last executing test programs: 4m29.894285904s ago: executing program 0 (id=419): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 4m29.571797602s ago: executing program 0 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000004000000010000040"]) 4m29.399289791s ago: executing program 0 (id=427): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) close(r0) 4m29.28534755s ago: executing program 0 (id=429): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 4m29.240671564s ago: executing program 0 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4m28.944030445s ago: executing program 0 (id=431): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) syz_fuse_handle_req(r1, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m28.758623324s ago: executing program 32 (id=431): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) syz_fuse_handle_req(r1, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m46.633291764s ago: executing program 3 (id=1975): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0, 0x7fff}, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m44.825900575s ago: executing program 3 (id=2010): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5, 0x3, '`'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 2m44.671901902s ago: executing program 3 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x5, 0x6, 0x2}]}]}, 0x30}}, 0x0) 2m44.571157749s ago: executing program 3 (id=2015): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 2m44.523812733s ago: executing program 3 (id=2016): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) ioprio_get$pid(0x2, r0) 2m44.179512143s ago: executing program 3 (id=2021): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 2m43.948824921s ago: executing program 33 (id=2021): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 1m41.190341206s ago: executing program 5 (id=2843): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0xffffff00, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) 1m41.071699466s ago: executing program 5 (id=2845): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000001000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1m40.948387202s ago: executing program 5 (id=2847): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 1m40.790261526s ago: executing program 5 (id=2850): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) 1m40.710250219s ago: executing program 5 (id=2851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x1000, 0x315000, 0x500}) 1m40.277406902s ago: executing program 5 (id=2853): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r0, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce4", 0x26, 0x24000094, &(0x7f0000000140)={0xc9, 0x0, r1, 0x1, 0x1, 0x6, @local}, 0x14) 1m40.042179447s ago: executing program 34 (id=2853): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r0, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce4", 0x26, 0x24000094, &(0x7f0000000140)={0xc9, 0x0, r1, 0x1, 0x1, 0x6, @local}, 0x14) 2.355926339s ago: executing program 6 (id=4385): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='.\x00\x00\x00>\x00', 0x6}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069"], 0xfe33) 2.237026136s ago: executing program 6 (id=4389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x50) 2.118448255s ago: executing program 6 (id=4398): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) close(0x3) 1.941436207s ago: executing program 6 (id=4393): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1) 1.586221823s ago: executing program 6 (id=4397): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\t'}]}, 0xf) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.485355757s ago: executing program 6 (id=4408): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)='Pb') 805.159417ms ago: executing program 4 (id=4410): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) 804.413032ms ago: executing program 2 (id=4411): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x3}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 677.305461ms ago: executing program 4 (id=4413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x2, {0x1, 0xff, 0x2}, {0x2, 0xf0, 0x5}, 0x1}], 0x20) 669.672129ms ago: executing program 1 (id=4414): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x22, 0x3, 0x0, {0x1, 0x1, 0x0, '}'}}, 0x22) 631.837368ms ago: executing program 4 (id=4415): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) dup3(r0, r1, 0x80000) 627.546892ms ago: executing program 2 (id=4416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x14000815}, 0x0) 551.040529ms ago: executing program 4 (id=4418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]}) 481.377502ms ago: executing program 1 (id=4419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 438.519397ms ago: executing program 2 (id=4420): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x11, r0, 0xf648e000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x9, 0x4) 396.876284ms ago: executing program 4 (id=4421): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}], 0x1, 0x44804) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x4, @empty}}}, 0x90) 287.656558ms ago: executing program 4 (id=4422): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGRDESC(r0, 0x8028c003, 0x0) 241.229566ms ago: executing program 1 (id=4423): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 241.069031ms ago: executing program 2 (id=4424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x1, 0x80000000, 0x5, 0x5, 0x0, [{0x0, 0x5, 0xf7, '\x00', 0x7}, {0xa, 0x2, 0x8, '\x00', 0x4}, {0x2, 0xd, 0x80, '\x00', 0x6}, {0x2, 0x3, 0x9, '\x00', 0xa}, {0x6, 0xe3, 0x5, '\x00', 0x9}, {0x6, 0x5, 0xff, '\x00', 0xb2}, {0x0, 0x3e, 0x3, '\x00', 0x3}, {0x1, 0xdf, 0x3, '\x00', 0x4}, {0x9, 0x9, 0xf9, '\x00', 0x9}, {0x8, 0x1, 0x7, '\x00', 0xa8}, {0xb, 0xf8, 0x9, '\x00', 0x6}, {0x4, 0x4, 0x9, '\x00', 0x2}, {0x81, 0x1, 0x9, '\x00', 0x4}, {0x7, 0x7, 0x6, '\x00', 0x8}, {0x58, 0x2, 0x7a, '\x00', 0x3}, {0x97, 0x4, 0x0, '\x00', 0xf}, {0x7, 0x9, 0x0, '\x00', 0xd}, {0x4, 0x38, 0x1, '\x00', 0xf8}, {0x9, 0x3, 0x7, '\x00', 0x40}, {0x81, 0xd, 0x6, '\x00', 0x3}, {0xf, 0x7, 0x2, '\x00', 0x8}, {0x9, 0x2, 0x5, '\x00', 0x1}, {0x80, 0xfe, 0xfb, '\x00', 0x80}, {0x4, 0x7, 0x20, '\x00', 0x88}]}}) 206.55076ms ago: executing program 1 (id=4425): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x3}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 113.508708ms ago: executing program 1 (id=4426): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 37.320706ms ago: executing program 2 (id=4427): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) 37.105302ms ago: executing program 1 (id=4428): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005140)={0x60, r3, 0x1, 0x70bd2a, 0x3, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0x30, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0x5, 0x1, 0x0, 0x1, {0x7, 0x1, r1}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 0s ago: executing program 2 (id=4429): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x180c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) kernel console output (not intermixed with test programs): rface 0 has no altsetting 0 [ 260.961148][ T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.976334][ T43] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.982612][ T9] az6027: usb out operation failed. (-71) [ 261.002872][ T9] az6027: usb out operation failed. (-71) [ 261.005395][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 261.008763][ T9] stb0899_attach: Driver disabled by Kconfig [ 261.017128][ T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.028069][ T9] az6027: no front-end attached [ 261.028069][ T9] [ 261.043745][ T43] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.069427][ T9] az6027: usb out operation failed. (-71) [ 261.077208][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 261.089451][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 261.102564][ T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.115689][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 261.121856][ T43] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.147673][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 261.152016][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 261.155144][T10748] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 261.168484][ T43] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 261.177896][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 261.189540][T10748] airspy 2-1:0.0: Registered as swradio24 [ 261.203290][T10748] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 261.224918][T10748] usb 2-1: USB disconnect, device number 33 [ 261.227579][ T43] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 261.239684][ T9] usb 5-1: USB disconnect, device number 29 [ 261.315950][ T43] usb 6-1: Product: syz [ 261.320152][ T43] usb 6-1: Manufacturer: syz [ 261.348059][ T43] usb 6-1: SerialNumber: syz [ 261.361020][ T43] usb 6-1: config 0 descriptor?? [ 261.400647][ T43] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 261.401231][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 261.740341][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 261.740720][ T9] usb 6-1: USB disconnect, device number 13 [ 261.772018][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 261.997642][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 262.154845][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 262.161465][ T43] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 262.170105][ T43] usb 3-1: config 0 has no interface number 0 [ 262.178165][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 262.187317][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.195357][ T43] usb 3-1: Product: syz [ 262.199921][ T43] usb 3-1: Manufacturer: syz [ 262.204517][ T43] usb 3-1: SerialNumber: syz [ 262.213576][ T43] usb 3-1: config 0 descriptor?? [ 262.221628][ T43] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 262.460627][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 262.520099][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 262.766931][ T30] audit: type=1326 audit(1756978113.614:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.1.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf70d8ebe9 code=0x7fc00000 [ 262.861165][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 262.869200][ T43] usb 3-1: USB disconnect, device number 33 [ 262.905442][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 262.947830][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 263.013769][ T43] quatech2 3-1:0.51: device disconnected [ 263.193675][T12315] netlink: 'syz.1.2719': attribute type 31 has an invalid length. [ 263.202436][T12315] netlink: 'syz.1.2719': attribute type 1 has an invalid length. [ 263.214668][T12315] bridge0: port 1(bridge_slave_0) entered learning state [ 263.354332][T10748] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 263.521468][T10748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.536811][T10748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.550325][T10748] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 263.559864][T10748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.572226][T10748] usb 6-1: config 0 descriptor?? [ 264.001690][T10748] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 264.024836][T12346] mkiss: ax0: crc mode is auto. [ 264.029891][T10748] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 264.042421][T10748] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 264.053169][T10748] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 264.065508][T10748] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 264.075891][T10748] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 264.083067][T10748] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 264.216615][T10748] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 264.284759][T10748] cp2112 0003:10C4:EA90.0026: Part Number: 0x00 Device Version: 0x00 [ 264.354975][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 264.486367][T10748] cp2112 0003:10C4:EA90.0026: error requesting SMBus config [ 264.506094][T10748] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -71 [ 264.517980][ T9] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 264.530507][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.541722][T10748] usb 6-1: USB disconnect, device number 14 [ 264.556535][ T9] usb 2-1: config 0 descriptor?? [ 264.604014][ T5953] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 264.763634][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 264.771417][ T5953] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.781993][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.802071][ T9] kaweth 2-1:0.0: Firmware present in device. [ 264.808201][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.818281][ T5953] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.838841][ T5953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.847972][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.993205][ T9] kaweth 2-1:0.0: Statistics collection: 0 [ 264.999366][ T9] kaweth 2-1:0.0: Multicast filter limit: 0 [ 265.005736][ T9] kaweth 2-1:0.0: MTU: 0 [ 265.010018][ T9] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 265.066773][ T5953] usb 5-1: GET_CAPABILITIES returned 0 [ 265.088142][ T5953] usbtmc 5-1:16.0: can't read capabilities [ 265.270242][T10748] usb 5-1: USB disconnect, device number 30 [ 265.398281][ T9] kaweth 2-1:0.0: Error setting SOFS wait [ 265.405836][ T9] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 265.425775][ T9] usb 2-1: USB disconnect, device number 34 [ 265.616161][ T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 265.783496][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 265.791956][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.813375][ T43] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.822441][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.856246][ T43] usb 6-1: config 0 descriptor?? [ 266.081505][ T43] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 266.132997][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 266.303341][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 266.334198][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 266.376709][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.410446][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.429971][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.450226][ T9] usb 5-1: Product: syz [ 266.460356][ T9] usb 5-1: Manufacturer: syz [ 266.480661][ T9] usb 5-1: SerialNumber: syz [ 266.502504][ T9] usb 5-1: config 0 descriptor?? [ 266.529908][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.535784][ T43] usb 6-1: USB disconnect, device number 15 [ 266.545424][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 267.175142][ T9] em28xx 5-1:0.0: chip ID is em2874 [ 267.386597][ T10] usb 5-1: USB disconnect, device number 31 [ 267.430878][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 267.466335][ T10] em28xx 5-1:0.0: Freeing device [ 267.774474][T12438] sp0: Synchronizing with TNC [ 268.159214][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 268.834331][ T5234] Dev loop6: unable to read RDB block 1 [ 268.840050][ T5234] loop6: unable to read partition table [ 268.867651][ T5234] loop6: partition table beyond EOD, truncated [ 268.874591][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 269.033916][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 269.055515][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.071951][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.095306][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.130320][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.151406][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.181158][ T9] usb 3-1: config 0 descriptor?? [ 269.227265][ T30] audit: type=1326 audit(1756978120.077:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.1.2796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf70d8ebe9 code=0x0 [ 269.442258][T12499] input: syz0 as /devices/virtual/input/input28 [ 269.546444][T12501] program syz.4.2800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.598324][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.612719][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.636476][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.659182][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.675736][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.683468][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.692373][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.700294][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.708180][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.716687][ T9] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 269.736505][ T9] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 269.749083][ T9] microsoft 0003:045E:07DA.0027: no inputs found [ 269.760713][ T9] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 269.799630][ T9] usb 3-1: USB disconnect, device number 34 [ 269.891224][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 270.058625][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 270.068856][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 270.080902][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 270.093670][ T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 270.103953][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.112536][ T24] usb 6-1: Product: syz [ 270.116714][ T24] usb 6-1: Manufacturer: syz [ 270.125944][ T24] usb 6-1: SerialNumber: syz [ 270.138452][ T24] usb 6-1: config 0 descriptor?? [ 270.149135][T12505] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 270.158300][T12505] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 270.168360][ T24] usb 6-1: ucan: probing device on interface #0 [ 270.168806][T12513] netlink: 'syz.1.2805': attribute type 2 has an invalid length. [ 270.184167][T12513] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2805'. [ 270.820655][ T24] ucan 6-1:0.0 can0: registered device [ 270.920856][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 271.005088][ T24] ucan 6-1:0.0 can0: firmware string: unknown [ 271.038156][ T24] usb 6-1: USB disconnect, device number 16 [ 271.259167][T12548] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 272.029913][ T5876] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 272.231124][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 272.251944][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.282300][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.318389][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.335885][ T5876] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.345946][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.366210][ T5876] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.384053][ T5876] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.398809][T12584] binder: 12583:12584 ioctl 40046205 0 returned -22 [ 272.411549][ T5876] usb 3-1: Manufacturer: syz [ 272.429411][ T5876] usb 3-1: config 0 descriptor?? [ 272.468446][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2838'. [ 272.489662][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2838'. [ 272.499206][T12591] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2838'. [ 272.520411][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2838'. [ 272.529385][T12591] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2838'. [ 272.779538][ T5876] rc_core: IR keymap rc-hauppauge not found [ 272.785497][ T5876] Registered IR keymap rc-empty [ 272.798285][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.852023][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.871302][ T5876] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 272.893268][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 272.904040][ T5876] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 272.927030][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.989818][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.019566][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.049972][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.050160][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 273.078302][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.081150][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 273.110619][ T9] usb 5-1: config 0 has no interface number 0 [ 273.126528][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.130027][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.148655][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 273.179376][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.189284][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.207498][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.220853][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.240129][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.246589][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 273.258138][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.259891][ T5876] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.270235][ T9] usb 5-1: config 0 descriptor?? [ 273.298766][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 273.316944][ T5876] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 273.347413][ T5876] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 273.370028][ T5876] usb 3-1: USB disconnect, device number 35 [ 273.515861][ T10] usb 5-1: USB disconnect, device number 32 [ 273.515989][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 273.531065][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 273.607892][ T3500] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.649211][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 273.722322][ T3500] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.773273][T12595] ldusb: No device or device unplugged -19 [ 273.809249][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 273.816414][ T3500] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.828665][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.859067][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.877242][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 273.889369][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.901381][ T9] usb 2-1: config 0 descriptor?? [ 273.987895][ T3500] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.245896][ T3500] bridge_slave_1: left allmulticast mode [ 274.277530][ T3500] bridge_slave_1: left promiscuous mode [ 274.277954][T12627] netlink: 'syz.2.2857': attribute type 83 has an invalid length. [ 274.307322][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.330652][ T3500] bridge_slave_0: left promiscuous mode [ 274.336561][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.505450][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.517136][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.526317][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.536579][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.549991][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.555525][ T9] ft260 0003:0403:6030.0028: chip code: 6424 8183 [ 274.774737][ T9] ft260 0003:0403:6030.0028: failed to retrieve system status [ 274.819290][ T9] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -71 [ 274.863761][ T9] usb 2-1: USB disconnect, device number 35 [ 275.498886][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.513960][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.526409][ T3500] bond0 (unregistering): Released all slaves [ 275.543891][T12661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2865'. [ 275.933154][T12674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.315490][ T3500] hsr_slave_0: left promiscuous mode [ 276.343766][ T3500] hsr_slave_1: left promiscuous mode [ 276.358939][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.376753][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.401997][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.413592][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.456006][ T3500] veth1_macvtap: left promiscuous mode [ 276.473233][ T3500] veth0_macvtap: left promiscuous mode [ 276.484198][ T3500] veth1_vlan: left promiscuous mode [ 276.492471][ T3500] veth0_vlan: left promiscuous mode [ 276.597649][ T5871] Bluetooth: hci2: command tx timeout [ 277.186399][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 277.229261][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 277.972606][T12636] chnl_net:caif_netlink_parms(): no params data found [ 278.197089][ T5876] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 278.299753][T12636] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.317032][T12636] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.324326][T12636] bridge_slave_0: entered allmulticast mode [ 278.336154][T12636] bridge_slave_0: entered promiscuous mode [ 278.346508][T12636] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.354892][T12636] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.362238][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 278.368139][T12636] bridge_slave_1: entered allmulticast mode [ 278.378856][ T5876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.388249][ T5876] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 278.397559][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.405554][ T5876] usb 5-1: Product: syz [ 278.410170][T12636] bridge_slave_1: entered promiscuous mode [ 278.417260][ T5876] usb 5-1: Manufacturer: syz [ 278.436948][ T5876] usb 5-1: SerialNumber: syz [ 278.467353][ T5876] usb 5-1: config 0 descriptor?? [ 278.558159][T12636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.589713][T12636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.678150][ T5871] Bluetooth: hci2: command tx timeout [ 278.793217][T12636] team0: Port device team_slave_0 added [ 278.806265][T12636] team0: Port device team_slave_1 added [ 278.899643][ T5876] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 278.944456][T12636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.967391][T12636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.022098][T12636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.033951][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 279.060226][T12636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.076817][T12636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.115224][ T5876] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 279.124331][T12636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.147980][ T5876] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 279.224628][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 279.238266][ T43] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 279.251009][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.276330][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.298699][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.305917][ T10] usb 5-1: USB disconnect, device number 33 [ 279.337710][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.386712][T12636] hsr_slave_0: entered promiscuous mode [ 279.396238][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.407545][T12636] hsr_slave_1: entered promiscuous mode [ 279.426263][T12636] debugfs: 'hsr0' already exists in 'hsr' [ 279.432557][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.437970][T12636] Cannot create hsr debugfs directory [ 279.673216][ T43] usb 3-1: GET_CAPABILITIES returned 0 [ 279.686888][ T43] usbtmc 3-1:16.0: can't read capabilities [ 279.883270][ T43] usb 3-1: USB disconnect, device number 36 [ 280.016424][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 280.017524][T12636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 280.064015][T12636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.094909][T12636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.121745][T12636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.185899][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 280.211969][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.234229][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.254716][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.281804][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.297831][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.332021][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.333265][T12636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.380499][T12636] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.433885][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.441123][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.520012][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.527234][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.556523][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 280.562063][ T10] usbtmc 2-1:16.0: can't read capabilities [ 280.756087][ T5871] Bluetooth: hci2: command tx timeout [ 280.788338][ T5864] usb 2-1: USB disconnect, device number 36 [ 280.982529][T12818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2907'. [ 281.004345][T12818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2907'. [ 281.035611][T12818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2907'. [ 281.180277][T12636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.525203][ T24] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 281.673795][T12636] veth0_vlan: entered promiscuous mode [ 281.686954][ T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 281.705185][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.724414][ T24] usb 3-1: config 0 descriptor?? [ 281.730089][T12636] veth1_vlan: entered promiscuous mode [ 281.762249][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 281.806433][T12636] veth0_macvtap: entered promiscuous mode [ 281.831272][T12636] veth1_macvtap: entered promiscuous mode [ 281.856970][T12636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.871406][T12636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.894166][ T3500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.913928][ T3500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.940672][ T3500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.964172][ T24] gp8psk: usb in 128 operation failed. [ 281.969304][ T3500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.056386][ T5876] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 282.058391][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.083281][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.140193][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.158122][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.171676][ T24] gp8psk: FW Version = 161.50.142 (0xa1328e) Build 2144/173/204 [ 282.236782][ T5876] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 282.254914][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.275776][ T5876] usb 2-1: Product: syz [ 282.280016][ T5876] usb 2-1: Manufacturer: syz [ 282.289396][ T5876] usb 2-1: SerialNumber: syz [ 282.376282][ T24] gp8psk: usb in 149 operation failed. [ 282.394661][ T24] gp8psk: failed to get FPGA version [ 282.412391][ T24] gp8psk: usb in 138 operation failed. [ 282.431044][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 282.492694][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 282.533071][ T24] usb 3-1: USB disconnect, device number 37 [ 282.730474][T12872] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2854'. [ 282.835314][ T5871] Bluetooth: hci2: command tx timeout [ 282.981697][ T5876] rtl8150 2-1:1.0: eth9: rtl8150 is detected [ 283.148507][ T5876] usb 2-1: USB disconnect, device number 37 [ 283.470848][T12904] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 283.524655][T12904] overlayfs: overlapping lowerdir path [ 284.534009][T12955] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 284.540053][T12955] syzkaller1: linktype set to 776 [ 284.829364][T12972] overlay: filesystem on ./file0 not supported as upperdir [ 285.286875][ T5876] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 285.473910][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.508187][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 285.527030][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.536400][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 285.555233][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.568261][ T5876] usb 5-1: Product: syz [ 285.572948][ T5876] usb 5-1: Manufacturer: syz [ 285.583151][ T5876] usb 5-1: SerialNumber: syz [ 285.683970][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 285.700576][ T10] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 285.732587][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 285.742113][T10748] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 285.766863][ T10] usb 7-1: config 0 has no interface number 0 [ 285.776438][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 285.792128][ T10] usb 7-1: config 0 has no interface number 0 [ 285.809758][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 285.809936][T12981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.823053][ T10] usb 7-1: config 0 has no interface number 0 [ 285.830970][T12981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.842714][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 285.850051][ T5876] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 285.859390][ T10] usb 7-1: config 0 has no interface number 0 [ 285.873660][ T5876] usb 5-1: USB disconnect, device number 34 [ 285.876223][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 285.897522][ T10] usb 7-1: config 0 has no interface number 0 [ 285.910563][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 285.923898][T10748] usb 3-1: Using ep0 maxpacket: 32 [ 285.932475][ T10] usb 7-1: config 0 has no interface number 0 [ 285.948377][T10748] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 285.962572][T10748] usb 3-1: config 0 has no interface number 0 [ 285.971129][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 285.984088][T10748] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 285.996888][ T10] usb 7-1: config 0 has no interface number 0 [ 286.003067][T10748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.017575][ T10] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 286.025948][T10748] usb 3-1: Product: syz [ 286.030116][T10748] usb 3-1: Manufacturer: syz [ 286.035905][ T10] usb 7-1: config 0 has no interface number 0 [ 286.043504][T10748] usb 3-1: SerialNumber: syz [ 286.050219][ T10] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 286.061958][T10748] usb 3-1: config 0 descriptor?? [ 286.067801][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.086925][T10748] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 286.095807][ T10] usb 7-1: Product: syz [ 286.100096][ T10] usb 7-1: Manufacturer: syz [ 286.105588][ T10] usb 7-1: SerialNumber: syz [ 286.120755][ T10] usb 7-1: config 0 descriptor?? [ 286.131166][ T10] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 286.301869][T10748] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 286.312762][ T5876] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.338188][ T10] etas_es58x 7-1:0.2: could not parse product info: '' [ 286.345731][T10748] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 286.478618][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 286.523203][ T5876] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 286.547135][ T5876] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 286.562004][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.580872][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.607024][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 286.637999][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.658938][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.670127][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.691993][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.749050][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 286.758746][T10748] usb 3-1: USB disconnect, device number 38 [ 286.789711][T10748] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 286.815498][T10748] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 286.841015][T10748] quatech2 3-1:0.51: device disconnected [ 286.921231][ T5876] usb 5-1: usb_control_msg returned -71 [ 286.936620][ T5876] usbtmc 5-1:16.0: can't read capabilities [ 286.945295][ T5876] usbtmc 5-1:16.0: Failed to submit iin_urb [ 286.951295][ T5876] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -90 [ 286.975597][ T5876] usb 5-1: USB disconnect, device number 35 [ 287.390147][ C0] etas_es58x 7-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 287.401392][ C0] etas_es58x 7-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61) [ 287.412646][ T5529] etas_es58x 7-1:0.2 can0: bit-timing not yet defined [ 287.612319][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 287.621600][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 287.630841][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 287.640068][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 287.649299][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 287.658539][ C0] etas_es58x 7-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 287.668788][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.677645][ T10] usb 7-1: USB disconnect, device number 2 [ 287.685868][ T10] etas_es58x 7-1:0.2: Disconnecting syz syz [ 287.700240][ T5529] etas_es58x 7-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 288.525282][ T3581] Bluetooth: Error in BCSP hdr checksum [ 288.578990][T13115] netlink: 'syz.6.3014': attribute type 83 has an invalid length. [ 290.408432][T13201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.425450][ T5864] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 290.516622][ T5184] Bluetooth: hci4: command 0x1003 tx timeout [ 290.525213][ T5871] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 290.561488][T13207] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3057'. [ 290.604122][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.660436][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.701156][ T5864] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 290.730518][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.749765][ T5864] usb 7-1: config 0 descriptor?? [ 291.224445][ T5864] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 291.598390][ T5864] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 291.624045][ T5864] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 291.648651][ T5864] pyra 0003:1E7D:2CF6.0029: probe with driver pyra failed with error -71 [ 291.688948][ T5864] usb 7-1: USB disconnect, device number 3 [ 291.738344][T13254] rtc_cmos 00:00: Alarms can be up to one day in the future [ 291.810116][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 291.973357][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 291.985786][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.004718][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.018236][ T9] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 292.032302][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.045016][ T9] usb 5-1: config 0 descriptor?? [ 292.181194][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.202271][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.215532][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.225658][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.234075][ T5951] rtc rtc0: __rtc_set_alarm: err=-22 [ 292.268860][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 292.278257][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 292.297891][ T9] usb 5-1: USB disconnect, device number 36 [ 292.349877][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 292.510766][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 292.550470][ T24] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 292.586870][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.616015][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.625912][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.635626][ T24] usb 2-1: Product: syz [ 292.640143][ T24] usb 2-1: Manufacturer: syz [ 292.650250][ T24] usb 2-1: SerialNumber: syz [ 292.890160][ T24] usb 2-1: 0:2 : does not exist [ 292.916421][ T24] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 292.958020][ T24] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 292.983122][ T24] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 293.043647][ T24] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 293.104767][ T24] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 293.158423][ T24] usb 2-1: USB disconnect, device number 38 [ 293.202360][T11004] udevd[11004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.469329][ T5864] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 293.595910][T13326] can0: slcan on ptm0. [ 293.625775][ T30] audit: type=1326 audit(1756978400.484:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz.2.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c358ebe9 code=0x7fc00000 [ 293.661187][ T5864] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.684399][ T5864] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 293.740412][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.761737][ T5864] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 293.801490][ T5864] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 293.834079][ T5864] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.861266][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.873182][ T5864] usb 5-1: Product: syz [ 293.883385][ T5864] usb 5-1: Manufacturer: syz [ 293.889289][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 293.946907][ T5864] cdc_wdm 5-1:1.0: skipping garbage [ 293.959067][ T5864] cdc_wdm 5-1:1.0: skipping garbage [ 293.984944][ T5864] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 294.024730][ T5864] cdc_wdm 5-1:1.0: Unknown control protocol [ 294.081485][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 294.130258][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.141171][T13345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3098'. [ 294.156298][ T24] usb 2-1: config 0 has no interfaces? [ 294.165270][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 294.178822][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.189558][ T24] usb 2-1: Product: syz [ 294.210051][ T24] usb 2-1: Manufacturer: syz [ 294.214718][ T24] usb 2-1: SerialNumber: syz [ 294.262094][ T24] usb 2-1: config 0 descriptor?? [ 294.488228][ T5953] usb 2-1: USB disconnect, device number 39 [ 294.563002][T13364] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3102'. [ 294.609110][T13325] can0 (unregistered): slcan off ptm0. [ 294.948455][ T5864] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 295.103355][ T5864] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 295.115591][ T5864] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 295.125194][ T5864] usb 7-1: config 0 has no interface number 0 [ 295.137059][ T5864] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 295.148075][ T5864] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.160339][ T5864] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 295.171528][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.184457][ T5864] usb 7-1: config 0 descriptor?? [ 295.239316][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.813806][ T5864] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input33 [ 295.856199][ T5864] input: failed to attach handler kbd to device input33, error: -5 [ 296.013131][T10748] usb 7-1: USB disconnect, device number 4 [ 296.176642][ T24] usb 5-1: USB disconnect, device number 37 [ 296.278183][ T5864] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 296.439593][ T5864] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 296.459840][ T5864] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 296.479210][ T5864] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.498291][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.506391][ T5864] usb 2-1: Product: syz [ 296.545991][ T5864] usb 2-1: Manufacturer: syz [ 296.558157][ T5864] usb 2-1: SerialNumber: syz [ 296.806670][ T5864] cdc_ncm 2-1:1.0: bind() failure [ 296.843642][ T5864] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 296.857498][ T5864] cdc_ncm 2-1:1.1: bind() failure [ 296.908563][ T5864] usb 2-1: USB disconnect, device number 40 [ 297.079559][T13452] tap0: tun_chr_ioctl cmd 1074025678 [ 297.084982][T13452] tap0: group set to 21 [ 297.178226][T10748] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 297.357458][T10748] usb 7-1: Using ep0 maxpacket: 32 [ 297.386172][T10748] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 297.404545][T10748] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 297.422517][T10748] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 297.441896][T10748] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 297.474611][T10748] usb 7-1: config 0 interface 0 has no altsetting 0 [ 297.510067][T10748] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 297.538080][T10748] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 297.547898][T10748] usb 7-1: Product: syz [ 297.552079][T10748] usb 7-1: Manufacturer: syz [ 297.565851][T10748] usb 7-1: SerialNumber: syz [ 297.575860][T10748] usb 7-1: config 0 descriptor?? [ 297.585709][T10748] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 297.605677][T10748] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 297.749640][ T5864] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 297.908474][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 297.915917][ T5864] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.931171][T13490] Bluetooth: MGMT ver 1.23 [ 297.937854][ T5864] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.967084][ T5864] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.982921][ T5864] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.003095][ T5864] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.014200][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.248068][ T5864] usb 3-1: GET_CAPABILITIES returned 0 [ 298.253662][ T5864] usbtmc 3-1:16.0: can't read capabilities [ 298.276971][ T5951] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 298.354703][ T9] usb 7-1: USB disconnect, device number 5 [ 298.366782][ T9] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 298.427038][T10748] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 298.433393][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.445700][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.455655][ T5951] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.476956][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.489531][ T5951] usb 5-1: config 0 descriptor?? [ 298.518516][ T5953] usb 3-1: USB disconnect, device number 39 [ 298.579619][T10748] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 298.590864][T10748] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.598157][T10748] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 298.608541][T10748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.619031][T10748] usb 2-1: config 0 descriptor?? [ 