last executing test programs: 26m4.090190589s ago: executing program 0 (id=259): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x800) 26m4.020624966s ago: executing program 0 (id=262): fsync(0xffffffffffffffff) 26m3.993990099s ago: executing program 0 (id=264): io_setup(0x0, &(0x7f0000000000)) 26m3.904368761s ago: executing program 0 (id=268): preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 26m3.358751123s ago: executing program 0 (id=271): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 26m2.193991802s ago: executing program 0 (id=274): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.735350369s ago: executing program 2 (id=30837): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x0) 2.676775084s ago: executing program 2 (id=30838): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.50379351s ago: executing program 2 (id=30841): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) 1.66809514s ago: executing program 5 (id=30855): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0xa4}}, 0x0) 1.60063279s ago: executing program 2 (id=30857): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='clear_refs\x00') exit(0xfffffffffffffff7) write$binfmt_format(r0, &(0x7f00000002c0)='1\x00', 0x2) 1.548756423s ago: executing program 5 (id=30858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x880) 1.4611821s ago: executing program 5 (id=30860): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x7fffffff, 0x3, 0x665}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 978.568474ms ago: executing program 1 (id=30873): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x6, 0x1, 0x0, 0x10000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x3, 0x14, 0x0, 0xffffca21}}}]}, 0x78}}, 0x14) 926.216856ms ago: executing program 4 (id=30874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc044) 876.719164ms ago: executing program 1 (id=30876): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) sendto$unix(r0, 0x0, 0x0, 0x80, 0x0, 0x0) sendto$unix(r0, 0x0, 0x803e, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 846.738727ms ago: executing program 4 (id=30877): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 758.220175ms ago: executing program 1 (id=30879): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) 740.570948ms ago: executing program 3 (id=30880): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) 728.87141ms ago: executing program 4 (id=30881): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f30", 0x1c}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 649.984686ms ago: executing program 2 (id=30882): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 632.68317ms ago: executing program 3 (id=30883): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 591.158061ms ago: executing program 4 (id=30884): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) 589.492788ms ago: executing program 1 (id=30885): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000140)={r2, 0x3, 0x0, 0x1, &(0x7f0000000100)=[{0x6, 0x7fff, 0x6, 0x9}]}) 461.466854ms ago: executing program 5 (id=30886): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x1, 0x1, 0xa, 0x0, 0x4}, 0x20) 459.801681ms ago: executing program 2 (id=30887): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 448.054397ms ago: executing program 3 (id=30888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 415.122709ms ago: executing program 1 (id=30889): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x35d}) 407.710116ms ago: executing program 4 (id=30890): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=':', 0x1}], 0x1, 0x0, 0x1e8}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8949, &(0x7f00000002c0)={'veth0\x00', @random="bc1a091f2845"}) 273.009041ms ago: executing program 4 (id=30891): r0 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 226.123847ms ago: executing program 1 (id=30892): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 224.665661ms ago: executing program 5 (id=30893): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 220.38892ms ago: executing program 3 (id=30894): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 130.899923ms ago: executing program 3 (id=30895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xac, r1, 0x105, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4901}, @device_b, @device_a, @initial, {0x5, 0x1}}, 0x8, @random=0x6c, 0x2, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x1, 0x25, 0x9}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x5, 0x9d, 0x2}}, @val={0x2d, 0x1a, {0x1, 0x3, 0x4, 0x0, {0x9, 0x14, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xd, 0x4}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x1, 0xfd, 0x25, 0x1ff}}}}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x4, 0x1}, {0x6, 0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}}, 0x0) 80.343254ms ago: executing program 5 (id=30896): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fcntl$getflags(r0, 0x401) 0s ago: executing program 3 (id=30897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001f, 0x0, 0x4}]}) kernel console output (not intermixed with test programs): t=0, SerialNumber=0 [ 1534.589106][ T6237] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1534.590967][ T6271] usb 3-1: config 0 descriptor?? [ 1534.604962][ T6271] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1534.759007][ T6237] usb 2-1: Using ep0 maxpacket: 8 [ 1534.765591][ T6237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1534.776828][ T6237] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1534.786044][ T6237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.796969][ T6237] usb 2-1: config 0 descriptor?? [ 1535.010449][ T6237] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1535.013728][ T6271] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1535.213673][ T2962] usb 2-1: USB disconnect, device number 5 [ 1535.421210][ T6271] gspca_cpia1: usb_control_msg 02, error -71 [ 1535.428145][ T6271] gspca_cpia1: usb_control_msg 05, error -71 [ 1535.434709][ T6271] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1535.443613][ T6271] usb 3-1: USB disconnect, device number 13 [ 1535.669156][ T6201] Bluetooth: hci3: command 0x0406 tx timeout [ 1535.901217][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1535.901333][ T30] audit: type=1326 audit(1760277417.621:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1535.929395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.935664][ T30] audit: type=1326 audit(1760277417.621:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1535.961028][ T30] audit: type=1326 audit(1760277417.621:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1535.985497][ T30] audit: type=1326 audit(1760277417.621:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1536.009226][ T30] audit: type=1326 audit(1760277417.621:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1536.049007][ T30] audit: type=1326 audit(1760277417.621:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1536.078871][ T30] audit: type=1326 audit(1760277417.621:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1536.116501][ T6237] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1536.117047][ T30] audit: type=1326 audit(1760277417.621:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1536.146952][ T30] audit: type=1326 audit(1760277417.621:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1536.170060][ T30] audit: type=1326 audit(1760277417.621:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2765 comm="syz.5.29241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1536.291010][ T6237] usb 4-1: config 0 has no interfaces? [ 1536.312194][ T6237] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1536.327835][ T6237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.336830][ T6237] usb 4-1: Product: syz [ 1536.341489][ T6237] usb 4-1: Manufacturer: syz [ 1536.346124][ T6237] usb 4-1: SerialNumber: syz [ 1536.369332][ T6237] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1536.377959][ T6237] r8152-cfgselector 4-1: config 0 descriptor?? [ 1536.664188][ T6237] r8152-cfgselector 4-1: USB disconnect, device number 124 [ 1536.939029][ T6271] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1537.089264][ T6271] usb 2-1: Using ep0 maxpacket: 8 [ 1537.099396][ T6271] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1537.128410][ T6271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1537.142263][ T6271] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1537.152432][ T6271] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1537.165510][ T6271] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1537.177161][ T6271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.416556][ T6271] usb 2-1: GET_CAPABILITIES returned 0 [ 1537.422297][ T6271] usbtmc 2-1:16.0: can't read capabilities [ 1537.662657][ T6271] usb 2-1: USB disconnect, device number 6 [ 1537.719334][ T2832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1537.754574][ T2837] netlink: 136 bytes leftover after parsing attributes in process `syz.4.29267'. [ 1537.788382][ T2845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29268'. [ 1537.803342][ T2845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.29268'. [ 1538.560627][ T6237] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1538.739232][ T6237] usb 3-1: Using ep0 maxpacket: 32 [ 1538.772734][ T6237] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1538.791751][ T6237] usb 3-1: config 0 has no interface number 0 [ 1538.816763][ T6237] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 1538.826257][ T6237] usb 3-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 1538.837687][ T6237] usb 3-1: Product: syz [ 1538.849079][ T6237] usb 3-1: Manufacturer: syz [ 1538.854125][ T6237] usb 3-1: SerialNumber: syz [ 1538.870134][ T6237] usb 3-1: config 0 descriptor?? [ 1538.885065][ T6237] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1538.917939][ T6237] usb 3-1: selecting invalid altsetting 1 [ 1538.924193][ T6237] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1538.935505][ T6237] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1538.947425][ T6237] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1538.957444][ T6237] usb 3-1: media controller created [ 1538.979022][ T6271] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1538.983259][ T6237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1539.088062][ T6237] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1539.117037][ T6237] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1539.131225][ T6271] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.137697][ T6237] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1539.151688][ T6271] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1539.166484][ T6271] usb 6-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 