last executing test programs: 2.180534524s ago: executing program 0 (id=1555): setuid(0xee01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, 0x0, 0x0) 2.122111546s ago: executing program 0 (id=1558): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) poll(&(0x7f00000003c0)=[{r1}, {r0, 0x2084}], 0x2, 0x6) 2.019919047s ago: executing program 0 (id=1561): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578060109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, 0x0, 0x0) 1.768800631s ago: executing program 2 (id=1568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r0, 0x400454de, 0xffffffffffffffff) 1.745895866s ago: executing program 2 (id=1569): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd26, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) 1.701744928s ago: executing program 2 (id=1570): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 1.638438754s ago: executing program 2 (id=1571): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 939.066759ms ago: executing program 1 (id=1583): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 870.370389ms ago: executing program 1 (id=1584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xc) 596.487016ms ago: executing program 1 (id=1585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x0, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x81}, {0x4, 0x4, 0x4, '\x00', 0xc}, {0x0, 0x8, 0xf0, '\x00', 0xd}, {0x2, 0xe, 0x6, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x6, 0x7, '\x00', 0x4c}, {0x6, 0x6, 0x9, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x6, 0x1, 0x6, '\x00', 0x7f}, {0x5, 0x6, 0x7, '\x00', 0x2}, {0x7, 0x10, 0xc, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xc}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x2, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x8}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7d, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) 581.512122ms ago: executing program 0 (id=1586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003"], 0x184}}, 0x0) 531.953587ms ago: executing program 1 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) 480.737198ms ago: executing program 0 (id=1588): r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 478.460605ms ago: executing program 1 (id=1589): r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007"], 0x26c0}}, 0x4010) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) 461.474331ms ago: executing program 0 (id=1590): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000100)="4b65b76b235121ca1036d2e127931b909d84161c36869d3f2b2cb9c0e103ad88f2ada536109d153d3a426a39cd374ec324e07455efac41f903e970a2867683f5dcdc0cffad588cf65240dc85f5d7ebdf5f", 0x51) 423.359452ms ago: executing program 1 (id=1591): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x3, 0x3, {0x3, 0x8, '<'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 242.998991ms ago: executing program 3 (id=1595): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f000000b900)={0x24, @none={0x0, 0xffff}}, 0x14) 168.740522ms ago: executing program 3 (id=1596): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) write$P9_RSYMLINK(r1, 0x0, 0x0) 164.785107ms ago: executing program 3 (id=1597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40880) 137.057104ms ago: executing program 2 (id=1598): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 60.689844ms ago: executing program 3 (id=1599): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 60.432916ms ago: executing program 2 (id=1600): r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0xe4, 0x1, 0x0, r0, 0x0}]) 54.108736ms ago: executing program 3 (id=1601): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) 0s ago: executing program 3 (id=1602): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880b8638dc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 67.188573][ T5824] cgroup: Unknown subsys name 'net' [ 67.359500][ T5824] cgroup: Unknown subsys name 'cpuset' [ 67.367903][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.783057][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.981640][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.995221][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.015255][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.025759][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.033430][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.126510][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.146671][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.156097][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.163564][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.171165][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.179202][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.188425][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.196143][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.234579][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.259026][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.266399][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.276510][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.283868][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.292121][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.311115][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.311555][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335310][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.552184][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.779832][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.787409][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.794706][ T5833] bridge_slave_0: entered allmulticast mode [ 71.802078][ T5833] bridge_slave_0: entered promiscuous mode [ 71.810167][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.817319][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.824440][ T5833] bridge_slave_1: entered allmulticast mode [ 71.832152][ T5833] bridge_slave_1: entered promiscuous mode [ 71.879387][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.943891][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.987705][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.063547][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 72.081295][ T5833] team0: Port device team_slave_0 added [ 72.101836][ T5833] team0: Port device team_slave_1 added [ 72.140596][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 72.188187][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.196251][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.203341][ T5837] bridge_slave_0: entered allmulticast mode [ 72.210565][ T5837] bridge_slave_0: entered promiscuous mode [ 72.223329][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.230305][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.256297][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.288429][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.295982][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.303066][ T5837] bridge_slave_1: entered allmulticast mode [ 72.310238][ T5837] bridge_slave_1: entered promiscuous mode [ 72.322080][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.329078][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.355400][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.463793][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.474280][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.481550][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.489052][ T5838] bridge_slave_0: entered allmulticast mode [ 72.496546][ T5838] bridge_slave_0: entered promiscuous mode [ 72.541031][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.551677][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.559272][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.566465][ T5838] bridge_slave_1: entered allmulticast mode [ 72.573360][ T5838] bridge_slave_1: entered promiscuous mode [ 72.585964][ T5833] hsr_slave_0: entered promiscuous mode [ 72.592597][ T5833] hsr_slave_1: entered promiscuous mode [ 72.599505][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.606946][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.614038][ T5843] bridge_slave_0: entered allmulticast mode [ 72.621584][ T5843] bridge_slave_0: entered promiscuous mode [ 72.667056][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.674188][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.684444][ T5843] bridge_slave_1: entered allmulticast mode [ 72.691633][ T5843] bridge_slave_1: entered promiscuous mode [ 72.710634][ T5837] team0: Port device team_slave_0 added [ 72.733516][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.756451][ T5837] team0: Port device team_slave_1 added [ 72.765561][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.789254][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.813084][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.889496][ T5838] team0: Port device team_slave_0 added [ 72.896807][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.903749][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.929894][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.960509][ T5838] team0: Port device team_slave_1 added [ 72.977256][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.984194][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.010149][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.022985][ T5843] team0: Port device team_slave_0 added [ 73.032317][ T5843] team0: Port device team_slave_1 added [ 73.065598][ T5842] Bluetooth: hci0: command tx timeout [ 73.082312][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.089921][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.115976][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.128870][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.135906][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.162108][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.224577][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.231932][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.232209][ T5842] Bluetooth: hci1: command tx timeout [ 73.259260][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.313373][ T5838] hsr_slave_0: entered promiscuous mode [ 73.319933][ T5838] hsr_slave_1: entered promiscuous mode [ 73.326816][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 73.332588][ T5838] Cannot create hsr debugfs directory [ 73.338864][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.346188][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.372137][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.385317][ T5846] Bluetooth: hci3: command tx timeout [ 73.391006][ T5842] Bluetooth: hci2: command tx timeout [ 73.395714][ T5837] hsr_slave_0: entered promiscuous mode [ 73.403416][ T5837] hsr_slave_1: entered promiscuous mode [ 73.409498][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 73.415264][ T5837] Cannot create hsr debugfs directory [ 73.597248][ T5843] hsr_slave_0: entered promiscuous mode [ 73.603396][ T5843] hsr_slave_1: entered promiscuous mode [ 73.609605][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 73.615383][ T5843] Cannot create hsr debugfs directory [ 73.768955][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.803879][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.815859][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.852581][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.942125][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.964538][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.998189][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.013183][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.072580][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.093008][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.104846][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.116362][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.188998][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.199301][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.210994][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.223836][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.359188][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.403982][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.431098][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.450271][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.462667][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.469894][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.500161][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.517298][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.524409][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.548652][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.555808][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.565654][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.572729][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.586960][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.601686][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.622919][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.630016][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.652764][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.664310][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.671471][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.698281][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.705413][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.730660][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.738001][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.145324][ T5842] Bluetooth: hci0: command tx timeout [ 75.283737][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.306195][ T5842] Bluetooth: hci1: command tx timeout [ 75.316202][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.347429][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.396163][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.403538][ T5833] veth0_vlan: entered promiscuous mode [ 75.444659][ T5833] veth1_vlan: entered promiscuous mode [ 75.462004][ T5837] veth0_vlan: entered promiscuous mode [ 75.465817][ T5842] Bluetooth: hci2: command tx timeout [ 75.472868][ T5842] Bluetooth: hci3: command tx timeout [ 75.473959][ T5837] veth1_vlan: entered promiscuous mode [ 75.543682][ T5838] veth0_vlan: entered promiscuous mode [ 75.567788][ T5843] veth0_vlan: entered promiscuous mode [ 75.589335][ T5838] veth1_vlan: entered promiscuous mode [ 75.612276][ T5837] veth0_macvtap: entered promiscuous mode [ 75.622487][ T5833] veth0_macvtap: entered promiscuous mode [ 75.632092][ T5843] veth1_vlan: entered promiscuous mode [ 75.657350][ T5837] veth1_macvtap: entered promiscuous mode [ 75.664563][ T5833] veth1_macvtap: entered promiscuous mode [ 75.682380][ T5838] veth0_macvtap: entered promiscuous mode [ 75.713930][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.726262][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.741599][ T5838] veth1_macvtap: entered promiscuous mode [ 75.760702][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.780715][ T2962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.790118][ T2962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.803506][ T5843] veth0_macvtap: entered promiscuous mode [ 75.816089][ T2962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.829264][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.841585][ T5843] veth1_macvtap: entered promiscuous mode [ 75.848413][ T2962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.862768][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.890591][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.899214][ T4590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.936546][ T4590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.946212][ T4590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.984675][ T4590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.994981][ T4590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.008976][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.030767][ T3504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040643][ T3504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.059804][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.081492][ T3504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.113307][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.124401][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.137864][ T3448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.146722][ T3448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.168935][ T3448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.178440][ T4590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.239569][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.248512][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.294833][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.310670][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.362219][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.376051][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.391043][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.427417][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.435664][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.500794][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.541154][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.652328][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.686281][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.733331][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.750530][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.225506][ T5842] Bluetooth: hci0: command tx timeout [ 77.385591][ T5842] Bluetooth: hci1: command tx timeout [ 77.548449][ T5846] Bluetooth: hci2: command tx timeout [ 77.553928][ T5842] Bluetooth: hci3: command tx timeout [ 77.586041][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.785324][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 77.813517][ T5925] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 77.847150][ T5925] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 77.875611][ T5925] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 77.894012][ T5925] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 77.918767][ T5925] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 77.950991][ T5925] usb 3-1: config 0 has no interface number 0 [ 77.987873][ T5925] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 78.018986][ T5925] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 78.051575][ T5925] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 78.085206][ T5925] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.131856][ T5925] usb 3-1: config 0 interface 125 has no altsetting 0 [ 78.149805][ T5925] usb 3-1: config 0 interface 125 has no altsetting 2 [ 78.190349][ T5925] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 78.210613][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.237305][ T5925] usb 3-1: Product: syz [ 78.251667][ T5925] usb 3-1: Manufacturer: syz [ 78.263520][ T5925] usb 3-1: SerialNumber: syz [ 78.327814][ T5925] usb 3-1: config 0 descriptor?? [ 78.352893][ T5925] usb 3-1: selecting invalid altsetting 2 [ 78.603822][ T6003] netlink: 256 bytes leftover after parsing attributes in process `syz.3.38'. [ 78.725079][ T5888] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.768428][ C0] usb 3-1: async_complete: urb error -71 [ 78.774201][ C0] usb 3-1: async_complete: urb error -71 [ 78.779899][ C0] usb 3-1: async_complete: urb error -71 [ 78.795234][ T5925] get_1284_register: usb error -71 [ 78.801890][ T6010] QAT: Stopping all acceleration devices. [ 78.807907][ T5925] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 78.836909][ T5925] usb 3-1: USB disconnect, device number 2 [ 78.917548][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 78.940855][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 78.960951][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 78.992615][ T5888] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 79.003560][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.023009][ T5888] usb 1-1: Product: syz [ 79.028052][ T5888] usb 1-1: Manufacturer: syz [ 79.037854][ T5888] usb 1-1: SerialNumber: syz [ 79.056706][ T5888] usb 1-1: config 0 descriptor?? [ 79.074283][ T5998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.106265][ T5998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.116367][ T5888] usb 1-1: ucan: probing device on interface #0 [ 79.308844][ T5842] Bluetooth: hci0: command tx timeout [ 79.465149][ T5842] Bluetooth: hci1: command tx timeout [ 79.541015][ T5888] usb 1-1: ucan: failed to retrieve device info [ 79.563467][ T5888] usb 1-1: ucan: probe failed; try to update the device firmware [ 79.613857][ T5888] usb 1-1: USB disconnect, device number 2 [ 79.625274][ T5842] Bluetooth: hci3: command tx timeout [ 79.630692][ T5842] Bluetooth: hci2: command tx timeout [ 80.521812][ T6084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.77'. [ 80.695271][ T6091] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 80.829696][ T6094] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 80.886553][ T6098] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 81.208464][ T6107] netlink: 'syz.0.88': attribute type 5 has an invalid length. [ 81.389643][ T6116] warning: `syz.0.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.567373][ T925] cfg80211: failed to load regulatory.db [ 81.847838][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.034264][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 82.047428][ T10] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 82.064583][ T10] usb 1-1: config 0 has no interface number 0 [ 82.099958][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 82.145574][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.153579][ T10] usb 1-1: Product: syz [ 82.170657][ T10] usb 1-1: Manufacturer: syz [ 82.182883][ T10] usb 1-1: SerialNumber: syz [ 82.207889][ T10] usb 1-1: config 0 descriptor?? [ 82.233755][ T10] hub 1-1:0.145: bad descriptor, ignoring hub [ 82.246707][ T10] hub 1-1:0.145: probe with driver hub failed with error -5 [ 82.261446][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input5 [ 82.425446][ T6156] netlink: 'syz.3.110': attribute type 30 has an invalid length. [ 84.135116][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 84.831899][ T6257] cgroup2: Unknown parameter 'obj_user' [ 85.245648][ T6279] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 85.275148][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 85.886663][ T925] usb 1-1: USB disconnect, device number 3 [ 86.148450][ T6325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.703408][ T6353] netlink: 5 bytes leftover after parsing attributes in process `syz.3.203'. [ 86.754160][ T6355] netlink: 256 bytes leftover after parsing attributes in process `syz.1.204'. [ 86.979498][ T6365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.014353][ T6369] netlink: 228 bytes leftover after parsing attributes in process `syz.3.210'. [ 87.122372][ T6374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.496712][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.511453][ T6393] netlink: 'syz.3.222': attribute type 39 has an invalid length. [ 87.533174][ T6393] lo: entered promiscuous mode [ 87.665071][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 87.672287][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 87.681090][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.704152][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.735919][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.764052][ T6401] netlink: 'syz.2.228': attribute type 7 has an invalid length. [ 87.774703][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.795404][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.810856][ T6401] : entered promiscuous mode [ 87.826372][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.285456][ T925] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.330142][ T10] usb 1-1: USB disconnect, device number 4 [ 88.465122][ T925] usb 2-1: Using ep0 maxpacket: 16 [ 88.479278][ T925] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 88.493182][ T925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.508329][ T925] usb 2-1: config 0 has no interface number 0 [ 88.519486][ T925] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 88.532397][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.540552][ T925] usb 2-1: Product: syz [ 88.544771][ T925] usb 2-1: Manufacturer: syz [ 88.553265][ T925] usb 2-1: SerialNumber: syz [ 88.567717][ T925] usb 2-1: config 0 descriptor?? [ 88.576801][ T925] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 88.605034][ T925] usb 2-1: No valid video chain found. [ 88.814817][ T10] usb 2-1: USB disconnect, device number 2 [ 89.282074][ T6461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.255'. [ 89.291851][ T6461] unsupported nlmsg_type 40 [ 89.747101][ T6482] netlink: 212 bytes leftover after parsing attributes in process `syz.2.265'. [ 89.835150][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.005860][ T6495] mmap: syz.1.272 (6495) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.025082][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 90.032000][ T5839] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 