298.624780][T13502] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 299.071998][T10748] lenovo 0003:17EF:60A4.002B: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 299.109429][T13510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.246829][ T43] usb 2-1: USB disconnect, device number 41 [ 299.314841][ T5951] uclogic 0003:256C:006D.002A: failed retrieving Huion firmware version: -71 [ 299.350794][ T5951] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 299.364357][ T5951] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 299.381543][ T5951] usb 5-1: USB disconnect, device number 38 [ 299.565046][T13525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.907622][T13538] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3168'. [ 300.046508][T13547] Invalid logical block size (7) [ 300.094887][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 300.386002][T13562] block nbd3: server does not support multiple connections per device. [ 300.431871][T13562] block nbd3: shutting down sockets [ 300.661645][T13580] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3188'. [ 301.405196][ T5951] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 301.560455][ T5951] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 301.574787][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.583314][ T5951] usb 3-1: Product: syz [ 301.590475][ T5951] usb 3-1: Manufacturer: syz [ 301.601719][ T5951] usb 3-1: SerialNumber: syz [ 301.621179][ T5951] usb 3-1: config 0 descriptor?? [ 301.843357][ T5951] usb-storage 3-1:0.0: USB Mass Storage device detected [ 301.863157][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3212'. [ 302.050821][ T5951] usb 3-1: USB disconnect, device number 40 [ 302.209920][T13654] netlink: 'syz.1.3220': attribute type 37 has an invalid length. [ 302.275390][ T3627] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.446805][T13667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3227'. [ 302.755082][T10748] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 302.935149][T10748] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 302.974455][T10748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.015473][T10748] usb 2-1: config 0 descriptor?? [ 303.897125][T10748] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 303.935288][T10748] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 303.964210][T10748] asix 2-1:0.0: probe with driver asix failed with error -71 [ 303.994314][T10748] usb 2-1: USB disconnect, device number 42 [ 304.054054][ T5951] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 304.214098][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 304.231836][ T5951] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.261245][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.286670][ T5951] usb 3-1: config 0 descriptor?? [ 304.511777][ T5951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 304.537085][T13755] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3265'. [ 304.547101][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.563603][ T5951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 304.566262][T10748] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 304.589833][ T5951] usb 3-1: media controller created [ 304.663969][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.755507][T10748] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.773681][T10748] usb 5-1: config 0 has no interfaces? [ 304.789164][T10748] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 304.813581][T10748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.841426][T10748] usb 5-1: config 0 descriptor?? [ 305.067361][ T43] usb 5-1: USB disconnect, device number 39 [ 305.073482][ T5864] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 305.135466][ T5951] az6027: usb out operation failed. (-71) [ 305.144618][ T5951] stb0899_attach: Driver disabled by Kconfig [ 305.150628][ T5951] az6027: no front-end attached [ 305.150628][ T5951] [ 305.163567][ T5951] az6027: usb out operation failed. (-71) [ 305.173480][ T5951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 305.192101][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 305.225744][ T5951] dvb-usb: schedule remote query interval to 400 msecs. [ 305.233377][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 305.245401][ T5864] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 305.263814][ T5951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 305.271975][ T5864] usb 2-1: config 0 has no interface number 0 [ 305.291131][ T5864] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 305.302605][ T5951] usb 3-1: USB disconnect, device number 41 [ 305.311578][ T5864] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 305.329689][ T5864] usb 2-1: config 0 interface 126 has no altsetting 0 [ 305.364964][ T5864] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 305.383960][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.419924][ T5864] usb 2-1: Product: syz [ 305.427542][ T5951] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 305.440346][ T5864] usb 2-1: Manufacturer: syz [ 305.449587][ T5864] usb 2-1: SerialNumber: syz [ 305.469250][ T5864] usb 2-1: config 0 descriptor?? [ 305.488665][T13767] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 305.506886][T13767] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 305.932247][ T5864] ir_usb 2-1:0.126: IR Dongle converter detected [ 306.016022][T10748] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 306.061508][T13798] tap0: tun_chr_ioctl cmd 1074025678 [ 306.068559][T13798] tap0: group set to 21 [ 306.133061][ T5864] usb 2-1: IRDA class descriptor not found, device not bound [ 306.196833][T10748] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 306.228640][T10748] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 306.249614][T10748] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.263097][T10748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.273280][T10748] usb 7-1: Product: syz [ 306.277460][T10748] usb 7-1: Manufacturer: syz [ 306.283345][T10748] usb 7-1: SerialNumber: syz [ 306.343167][ T5953] usb 2-1: USB disconnect, device number 43 [ 306.551238][T10748] cdc_ncm 7-1:1.0: bind() failure [ 306.570507][T10748] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 306.581157][T10748] cdc_ncm 7-1:1.1: bind() failure [ 306.613467][T10748] usb 7-1: USB disconnect, device number 6 [ 307.319081][T13854] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3309'. [ 307.723308][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3319'. [ 309.231503][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 309.417555][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 309.440063][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.480536][ T24] usb 2-1: Product: syz [ 309.489127][ T24] usb 2-1: Manufacturer: syz [ 309.501475][ T24] usb 2-1: SerialNumber: syz [ 309.520429][ T24] usb 2-1: config 0 descriptor?? [ 309.668389][T13969] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 309.681897][T13969] syzkaller1: linktype set to 776 [ 309.737317][ T24] usb-storage 2-1:0.0: USB Mass Storage device detected [ 309.998427][ T24] usb 2-1: USB disconnect, device number 44 [ 310.362466][T10748] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 310.542696][T10748] usb 5-1: Using ep0 maxpacket: 32 [ 310.555629][T10748] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 310.583861][T10748] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 310.601397][T10748] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 310.613352][T10748] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 310.628053][T10748] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.645360][T10748] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 310.660129][T10748] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 310.670267][T10748] usb 5-1: Product: syz [ 310.697408][T10748] usb 5-1: Manufacturer: syz [ 310.702461][T10748] usb 5-1: SerialNumber: syz [ 310.713487][T10748] usb 5-1: config 0 descriptor?? [ 310.725981][T10748] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 310.742176][T10748] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 311.228872][T14036] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 311.506236][T10748] usb 5-1: USB disconnect, device number 40 [ 311.526858][T10748] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 311.733744][ T5953] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 311.913521][ T5953] usb 7-1: Using ep0 maxpacket: 32 [ 311.932605][ T5953] usb 7-1: config 0 interface 0 has no altsetting 0 [ 311.955298][ T5953] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 311.967485][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.981475][ T5953] usb 7-1: Product: syz [ 311.985678][ T5953] usb 7-1: Manufacturer: syz [ 311.990663][ T5953] usb 7-1: SerialNumber: syz [ 311.998458][ T5953] usb 7-1: config 0 descriptor?? [ 312.415424][ T5953] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 312.616961][ T5953] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 312.642161][ T5953] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 312.691662][T10748] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 312.848115][ T5864] usb 7-1: USB disconnect, device number 7 [ 312.884841][T10748] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 312.896652][T10748] usb 3-1: config 0 interface 0 has no altsetting 0 [ 312.925220][T10748] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 312.951017][T10748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.981252][T10748] usb 3-1: config 0 descriptor?? [ 312.987017][T14087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.240923][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 313.413282][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.434679][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.444339][T10748] lenovo 0003:17EF:60A4.002C: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.2-1/input0 [ 313.463277][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.491479][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.522598][ T24] usb 2-1: config 0 descriptor?? [ 313.638667][ T5951] usb 3-1: USB disconnect, device number 42 [ 314.358919][ T24] uclogic 0003:256C:006D.002D: failed retrieving Huion firmware version: -71 [ 314.391354][ T24] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 314.403570][ T24] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 314.456728][ T24] usb 2-1: USB disconnect, device number 45 [ 314.863352][T14192] netlink: 'syz.4.3453': attribute type 83 has an invalid length. [ 315.048569][ T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 315.210307][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.226244][ T43] usb 7-1: config 0 has no interfaces? [ 315.232314][ T43] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.241969][ T5951] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 315.249941][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.263190][ T43] usb 7-1: config 0 descriptor?? [ 315.408277][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 315.430626][ T5951] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 315.442181][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.453247][ T5951] usb 5-1: config 0 descriptor?? [ 315.511343][ T24] usb 7-1: USB disconnect, device number 8 [ 315.689851][ T5951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 315.703745][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.714650][ T5951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 315.724481][ T5951] usb 5-1: media controller created [ 315.743387][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.287823][T10748] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 316.308872][ T5951] az6027: usb out operation failed. (-71) [ 316.316197][ T5951] stb0899_attach: Driver disabled by Kconfig [ 316.323106][ T5951] az6027: no front-end attached [ 316.323106][ T5951] [ 316.331876][ T5951] az6027: usb out operation failed. (-71) [ 316.337616][ T5951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 316.350130][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 316.363502][ T5951] dvb-usb: schedule remote query interval to 400 msecs. [ 316.371462][ T5951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 316.389311][ T5951] usb 5-1: USB disconnect, device number 41 [ 316.454425][T10748] usb 2-1: Using ep0 maxpacket: 32 [ 316.469134][T10748] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 316.485778][T10748] usb 2-1: config 0 has no interface number 0 [ 316.524557][T10748] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 316.532056][ T5951] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 316.545143][T10748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.574460][T10748] usb 2-1: Product: syz [ 316.590680][T10748] usb 2-1: Manufacturer: syz [ 316.595481][T10748] usb 2-1: SerialNumber: syz [ 316.606148][T10748] usb 2-1: config 0 descriptor?? [ 316.626052][T10748] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.848693][T10748] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 316.892042][T10748] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.983518][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.265786][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 317.274322][ T10] usb 2-1: USB disconnect, device number 46 [ 317.303555][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.334136][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.354713][ T10] quatech2 2-1:0.51: device disconnected [ 317.721047][T14278] tun0: tun_chr_ioctl cmd 21731 [ 318.106336][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3499'. [ 318.414951][T14313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.616800][T14327] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.664303][T14326] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.701009][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.715718][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.742694][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.752988][ T5951] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.761547][ T5951] rtc rtc0: __rtc_set_alarm: err=-22 [ 318.856542][T14335] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3527'. [ 319.729969][T14388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3541'. [ 319.889289][T14398] netlink: 'syz.2.3546': attribute type 22 has an invalid length. [ 319.920734][T14398] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.3546'. [ 320.157253][ T5951] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 320.328057][ T5951] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 320.341509][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.375047][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.419524][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.440694][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.454339][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.501893][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.513025][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.538970][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.558082][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.626074][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.635272][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.682195][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.706985][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.737319][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.757832][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.773568][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.807884][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.830084][T14447] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.849891][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.863368][T14447] Buffer