1539.188315][ T6271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.217436][ T6271] usb 6-1: config 0 descriptor?? [ 1539.233644][ T6237] usb 3-1: USB disconnect, device number 14 [ 1539.658758][ T2904] kvm: user requested TSC rate below hardware speed [ 1539.670268][ T6201] Bluetooth: hci3: command 0x0406 tx timeout [ 1539.683010][ T6271] hid_parser_main: 72 callbacks suppressed [ 1539.683031][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.705944][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.723200][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.746340][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.762194][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.793257][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.828563][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.847867][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.861802][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.868715][ T6271] asus 0003:0B05:1A30.00F5: unknown main item tag 0x0 [ 1539.900084][ T6271] asus 0003:0B05:1A30.00F5: item 0 0 0 8 parsing failed [ 1539.907845][ T6271] asus 0003:0B05:1A30.00F5: Asus hid parse failed: -22 [ 1539.931514][ T6271] asus 0003:0B05:1A30.00F5: probe with driver asus failed with error -22 [ 1539.964072][ T6271] usb 6-1: USB disconnect, device number 16 [ 1540.082104][ T2920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29299'. [ 1540.977708][ T2950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29312'. [ 1541.129165][ T2955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29313'. [ 1542.340239][ T6237] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1542.510784][ T6237] usb 2-1: config 0 has no interfaces? [ 1542.518524][ T6237] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1542.528261][ T6237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.536411][ T6237] usb 2-1: Product: syz [ 1542.540836][ T6237] usb 2-1: Manufacturer: syz [ 1542.545521][ T6237] usb 2-1: SerialNumber: syz [ 1542.549187][ T6271] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1542.562898][ T6237] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1542.578942][ T6237] r8152-cfgselector 2-1: config 0 descriptor?? [ 1542.721104][ T6271] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1542.729700][ T6271] usb 6-1: config 0 has no interface number 0 [ 1542.735889][ T6271] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1542.747528][ T6271] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1542.759789][ T6271] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1542.770500][ T6271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.783622][ T6271] usb 6-1: config 0 descriptor?? [ 1542.798143][ T2991] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1542.814146][ T6271] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1542.826468][ T6237] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 1543.020403][ T6271] usb 6-1: USB disconnect, device number 17 [ 1543.026434][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1543.679111][ T6237] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1543.790875][ T3034] netlink: 76 bytes leftover after parsing attributes in process `syz.1.29351'. [ 1543.839028][ T6237] usb 4-1: Using ep0 maxpacket: 8 [ 1543.844241][ T3034] netlink: 76 bytes leftover after parsing attributes in process `syz.1.29351'. [ 1543.860982][ T6237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.862401][ T3036] loop8: detected capacity change from 0 to 1 [ 1543.879017][ T6237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1543.900940][ T6237] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1543.905851][ T3036] Dev loop8: unable to read RDB block 1 [ 1543.924277][ T6237] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1543.954362][ T6237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.959151][ T3036] loop8: unable to read partition table [ 1543.979616][ T6237] usb 4-1: config 0 descriptor?? [ 1544.011525][ T3036] loop8: partition table beyond EOD, truncated [ 1544.030602][ T3036] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1544.428550][ T6237] logitech 0003:046D:C293.00F6: nested delimiters [ 1544.454944][ T6237] logitech 0003:046D:C293.00F6: item 0 4 2 10 parsing failed [ 1544.481832][ T6237] logitech 0003:046D:C293.00F6: parse failed [ 1544.498232][ T6237] logitech 0003:046D:C293.00F6: probe with driver logitech failed with error -22 [ 1544.663641][ T6237] usb 4-1: USB disconnect, device number 125 [ 1545.656947][ T3108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29386'. [ 1546.078677][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.085454][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.777992][ T3161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.29408'. [ 1547.418165][ T3194] tipc: Enabling of bearer rejected, already enabled [ 1548.299097][T21421] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1548.449044][T21421] usb 2-1: Using ep0 maxpacket: 16 [ 1548.456827][T21421] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1548.466734][T21421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.483186][T21421] usb 2-1: config 0 descriptor?? [ 1548.496578][T21421] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1548.717062][T21421] usb 2-1: Detected FT232B [ 1548.923399][T21421] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1548.940867][T21421] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1549.155050][T21421] usb 