90.052864][ T5839] usb 4-1: config 179 has no interface number 0 [ 90.060196][ T5839] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 90.092271][ T5839] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 90.136478][ T5839] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 90.178068][ T5839] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 90.217511][ T5839] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 90.266622][ T6503] sit0: entered promiscuous mode [ 90.273021][ T5839] usb 4-1: config 179 interface 65 has no altsetting 0 [ 90.284518][ T5839] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 90.295737][ T6503] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 90.303521][ T6503] netlink: 1 bytes leftover after parsing attributes in process `syz.2.276'. [ 90.312783][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.387539][ T5839] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 90.498323][ T5191] input input8: unable to receive magic message: -110 [ 90.593661][ T5191] input input8: unable to receive magic message: -32 [ 90.635436][ T5888] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.668204][ T5191] input input8: unable to receive magic message: -32 [ 90.723774][ T5191] input input8: unable to receive magic message: -32 [ 90.749649][ T5191] input input8: unable to receive magic message: -32 [ 90.798751][ T5888] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 90.827859][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 90.830748][ T5920] usb 4-1: USB disconnect, device number 2 [ 90.836005][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 90.861203][ T5888] usb 1-1: SerialNumber: syz [ 90.894713][ T5888] usb 1-1: config 0 descriptor?? [ 91.253126][ T6543] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 91.262214][ T6543] netlink: 'syz.2.296': attribute type 11 has an invalid length. [ 91.270577][ T6543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.296'. [ 91.324579][ T5888] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 91.334350][ T5888] hackrf 1-1:0.0: Could not detect board [ 91.350637][ T5888] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 91.372743][ T6547] lo speed is unknown, defaulting to 1000 [ 91.376269][ T5888] usb 1-1: USB disconnect, device number 5 [ 91.400932][ T6547] lo speed is unknown, defaulting to 1000 [ 91.419900][ T6547] lo speed is unknown, defaulting to 1000 [ 91.696110][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.741704][ T6547] infiniband syz0: set active [ 91.747585][ T5925] lo speed is unknown, defaulting to 1000 [ 91.757697][ T6547] infiniband syz0: added lo [ 91.832388][ T6560] nbd: couldn't find a device at index -373156329 [ 91.834890][ T6547] RDS/IB: syz0: added [ 91.856229][ T6547] smc: adding ib device syz0 with port count 1 [ 91.866806][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 91.900542][ T6547] smc: ib device syz0 port 1 has pnetid [ 91.908876][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.944039][ T6547] lo speed is unknown, defaulting to 1000 [ 91.955409][ T5920] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 91.964436][ T5920] usb 3-1: config 8 has no interface number 0 [ 91.993610][ T5839] lo speed is unknown, defaulting to 1000 [ 92.013887][ T5920] usb 3-1: config 8 interface 255 has no altsetting 0 [ 92.032162][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 92.038697][ T5920] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 92.054757][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.522544][ T5920] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 92.623496][ T6587] Scaler: ================= START STATUS ================= [ 92.630256][ T5920] usb 3-1: USB disconnect, device number 3 [ 92.632028][ T6587] Scaler: ================== END STATUS ================== [ 92.843631][ T6547] lo speed is unknown, defaulting to 1000 [ 92.869971][ T6593] netlink: 'syz.0.319': attribute type 21 has an invalid length. [ 92.906247][ T6593] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 92.932437][ T6593] netlink: 144 bytes leftover after parsing attributes in process `syz.0.319'. [ 93.492200][ T6547] lo speed is unknown, defaulting to 1000 [ 93.618158][ T925] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.795077][ T925] usb 1-1: Using ep0 maxpacket: 32 [ 93.815886][ T925] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 93.840901][ T925] usb 1-1: config 0 has no interface number 0 [ 93.847406][ T925] usb 1-1: config 0 interface 2 has no altsetting 0 [ 93.859134][ T925] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 93.874424][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.897083][ T925] usb 1-1: Product: syz [ 93.901256][ T925] usb 1-1: Manufacturer: syz [ 93.910411][ T925] usb 1-1: SerialNumber: syz [ 93.922775][ T925] usb 1-1: config 0 descriptor?? [ 94.001281][ T6547] lo speed is unknown, defaulting to 1000 [ 94.135330][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.150202][ T925] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.176181][ T6638] ptrace attach of "./syz-executor exec"[5843] was attempted by ""[6638] [ 94.327036][ T5839] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 94.346086][ T5839] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 94.367089][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.394321][ T5839] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 94.468703][ T925] usb 1-1: USB disconnect, device number 6 [ 95.095021][ T5925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.247575][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 95.256382][ T5925] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 95.264641][ T5925] usb 4-1: config 0 has no interface number 0 [ 95.283228][ T5925] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 95.292629][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.312674][ T5925] usb 4-1: Product: syz [ 95.322986][ T5925] usb 4-1: Manufacturer: syz [ 95.333077][ T5925] usb 4-1: SerialNumber: syz [ 95.347484][ T5925] usb 4-1: config 0 descriptor?? [ 95.433332][ T6696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'. [ 95.465950][ T5839] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 95.667308][ T5839] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 95.689254][ T5839] stv0680 3-1:4.0: last error: 191, command = 0xde [ 95.708718][ T5839] usb 3-1: USB disconnect, device number 4 [ 95.747272][ T6713] netlink: 'syz.1.377': attribute type 30 has an invalid length. [ 95.770190][ T5920] usb 4-1: USB disconnect, device number 3 [ 95.779902][ T5920] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -19 [ 95.805909][ T5920] f81534a_ctrl 4-1:0.88: failed to enable ports: -19 [ 96.505322][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 96.686064][ T6771] tc_dump_action: action bad kind [ 96.740376][ T6775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.408'. [ 96.979172][ T6789] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 96.992673][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 97.828850][ T6838] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 97.860751][ T6838] netlink: 'syz.3.440': attribute type 101 has an invalid length. [ 97.868677][ T6838] netlink: 808 bytes leftover after parsing attributes in process `syz.3.440'. [ 97.895074][ T5888] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 98.098259][ T5888] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 98.128227][ T5888] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 98.145080][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.153115][ T5888] usb 3-1: Product: syz [ 98.164514][ T5888] usb 3-1: Manufacturer: syz [ 98.173826][ T5888] usb 3-1: SerialNumber: syz [ 98.183358][ T6858] netlink: 'syz.1.450': attribute type 1 has an invalid length. [ 98.197369][ T5888] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 98.631998][ T5888] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 98.654020][ T5888] usb 3-1: USB disconnect, device number 5 [ 99.101453][ T6908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.474'. [ 99.868839][ T6952] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.262186][ T6976] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 100.271029][ T6977] netlink: 'syz.0.507': attribute type 8 has an invalid length. [ 100.272064][ T6976] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 100.705157][ T6999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.519'. [ 100.760544][ T7005] kAFS: unable to lookup cell '.,cL' [ 100.882491][ T7009] netlink: 'syz.1.524': attribute type 11 has an invalid length. [ 100.965004][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.987338][ T7015] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.069025][ T7019] netlink: 56 bytes leftover after parsing attributes in process `syz.2.528'. [ 101.123216][ T7023] binder: 7022:7023 ioctl c0046209 0 returned -22 [ 101.165286][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 101.186862][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 101.215713][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.244220][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.286153][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 101.305408][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.323954][ T10] usb 1-1: Product: syz [ 101.349556][ T10] usb 1-1: Manufacturer: syz [ 101.354164][ T10] usb 1-1: SerialNumber: syz [ 101.381110][ T10] usb 1-1: config 0 descriptor?? [ 101.411928][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 101.567804][ T7040] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 101.595290][ T7040] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 101.627054][ T10] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 101.660891][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 101.677549][ T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 101.728831][ T7048] netlink: 56 bytes leftover after parsing attributes in process `syz.1.542'. [ 101.845590][ T57] usb 1-1: USB disconnect, device number 7 [ 102.098949][ T7065] xfrm0: mtu less than device minimum [ 102.118621][ T7067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.551'. [ 102.170419][ T7071] capability: warning: `syz.1.553' uses deprecated v2 capabilities in a way that may be insecure [ 102.498037][ T7086] xfrm0: mtu less than device minimum [ 102.809700][ T7106] netlink: 'syz.1.569': attribute type 8 has an invalid length. [ 102.931484][ T7114] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.939195][ T7114] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.979043][ T7116] netlink: 'syz.1.576': attribute type 63 has an invalid length. [ 102.993138][ T7116] netlink: 5 bytes leftover after parsing attributes in process `syz.1.576'. [ 104.003352][ T7171] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.320917][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 104.367993][ T7189] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.792133][ T7212] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.809921][ T7212] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.988630][ T7225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.630'. [ 104.999540][ T7225] netlink: 60 bytes leftover after parsing attributes in process `syz.1.630'. [ 105.014975][ T7219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.039139][ T7219] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.072601][ T7219] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.101846][ T7219] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.130844][ T7219] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.155406][ T7219] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.192487][ T7219] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.208727][ T7219] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.246244][ T7219] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 105.267177][ T7235] mkiss: ax0: crc mode is auto. [ 105.306472][ T7219] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.333004][ T7219] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.371212][ T7219] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.496117][ T7243] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 105.540316][ T7243] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.133783][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.651'. [ 106.146933][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.651'. [ 106.282109][ T7283] netlink: 'syz.3.656': attribute type 29 has an invalid length. [ 106.314076][ T7283] netlink: 'syz.3.656': attribute type 29 has an invalid length. [ 106.843826][ T7311] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 106.864001][ T7311] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 