I/O error on dev nbd1, logical block 0, async page read [ 320.873092][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.887922][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.900905][T14447] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.920621][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 320.939286][T14447] Buffer I/O error on dev nbd1, logical block 1, async page read [ 320.962853][T14447] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.965866][ T5951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.995230][ T5951] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.000227][T14447] Buffer I/O error on dev nbd1, logical block 2, async page read [ 321.022717][ T5951] usb 7-1: config 0 interface 0 has no altsetting 0 [ 321.046438][T14447] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.075441][T14447] Buffer I/O error on dev nbd1, logical block 3, async page read [ 321.083517][T14447] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.103815][ T5951] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 321.105899][T14447] Buffer I/O error on dev nbd1, logical block 0, async page read [ 321.122198][ T5951] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 321.134447][ T5951] usb 7-1: Product: syz [ 321.144112][ T5951] usb 7-1: Manufacturer: syz [ 321.152092][ T5951] usb 7-1: SerialNumber: syz [ 321.162383][T14447] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.173572][T14447] Buffer I/O error on dev nbd1, logical block 1, async page read [ 321.209562][ T5951] usb 7-1: config 0 descriptor?? [ 321.247492][ T5951] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 321.260653][T14463] netlink: 'syz.2.3578': attribute type 25 has an invalid length. [ 321.275289][T14447] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.284478][T14447] Buffer I/O error on dev nbd1, logical block 2, async page read [ 321.319713][T14447] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.348940][T14447] Buffer I/O error on dev nbd1, logical block 3, async page read [ 321.368261][T14447] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.383083][T14447] Buffer I/O error on dev nbd1, logical block 0, async page read [ 321.392994][T14447] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.412963][T14447] Buffer I/O error on dev nbd1, logical block 1, async page read [ 321.433601][T14447] ldm_validate_partition_table(): Disk read failed. [ 321.476760][T14447] Dev nbd1: unable to read RDB block 0 [ 321.484987][T14447] nbd1: unable to read partition table [ 321.520481][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3572'. [ 322.325143][ T43] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 322.486302][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 322.492958][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.507862][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.517685][ T43] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 322.526786][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.540395][ T43] usb 3-1: config 0 descriptor?? [ 322.761766][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 322.775628][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 322.805823][ T43] usb 3-1: USB disconnect, device number 43 [ 323.049767][ T5871] Bluetooth: hci0: connection err: -111 [ 323.124079][ T24] usb 7-1: USB disconnect, device number 9 [ 323.161500][ T24] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 323.618333][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 323.628716][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 323.639693][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 323.778266][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 323.794818][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 323.815083][T14561] nbd: couldn't find a device at index 2 [ 323.842150][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 324.042864][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 324.074132][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 324.092669][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3603'. [ 324.195676][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'. [ 324.858713][T14617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.237801][ T5871] Bluetooth: hci2: link tx timeout [ 325.245077][ T5871] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.578676][T14658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.322798][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 326.494316][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 326.520346][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 326.535775][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.572073][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.587171][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.597165][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.610660][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.624570][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.734449][ T5951] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 326.792568][ T24] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 326.841163][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 326.846724][ T10] usbtmc 5-1:16.0: can't read capabilities [ 326.906439][ T5951] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.915213][ T5951] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 326.926412][ T5951] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.935685][ T5951] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 326.947011][ T5951] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 326.960019][ T24] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 326.968621][ T24] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 326.977220][ T5951] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 326.986478][ T24] usb 3-1: config 0 has no interface number 0 [ 326.992931][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 327.003007][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.011016][ T5951] usb 7-1: Product: syz [ 327.015228][ T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.025134][ T5951] usb 7-1: Manufacturer: syz [ 327.030987][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 327.049574][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.057233][ T9] usb 5-1: USB disconnect, device number 42 [ 327.059357][ T5951] cdc_wdm 7-1:1.0: skipping garbage [ 327.072862][ T5951] cdc_wdm 7-1:1.0: skipping garbage [ 327.090064][ T5951] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 327.096847][ T5951] cdc_wdm 7-1:1.0: Unknown control protocol [ 327.103195][ T24] usb 3-1: config 0 descriptor?? [ 327.225271][ T3627] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.292337][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 327.744242][ T24] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input37 [ 327.794216][ T24] input: failed to attach handler kbd to device input37, error: -5 [ 327.954694][ T24] usb 3-1: USB disconnect, device number 44 [ 328.342147][ T43] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 328.501722][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 328.518148][ T43] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 328.528380][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.540161][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.553828][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.572800][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.591341][ T43] usb 5-1: Product: syz [ 328.596456][ T43] usb 5-1: Manufacturer: syz [ 328.601153][ T43] usb 5-1: SerialNumber: syz [ 328.664215][ T30] audit: type=1804 audit(1756978435.531:72): pid=14737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3682" name="/newroot/892/cgroup.controllers" dev="tmpfs" ino=4581 res=1 errno=0 [ 328.692641][ T30] audit: type=1800 audit(1756978435.541:73): pid=14737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3682" name="cgroup.controllers" dev="tmpfs" ino=4581 res=0 errno=0 [ 329.024487][ T43] usb 5-1: 0:2 : does not exist [ 329.452880][ T43] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 329.506280][ T5951] usb 7-1: USB disconnect, device number 10 [ 329.553621][ T43] usb 5-1: USB disconnect, device number 43 [ 329.626617][T11004] udevd[11004]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.525275][T14809] __nla_validate_parse: 7 callbacks suppressed [ 330.525293][T14809] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3715'. [ 331.158106][T14837] netlink: 'syz.6.3728': attribute type 16 has an invalid length. [ 331.166351][T14837] netlink: 'syz.6.3728': attribute type 2 has an invalid length. [ 331.184048][T14837] netlink: 'syz.6.3728': attribute type 2 has an invalid length. [ 331.194824][T14837] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.3728'. [ 331.536809][T14857] 9p: Unknown Cache mode or invalid value fs [ 331.726386][T14870] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 331.733526][T14870] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 332.589008][T14921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3769'. [ 332.639401][T14923] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3770'. [ 332.739809][ T5951] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 332.786322][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3774'. [ 332.902252][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 332.924972][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 332.940712][ T5951] usb 5-1: config 174 has an invalid interface number: 8 but max is 0 [ 332.962929][ T5951] usb 5-1: config 174 has no interface number 0 [ 332.984851][ T5951] usb 5-1: config 174 interface 8 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 332.999060][ T5951] usb 5-1: config 174 interface 8 has no altsetting 0 [ 333.027923][ T5951] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice=d2.70 [ 333.057600][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.067253][ T5951] usb 5-1: Product: syz [ 333.074257][ T5951] usb 5-1: Manufacturer: syz [ 333.078947][ T5951] usb 5-1: SerialNumber: syz [ 333.246136][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3785'. [ 333.255560][T14953] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3785'. [ 333.277774][T14953] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3785'. [ 333.288760][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 333.314171][ T5951] kvaser_usb 5-1:174.8: error -ENODEV: Cannot get usb endpoint(s) [ 333.336951][ T5951] usb 5-1: USB disconnect, device number 44 [ 333.469187][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 333.478957][ T24] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 333.494301][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.502756][ T24] usb 7-1: Product: syz [ 333.507338][ T24] usb 7-1: Manufacturer: syz [ 333.522972][ T24] usb 7-1: SerialNumber: syz [ 333.537525][ T24] usb 7-1: config 0 descriptor?? [ 333.568709][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 333.963062][T14982] input: syz0 as /devices/virtual/input/input39 [ 333.970311][ T24] gspca_se401: ExtraFeatures: 48 [ 333.975363][ T24] gspca_se401: Frame size: 8192x0 bayer [ 334.019608][ T5184] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 334.141997][T14990] netlink: 'syz.4.3804': attribute type 16 has an invalid length. [ 334.150334][T14990] netlink: 'syz.4.3804': attribute type 2 has an invalid length. [ 334.158106][T14990] netlink: 'syz.4.3804': attribute type 2 has an invalid length. [ 334.175929][T14990] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.3804'. [ 334.194822][ T24] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 334.249564][ T3581] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.257574][ T24] usb 7-1: USB disconnect, device number 11 [ 334.460702][T15003] 9p: Unknown Cache mode or invalid value fs [ 334.708576][ T5951] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 334.870989][ T5951] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 334.879947][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 334.890033][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 334.905904][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.914116][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 334.927650][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 334.943491][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.951397][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 334.970024][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 334.987834][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.997554][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.011160][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.023992][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.035005][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.044673][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.056067][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.064757][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.076185][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.093379][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.103400][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.116561][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.134435][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3824'. [ 335.138718][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.155110][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 335.165081][ T5951] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 335.184382][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 335.197017][ T5951] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 335.214886][ T5951] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 335.224133][ T5951] usb 3-1: Product: syz [ 335.231861][ T5951] usb 3-1: Manufacturer: syz [ 335.236477][ T5951] usb 3-1: SerialNumber: syz [ 335.245985][ T5951] usb 3-1: config 0 descriptor?? [ 335.266742][ T5951] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 335.944914][ T5184] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 336.004978][T15073] __nla_validate_parse: 2 callbacks suppressed [ 336.004996][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3842'. [ 336.374869][T15093] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3852'. [ 336.464019][ T5951] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 336.618520][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 336.633768][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.660130][ T5951] usb 2-1: config 174 has an invalid interface number: 8 but max is 0 [ 336.669893][ T5951] usb 2-1: config 174 has no interface number 0 [ 336.676232][ T5951] usb 2-1: config 174 interface 8 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 336.695065][ T5951] usb 2-1: config 174 interface 8 has no altsetting 0 [ 336.714797][ T5951] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice=d2.70 [ 336.724154][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.740620][ T5951] usb 2-1: Product: syz [ 336.744962][ T5951] usb 2-1: Manufacturer: syz [ 336.757313][ T5951] usb 2-1: SerialNumber: syz [ 336.976104][ T5951] kvaser_usb 2-1:174.8: error -ENODEV: Cannot get usb endpoint(s) [ 336.993851][ T5951] usb 2-1: USB disconnect, device number 47 [ 337.522673][ T9] usb 3-1: USB disconnect, device number 45 [ 337.555685][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 337.608664][ T3581] Bluetooth: hci4: Frame reassembly failed (-84) [ 337.622997][T15143] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 337.731508][T15151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3880'. [ 337.946147][T15160] program syz.1.3884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.346660][T15229] serio: Serial port ptm1 [ 339.606208][ T5184] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 339.753373][T15243] program syz.6.3919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.046148][T15260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3927'. [ 340.186385][T15265] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 340.202738][ T3500] Bluetooth: hci4: Frame reassembly failed (-84) [ 340.232506][T15267] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3932'. [ 340.955572][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 341.026894][T15297] loop6: detected capacity change from 0 to 524288000 [ 341.076116][T15297] support for the xor transformation has been removed. [ 341.125741][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 341.146446][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.157903][T15299] tap0: tun_chr_ioctl cmd 1074025675 [ 341.163312][T15299] tap0: persist enabled [ 341.168211][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.185642][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.205841][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.243795][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.258185][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.331071][T15303] netlink: 'syz.4.3949': attribute type 5 has an invalid length. [ 341.340776][T15303] netlink: 'syz.4.3949': attribute type 25 has an invalid length. [ 341.492764][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 341.499424][ T9] usbtmc 7-1:16.0: can't read capabilities [ 341.500051][T15307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.701082][ T24] usb 7-1: USB disconnect, device number 12 [ 342.040386][T15336] sctp: [Deprecated]: syz.4.3964 (pid 15336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.040386][T15336] Use struct sctp_sack_info instead [ 342.245066][ T5184] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 342.396427][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 342.577006][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 342.593792][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 342.606195][T10748] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 342.633858][ T9] usb 5-1: config 0 has no interface number 0 [ 342.644231][ T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.662621][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 342.696653][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 342.733370][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.751850][ T9] usb 5-1: Product: syz [ 342.764957][ T9] usb 5-1: Manufacturer: syz [ 342.782201][ T9] usb 5-1: SerialNumber: syz [ 342.789457][T10748] usb 2-1: Using ep0 maxpacket: 16 [ 342.807056][T10748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.829688][ T9] usb 5-1: config 0 descriptor?? [ 342.838859][T10748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.862895][T10748] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 342.888087][T10748] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 342.901053][T10748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.913327][T10748] usb 2-1: config 0 descriptor?? [ 343.098740][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 343.259013][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 343.270861][ T24] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 343.281514][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.293846][ T24] usb 7-1: config 0 descriptor?? [ 343.317737][ T24] as10x_usb: device has been detected [ 343.328874][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 343.332611][T10748] hid_parser_main: 2 callbacks suppressed [ 343.332649][T10748] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 343.381470][ T24] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 343.391989][T10748] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 343.400834][T10748] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 343.425253][T10748] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 343.432278][T10748] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 343.453114][T10748] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 343.463726][ T9] appletouch 5-1:0.85: Geyser mode initialized. [ 343.473112][ T24] as10x_usb: error during firmware upload part1 [ 343.479532][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input41 [ 343.493168][ T24] Registered device nBox DVB-T Dongle [ 343.526767][T15348] random: crng reseeded on system resumption [ 343.526926][ T24] usb 7-1: USB disconnect, device number 13 [ 343.599833][T10748] shield 0003:0955:7214.002E: Registered Thunderstrike controller [ 343.630703][T10748] shield 0003:0955:7214.002E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 343.653404][ T24] Unregistered device nBox DVB-T Dongle [ 343.668208][ T24] as10x_usb: device has been disconnected [ 343.673656][ T10] usb 5-1: USB disconnect, device number 45 [ 343.721012][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 343.746619][ T5953] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 343.782965][T10748] usb 2-1: USB disconnect, device number 48 [ 343.792734][ T5953] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 343.822758][ T5953] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 343.870286][ T5953] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 344.399632][T15390] netlink: 'syz.6.3989': attribute type 5 has an invalid length. [ 344.424298][T15390] netlink: 'syz.6.3989': attribute type 25 has an invalid length. [ 345.031856][T15414] netlink: 'syz.1.3999': attribute type 2 has an invalid length. [ 345.065902][T15414] netlink: 'syz.1.3999': attribute type 6 has an invalid length. [ 345.089964][T15416] loop6: detected capacity change from 0 to 524288000 [ 345.164134][T15416] support for the xor transformation has been removed. [ 345.680479][T15443] tap0: tun_chr_ioctl cmd 1074025675 [ 345.692879][T15443] tap0: persist enabled [ 345.937415][T15453] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4016'. [ 346.046305][T15458] sctp: [Deprecated]: syz.6.4018 (pid 15458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.046305][T15458] Use struct sctp_sack_info instead [ 346.677913][T15488] virtiofs: Unknown parameter 'always 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 18 nlmon0 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 20 batadv0 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 21 vxcan0 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 22 vxcan1 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 23 veth0 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 24 veth1 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 25 wg0 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 26 wg1 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 27 wg2 : 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 28 veth0_to_bridge: 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 29 bridge_slave_0: 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 30 veth1_to_bridge: 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 31 bridge_slave_1: 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 32 veth0_to_bond: 1 V3 [ 346.677913][T15488] 010000E0 1 0:00000000 0 [ 346.677913][T15488] 33 bond_slave_0: 1 V3 [ 346.677913][T15488] 010000E0 1 0:0 [ 347.143983][ T43] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 347.319444][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 347.492158][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 347.499354][ T24] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 347.512130][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.541493][ T24] usb 7-1: config 0 descriptor?? [ 347.553646][ T43] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 347.581949][ T43] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 347.595361][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 347.599680][T15522] loop7: detected capacity change from 0 to 7 [ 347.617875][ T43] usb 5-1: config 150 has no interface number 0 [ 347.620098][T15522] Dev loop7: unable to read RDB block 7 [ 347.632040][ T43] usb 5-1: config 150 interface 204 has no altsetting 0 [ 347.639684][T15522] loop7: AHDI p1 p2 [ 347.644998][T15522] loop7: partition table partially beyond EOD, truncated [ 347.654859][ T43] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 347.664362][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.672804][T15522] loop7: p1 start 1702000233 is beyond EOD, truncated [ 347.679777][ T43] usb 5-1: Product: syz [ 347.706931][ T43] usb 5-1: Manufacturer: syz [ 347.719803][ T43] usb 5-1: SerialNumber: syz [ 347.954692][ T43] xr_serial 5-1:150.204: skipping garbage [ 347.960535][ T43] xr_serial 5-1:150.204: xr_serial converter detected [ 348.341859][T10748] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 348.398720][ T24] gspca_sunplus: reg_w_riv err -71 [ 348.406573][ T24] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 348.440819][ T24] usb 7-1: USB disconnect, device number 14 [ 348.503352][T10748] usb 2-1: Using ep0 maxpacket: 32 [ 348.514982][T10748] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 348.524347][T10748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.533753][T15548] TCP: TCP_TX_DELAY enabled [ 348.543938][T10748] usb 2-1: config 0 descriptor?? [ 348.554919][ T43] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 348.580457][ T43] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 348.607798][ T43] usb 5-1: USB disconnect, device number 46 [ 348.641345][ T43] xr_serial 5-1:150.204: device disconnected [ 348.766249][T10748] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 348.780441][T10748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.796950][T10748] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 348.809502][T10748] usb 2-1: media controller created [ 348.840531][T10748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.978775][T10748] az6027: usb out operation failed. (-71) [ 349.008013][T10748] az6027: usb out operation failed. (-71) [ 349.020260][T10748] stb0899_attach: Driver disabled by Kconfig [ 349.037095][T10748] az6027: no front-end attached [ 349.037095][T10748] [ 349.058097][T10748] az6027: usb out operation failed. (-71) [ 349.068942][T10748] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 349.111725][T10748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43 [ 349.192580][T10748] dvb-usb: schedule remote query interval to 400 msecs. [ 349.235343][T10748] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 349.270878][T10748] usb 2-1: USB disconnect, device number 49 [ 349.422638][T10748] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 349.499014][T15578] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.4074'. [ 349.669556][T15586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4079'. [ 349.941553][T15599] loop7: detected capacity change from 0 to 7 [ 349.954969][T15599] Dev loop7: unable to read RDB block 7 [ 349.968594][T15599] loop7: AHDI p1 p2 [ 349.977244][T15599] loop7: partition table partially beyond EOD, truncated [ 349.987525][T15599] loop7: p1 start 1702000233 is beyond EOD, truncated [ 350.221163][ T5951] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 350.313544][T10748] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 350.374932][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 350.387564][ T5951] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 350.401005][ T5951] usb 3-1: config 0 has no interface number 0 [ 350.415888][ T5951] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 350.425767][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.433966][ T5951] usb 3-1: Product: syz [ 350.438199][ T5951] usb 3-1: Manufacturer: syz [ 350.442905][ T5951] usb 3-1: SerialNumber: syz [ 350.450405][ T5951] usb 3-1: config 0 descriptor?? [ 350.491268][T10748] usb 2-1: Using ep0 maxpacket: 8 [ 350.499749][T10748] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.519941][T10748] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.537215][T10748] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.547565][T10748] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.569458][T10748] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.579093][T10748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.667873][ T5951] usbhid 3-1:0.78: couldn't find an input interrupt endpoint [ 350.681615][ T5951] usb 3-1: USB disconnect, device number 46 [ 350.810730][T10748] usb 2-1: GET_CAPABILITIES returned 0 [ 350.818151][T10748] usbtmc 2-1:16.0: can't read capabilities [ 351.019885][ T5951] usb 2-1: USB disconnect, device number 50 [ 351.574503][T15641] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.4105'. [ 351.630246][T10748] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 351.708021][T15647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 351.715420][T15647] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 351.729622][T15647] vhci_hcd vhci_hcd.0: Device attached [ 351.747921][T15647] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 351.754473][T15647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.769046][T15647] vhci_hcd vhci_hcd.0: Device attached [ 351.778420][T15647] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 351.784960][T15647] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.793263][T15647] vhci_hcd vhci_hcd.0: Device attached [ 351.802938][T10748] usb 5-1: Using ep0 maxpacket: 32 [ 351.814108][T10748] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 351.831132][T15647] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 351.837674][T15647] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.852931][T10748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.860024][T15647] vhci_hcd vhci_hcd.0: Device attached [ 351.873389][T15653] vhci_hcd: connection closed [ 351.876684][ T36] vhci_hcd: stop threads [ 351.876803][T15651] vhci_hcd: connection closed [ 351.882681][T15649] vhci_hcd: connection closed [ 351.891491][T10748] usb 5-1: config 0 descriptor?? [ 351.911233][ T36] vhci_hcd: release socket [ 351.920240][ T5951] vhci_hcd: vhci_device speed not set [ 351.940438][T10748] as10x_usb: device has been detected [ 351.946711][T15657] vhci_hcd: connection closed [ 351.948301][ T36] vhci_hcd: disconnect device [ 351.966282][T10748] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 351.975615][ T36] vhci_hcd: stop threads [ 351.980439][ T36] vhci_hcd: release socket [ 351.990062][ T36] vhci_hcd: disconnect device [ 351.992152][ T5951] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 352.011787][ T36] vhci_hcd: stop threads [ 352.019484][T10748] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 352.029494][ T36] vhci_hcd: release socket [ 352.034646][ T36] vhci_hcd: disconnect device [ 352.044796][ T36] vhci_hcd: stop threads [ 352.049976][ T36] vhci_hcd: release socket [ 352.056517][ T36] vhci_hcd: disconnect device [ 352.064204][T10748] as10x_usb: error during firmware upload part1 [ 352.071047][T10748] Registered device nBox DVB-T Dongle [ 352.148391][T10748] usb 5-1: USB disconnect, device number 47 [ 352.187418][T10748] Unregistered device nBox DVB-T Dongle [ 352.196595][T10748] as10x_usb: device has been disconnected [ 352.234482][T15664] tap0: tun_chr_ioctl cmd 1074025676 [ 352.242637][T15664] tap0: owner set to 0 [ 352.657115][T15683] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4122'. [ 352.669943][T15683] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4122'. [ 352.679224][T15683] netlink: 'syz.2.4122': attribute type 6 has an invalid length. [ 352.688096][T15683] netlink: 'syz.2.4122': attribute type 5 has an invalid length. [ 352.696305][T15683] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4122'. [ 353.409424][ T5953] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 353.485873][T15718] sctp: [Deprecated]: syz.4.4139 (pid 15718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.485873][T15718] Use