2-1: USB disconnect, device number 8 [ 1549.169785][T21421] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1549.190271][T21421] ftdi_sio 2-1:0.0: device disconnected [ 1549.298996][ T6237] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1549.459097][ T6237] usb 6-1: Using ep0 maxpacket: 16 [ 1549.487891][ T6237] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.535074][ T6237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1549.603763][ T6237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1549.619097][ T6237] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1549.628803][ T6237] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1549.684556][ T6237] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1549.708997][ T6237] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1549.719473][ T6237] usb 6-1: Manufacturer: syz [ 1549.741404][ T6237] usb 6-1: config 0 descriptor?? [ 1550.088977][ T6237] rc_core: IR keymap rc-hauppauge not found [ 1550.094949][ T6237] Registered IR keymap rc-empty [ 1550.179275][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.199080][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.230403][ T6237] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1550.249363][ T6237] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input265 [ 1550.281732][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.319312][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.349398][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.369193][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.391176][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.409381][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.430807][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.449307][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.489403][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.521193][ T6237] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1550.552625][ T6237] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1550.568939][ T6237] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1550.604764][ T6237] usb 6-1: USB disconnect, device number 18 [ 1551.249337][ T6237] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1551.410403][ T6237] usb 3-1: Using ep0 maxpacket: 16 [ 1551.417578][ T6237] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1551.439202][ T6237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.470681][ T6237] usb 3-1: config 0 descriptor?? [ 1551.490724][ T6237] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1551.606618][ T3330] netlink: 68 bytes leftover after parsing attributes in process `syz.4.29481'. [ 1551.616248][ T3330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29481'. [ 1551.698071][ T6237] usb 3-1: Detected FT232B [ 1551.901746][ T6237] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1551.929995][ T6237] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1552.156954][T21421] usb 3-1: USB disconnect, device number 15 [ 1552.192460][T21421] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1552.217189][T21421] ftdi_sio 3-1:0.0: device disconnected [ 1552.676254][ T3369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29500'. [ 1553.427156][ T3418] netlink: 'syz.2.29518': attribute type 3 has an invalid length. [ 1553.437856][ T3418] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.29518'. [ 1553.509254][ T6271] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1553.659013][ T6271] usb 2-1: Using ep0 maxpacket: 16 [ 1553.673706][ T6271] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1553.686688][ T6271] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1553.696882][ T6271] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1553.729035][ T6271] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1553.741480][ T6271] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1553.750965][ T6271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.759061][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1553.777492][ T6271] usb 2-1: Product: syz [ 1553.794538][ T6271] usb 2-1: Manufacturer: syz [ 1553.799339][ T6271] usb 2-1: SerialNumber: syz [ 1553.969272][ T3440] netlink: 128 bytes leftover after parsing attributes in process `syz.2.29530'. [ 1553.978759][ T3440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29530'. [ 1554.047161][ T6271] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1554.202630][ T3446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29533'. [ 1554.238835][ T3446] netlink: 'syz.4.29533': attribute type 5 has an invalid length. [ 1554.264391][ T6271] usb 2-1: USB disconnect, device number 9 [ 1554.305987][ T6271] usblp0: removed [ 1554.770508][ T3468] netlink: 'syz.2.29541': attribute type 15 has an invalid length. [ 1554.990790][ T3479] netlink: 292 bytes leftover after parsing attributes in process `syz.2.29546'. [ 1555.035163][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1555.035179][ T30] audit: type=1326 audit(1760277436.751:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3480 comm="syz.2.29547" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 1555.149234][ T6291] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1555.319039][ T6291] usb 2-1: Using ep0 maxpacket: 32 [ 1555.327678][ T6291] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 1555.340991][ T6291] usb 2-1: config 0 has no interface number 0 [ 1555.354126][ T6291] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1555.366068][ T6291] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1555.378978][ T6291] usb 2-1: config 0 interface 126 has no altsetting 0 [ 1555.390454][ T6291] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1555.399947][ T6291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.408158][ T6291] usb 2-1: Product: syz [ 1555.412831][ T6291] usb 2-1: Manufacturer: syz [ 1555.419447][ T6291] usb 2-1: SerialNumber: syz [ 1555.428537][ T6291] usb 2-1: config 0 descriptor?? [ 1555.439723][ T3475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1555.456644][ T3475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1555.887781][ T6291] ir_usb 2-1:0.126: IR Dongle converter detected [ 1556.019125][ T6271] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1556.092845][ T6291] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 1556.157994][ T3535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29571'. [ 1556.179103][ T6271] usb 4-1: Using ep0 maxpacket: 8 [ 1556.185938][ T6271] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1556.195186][ T6271] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1556.205790][ T6271] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1556.220102][ T6271] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1556.231481][ T6271] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1556.244751][ T6271] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1556.253997][ T6271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.313799][T21421] usb 2-1: USB disconnect, device number 10 [ 1556.335283][T21421] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1556.360739][T21421] ir_usb 2-1:0.126: device disconnected [ 1556.488755][ T6271] usb 4-1: GET_CAPABILITIES returned 0 [ 1556.499295][ T6271] usbtmc 4-1:16.0: can't read capabilities [ 1556.702982][ T3517] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1556.711210][ T6291] usb 4-1: USB disconnect, device number 126 [ 1556.819067][ T6237] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1556.979084][ T6237] usb 6-1: Using ep0 maxpacket: 32 [ 1556.993935][ T6237] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1557.002415][ T6237] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1557.010079][ T6237] usb 6-1: can't read configurations, error -71 [ 1558.614045][ T3617] netlink: 'syz.5.29609': attribute type 1 has an invalid length. [ 1558.778289][ T30] audit: type=1326 audit(1760277440.481:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1558.871966][ T30] audit: type=1326 audit(1760277440.491:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1558.894953][ T30] audit: type=1326 audit(1760277440.531:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1558.918771][ T30] audit: type=1326 audit(1760277440.531:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1558.942102][ T30] audit: type=1326 audit(1760277440.531:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1559.002359][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29614'. [ 1559.008403][ T30] audit: type=1326 audit(1760277440.531:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1559.034535][ T30] audit: type=1326 audit(1760277440.531:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1559.073736][ T30] audit: type=1326 audit(1760277440.551:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1559.178122][ T30] audit: type=1326 audit(1760277440.551:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3620 comm="syz.2.29610" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1559.581772][ T6237] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1559.752327][ T6237] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 1559.765507][ T6237] usb 2-1: config 0 has no interface number 0 [ 1559.780779][ T6237] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1559.792816][ T6237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.801255][ T6237] usb 2-1: Product: syz [ 1559.805847][ T6237] usb 2-1: Manufacturer: syz [ 1559.819803][ T6237] usb 2-1: SerialNumber: syz [ 1559.844563][ T6237] usb 2-1: config 0 descriptor?? [ 1559.856040][ T6237] hub 2-1:0.217: bad descriptor, ignoring hub [ 1559.879000][ T6237] hub 2-1:0.217: probe with driver hub failed with error -5 [ 1559.966258][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29635'. [ 1559.991605][ T3675] netlink: 277 bytes leftover after parsing attributes in process `syz.5.29635'. [ 1560.005625][ T3675] netlink: 277 bytes leftover after parsing attributes in process `syz.5.29635'. [ 1560.016156][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29636'. [ 1560.063636][ T6237] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1560.083175][ T6237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1560.118149][ T6237] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1560.132191][ T6237] usb 2-1: media controller created [ 1560.171080][ T6237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1560.304850][ T6237] DVB: Unable to find symbol dib7000p_attach() [ 1560.314553][ T6237] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1560.459024][ T6237] rc_core: IR keymap rc-dib0700-rc5 not found [ 1560.465214][ T6237] Registered IR keymap rc-empty [ 1560.470599][ T6237] dvb-usb: could not initialize remote control. [ 1560.495531][ T6237] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1560.549504][ T6237] usb 2-1: USB disconnect, device