107.065037][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.148844][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.225051][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.385640][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.155066][ T57] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.307880][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 108.322725][ T57] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.360235][ T57] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.390325][ T57] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.429150][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.466155][ T57] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 108.488206][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.503292][ T7381] nbd: must specify an index to disconnect [ 108.513924][ T57] usb 1-1: config 0 descriptor?? [ 108.565870][ T7385] netlink: 116 bytes leftover after parsing attributes in process `syz.1.695'. [ 108.700660][ T5839] IPVS: starting estimator thread 0... [ 108.796270][ T7390] IPVS: using max 32 ests per chain, 76800 per kthread [ 108.956106][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 108.968590][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 108.976352][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 108.984102][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 109.007279][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 109.034616][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 109.043689][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 109.053948][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 109.063878][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 109.074134][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 109.087400][ T57] hid-generic 0003:045E:05DA.0001: unknown main item tag 0x0 [ 109.105723][ T57] hid-generic 0003:045E:05DA.0001: unbalanced collection at end of report description [ 109.144567][ T57] hid-generic 0003:045E:05DA.0001: probe with driver hid-generic failed with error -22 [ 109.154564][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.177555][ T57] usb 1-1: USB disconnect, device number 8 [ 109.225288][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.305622][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.465471][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.500841][ T7422] overlayfs: conflicting lowerdir path [ 109.635646][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.656124][ T7428] mkiss: ax0: crc mode is auto. [ 109.795534][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 109.802704][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.823575][ T5920] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.841835][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.851278][ T5920] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.859376][ T5920] usb 3-1: Manufacturer: syz [ 109.885743][ T5920] usb 3-1: config 0 descriptor?? [ 110.036418][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 110.110217][ T7418] netlink: 17223 bytes leftover after parsing attributes in process `syz.2.706'. [ 110.127864][ T5920] usb 3-1: USB disconnect, device number 6 [ 110.196036][ T7450] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 110.229959][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.239979][ T10] usb 1-1: config 4 has an invalid interface number: 92 but max is 0 [ 110.253649][ T10] usb 1-1: config 4 has no interface number 0 [ 110.275345][ T10] usb 1-1: config 4 interface 92 has no altsetting 0 [ 110.290727][ T10] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 110.312559][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.325224][ T10] usb 1-1: Product: syz [ 110.329396][ T10] usb 1-1: Manufacturer: syz [ 110.334052][ T10] usb 1-1: SerialNumber: syz [ 110.559057][ T10] radioshark 1-1:4.92: Invalid radioSHARK device [ 110.565463][ T10] radioshark 1-1:4.92: probe with driver radioshark failed with error -22 [ 110.574181][ T10] usbhid 1-1:4.92: couldn't find an input interrupt endpoint [ 110.582193][ T5888] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 110.591819][ T10] usb 1-1: USB disconnect, device number 9 [ 110.677390][ T5925] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.749444][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.771112][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.793417][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 110.818603][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 110.835858][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.846602][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 110.853520][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.864025][ T5888] usb 4-1: config 0 descriptor?? [ 110.878552][ T5925] usb 2-1: config 3 has an invalid interface number: 199 but max is 0 [ 110.892833][ T5925] usb 2-1: config 3 has no interface number 0 [ 110.910512][ T5925] usb 2-1: config 3 interface 199 has no altsetting 0 [ 110.921598][ T5925] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= e.70 [ 110.931075][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.939243][ T5925] usb 2-1: Product: syz [ 110.943641][ T5925] usb 2-1: Manufacturer: syz [ 110.948587][ T5925] usb 2-1: SerialNumber: syz [ 111.179380][ T5925] xr_serial 2-1:3.199: More than one union descriptor, skipping ... [ 111.225327][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.238276][ T5925] usb 2-1: USB disconnect, device number 3 [ 111.299776][ T5888] logitech 0003:046D:CA04.0002: invalid report_count -600040580 [ 111.316014][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.349383][ T5888] logitech 0003:046D:CA04.0002: item 0 4 1 9 parsing failed [ 111.380411][ T5888] logitech 0003:046D:CA04.0002: parse failed [ 111.391180][ T5888] logitech 0003:046D:CA04.0002: probe with driver logitech failed with error -22 [ 111.396298][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.500725][ T5925] usb 4-1: USB disconnect, device number 4 [ 111.547391][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.954502][ T7511] tipc: Started in network mode [ 111.965051][ T7511] tipc: Node identity 4, cluster identity 4711 [ 111.971218][ T7511] tipc: Node number set to 4 [ 112.264834][ T7525] netlink: 104 bytes leftover after parsing attributes in process `syz.3.756'. [ 112.738072][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 113.625380][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.625685][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.805301][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 113.831314][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.848859][ T5888] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.862663][ T5888] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 113.874082][ T5888] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 113.889396][ T5888] usb 1-1: Manufacturer: syz [ 113.905649][ T5888] usb 1-1: config 0 descriptor?? [ 114.151224][ T7586] netlink: 17223 bytes leftover after parsing attributes in process `syz.0.788'. [ 114.162654][ T5920] usb 1-1: USB disconnect, device number 10 [ 114.257196][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 114.328343][ T7633] nbd: must specify an index to disconnect [ 114.614301][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'. [ 115.516363][ T5839] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.685262][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 115.702811][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.713976][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.737344][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.748309][ T5839] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 115.760406][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.781242][ T5839] usb 4-1: config 0 descriptor?? [ 116.211637][ T5839] kye 0003:0458:5017.0003: control desc unexpectedly large [ 116.220017][ T5839] kye 0003:0458:5017.0003: control desc unexpectedly large [ 116.242023][ T5839] input: HID 0458:5017 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5017.0003/input/input10 [ 116.371640][ T5839] kye 0003:0458:5017.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 116.419708][ T7739] tipc: Failed to obtain node identity [ 116.422505][ T5888] usb 4-1: USB disconnect, device number 5 [ 116.425307][ T7739] tipc: Enabling of bearer rejected, failed to enable media [ 116.571814][ T7740] fido_id[7740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 116.934504][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 117.490674][ T7792] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 117.681635][ T7800] tipc: Failed to obtain node identity [ 117.692279][ T7800] tipc: Enabling of bearer rejected, failed to enable media [ 117.785145][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.284563][ T7837] netlink: 'syz.1.906': attribute type 4 has an invalid length. [ 118.703932][ T7861] ucma_write: process 494 (syz.3.918) changed security contexts after opening file descriptor, this is not allowed. [ 118.766947][ T7864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.920'. [ 118.795042][ T5839] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.805614][ T7864] Zero length message leads to an empty skb [ 118.946868][ T5839] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 118.964255][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.984029][ T5839] usb 3-1: config 0 descriptor?? [ 119.001929][ T5839] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 119.205138][ T5925] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 119.377535][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.405168][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.421276][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.443793][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.452861][ T5925] usb 4-1: Product: syz [ 119.458574][ T5925] usb 4-1: Manufacturer: syz [ 119.463780][ T5925] usb 4-1: SerialNumber: syz [ 119.620067][ T5839] gspca_sunplus: reg_w_riv err -71 [ 119.639304][ T5839] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 119.669654][ T5839] usb 3-1: USB disconnect, device number 7 [ 119.890437][ T5925] usb 4-1: cannot find UAC_HEADER [ 119.942613][ T5925] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.023835][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.093790][ T57] usb 4-1: USB disconnect, device number 6 [ 120.231525][ T5842] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 120.498138][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 120.532324][ T7962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.965'. [ 120.742194][ T7972] tipc: Enabling not permitted [ 120.763267][ T7972] tipc: Enabling of bearer rejected, failed to enable media [ 120.958423][ T7984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.978'. [ 121.227828][ T8001] netlink: 72 bytes leftover after parsing attributes in process `syz.3.987'. [ 121.528201][ T5839] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.634491][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.998'. [ 121.700321][ T5839] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 121.716343][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.724472][ T5839] usb 2-1: Product: syz [ 121.730685][ T5839] usb 2-1: Manufacturer: syz [ 121.736911][ T5839] usb 2-1: SerialNumber: syz [ 121.744371][ T5839] usb 2-1: config 0 descriptor?? [ 121.760992][ T5839] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 004 [ 121.915568][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.067581][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.079239][ T5925] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.088451][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.100667][ T5925] usb 1-1: config 0 descriptor?? [ 122.112858][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 122.364708][ T5839] i2c i2c-1: failure reading functionality [ 122.383892][ T5839] i2c i2c-1: connected i2c-tiny-usb device [ 122.396560][ T5839] usb 2-1: USB disconnect, device number 4 [ 122.716793][ T5925] pwc: recv_control_msg error -71 req 02 val 2700 [ 122.724699][ T5925] pwc: recv_control_msg error -71 req 02 val 2c00 [ 122.736955][ T5925] pwc: recv_control_msg error -71 req 04 val 1000 [ 122.744002][ T5925] pwc: recv_control_msg error -71 req 04 val 1300 [ 122.763375][ T5925] pwc: recv_control_msg error -71 req 04 val 1400 [ 122.774635][ T5925] pwc: recv_control_msg error -71 req 02 val 2000 [ 122.794262][ T5925] pwc: recv_control_msg error -71 req 02 val 2100 [ 122.802431][ T5925] pwc: recv_control_msg error -71 req 04 val 1500 [ 122.812415][ T5925] pwc: recv_control_msg error -71 req 02 val 2500 [ 122.820307][ T5925] pwc: recv_control_msg error -71 req 02 val 2400 [ 122.831188][ T5925] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.839258][ T5925] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.851103][ T5925] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.876196][ T5925] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.896512][ T5925] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.928816][ T5925] pwc: Registered as video103. [ 122.950703][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 123.022364][ T5925] usb 1-1: USB disconnect, device number 11 [ 123.175257][ T57] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.198705][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 123.351848][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 123.386873][ T57] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 123.397627][ T57] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 123.419258][ T57] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.428679][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.462161][ T57] usb 4-1: SerialNumber: syz [ 123.497887][ T8057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.586769][ T8083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1025'. [ 123.703250][ T59] tipc: Subscription rejected, illegal request [ 123.739733][ T57] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 123.785422][ T57] usb 4-1: USB disconnect, device number 7 [ 124.394640][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1044'. [ 124.589062][ T8137] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1052'. [ 124.605047][ T8137] netlink: 'syz.3.1052': attribute type 6 has an invalid length. [ 124.615220][ T8137] netlink: 'syz.3.1052': attribute type 5 has an invalid length. [ 124.622953][ T8137] netlink: 'syz.3.1052': attribute type 4 has an invalid length. [ 124.794822][ T8150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1056'. [ 124.865142][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1059'. [ 125.184083][ T2962] tipc: Subscription rejected, illegal request [ 125.408915][ T8190] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1076'. [ 125.531739][ T5842] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 125.618242][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 125.745053][ T57] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.776854][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.792886][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 125.804856][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 125.816598][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 125.828381][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 125.843918][ T24] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 125.862946][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 125.881539][ T24] usb 1-1: Product: syz [ 125.887433][ T24] usb 1-1: Manufacturer: syz [ 125.892282][ T24] usb 1-1: SerialNumber: syz [ 125.903347][ T24] usb 1-1: config 0 descriptor?? [ 125.917847][ T57] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 125.930912][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.951099][ T57] usb 4-1: config 0 descriptor?? [ 125.966371][ T57] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 126.145985][ T24] radio-si470x 1-1:0.0: DeviceID=0x5225 ChipID=0x50ba [ 126.188814][ T5920] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.353595][ T24] radio-si470x 1-1:0.0: software version 82, hardware version 37 [ 126.361429][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 126.368402][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.380108][ T5920] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.393067][ T5920] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.402161][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.410173][ T5920] usb 3-1: Product: syz [ 126.414340][ T5920] usb 3-1: Manufacturer: syz [ 126.418974][ T5920] usb 3-1: SerialNumber: syz [ 126.430605][ T5920] usb 3-1: selecting invalid altsetting 1 [ 126.437056][ T925] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.556945][ T24] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 126.566555][ T24] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 126.573818][ T24] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 126.583794][ T24] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 126.593408][ T57] gspca_sunplus: reg_w_riv err -71 [ 126.601219][ T925] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.612182][ T57] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 126.620600][ T925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.630220][ T24] usb 1-1: USB disconnect, device number 12 [ 126.645127][ T57] usb 4-1: USB disconnect, device number 8 [ 126.657923][ T925] usb 2-1: config 0 descriptor?? [ 126.687513][ T925] cp210x 2-1:0.0: cp210x converter detected [ 127.037886][ T5920] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 127.044637][ T5920] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 127.067646][ T5920] usb 3-1: selecting invalid altsetting 1 [ 127.073522][ T5920] cdc_ncm 3-1:1.0: bind() failure [ 127.095160][ T5920] usb 3-1: USB disconnect, device number 8 [ 127.274090][ T925] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 127.289837][ T925] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 127.316042][ T925] usb 2-1: cp210x converter now attached to ttyUSB0 [ 127.330754][ T925] usb 2-1: USB disconnect, device number 5 [ 127.358353][ T925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.380713][ T925] cp210x 2-1:0.0: device disconnected [ 127.745089][ T5888] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 127.909734][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.955409][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 127.985056][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 127.998221][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 128.010081][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.027529][ T5888] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 128.046722][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 128.054805][ T5888] usb 4-1: Product: syz [ 128.065013][ T5888] usb 4-1: Manufacturer: syz [ 128.069614][ T5888] usb 4-1: SerialNumber: syz [ 128.089238][ T5888] usb 4-1: config 0 descriptor?? [ 128.143334][ T8275] tipc: Enabling not permitted [ 128.154446][ T8275] tipc: Enabling of bearer rejected, failed to enable media [ 128.306985][ T5888] radio-si470x 4-1:0.0: DeviceID=0x5225 ChipID=0x50ba [ 128.508384][ T5888] radio-si470x 4-1:0.0: software version 82, hardware version 37 [ 128.716965][ T5888] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 128.739948][ T5888] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 128.745064][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 128.755894][ T5888] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 128.756207][ T5888] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 128.801175][ T5888] usb 4-1: USB disconnect, device number 9 [ 128.919854][ T8319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 128.960937][ T8319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 129.227666][ T8335] netlink: 'syz.2.1146': attribute type 29 has an invalid length. [ 129.243027][ T8335] netlink: 'syz.2.1146': attribute type 29 has an invalid length. [ 129.324975][ T925] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 129.492822][ T925] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 129.505720][ T5920] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.513494][ T925] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 129.525527][ T925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.548434][ T925] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.569208][ T925] usb 1-1: config 0 has no interface number 0 [ 129.587652][ T925] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 129.614994][ T925] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.635373][ T925] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.649559][ T925] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 129.658855][ T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.687902][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 129.698783][ T925] usb 1-1: config 0 descriptor?? [ 129.710037][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.724537][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.739618][ T925] gspca_main: spca561-2.14.0 probing abcd:cdee [ 129.751288][ T5920] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 129.760740][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.785793][ T5920] usb 2-1: config 0 descriptor?? [ 129.916010][ T925] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 129.926430][ T925] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.933440][ T925] usb 1-1: MIDIStreaming interface descriptor not found [ 130.040180][ T925] usb 1-1: USB disconnect, device number 13 [ 130.241982][ T5920] hid_mf 0003:0079:1801.0004: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.1-1/input0 [ 130.264354][ T5920] hid_mf 0003:0079:1801.0004: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 130.440105][ T5920] usb 2-1: USB disconnect, device number 6 [ 130.547866][ T8389] devtmpfs: Cannot enable quota on remount [ 130.808020][ T8403] netlink: 'syz.3.1177': attribute type 29 has an invalid length. [ 130.821353][ T8403] netlink: 'syz.3.1177': attribute type 29 has an invalid length. [ 130.876340][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 131.035032][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 131.049252][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.059561][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.075978][ T57] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.087179][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.104966][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.112964][ T5920] usb 1-1: Product: syz [ 131.119824][ T5920] usb 1-1: Manufacturer: syz [ 131.126620][ T5920] usb 1-1: SerialNumber: syz [ 131.247548][ T57] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.271370][ T57] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.278756][ T57] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 131.288713][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.305638][ T57] usb 3-1: config 0 descriptor?? [ 131.501014][ T8441] devtmpfs: Cannot enable quota on remount [ 131.541092][ T5920] usb 1-1: cannot find UAC_HEADER [ 131.572967][ T5920] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 131.575797][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.626306][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.738197][ T57] topre 0003:0853:0148.0005: item fetching failed at offset 5/7 [ 131.753834][ T5920] usb 1-1: USB disconnect, device number 14 [ 131.756810][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.778934][ T57] topre 0003:0853:0148.0005: probe with driver topre failed with error -22 [ 131.785176][ T5888] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.807372][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.826796][ T5888] usb 4-1: config 0 descriptor?? [ 131.841009][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 131.942896][ T57] usb 3-1: USB disconnect, device number 9 [ 132.443046][ T5888] pwc: recv_control_msg error -71 req 02 val 2700 [ 132.450693][ T5888] pwc: recv_control_msg error -71 req 02 val 2c00 [ 132.460475][ T5888] pwc: recv_control_msg error -71 req 04 val 1000 [ 132.475358][ T5888] pwc: recv_control_msg error -71 req 04 val 1300 [ 132.486335][ T5888] pwc: recv_control_msg error -71 req 04 val 1400 [ 132.500555][ T5888] pwc: recv_control_msg error -71 req 02 val 2000 [ 132.518007][ T5888] pwc: recv_control_msg error -71 req 02 val 2100 [ 132.546141][ T5888] pwc: recv_control_msg error -71 req 04 val 1500 [ 132.561312][ T5888] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.579551][ T5888] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.587509][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.604523][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.635765][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.642959][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.663518][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.699808][ T5888] pwc: Registered as video103. [ 132.750057][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.751732][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 132.756478][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.839204][ T5888] usb 4-1: USB disconnect, device number 10 [ 133.284993][ T5925] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 133.318626][ T8506] random: crng reseeded on system resumption [ 