struct sctp_sack_info instead [ 353.569186][ T5876] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 353.579239][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 353.588925][ T5953] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 353.603611][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.630390][ T5953] usb 3-1: config 0 descriptor?? [ 353.660466][ T5953] as10x_usb: device has been detected [ 353.666699][ T5953] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 353.669612][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4142'. [ 353.755963][ T5953] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 353.771062][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.787627][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.797982][ T5953] as10x_usb: error during firmware upload part1 [ 353.815497][ T5953] Registered device nBox DVB-T Dongle [ 353.822624][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.856046][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.877267][ T5876] usb 2-1: Product: syz [ 353.884628][ T5876] usb 2-1: Manufacturer: syz [ 353.898279][ T43] usb 3-1: USB disconnect, device number 47 [ 353.911970][ T5876] usb 2-1: SerialNumber: syz [ 353.958232][ T43] Unregistered device nBox DVB-T Dongle [ 353.965315][ T43] as10x_usb: device has been disconnected [ 354.243621][T15736] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4147'. [ 354.343177][ T5876] usb 2-1: 0:2 : does not exist [ 354.566381][T15751] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4154'. [ 354.577369][T15751] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4154'. [ 354.587082][T15751] netlink: 'syz.6.4154': attribute type 6 has an invalid length. [ 354.596351][T15751] netlink: 'syz.6.4154': attribute type 5 has an invalid length. [ 354.605265][T15751] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4154'. [ 354.762947][ T10] usb 2-1: USB disconnect, device number 51 [ 355.061145][T15759] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4158'. [ 355.469179][T15777] tap1: tun_chr_ioctl cmd 1074025676 [ 355.474509][T15777] tap1: owner set to 0 [ 355.880578][ T43] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 355.888119][T10748] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 355.918094][ T10] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 356.048109][T10748] usb 7-1: Using ep0 maxpacket: 8 [ 356.055059][T10748] usb 7-1: config 0 has an invalid interface number: 78 but max is 0 [ 356.060182][ T43] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 356.063765][T10748] usb 7-1: config 0 has no interface number 0 [ 356.076446][ T43] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 356.079812][ T10] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 356.087231][ T43] usb 2-1: config 150 has no interface number 0 [ 356.095717][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 356.108641][ T43] usb 2-1: config 150 interface 204 has no altsetting 0 [ 356.113547][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 356.136282][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 356.147970][T10748] usb 7-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 356.151099][ T43] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 356.164616][T10748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.166796][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.188444][ T43] usb 2-1: Product: syz [ 356.192481][ T10] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 356.192692][ T43] usb 2-1: Manufacturer: syz [ 356.212519][T10748] usb 7-1: Product: syz [ 356.216850][T10748] usb 7-1: Manufacturer: syz [ 356.220059][ T43] usb 2-1: SerialNumber: syz [ 356.227635][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 356.234703][T10748] usb 7-1: SerialNumber: syz [ 356.250690][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 356.263951][T10748] usb 7-1: config 0 descriptor?? [ 356.282556][ T10] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 356.294942][ T10] usb 5-1: Product: syz [ 356.299509][ T10] usb 5-1: Manufacturer: syz [ 356.304356][ T10] usb 5-1: SerialNumber: syz [ 356.322184][ T10] usb 5-1: config 0 descriptor?? [ 356.339286][T15792] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 356.371550][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 356.403900][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 356.486712][ T43] xr_serial 2-1:150.204: skipping garbage [ 356.501243][T10748] pcwd_usb: This driver only supports 1 device [ 356.505276][ T43] xr_serial 2-1:150.204: xr_serial converter detected [ 356.517939][T10748] usbhid 7-1:0.78: couldn't find an input interrupt endpoint [ 356.535408][T10748] usb 7-1: USB disconnect, device number 15 [ 356.594424][ T5876] usb 5-1: USB disconnect, device number 48 [ 356.600547][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 356.625114][ T5876] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 356.815950][T15792] ldusb: No device or device unplugged -19 [ 357.084430][ T43] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 357.093249][ T43] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 357.107417][ T5951] vhci_hcd: vhci_device speed not set [ 357.123439][ T43] usb 2-1: USB disconnect, device number 52 [ 357.155771][ T43] xr_serial 2-1:150.204: device disconnected [ 357.947112][ T5953] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 358.064486][T15855] program syz.6.4201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.121884][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 358.154556][ T5953] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 358.180733][ T5953] usb 5-1: config 0 has no interface number 0 [ 358.213422][ T5953] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 358.235526][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.266885][ T5953] usb 5-1: Product: syz [ 358.271100][ T5953] usb 5-1: Manufacturer: syz [ 358.296565][ T5953] usb 5-1: SerialNumber: syz [ 358.313903][ T5953] usb 5-1: config 0 descriptor?? [ 358.337580][T15865] netlink: 'syz.6.4205': attribute type 25 has an invalid length. [ 358.353306][T15865] netlink: 'syz.6.4205': attribute type 1 has an invalid length. [ 358.579318][ T5953] pcwd_usb: This driver only supports 1 device [ 358.607600][ T5953] usbhid 5-1:0.78: couldn't find an input interrupt endpoint [ 358.654843][ T5953] usb 5-1: USB disconnect, device number 49 [ 358.696643][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 358.868262][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.880070][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.891612][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 358.901048][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.916616][ T10] usb 7-1: config 0 descriptor?? [ 359.359241][ T10] arvo 0003:1E7D:30D4.002F: unknown main item tag 0x0 [ 359.377896][ T10] arvo 0003:1E7D:30D4.002F: unknown main item tag 0x0 [ 359.384726][ T10] arvo 0003:1E7D:30D4.002F: unknown main item tag 0x0 [ 359.406307][ T10] arvo 0003:1E7D:30D4.002F: item fetching failed at offset 6/7 [ 359.437339][ T10] arvo 0003:1E7D:30D4.002F: parse failed [ 359.443088][ T10] arvo 0003:1E7D:30D4.002F: probe with driver arvo failed with error -22 [ 359.502803][T15910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.560239][ T10] usb 7-1: USB disconnect, device number 16 [ 360.006577][ T5871] Bluetooth: hci0: command 0x0406 tx timeout [ 360.966926][T15968] netlink: 'syz.1.4249': attribute type 25 has an invalid length. [ 360.985525][T15968] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 361.875264][ T980] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 362.079883][ T980] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 362.089422][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.106057][ T980] usb 2-1: Product: syz [ 362.111054][ T980] usb 2-1: Manufacturer: syz [ 362.120746][ T980] usb 2-1: SerialNumber: syz [ 362.132527][ T980] usb 2-1: config 0 descriptor?? [ 362.146752][ T980] ch341 2-1:0.0: ch341-uart converter detected [ 362.969344][ T980] usb 2-1: failed to send control message: -71 [ 362.995165][ T980] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 363.064095][ T980] usb 2-1: USB disconnect, device number 53 [ 363.101158][ T980] ch341 2-1:0.0: device disconnected [ 363.313458][T16029] netlink: 'syz.4.4275': attribute type 83 has an invalid length. [ 363.334189][T16031] __nla_validate_parse: 2 callbacks suppressed [ 363.334205][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4276'. [ 363.379876][T16026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4276'. [ 363.392632][T16031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4276'. [ 364.322216][ T30] audit: type=1326 audit(1756978471.219:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="syz.2.4296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1c358ebe9 code=0x0 [ 364.594261][ T10] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 364.755255][ T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 364.768311][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 364.791388][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 364.815245][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 364.840453][ T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 364.869114][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 364.915765][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 364.946346][ T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 364.966215][ T10] usb 2-1: Product: syz [ 364.970990][ T10] usb 2-1: Manufacturer: syz [ 364.976847][ T10] usb 2-1: SerialNumber: syz [ 364.985022][ T10] usb 2-1: config 0 descriptor?? [ 364.990824][T16072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.020931][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 365.051468][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 365.291484][ T10] usb 2-1: USB disconnect, device number 54 [ 365.297797][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 365.317547][ T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 365.509169][T16072] ldusb: No device or device unplugged -19 [ 365.833092][ T5951] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 366.007434][ T5951] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.038801][ T5951] usb 5-1: no configurations [ 366.043694][ T5951] usb 5-1: can't read configurations, error -22 [ 366.233199][ T3581] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.637387][T16116] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4313'. [ 366.660955][T16116] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4313'. [ 366.700823][T16111] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4313'. [ 367.562643][ T30] audit: type=1326 audit(1756978474.451:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16118 comm="syz.2.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c358ebe9 code=0x7fc00000 [ 368.355936][T16184] smc: net device bond0 applied user defined pnetid SYZ0 [ 368.370356][T16184] smc: net device bond0 erased user defined pnetid SYZ0 [ 368.821866][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 368.984284][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 368.998344][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.040682][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.087894][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 369.097345][ T5953] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 369.120192][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.140193][ T10] usb 3-1: config 0 descriptor?? [ 369.263278][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 369.276259][ T5953] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 369.295977][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.311259][ T5953] usb 5-1: Product: syz [ 369.315481][ T5953] usb 5-1: Manufacturer: syz [ 369.350609][ T5953] usb 5-1: SerialNumber: syz [ 369.364260][ T5953] usb 5-1: config 0 descriptor?? [ 369.396442][ T5953] gspca_main: se401-2.14.0 probing 047d:5003 [ 369.606665][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0030/input/input46 [ 369.632345][ T10] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 369.731037][ T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 369.798196][ T5953] gspca_se401: Frame size: 2x0 bayer [ 369.804269][ T5953] gspca_se401: Frame size: 0x0 1/16th janggu [ 369.891222][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 369.898807][ T43] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 369.907291][ T43] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 369.916580][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 369.925728][ T43] usb 7-1: config 1 has no interface number 0 [ 369.931931][ T43] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.942888][ T43] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 369.955788][ T43] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 369.964928][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.984495][ T43] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 369.994113][ T980] usb 3-1: USB disconnect, device number 48 [ 370.012163][ T5953] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input48 [ 370.054068][ T5953] usb 5-1: USB disconnect, device number 52 [ 370.187305][ T43] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 370.605309][ T43] usb 7-1: USB disconnect, device number 17 [ 370.629249][ T43] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 370.680572][ T5951] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 370.847015][ T5951] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 370.857547][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.867779][ T5951] usb 2-1: Product: syz [ 370.872827][ T5951] usb 2-1: Manufacturer: syz [ 370.877874][ T5951] usb 2-1: SerialNumber: syz [ 370.898885][ T5951] usb 2-1: config 0 descriptor?? [ 370.960883][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 371.120361][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 371.134418][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 371.143794][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.152113][ T10] usb 5-1: Product: syz [ 371.160417][ T10] usb 5-1: Manufacturer: syz [ 371.165034][ T10] usb 5-1: SerialNumber: syz [ 371.187748][ T10] usb 5-1: config 0 descriptor?? [ 371.214344][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 371.722921][ T5951] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 371.755758][ T5951] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 371.800409][ T5951] asix 2-1:0.0: probe with driver asix failed with error -71 [ 371.828574][ T5951] usb 2-1: USB disconnect, device number 55 [ 372.023919][ T10] gspca_stk1135: reg_w 0x5 err -71 [ 372.037361][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.054138][ T10] gspca_stk1135: Sensor write failed [ 372.059479][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.081340][ T10] gspca_stk1135: Sensor write failed [ 372.086676][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.094424][ T10] gspca_stk1135: Sensor read failed [ 372.100044][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.106519][ T10] gspca_stk1135: Sensor read failed [ 372.112872][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 372.119616][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.127520][ T10] gspca_stk1135: Sensor read failed [ 372.139192][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.148307][ T10] gspca_stk1135: Sensor read failed [ 372.164691][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.175413][ T10] gspca_stk1135: Sensor write failed [ 372.184714][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 372.194047][ T10] gspca_stk1135: Sensor write failed [ 372.203520][ T10] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 372.259598][ T10] usb 5-1: USB disconnect, device