number 11 [ 1560.662298][ T6237] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1560.840307][ T3710] netlink: 10 bytes leftover after parsing attributes in process `syz.3.29650'. [ 1560.846226][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29651'. [ 1562.242714][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29674'. [ 1562.772377][ T3783] netlink: 72 bytes leftover after parsing attributes in process `syz.1.29685'. [ 1562.803238][ T3785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29686'. [ 1563.156471][ T3797] : renamed from bond0 [ 1563.839247][ T6237] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1563.999091][ T6237] usb 3-1: Using ep0 maxpacket: 32 [ 1564.033549][ T6237] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1564.049752][ T6237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.057943][ T6237] usb 3-1: Product: syz [ 1564.088986][ T6237] usb 3-1: Manufacturer: syz [ 1564.093654][ T6237] usb 3-1: SerialNumber: syz [ 1564.101744][ T6237] usb 3-1: config 0 descriptor?? [ 1564.332793][ T6237] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 016 [ 1564.561312][ T6237] usb 3-1: USB disconnect, device number 16 [ 1564.970122][ T3891] netlink: 72 bytes leftover after parsing attributes in process `syz.4.29736'. [ 1565.098990][ T4373] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1565.292416][ T4373] usb 2-1: Using ep0 maxpacket: 16 [ 1565.303949][ T4373] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.325632][ T4373] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1565.339031][ T4373] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1565.364278][ T4373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.393672][ T4373] usb 2-1: config 0 descriptor?? [ 1566.072400][ T4373] nzxt-smart2 0003:1E71:2009.00F7: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1566.109786][ C1] usb 2-1: input irq status -75 received [ 1566.262967][ T4373] usb 2-1: USB disconnect, device number 12 [ 1566.665224][ T3960] netlink: 268 bytes leftover after parsing attributes in process `syz.3.29769'. [ 1567.601160][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29784'. [ 1567.632974][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29784'. [ 1567.639517][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1567.639533][ T30] audit: type=1326 audit(1760277449.361:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3994 comm="syz.1.29785" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 1568.360099][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29796'. [ 1568.422121][ T4018] netlink: 100 bytes leftover after parsing attributes in process `syz.2.29796'. [ 1568.486892][ T4018] netlink: 100 bytes leftover after parsing attributes in process `syz.2.29796'. [ 1568.599514][ T6271] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1568.759398][ T6271] usb 4-1: Using ep0 maxpacket: 16 [ 1568.770837][ T6271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.792168][ T30] audit: type=1326 audit(1760277450.511:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1568.793054][ T6271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.852473][ T6271] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1568.866203][ T30] audit: type=1326 audit(1760277450.511:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1568.867505][ T6271] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1568.928695][ T6271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1568.937995][ T30] audit: type=1326 audit(1760277450.541:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1568.956163][ T6271] usb 4-1: SerialNumber: syz [ 1568.960091][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.998559][ T30] audit: type=1326 audit(1760277450.541:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1569.007006][ T6271] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1569.057222][ T4038] hsr0: MTU too low for tipc bearer [ 1569.065055][ T30] audit: type=1326 audit(1760277450.541:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1569.116454][ T4040] netlink: 'syz.1.29806': attribute type 10 has an invalid length. [ 1569.136558][ T30] audit: type=1326 audit(1760277450.551:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1569.158698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.165183][ T4038] tipc: Disabling bearer [ 1569.187964][ T4040] hsr_slave_0: left promiscuous mode [ 1569.202991][ T4040] hsr_slave_1: left promiscuous mode [ 1569.248205][ T30] audit: type=1326 audit(1760277450.551:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1569.282146][ T30] audit: type=1326 audit(1760277450.551:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1569.304704][ T30] audit: type=1326 audit(1760277450.561:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4029 comm="syz.1.29802" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1569.326769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.419017][ T4044] netlink: 'syz.4.29808': attribute type 11 has an invalid length. [ 1569.447016][ T6271] usb 4-1: USB disconnect, device number 127 [ 1569.731037][T21421] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1569.900711][T21421] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1569.909820][T21421] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1569.929071][T21421] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1569.946215][T21421] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1569.989255][T21421] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1570.011557][T21421] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1570.024471][T21421] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1570.042630][T21421] usb 