][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 557.618941][T19391] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5623'. [ 557.621388][ T30] audit: type=1326 audit(1751993045.641:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19389 comm="syz.3.5622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa9b38e929 code=0x0 [ 558.079140][ T10] gspca_sunplus: reg_r err -71 [ 558.092424][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 558.116289][ T10] usb 6-1: USB disconnect, device number 25 [ 558.598708][T19413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.913984][T19421] syzkaller1: entered promiscuous mode [ 558.921739][T19425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.929903][T19421] syzkaller1: entered allmulticast mode [ 559.355120][T19440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.721448][T19458] syzkaller1: entered promiscuous mode [ 559.733332][T19458] syzkaller1: entered allmulticast mode [ 559.800775][ T31] INFO: task syz.4.4066:15567 blocked for more than 143 seconds. [ 559.818988][ T31] Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 [ 559.841885][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.854021][ T31] task:syz.4.4066 state:D stack:27672 pid:15567 tgid:15566 ppid:7843 task_flags:0x400040 flags:0x00004004 [ 559.868825][ T31] Call Trace: [ 559.874605][ T31] [ 559.877741][ T31] __schedule+0x16f5/0x4d00 [ 559.884789][ T31] ? __lock_acquire+0xab9/0xd20 [ 559.889849][ T31] ? schedule+0x165/0x360 [ 559.898042][ T31] ? __pfx___schedule+0x10/0x10 [ 559.906093][ T31] ? schedule+0x91/0x360 [ 559.918930][ T31] schedule+0x165/0x360 [ 559.925105][ T31] schedule_preempt_disabled+0x13/0x30 [ 559.931191][ T31] __mutex_lock+0x724/0xe80 [ 559.935952][ T31] ? __mutex_lock+0x51b/0xe80 [ 559.941196][ T31] ? sync_bdevs+0x1ac/0x340 [ 559.946951][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 559.952592][ T31] ? iput+0x398/0x9d0 [ 559.956832][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 559.963990][ T31] sync_bdevs+0x1ac/0x340 [ 559.968523][ T31] ksys_sync+0xb9/0x150 [ 559.973365][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 559.978392][ T31] ? do_syscall_64+0xbe/0x3b0 [ 559.983640][ T31] __ia32_sys_sync+0xe/0x20 [ 559.988310][ T31] do_syscall_64+0xfa/0x3b0 [ 559.993173][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.998584][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.007067][ T31] ? clear_bhb_loop+0x60/0xb0 [ 560.013922][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.019883][ T31] RIP: 0033:0x7fdc9df8e929 [ 560.026897][ T31] RSP: 002b:00007fdc9ee56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 560.037854][ T31] RAX: ffffffffffffffda RBX: 00007fdc9e1b5fa0 RCX: 00007fdc9df8e929 [ 560.047829][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.058319][ T31] RBP: 00007fdc9e1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 560.069455][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.079677][ T31] R13: 0000000000000000 R14: 00007fdc9e1b5fa0 R15: 00007ffc426f6fc8 [ 560.089682][ T31] [ 560.095367][ T31] [ 560.095367][ T31] Showing all locks held in the system: [ 560.105542][ T31] 1 lock held by khungtaskd/31: [ 560.113592][ T31] #0: ffffffff8e53bfa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 560.126989][ T31] 2 locks held by getty/5613: [ 560.134077][ T31] #0: ffff888034ad00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 560.145428][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 560.156094][ T31] 1 lock held by udevd/6855: [ 560.173026][ T31] #0: ffff888143f54358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 560.185014][ T31] 1 lock held by syz.4.4066/15567: [ 560.190977][ T31] #0: ffff888143f54358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 560.200590][ T31] 1 lock held by udevd/16816: [ 560.205375][ T31] 5 locks held by kworker/u8:3/19152: [ 560.211289][ T31] [ 560.213666][ T31] ============================================= [ 560.213666][ T31] [ 560.225315][ T31] NMI backtrace for cpu 1 [ 560.225340][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 560.225367][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.225379][ T31] Call Trace: [ 560.225387][ T31] [ 560.225396][ T31] dump_stack_lvl+0x189/0x250 [ 560.225437][ T31] ? __wake_up_klogd+0xd9/0x110 [ 560.225456][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.225481][ T31] ? __pfx__printk+0x10/0x10 [ 560.225516][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 560.225546][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 560.225570][ T31] ? _printk+0xcf/0x120 [ 560.225597][ T31] ? __pfx__printk+0x10/0x10 [ 560.225624][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.225646][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 560.225675][ T31] watchdog+0xfee/0x1030 [ 560.225694][ T31] ? watchdog+0x1de/0x1030 [ 560.225717][ T31] kthread+0x711/0x8a0 [ 560.225746][ T31] ? __pfx_watchdog+0x10/0x10 [ 560.225762][ T31] ? __pfx_kthread+0x10/0x10 [ 560.225790][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.225807][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.225823][ T31] ? __pfx_kthread+0x10/0x10 [ 560.225850][ T31] ret_from_fork+0x3fc/0x770 [ 560.225874][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 560.225900][ T31] ? __switch_to_asm+0x39/0x70 [ 560.225914][ T31] ? __switch_to_asm+0x33/0x70 [ 560.225929][ T31] ? __pfx_kthread+0x10/0x10 [ 