number 53 [ 372.398909][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'. [ 372.411462][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'. [ 372.650457][ T980] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 372.809594][ T980] usb 7-1: Using ep0 maxpacket: 16 [ 372.825041][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.836211][ T980] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 372.846399][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.860417][ T980] usb 7-1: config 0 descriptor?? [ 373.032427][T16322] smc: net device bond0 applied user defined pnetid SYZ0 [ 373.040709][T16322] smc: net device bond0 erased user defined pnetid SYZ0 [ 373.276983][ T980] mcp2221 0003:04D8:00DD.0031: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 373.523146][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4419'. [ 373.534219][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4419'. [ 373.695900][ T5876] usb 7-1: USB disconnect, device number 18 [ 373.838995][ T980] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 373.910030][T16359] netlink: 'syz.1.4428': attribute type 1 has an invalid length. [ 373.918339][T16359] netlink: 'syz.1.4428': attribute type 1 has an invalid length. [ 373.928017][T16359] netlink: 'syz.1.4428': attribute type 1 has an invalid length. [ 373.937017][T16359] nbd: error processing sock list [ 373.942823][T16359] [ 373.945155][T16359] ====================================================== [ 373.952179][T16359] WARNING: possible circular locking dependency detected [ 373.959182][T16359] syzkaller #0 Not tainted [ 373.963569][T16359] ------------------------------------------------------ [ 373.970579][T16359] syz.1.4428/16359 is trying to acquire lock: [ 373.976622][T16359] ffff88814d39e0a0 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_shutdown+0x62/0x4f0 [ 373.985560][T16359] [ 373.985560][T16359] but task is already holding lock: [ 373.992910][T16359] ffff8880753b7e70 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 374.001965][T16359] [ 374.001965][T16359] which lock already depends on the new lock. [ 374.001965][T16359] [ 374.012348][T16359] [ 374.012348][T16359] the existing dependency chain (in reverse order) is: [ 374.021356][T16359] [ 374.021356][T16359] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 374.028981][T16359] lock_acquire+0x120/0x360 [ 374.033987][T16359] __mutex_lock+0x187/0x1350 [ 374.039173][T16359] nbd_queue_rq+0x257/0xf10 [ 374.044201][T16359] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 374.050263][T16359] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 374.057100][T16359] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 374.063591][T16359] blk_mq_run_hw_queue+0x348/0x4f0 [ 374.069211][T16359] blk_mq_dispatch_list+0xd0c/0xe00 [ 374.074920][T16359] blk_mq_flush_plug_list+0x469/0x550 [ 374.080795][T16359] __blk_flush_plug+0x3d3/0x4b0 [ 374.086151][T16359] __submit_bio+0x2d3/0x5a0 [ 374.091156][T16359] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 374.097299][T16359] block_read_full_folio+0x599/0x830 [ 374.103087][T16359] filemap_read_folio+0x114/0x380 [ 374.108617][T16359] do_read_cache_folio+0x350/0x590 [ 374.114247][T16359] read_part_sector+0xb6/0x2b0 [ 374.119529][T16359] adfspart_check_ICS+0xa4/0xa50 [ 374.124982][T16359] bdev_disk_changed+0x75c/0x14b0 [ 374.130517][T16359] blkdev_get_whole+0x380/0x510 [ 374.135878][T16359] bdev_open+0x31e/0xd30 [ 374.140631][T16359] blkdev_open+0x457/0x600 [ 374.145557][T16359] do_dentry_open+0x953/0x13f0 [ 374.150829][T16359] vfs_open+0x3b/0x340 [ 374.155405][T16359] path_openat+0x2ee5/0x3830 [ 374.160499][T16359] do_filp_open+0x1fa/0x410 [ 374.165501][T16359] do_sys_openat2+0x121/0x1c0 [ 374.170685][T16359] __x64_sys_openat+0x138/0x170 [ 374.176037][T16359] do_syscall_64+0xfa/0xfa0 [ 374.181044][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.187440][T16359] [ 374.187440][T16359] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 374.194633][T16359] lock_acquire+0x120/0x360 [ 374.199647][T16359] __mutex_lock+0x187/0x1350 [ 374.204764][T16359] nbd_queue_rq+0xc8/0xf10 [ 374.209690][T16359] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 374.215744][T16359] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 374.222581][T16359] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 374.229070][T16359] blk_mq_run_hw_queue+0x348/0x4f0 [ 374.234683][T16359] blk_mq_dispatch_list+0xd0c/0xe00 [ 374.240385][T16359] blk_mq_flush_plug_list+0x469/0x550 [ 374.246267][T16359] __blk_flush_plug+0x3d3/0x4b0 [ 374.251625][T16359] __submit_bio+0x2d3/0x5a0 [ 374.256634][T16359] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 374.262776][T16359] __bread_gfp+0x216/0x3c0 [ 374.267697][T16359] udf_load_vrs+0x365/0xf20 [ 374.272702][T16359] udf_fill_super+0x5ad/0x17a0 [ 374.277970][T16359] get_tree_bdev_flags+0x40b/0x4d0 [ 374.283583][T16359] vfs_get_tree+0x8f/0x2b0 [ 374.288503][T16359] do_new_mount+0x2ee/0xa90 [ 374.293511][T16359] __se_sys_mount+0x317/0x410 [ 374.298692][T16359] do_syscall_64+0xfa/0xfa0 [ 374.303702][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.310103][T16359] [ 374.310103][T16359] -> #4 (set->srcu){.+.+}-{0:0}: [ 374.317205][T16359] lock_sync+0xba/0x160 [ 374.321858][T16359] __synchronize_srcu+0x96/0x3a0 [ 374.327298][T16359] elevator_switch+0x12b/0x640 [ 374.332570][T16359] elevator_change+0x2d4/0x450 [ 374.337838][T16359] elevator_set_default+0x186/0x260 [ 374.343543][T16359] blk_register_queue+0x34e/0x3f0 [ 374.349074][T16359] __add_disk+0x677/0xd50 [ 374.353904][T16359] add_disk_fwnode+0xfc/0x480 [ 374.359079][T16359] nbd_dev_add+0x717/0xae0 [ 374.363999][T16359] nbd_init+0x168/0x1f0 [ 374.368656][T16359] do_one_initcall+0x233/0x820 [ 374.373924][T16359] do_initcall_level+0x104/0x190 [ 374.379367][T16359] do_initcalls+0x59/0xa0 [ 374.384206][T16359] kernel_init_freeable+0x334/0x4b0 [ 374.389906][T16359] kernel_init+0x1d/0x1d0 [ 374.394738][T16359] ret_from_fork+0x47c/0x820 [ 374.399829][T16359] ret_from_fork_asm+0x1a/0x30 [ 374.405094][T16359] [ 374.405094][T16359] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 374.412911][T16359] lock_acquire+0x120/0x360 [ 374.417934][T16359] __mutex_lock+0x187/0x1350 [ 374.423118][T16359] elevator_change+0x19b/0x450 [ 374.428389][T16359] elevator_set_none+0x42/0xb0 [ 374.433657][T16359] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 374.439964][T16359] nbd_start_device+0x17f/0xb10 [ 374.445326][T16359] nbd_genl_connect+0x135b/0x18f0 [ 374.450869][T16359] genl_family_rcv_msg_doit+0x212/0x300 [ 374.456919][T16359] genl_rcv_msg+0x60e/0x790 [ 374.461923][T16359] netlink_rcv_skb+0x205/0x470 [ 374.467193][T16359] genl_rcv+0x28/0x40 [ 374.471677][T16359] netlink_unicast+0x82c/0x9e0 [ 374.476947][T16359] netlink_sendmsg+0x805/0xb30 [ 374.482216][T16359] __sock_sendmsg+0x21c/0x270 [ 374.487397][T16359] ____sys_sendmsg+0x505/0x830 [ 374.492660][T16359] ___sys_sendmsg+0x21f/0x2a0 [ 374.497839][T16359] __x64_sys_sendmsg+0x19b/0x260 [ 374.503275][T16359] do_syscall_64+0xfa/0xfa0 [ 374.508285][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.514680][T16359] [ 374.514680][T16359] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 374.523268][T16359] lock_acquire+0x120/0x360 [ 374.528276][T16359] blk_alloc_queue+0x538/0x620 [ 374.533546][T16359] __blk_mq_alloc_disk+0x15c/0x340 [ 374.539156][T16359] nbd_dev_add+0x46c/0xae0 [ 374.544078][T16359] nbd_init+0x168/0x1f0 [ 374.548735][T16359] do_one_initcall+0x233/0x820 [ 374.554005][T16359] do_initcall_level+0x104/0x190 [ 374.559445][T16359] do_initcalls+0x59/0xa0 [ 374.564275][T16359] kernel_init_freeable+0x334/0x4b0 [ 374.569972][T16359] kernel_init+0x1d/0x1d0 [ 374.574803][T16359] ret_from_fork+0x47c/0x820 [ 374.579897][T16359] ret_from_fork_asm+0x1a/0x30 [ 374.585163][T16359] [ 374.585163][T16359] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 374.592354][T16359] lock_acquire+0x120/0x360 [ 374.597364][T16359] fs_reclaim_acquire+0x72/0x100 [ 374.602803][T16359] kmem_cache_alloc_node_noprof+0x48/0x710 [ 374.609113][T16359] __alloc_skb+0x112/0x2d0 [ 374.614033][T16359] tipc_msg_build+0x13b/0xcf0 [ 374.619211][T16359] __tipc_sendstream+0x8ac/0x1290 [ 374.624739][T16359] tipc_sendstream+0x55/0x70 [ 374.629829][T16359] __sock_sendmsg+0x21c/0x270 [ 374.635011][T16359] ____sys_sendmsg+0x505/0x830 [ 374.640276][T16359] ___sys_sendmsg+0x21f/0x2a0 [ 374.645456][T16359] __x64_sys_sendmsg+0x19b/0x260 [ 374.650896][T16359] do_syscall_64+0xfa/0xfa0 [ 374.655905][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.662298][T16359] [ 374.662298][T16359] -> #0 (sk_lock-AF_TIPC){+.+.}-{0:0}: [ 374.669925][T16359] validate_chain+0xb9b/0x2140 [ 374.675192][T16359] __lock_acquire+0xab9/0xd20 [ 374.680373][T16359] lock_acquire+0x120/0x360 [ 374.685380][T16359] lock_sock_nested+0x48/0x100 [ 374.690646][T16359] tipc_shutdown+0x62/0x4f0 [ 374.695654][T16359] nbd_mark_nsock_dead+0x2e9/0x560 [ 374.701270][T16359] sock_shutdown+0x15e/0x260 [ 374.706363][T16359] nbd_config_put+0x342/0x790 [ 374.711547][T16359] nbd_genl_connect+0x167c/0x18f0 [ 374.717075][T16359] genl_family_rcv_msg_doit+0x212/0x300 [ 374.723123][T16359] genl_rcv_msg+0x60e/0x790 [ 374.728128][T16359] netlink_rcv_skb+0x205/0x470 [ 374.733396][T16359] genl_rcv+0x28/0x40 [ 374.737888][T16359] netlink_unicast+0x82c/0x9e0 [ 374.743163][T16359] netlink_sendmsg+0x805/0xb30 [ 374.748440][T16359] __sock_sendmsg+0x21c/0x270 [ 374.753655][T16359] ____sys_sendmsg+0x505/0x830 [ 374.759028][T16359] ___sys_sendmsg+0x21f/0x2a0 [ 374.764218][T16359] __x64_sys_sendmsg+0x19b/0x260 [ 374.769662][T16359] do_syscall_64+0xfa/0xfa0 [ 374.774671][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.781068][T16359] [ 374.781068][T16359] other info that might help us debug this: [ 374.781068][T16359] [ 374.791279][T16359] Chain exists of: [ 374.791279][T16359] sk_lock-AF_TIPC --> &cmd->lock --> &nsock->tx_lock [ 374.791279][T16359] [ 374.803869][T16359] Possible unsafe locking scenario: [ 374.803869][T16359] [ 374.811298][T16359] CPU0 CPU1 [ 374.816645][T16359] ---- ---- [ 374.822002][T16359] lock(&nsock->tx_lock); [ 374.826404][T16359] lock(&cmd->lock); [ 374.832887][T16359] lock(&nsock->tx_lock); [ 374.839805][T16359] lock(sk_lock-AF_TIPC); [ 374.844205][T16359] [ 374.844205][T16359] *** DEADLOCK *** [ 374.844205][T16359] [ 374.852324][T16359] 4 locks held by syz.1.4428/16359: [ 374.857497][T16359] #0: ffffffff8f9b8dd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.865677][T16359] #1: ffffffff8f9b8be8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 374.874622][T16359] #2: ffff888025632a30 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 374.885307][T16359] #3: ffff8880753b7e70 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 374.894778][T16359] [ 374.894778][T16359] stack backtrace: [ 374.900662][T16359] CPU: 1 UID: 0 PID: 16359 Comm: syz.1.4428 Not tainted syzkaller #0 PREEMPT(full) [ 374.900679][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.900693][T16359] Call Trace: [ 374.900699][T16359] [ 374.900706][T16359] dump_stack_lvl+0x189/0x250 [ 374.900728][T16359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.900746][T16359] ? __pfx__printk+0x10/0x10 [ 374.900763][T16359] ? stack_trace_save+0x9c/0xe0 [ 374.900785][T16359] print_circular_bug+0x2ee/0x310 [ 374.900804][T16359] check_noncircular+0x134/0x160 [ 374.900822][T16359] validate_chain+0xb9b/0x2140 [ 374.900842][T16359] ? look_up_lock_class+0x74/0x170 [ 374.900860][T16359] ? register_lock_class+0x51/0x320 [ 374.900875][T16359] __lock_acquire+0xab9/0xd20 [ 374.900890][T16359] ? tipc_shutdown+0x62/0x4f0 [ 374.900905][T16359] lock_acquire+0x120/0x360 [ 374.900917][T16359] ? tipc_shutdown+0x62/0x4f0 [ 374.900933][T16359] ? sock_shutdown+0x14f/0x260 [ 374.900952][T16359] lock_sock_nested+0x48/0x100 [ 374.900967][T16359] ? tipc_shutdown+0x62/0x4f0 [ 374.900982][T16359] tipc_shutdown+0x62/0x4f0 [ 374.900996][T16359] ? kfree+0x199/0x6d0 [ 374.901009][T16359] nbd_mark_nsock_dead+0x2e9/0x560 [ 374.901028][T16359] sock_shutdown+0x15e/0x260 [ 374.901047][T16359] nbd_config_put+0x342/0x790 [ 374.901070][T16359] nbd_genl_connect+0x167c/0x18f0 [ 374.901090][T16359] ? __pfx_nbd_genl_connect+0x10/0x10 [ 374.901109][T16359] ? rcu_is_watching+0x15/0xb0 [ 374.901125][T16359] ? __nla_parse+0x40/0x60 [ 374.901141][T16359] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 374.901159][T16359] genl_family_rcv_msg_doit+0x212/0x300 [ 374.901175][T16359] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 374.901194][T16359] ? stack_trace_save+0x9c/0xe0 [ 374.901213][T16359] genl_rcv_msg+0x60e/0x790 [ 374.901228][T16359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.901241][T16359] ? __pfx_nbd_genl_connect+0x10/0x10 [ 374.901262][T16359] netlink_rcv_skb+0x205/0x470 [ 374.901279][T16359] ? __lock_acquire+0xab9/0xd20 [ 374.901291][T16359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.901305][T16359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.901328][T16359] ? down_read+0x1ad/0x2e0 [ 374.901340][T16359] genl_rcv+0x28/0x40 [ 374.901352][T16359] netlink_unicast+0x82c/0x9e0 [ 374.901370][T16359] ? __pfx_netlink_unicast+0x10/0x10 [ 374.901386][T16359] ? netlink_sendmsg+0x642/0xb30 [ 374.901402][T16359] ? skb_put+0x11b/0x210 [ 374.901421][T16359] netlink_sendmsg+0x805/0xb30 [ 374.901441][T16359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.901459][T16359] ? aa_sock_msg_perm+0xf1/0x1d0 [ 374.901477][T16359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.901494][T16359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.901516][T16359] __sock_sendmsg+0x21c/0x270 [ 374.901532][T16359] ____sys_sendmsg+0x505/0x830 [ 374.901546][T16359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.901562][T16359] ? import_iovec+0x74/0xa0 [ 374.901580][T16359] ___sys_sendmsg+0x21f/0x2a0 [ 374.901593][T16359] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.901616][T16359] ? __fget_files+0x2a/0x420 [ 374.901632][T16359] ? __fget_files+0x3a0/0x420 [ 374.901651][T16359] __x64_sys_sendmsg+0x19b/0x260 [ 374.901664][T16359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.901681][T16359] ? do_syscall_64+0xbe/0xfa0 [ 374.901699][T16359] do_syscall_64+0xfa/0xfa0 [ 374.901715][T16359] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.901731][T16359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.901743][T16359] ? clear_bhb_loop+0x60/0xb0 [ 374.901757][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.901773][T16359] RIP: 0033:0x7fbf70d8ebe9 [ 374.901792][T16359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.901805][T16359] RSP: 002b:00007fbf71b4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.901818][T16359] RAX: ffffffffffffffda RBX: 00007fbf70fc5fa0 RCX: 00007fbf70d8ebe9 [ 374.901828][T16359] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 374.901836][T16359] RBP: 00007fbf70e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 374.901845][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.901853][T16359] R13: 00007fbf70fc6038 R14: 00007fbf70fc5fa0 R15: 00007ffe4c7b6dd8 [ 374.901868][T16359] [ 375.322559][T16359] block nbd3: shutting down sockets [ 375.348211][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 375.354545][ T980] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.364275][ T980] usb 5-1: config 0 has no interface number 0 [ 375.370434][ T980] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.381477][ T980] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 375.390605][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.400262][ T980] usb 5-1: config 0 descriptor?? [ 375.408045][ T980] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 375.609458][ T5953] usb 5-1: USB disconnect, device number 54 [ 375.828224][ T3600] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.399008][ T1297] ieee802154 phy1 wpan1: encryption failed: -22