133.435123][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 133.458178][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.475970][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.486149][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.523045][ T5925] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 133.545308][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.556389][ T5925] usb 3-1: config 0 descriptor?? [ 133.646108][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.808303][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 133.817802][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.828839][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.854942][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.875531][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.884756][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.896125][ T10] usb 2-1: config 0 descriptor?? [ 133.987163][ T5925] hid-u2fzero 0003:10C4:8ACF.0006: item fetching failed at offset 2/5 [ 134.010544][ T5925] hid-u2fzero 0003:10C4:8ACF.0006: probe with driver hid-u2fzero failed with error -22 [ 134.193322][ T5925] usb 3-1: USB disconnect, device number 10 [ 134.236022][ T8552] fuse: Bad value for 'user_id' [ 134.241035][ T8552] fuse: Bad value for 'user_id' [ 134.320589][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 134.335341][ T10] HID 045e:07da: Invalid code 768 type 1 [ 134.341006][ T10] HID 045e:07da: Invalid code 769 type 1 [ 134.355522][ T10] HID 045e:07da: Invalid code 770 type 1 [ 134.369785][ T10] HID 045e:07da: Invalid code 771 type 1 [ 134.382216][ T10] HID 045e:07da: Invalid code 772 type 1 [ 134.395591][ T10] HID 045e:07da: Invalid code 773 type 1 [ 134.404953][ T10] HID 045e:07da: Invalid code 774 type 1 [ 134.410616][ T10] HID 045e:07da: Invalid code 775 type 1 [ 134.425400][ T10] HID 045e:07da: Invalid code 776 type 1 [ 134.448812][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input13 [ 134.551717][ T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 134.590888][ T10] usb 2-1: USB disconnect, device number 7 [ 134.720418][ T8569] fido_id[8569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 135.185620][ T8598] overlayfs: failed to resolve './file0': -2 [ 135.198544][ T5920] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 135.367433][ T5920] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 135.383020][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.402219][ T5920] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 135.411749][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.432932][ T5920] usb 4-1: Product: syz [ 135.443672][ T5920] usb 4-1: Manufacturer: syz [ 135.448520][ T5920] usb 4-1: SerialNumber: syz [ 135.459569][ T5920] usb 4-1: config 0 descriptor?? [ 135.468647][ T5920] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 135.523928][ T8617] program syz.1.1281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.735167][ T925] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.898553][ T925] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 135.906931][ T925] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 135.915616][ T925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.927901][ T925] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.937221][ T925] usb 3-1: config 0 has no interface number 0 [ 135.944018][ T925] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 135.956811][ T57] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 135.966174][ T925] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.977006][ T925] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 135.990790][ T925] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 136.000759][ T925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.010716][ T925] usb 3-1: config 0 descriptor?? [ 136.023910][ T925] gspca_main: spca561-2.14.0 probing abcd:cdee [ 136.075428][ T5920] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 136.082478][ T5920] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 136.101139][ T5920] usb 4-1: USB disconnect, device number 11 [ 136.137796][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 136.144509][ T57] usb 1-1: config 0 has no interfaces? [ 136.152312][ T57] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.161543][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.169574][ T57] usb 1-1: Product: syz [ 136.173802][ T57] usb 1-1: Manufacturer: syz [ 136.178455][ T57] usb 1-1: SerialNumber: syz [ 136.186646][ T57] usb 1-1: config 0 descriptor?? [ 136.223206][ T925] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 136.232313][ T925] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.239342][ T925] usb 3-1: MIDIStreaming interface descriptor not found [ 136.300812][ T925] usb 3-1: USB disconnect, device number 11 [ 136.397518][ T5925] usb 1-1: USB disconnect, device number 15 [ 136.895217][ T57] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.005125][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 137.048012][ T57] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.072673][ T57] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.083448][ T57] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 137.093354][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.120926][ T57] usb 2-1: config 0 descriptor?? [ 137.175085][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 137.186107][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.199935][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.210631][ T10] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 137.222670][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.242321][ T10] usb 4-1: config 0 descriptor?? [ 137.284157][ T8671] overlayfs: failed to resolve './file0': -2 [ 137.444380][ T8679] fuse: Bad value for 'user_id' [ 137.453956][ T8679] fuse: Bad value for 'user_id' [ 137.560865][ T57] topre 0003:0853:0148.0008: item fetching failed at offset 5/7 [ 137.581771][ T57] topre 0003:0853:0148.0008: probe with driver topre failed with error -22 [ 137.669544][ T10] hid_mf 0003:0079:1801.0009: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.3-1/input0 [ 137.706181][ T10] hid_mf 0003:0079:1801.0009: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 137.776828][ T57] usb 2-1: USB disconnect, device number 8 [ 137.887335][ T10] usb 4-1: USB disconnect, device number 12 [ 137.979311][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1321'. [ 138.494093][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 138.503207][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 138.503474][ T8721] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1328'. [ 138.515380][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 138.789248][ T8735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.375530][ T57] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 139.472899][ T8786] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0 [ 139.559095][ T57] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 139.567338][ T57] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.583245][ T57] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 139.592461][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.600478][ T57] usb 3-1: Product: syz [ 139.604626][ T57] usb 3-1: Manufacturer: syz [ 139.609242][ T57] usb 3-1: SerialNumber: syz [ 139.616623][ T57] usb 3-1: config 0 descriptor?? [ 139.625664][ T57] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 139.945226][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.231535][ T57] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 140.238473][ T57] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 140.250866][ T57] usb 3-1: USB disconnect, device number 12 [ 140.900198][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 140.923351][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 140.936385][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 141.028981][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1375'. [ 141.355052][ T5925] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.505082][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 141.512304][ T5925] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.532327][ T5925] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.542491][ T5925] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.564941][ T5925] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 141.582175][ T5925] usb 2-1: config 7 interface 0 has no altsetting 0 [ 141.592752][ T5925] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 141.602391][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.014686][ T8878] tmpfs: User quota inode hardlimit too large. [ 142.077115][ T5925] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.000A/input/input14 [ 142.128940][ T5925] kye 0003:0458:5010.000A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 142.275046][ T5925] usb 2-1: USB disconnect, device number 9 [ 142.379806][ T8891] delete_channel: no stack [ 142.765008][ T5919] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.925100][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 142.940876][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.960915][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.993224][ T5919] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 143.002371][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.039168][ T5919] usb 3-1: config 0 descriptor?? [ 143.477084][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.488783][ T5919] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000B/input/input15 [ 143.515153][ T5925] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 143.571586][ T5919] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 143.645329][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 143.662165][ T5919] usb 3-1: USB disconnect, device number 13 [ 143.678323][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 143.683592][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 143.706470][ T5925] usb 4-1: config 0 has no interfaces? [ 143.713509][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 143.728048][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.751396][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.759630][ T10] usb 2-1: Product: syz [ 143.767604][ T8952] fido_id[8952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 143.784019][ T10] usb 2-1: Manufacturer: syz [ 143.789079][ T5925] usb 4-1: Product: syz [ 143.793328][ T10] usb 2-1: SerialNumber: syz [ 143.805186][ T5925] usb 4-1: Manufacturer: syz [ 143.812006][ T5925] usb 4-1: SerialNumber: syz [ 143.820972][ T10] usb 2-1: config 0 descriptor?? [ 143.832753][ T5925] usb 4-1: config 0 descriptor?? [ 144.054449][ T57] usb 2-1: USB disconnect, device number 10 [ 144.080475][ T5919] usb 4-1: USB disconnect, device number 13 [ 144.208665][ T8969] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component [ 144.281977][ T8974] process 'syz.0.1449' launched '/dev/fd/3' with NULL argv: empty string added [ 144.565127][ T24] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 144.717184][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.733310][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.755429][ T24] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 144.774238][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.806448][ T24] usb 3-1: config 0 descriptor?? [ 144.822442][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 144.835298][ T8992] vxcan1: MTU too low for tipc bearer [ 144.840730][ T8992] tipc: Enabling of bearer rejected, failed to enable media [ 145.062072][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 145.080107][ T9006] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 145.092275][ T9006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.226153][ T24] uclogic 0003:2179:0077.000C: interface is invalid, ignoring [ 145.393364][ T9025] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 145.398110][ T9028] netdevsim netdevsim3: Firmware load for '/../file0' refused, path contains '..' component [ 145.431265][ T24] usb 3-1: USB disconnect, device number 14 [ 145.517321][ T9035] vivid-001: disconnect [ 145.523944][ T9033] vivid-001: reconnect [ 145.732434][ T9046] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1485'. [ 145.762608][ T9046] tipc: Enabling of bearer rejected, failed to enable media [ 145.825026][ T57] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 145.836431][ T9052] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component [ 145.854427][ T5842] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 145.995511][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 146.016598][ T57] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.035178][ T57] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.052345][ T57] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 146.067164][ T57] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 146.100778][ T57] usb 1-1: config 7 interface 0 has no altsetting 0 [ 146.121049][ T57] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 146.154949][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.411975][ T9084] loop6: detected capacity change from 0 to 7 [ 146.424075][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.433368][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.445491][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.454717][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.462959][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.472139][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.481068][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.490205][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.498371][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.507523][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.515517][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.523394][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.532560][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.540873][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.548457][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.548485][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.554988][ T9084] ldm_validate_partition_table(): Disk read failed. [ 146.573146][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.582309][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.592953][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.602092][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.610717][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.614004][ T57] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.000D/input/input16 [ 146.619876][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.641581][ T9084] Dev loop6: unable to read RDB block 0 [ 146.651617][ T9084] loop6: unable to read partition table [ 146.658615][ T9084] loop6: partition table beyond EOD, truncated [ 146.673420][ T9084] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 146.718843][ T5920] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 146.731775][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 146.741684][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.752911][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 146.766093][ T57] kye 0003:0458:5010.000D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 146.786826][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.806566][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.818469][ T5920] usb 2-1: config 0 descriptor?? [ 146.829605][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.852322][ T57] usb 1-1: USB disconnect, device number 16 [ 146.862162][ T24] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 146.877743][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.893949][ T24] usb 4-1: Product: syz [ 146.898919][ T24] usb 4-1: Manufacturer: syz [ 146.903538][ T24] usb 4-1: SerialNumber: syz [ 146.925709][ T24] usb 4-1: config 0 descriptor?? [ 146.947958][ T9078] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 146.973088][ T9087] fido_id[9087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 147.033502][ T5920] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 147.081270][ T9092] tipc: Enabling of bearer rejected, failed to enable media [ 147.153024][ T24] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 147.165605][ T24] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 147.241503][ T5920] [drm:udl_init] *ERROR* Selecting channel failed [ 147.275682][ T5920] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 147.282858][ T5920] [drm] Initialized udl on minor 2 [ 147.290185][ T5920] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.302398][ T5920] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 147.315962][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.324876][ T5920] usb 2-1: USB disconnect, device number 11 [ 147.332029][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 147.562436][ C1] powermate: config urb returned -71 [ 147.562881][ T5919] usb 4-1: USB disconnect, device number 14 [ 147.567747][ C1] powermate: usb_submit_urb(config) failed [ 147.567845][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 147.899817][ T9120] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1520'. [ 148.168924][ T9137] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1525'. [ 148.380559][ T9151] hugetlbfs: Bad value '' for mount option 'size' [ 148.380559][ T9151] [ 148.382628][ T9153] ======================================================= [ 148.382628][ T9153] WARNING: The mand mount option has been deprecated and [ 148.382628][ T9153] and is ignored by this kernel. Remove the mand [ 148.382628][ T9153] option from the mount to silence this warning. [ 148.382628][ T9153] ======================================================= [ 148.427792][ T9156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1531'. [ 148.445365][ T9150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1531'. [ 148.525034][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 148.802357][ T9180] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 148.802357][ T9180] 4&I:#5o63ю.l%wC [ 148.802357][ T9180] ?" [ 148.825876][ T9180] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 148.855342][ T9180] CUSE: DEVNAME unspecified [ 148.900477][ T9184] netlink: 'syz.3.1547': attribute type 2 has an invalid length. [ 149.052670][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 149.219287][ T9205] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.615481][ T5920] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 149.625036][ T5919] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 149.785105][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 149.789812][ T5920] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 149.801744][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.806931][ T5919] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 149.820181][ T5920] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 149.821683][ T5919] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 149.840781][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.844077][ T5920] usb 4-1: config 0 descriptor?? [ 149.854785][ T9213] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.893772][ T5919] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 149.908267][ T5919] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 149.930119][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.939850][ T5919] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 149.949109][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.960006][ T5919] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 149.968609][ T5919] usb 1-1: Product: syz [ 149.972770][ T5919] usb 1-1: Manufacturer: syz [ 149.980950][ T5919] usb 1-1: SerialNumber: syz [ 149.996071][ T5919] usb 1-1: config 0 descriptor?? [ 150.007065][ T5919] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 150.023305][ T5919] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 150.114960][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 150.121960][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.138155][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 150.152945][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.167984][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 150.177302][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.196116][ T10] usb 3-1: config 0 descriptor?? [ 150.205369][ T9234] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 150.227158][ T10] hub 3-1:0.0: USB hub found [ 150.227506][ T925] usb 1-1: USB disconnect, device number 17 [ 150.255977][ T925] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 150.306341][ T5920] lenovo 0003:17EF:60B5.000E: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 150.435078][ T10] hub 3-1:0.0: 2 ports detected [ 150.494037][ T5919] usb 4-1: USB disconnect, device number 15 [ 150.632366][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 150.642912][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 150.653059][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 150.660877][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 150.668113][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 150.690163][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 150.698738][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.736184][ T10] usb 3-1: USB disconnect, device number 15 [ 150.790724][ T9274] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1586'. [ 150.862579][ T9278] capability: warning: `syz.0.1588' uses 32-bit capabilities (legacy support in use) [ 151.155212][ T5920] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 151.195283][ T925] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 151.320843][ T9304] tmpfs: Bad value for 'nr_inodes' [ 151.327998][ T5920] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.337179][ T5920] usb 1-1: config 0 has no interface number 0 [ 151.343306][ T5920] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.354075][ C1] ================================================================== [ 151.354089][ C1] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 151.354117][ C1] Write of size 8 at addr ffff88807c4c5540 by task kworker/1:6/5920 [ 151.354132][ C1] [ 151.354148][ C1] CPU: 1 UID: 0 PID: 5920 Comm: kworker/1:6 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 151.354167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.354177][ C1] Workqueue: usb_hub_wq hub_event [ 151.354201][ C1] Call Trace: [ 151.354208][ C1] [ 151.354215][ C1] dump_stack_lvl+0x189/0x250 [ 151.354233][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 151.354249][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.354264][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.354281][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.354295][ C1] ? lock_release+0x4b/0x3e0 [ 151.354319][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 151.354338][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 151.354364][ C1] print_report+0xd2/0x2b0 [ 151.354384][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 151.354402][ C1] kasan_report+0x118/0x150 [ 151.354421][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 151.354442][ C1] kasan_check_range+0x2b0/0x2c0 [ 151.354462][ C1] flush_tlb_func+0x23d/0x6c0 [ 151.354486][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 151.354504][ C1] ? sched_clock_cpu+0x74/0x430 [ 151.354521][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.354536][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 151.354555][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 151.354573][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 151.354594][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 151.354615][ C1] sysvec_call_function_single+0x9e/0xc0 [ 151.354635][ C1] [ 151.354641][ C1] [ 151.354647][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 151.354664][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 151.354684][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 151.354697][ C1] RSP: 0018:ffffc90004526d00 EFLAGS: 00000287 [ 151.354712][ C1] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 151.354723][ C1] RDX: ffffc9001499b000 RSI: 000000000000c74f RDI: 000000000000c750 [ 151.354734][ C1] RBP: ffffc90004526e50 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 151.354746][ C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 151.354758][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 151.354778][ C1] ? console_flush_all+0x13a/0xc40 [ 151.354800][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 151.354824][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 151.354847][ C1] console_unlock+0xc4/0x270 [ 151.354864][ C1] ? __pfx_console_unlock+0x10/0x10 [ 151.354881][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 151.354902][ C1] vprintk_emit+0x5b7/0x7a0 [ 151.354918][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 151.354935][ C1] ? __pfx_snprintf+0x10/0x10 [ 151.354951][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 151.354973][ C1] dev_vprintk_emit+0x337/0x3f0 [ 151.354991][ C1] ? stack_depot_save_flags+0x40/0x900 [ 151.355008][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 151.355028][ C1] ? kasan_save_track+0x3e/0x80 [ 151.355042][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 151.355057][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 151.355072][ C1] ? usb_get_configuration+0x19d0/0x52c0 [ 151.355097][ C1] dev_printk_emit+0xe0/0x130 [ 151.355117][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 151.355138][ C1] ? __dev_printk+0x131/0x190 [ 151.355157][ C1] _dev_notice+0x10a/0x160 [ 151.355178][ C1] ? __pfx__dev_notice+0x10/0x10 [ 151.355198][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.355214][ C1] ? trace_kmalloc+0x1f/0xd0 [ 151.355230][ C1] ? usb_get_configuration+0x19d0/0x52c0 [ 151.355255][ C1] usb_get_configuration+0x248e/0x52c0 [ 151.355286][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.355302][ C1] ? trace_rpm_return_int+0x83/0x200 [ 151.355344][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 151.355376][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.355394][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.355413][ C1] usb_new_device+0x146/0x16f0 [ 151.355430][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.355453][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 151.355468][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.355486][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.355506][ C1] hub_event+0x2941/0x4a00 [ 151.355544][ C1] ? __pfx_hub_event+0x10/0x10 [ 151.355561][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 151.355588][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.355605][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 151.355629][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 151.355653][ C1] process_scheduled_works+0xae1/0x17b0 [ 151.355688][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 151.355719][ C1] worker_thread+0x8a0/0xda0 [ 151.355735][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.355758][ C1] ? __kthread_parkme+0x7b/0x200 [ 151.355777][ C1] kthread+0x70e/0x8a0 [ 151.355797][ C1] ? __pfx_worker_thread+0x10/0x10 [ 151.355812][ C1] ? __pfx_kthread+0x10/0x10 [ 151.355831][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.355848][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.355866][ C1] ? __pfx_kthread+0x10/0x10 [ 151.355885][ C1] ret_from_fork+0x3fc/0x770 [ 151.355901][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 151.355917][ C1] ? __switch_to_asm+0x39/0x70 [ 151.355935][ C1] ? __switch_to_asm+0x33/0x70 [ 151.355954][ C1] ? __pfx_kthread+0x10/0x10 [ 151.355973][ C1] ret_from_fork_asm+0x1a/0x30 [ 151.355998][ C1] [ 151.356004][ C1] [ 151.356016][ C1] Allocated by task 5843: [ 151.356025][ C1] kasan_save_track+0x3e/0x80 [ 151.356039][ C1] __kasan_slab_alloc+0x6c/0x80 [ 151.356052][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 151.356067][ C1] copy_mm+0xdb/0x4b0 [ 151.356081][ C1] copy_process+0x1706/0x3c00 [ 151.356095][ C1] kernel_clone+0x21e/0x870 [ 151.356109][ C1] __x64_sys_clone+0x18b/0x1e0 [ 151.356126][ C1] do_syscall_64+0xfa/0x3b0 [ 151.356143][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.356158][ C1] [ 151.356162][ C1] Freed by task 9304: [ 151.356168][ C1] kasan_save_track+0x3e/0x80 [ 151.356180][ C1] kasan_save_free_info+0x46/0x50 [ 151.356200][ C1] __kasan_slab_free+0x62/0x70 [ 151.356216][ C1] kmem_cache_free+0x18f/0x400 [ 151.356231][ C1] exit_mm+0x1da/0x2c0 [ 151.356248][ C1] do_exit+0x648/0x2300 [ 151.356266][ C1] do_group_exit+0x21c/0x2d0 [ 151.356284][ C1] get_signal+0x1286/0x1340 [ 151.356305][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 151.356326][ C1] exit_to_user_mode_loop+0x75/0x110 [ 151.356346][ C1] do_syscall_64+0x2bd/0x3b0 [ 151.356370][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.356385][ C1] [ 151.356390][ C1] The buggy address belongs to the object at ffff88807c4c4b40 [ 151.356390][ C1] which belongs to the cache mm_struct of size 2584 [ 151.356404][ C1] The buggy address is located 2560 bytes inside of [ 151.356404][ C1] freed 2584-byte region [ffff88807c4c4b40, ffff88807c4c5558) [ 151.356422][ C1] [ 151.356427][ C1] The buggy address belongs to the physical page: [ 151.356439][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c4c0 [ 151.356455][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.356469][ C1] memcg:ffff88807fd18001 [ 151.356477][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 151.356496][ C1] page_type: f5(slab) [ 151.356512][ C1] raw: 00fff00000000040 ffff88801a84bb40 ffffea0000a4c800 dead000000000002 [ 151.356527][ C1] raw: 0000000000000000 00000000800b000b 00000000f5000000 ffff88807fd18001 [ 151.356542][ C1] head: 00fff00000000040 ffff88801a84bb40 ffffea0000a4c800 dead000000000002 [ 151.356556][ C1] head: 0000000000000000 00000000800b000b 00000000f5000000 ffff88807fd18001 [ 151.356571][ C1] head: 00fff00000000003 ffffea0001f13001 00000000ffffffff 00000000ffffffff [ 151.356585][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 151.356595][ C1] page dumped because: kasan: bad access detected [ 151.356607][ C1] page_owner tracks the page as allocated [ 151.356614][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5843, tgid 5843 (syz-executor), ts 120833561597, free_ts 120784595329 [ 151.356643][ C1] post_alloc_hook+0x240/0x2a0 [ 151.356660][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 151.356680][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 151.356699][ C1] alloc_pages_mpol+0x232/0x4a0 [ 151.356715][ C1] allocate_slab+0x8a/0x370 [ 151.356735][ C1] ___slab_alloc+0xbeb/0x1410 [ 151.356753][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 151.356769][ C1] copy_mm+0xdb/0x4b0 [ 151.356784][ C1] copy_process+0x1706/0x3c00 [ 151.356799][ C1] kernel_clone+0x21e/0x870 [ 151.356815][ C1] __x64_sys_clone+0x18b/0x1e0 [ 151.356832][ C1] do_syscall_64+0xfa/0x3b0 [ 151.356851][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.356866][ C1] page last free pid 5833 tgid 5833 stack trace: [ 151.356876][ C1] __free_frozen_pages+0xb80/0xd80 [ 151.356894][ C1] __put_partials+0x156/0x1a0 [ 151.356913][ C1] put_cpu_partial+0x17c/0x250 [ 151.356931][ C1] __slab_free+0x2d5/0x3c0 [ 151.356952][ C1] qlist_free_all+0x97/0x140 [ 151.356966][ C1] kasan_quarantine_reduce+0x148/0x160 [ 151.356981][ C1] __kasan_slab_alloc+0x22/0x80 [ 151.356996][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 151.357013][ C1] sock_alloc_inode+0x28/0xc0 [ 151.357031][ C1] alloc_inode+0x67/0x1b0 [ 151.357049][ C1] __sock_create+0x12d/0x9f0 [ 151.357068][ C1] __sys_socket+0xd7/0x1b0 [ 151.357086][ C1] __x64_sys_socket+0x7a/0x90 [ 151.357104][ C1] do_syscall_64+0xfa/0x3b0 [ 151.357124][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.357139][ C1] [ 151.357144][ C1] Memory state around the buggy address: [ 151.357153][ C1] ffff88807c4c5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.357162][ C1] ffff88807c4c5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.357174][ C1] >ffff88807c4c5500: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 151.357183][ C1] ^ [ 151.357193][ C1] ffff88807c4c5580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.357204][ C1] ffff88807c4c5600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.357214][ C1] ================================================================== [ 151.357228][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 151.357241][ C1] CPU: 1 UID: 0 PID: 5920 Comm: kworker/1:6 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 151.357261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.357272][ C1] Workqueue: usb_hub_wq hub_event [ 151.357292][ C1] Call Trace: [ 151.357299][ C1] [ 151.357307][ C1] dump_stack_lvl+0x99/0x250 [ 151.357325][ C1] ? __asan_memcpy+0x40/0x70 [ 151.357340][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.357364][ C1] ? __pfx__printk+0x10/0x10 [ 151.357386][ C1] panic+0x2db/0x790 [ 151.357402][ C1] ? __pfx_panic+0x10/0x10 [ 151.357419][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 151.357438][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.357457][ C1] ? print_memory_metadata+0x314/0x400 [ 151.357481][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 151.357500][ C1] check_panic_on_warn+0x89/0xb0 [ 151.357521][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 151.357541][ C1] end_report+0x78/0x160 [ 151.357559][ C1] kasan_report+0x129/0x150 [ 151.357578][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 151.357601][ C1] kasan_check_range+0x2b0/0x2c0 [ 151.357621][ C1] flush_tlb_func+0x23d/0x6c0 [ 151.357644][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 151.357663][ C1] ? sched_clock_cpu+0x74/0x430 [ 151.357680][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.357695][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 151.357716][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 151.357734][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 151.357756][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 151.357778][ C1] sysvec_call_function_single+0x9e/0xc0 [ 151.357798][ C1] [ 151.357804][ C1] [ 151.357811][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 151.357828][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 151.357848][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 151.357861][ C1] RSP: 0018:ffffc90004526d00 EFLAGS: 00000287 [ 151.357876][ C1] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 151.357890][ C1] RDX: ffffc9001499b000 RSI: 000000000000c74f RDI: 000000000000c750 [ 151.357901][ C1] RBP: ffffc90004526e50 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 151.357914][ C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 151.357927][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 151.357949][ C1] ? console_flush_all+0x13a/0xc40 [ 151.357971][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 151.357995][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 151.358018][ C1] console_unlock+0xc4/0x270 [ 151.358036][ C1] ? __pfx_console_unlock+0x10/0x10 [ 151.358055][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 151.358076][ C1] vprintk_emit+0x5b7/0x7a0 [ 151.358094][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 151.358112][ C1] ? __pfx_snprintf+0x10/0x10 [ 151.358130][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 151.358154][ C1] dev_vprintk_emit+0x337/0x3f0 [ 151.358173][ C1] ? stack_depot_save_flags+0x40/0x900 [ 151.358190][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 151.358212][ C1] ? kasan_save_track+0x3e/0x80 [ 151.358227][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 151.358244][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 151.358260][ C1] ? usb_get_configuration+0x19d0/0x52c0 [ 151.358287][ C1] dev_printk_emit+0xe0/0x130 [ 151.358308][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 151.358329][ C1] ? __dev_printk+0x131/0x190 [ 151.358349][ C1] _dev_notice+0x10a/0x160 [ 151.358375][ C1] ? __pfx__dev_notice+0x10/0x10 [ 151.358395][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.358411][ C1] ? trace_kmalloc+0x1f/0xd0 [ 151.358427][ C1] ? usb_get_configuration+0x19d0/0x52c0 [ 151.358451][ C1] usb_get_configuration+0x248e/0x52c0 [ 151.358483][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.358498][ C1] ? trace_rpm_return_int+0x83/0x200 [ 151.358529][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 151.358558][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.358576][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.358596][ C1] usb_new_device+0x146/0x16f0 [ 151.358614][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.358638][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 151.358655][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.358673][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.358694][ C1] hub_event+0x2941/0x4a00 [ 151.358732][ C1] ? __pfx_hub_event+0x10/0x10 [ 151.358751][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 151.358779][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.358797][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 151.358821][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 151.358846][ C1] process_scheduled_works+0xae1/0x17b0 [ 151.358882][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 151.358913][ C1] worker_thread+0x8a0/0xda0 [ 151.358930][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.358953][ C1] ? __kthread_parkme+0x7b/0x200 [ 151.358974][ C1] kthread+0x70e/0x8a0 [ 151.358993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 151.359007][ C1] ? __pfx_kthread+0x10/0x10 [ 151.359027][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.359045][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.359065][ C1] ? __pfx_kthread+0x10/0x10 [ 151.359085][ C1] ret_from_fork+0x3fc/0x770 [ 151.359102][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 151.359119][ C1] ? __switch_to_asm+0x39/0x70 [ 151.359139][ C1] ? __switch_to_asm+0x33/0x70 [ 151.359157][ C1] ? __pfx_kthread+0x10/0x10 [ 151.359174][ C1] ret_from_fork_asm+0x1a/0x30 [ 151.359198][ C1] [ 151.359461][ C1] Kernel Offset: disabled