560.225955][ T31] ret_from_fork_asm+0x1a/0x30 [ 560.225984][ T31] [ 560.225994][ T31] Sending NMI from CPU 1 to CPUs 0: [ 560.383596][ C0] NMI backtrace for cpu 0 [ 560.383614][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 560.383637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.383649][ C0] Workqueue: events_unbound toggle_allocation_gate [ 560.383684][ C0] RIP: 0010:mark_lock+0x9b/0x190 [ 560.383708][ C0] Code: 00 75 19 90 48 c7 c7 86 4f e7 8d 48 c7 c6 25 97 d6 8d e8 38 ac e5 ff 90 0f 0b 90 90 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 <85> 69 60 74 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 560.383723][ C0] RSP: 0018:ffffc90000ac74f0 EFLAGS: 00000006 [ 560.383738][ C0] RAX: 0000000000000001 RBX: 0000000000000006 RCX: ffffffff9390f080 [ 560.383750][ C0] RDX: 0000000000000006 RSI: ffff8881404ea9e0 RDI: ffff8881404e9e00 [ 560.383762][ C0] RBP: 0000000000000040 R08: 0000000000000000 R09: ffffffff8211725e [ 560.383774][ C0] R10: dffffc0000000000 R11: fffff94000010cd9 R12: 0000000000000003 [ 560.383786][ C0] R13: 0000000000000003 R14: ffff8881404ea9e0 R15: 0000000000000000 [ 560.383797][ C0] FS: 0000000000000000(0000) GS:ffff88812579f000(0000) knlGS:0000000000000000 [ 560.383812][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.383824][ C0] CR2: 00007f6690182178 CR3: 000000000e336000 CR4: 00000000003526f0 [ 560.383846][ C0] Call Trace: [ 560.383853][ C0] [ 560.383863][ C0] __lock_acquire+0x9e2/0xd20 [ 560.383887][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 560.383911][ C0] lock_acquire+0x120/0x360 [ 560.383930][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 560.383957][ C0] ? rcu_is_watching+0x15/0xb0 [ 560.383982][ C0] _raw_spin_lock+0x2e/0x40 [ 560.383997][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 560.384021][ C0] __pte_offset_map_lock+0x13e/0x210 [ 560.384049][ C0] ? __kmalloc_noprof+0xe2/0x4f0 [ 560.384074][ C0] __text_poke+0x2e6/0xa10 [ 560.384104][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 560.384135][ C0] ? __kmalloc_noprof+0xe2/0x4f0 [ 560.384166][ C0] ? __pfx___text_poke+0x10/0x10 [ 560.384191][ C0] ? rcu_is_watching+0x15/0xb0 [ 560.384213][ C0] ? trace_contention_end+0x39/0x120 [ 560.384244][ C0] smp_text_poke_batch_finish+0xd0a/0x1100 [ 560.384265][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 560.384284][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 560.384309][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 560.384329][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 560.384357][ C0] static_key_disable+0x1a/0x20 [ 560.384373][ C0] toggle_allocation_gate+0x1a1/0x240 [ 560.384400][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 560.384429][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 560.384461][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 560.384482][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 560.384504][ C0] process_scheduled_works+0xade/0x17b0 [ 560.384538][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.384567][ C0] worker_thread+0x8a0/0xda0 [ 560.384591][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 560.384613][ C0] ? __kthread_parkme+0x7b/0x200 [ 560.384641][ C0] kthread+0x711/0x8a0 [ 560.384668][ C0] ? __pfx_worker_thread+0x10/0x10 [ 560.384689][ C0] ? __pfx_kthread+0x10/0x10 [ 560.384716][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.384732][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.384750][ C0] ? __pfx_kthread+0x10/0x10 [ 560.384776][ C0] ret_from_fork+0x3fc/0x770 [ 560.384798][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 560.384822][ C0] ? __switch_to_asm+0x39/0x70 [ 560.384838][ C0] ? __switch_to_asm+0x33/0x70 [ 560.384853][ C0] ? __pfx_kthread+0x10/0x10 [ 560.384879][ C0] ret_from_fork_asm+0x1a/0x30 [ 560.384902][ C0] [ 560.385657][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 560.751382][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 560.762667][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.772731][ T31] Call Trace: [ 560.776014][ T31] [ 560.778956][ T31] dump_stack_lvl+0x99/0x250 [ 560.783612][ T31] ? __asan_memcpy+0x40/0x70 [ 560.788213][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.793423][ T31] ? __pfx__printk+0x10/0x10 [ 560.798037][ T31] panic+0x2e2/0x7b0 [ 560.801956][ T31] ? __pfx_panic+0x10/0x10 [ 560.806387][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 560.811186][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 560.817109][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 560.822531][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 560.828708][ T31] watchdog+0x102d/0x1030 [ 560.833052][ T31] ? watchdog+0x1de/0x1030 [ 560.837486][ T31] kthread+0x711/0x8a0 [ 560.841622][ T31] ? __pfx_watchdog+0x10/0x10 [ 560.846305][ T31] ? __pfx_kthread+0x10/0x10 [ 560.850911][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.856121][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.861339][ T31] ? __pfx_kthread+0x10/0x10 [ 560.865946][ T31] ret_from_fork+0x3fc/0x770 [ 560.870552][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 560.876048][ T31] ? __switch_to_asm+0x39/0x70 [ 560.880818][ T31] ? __switch_to_asm+0x33/0x70 [ 560.885591][ T31] ? __pfx_kthread+0x10/0x10 [ 560.890241][ T31] ret_from_fork_asm+0x1a/0x30 [ 560.895055][ T31] [ 560.898385][ T31] Kernel Offset: disabled [ 560.902726][ T31] Rebooting in 86400 seconds..