2-1: Product: syz [ 1570.048777][T21421] usb 2-1: Manufacturer: syz [ 1570.081351][T21421] cdc_wdm 2-1:1.0: skipping garbage [ 1570.100962][T21421] cdc_wdm 2-1:1.0: skipping garbage [ 1570.113014][ T4070] netlink: 48 bytes leftover after parsing attributes in process `syz.4.29821'. [ 1570.116388][T21421] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1570.128062][T21421] cdc_wdm 2-1:1.0: Unknown control protocol [ 1570.355769][T21421] usb 2-1: USB disconnect, device number 13 [ 1571.304931][ T4106] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1571.341711][ T4106] ALSA: mixer_oss: invalid OSS volume '' [ 1571.386516][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29836'. [ 1571.415114][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29836'. [ 1571.448252][ T4109] netlink: 'syz.4.29836': attribute type 14 has an invalid length. [ 1571.457205][ T4109] netlink: 'syz.4.29836': attribute type 11 has an invalid length. [ 1571.490998][ T4113] random: crng reseeded on system resumption [ 1571.779015][T21421] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1571.949101][T21421] usb 3-1: Using ep0 maxpacket: 32 [ 1571.960556][T21421] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1571.971371][T21421] usb 3-1: config 0 has no interface number 0 [ 1571.977708][T21421] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1571.990569][T21421] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1572.009171][ T4133] netlink: 148 bytes leftover after parsing attributes in process `syz.4.29847'. [ 1572.023700][T21421] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1572.035332][T21421] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1572.045787][T21421] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1572.057856][T21421] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1572.068051][ T2962] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1572.076134][T21421] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1572.087256][T21421] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1572.099082][T21421] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1572.109597][T21421] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1572.125477][T21421] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1572.134978][T21421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.143171][T21421] usb 3-1: Product: syz [ 1572.150894][T21421] usb 3-1: Manufacturer: syz [ 1572.157598][T21421] usb 3-1: SerialNumber: syz [ 1572.166340][T21421] usb 3-1: config 0 descriptor?? [ 1572.177124][ T4113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1572.184875][ T4113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1572.197704][T21421] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1572.209182][T21421] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1572.229106][ T2962] usb 4-1: Using ep0 maxpacket: 16 [ 1572.237312][T21421] scsi host1: microtekX6 [ 1572.244188][ T2962] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.289324][ T2962] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.340659][ T2962] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1572.408591][ T2962] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1572.430973][ T2962] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1572.453925][ T2962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.487736][ T2962] usb 4-1: config 0 descriptor?? [ 1572.715831][ T4373] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1572.777072][ T6237] usb 3-1: USB disconnect, device number 17 [ 1572.882556][ T4373] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1572.896558][ T4373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.918443][ T4373] usb 6-1: config 0 descriptor?? [ 1572.950711][ T2962] hid (null): report_id 53977 is invalid [ 1572.958460][ T2962] hid (null): unknown global tag 0xc3 [ 1572.969211][ T2962] hid (null): unknown global tag 0xd [ 1572.974595][ T2962] hid (null): unknown global tag 0xc [ 1572.981070][ T2962] hid (null): global environment stack underflow [ 1572.987419][ T2962] hid (null): invalid report_count 14229 [ 1572.993644][ T2962] hid (null): global environment stack underflow [ 1573.145107][ T2962] usb 4-1: USB disconnect, device number 2 [ 1573.500196][ T6237] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1573.536586][ T4373] ath6kl: mismatched byte count 0 vs. expected 12 [ 1573.545115][ T4373] ath6kl: Failed to init ath6kl core: -22 [ 1573.554119][ T4373] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1573.660743][ T6237] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1573.679050][ T6237] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1573.703306][ T4180] netlink: 'syz.2.29868': attribute type 10 has an invalid length. [ 1573.707607][ T6237] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1573.722256][ T4180] hsr_slave_0: left promiscuous mode [ 1573.730148][ T6237] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1573.743513][ T4180] hsr_slave_1: left promiscuous mode [ 1573.756171][ T4373] usb 6-1: USB disconnect, device number 21 [ 1573.771356][ T6237] usb 2-1: Product: syz [ 1573.775574][ T6237] usb 2-1: Manufacturer: syz [ 1573.800921][ T6237] usb 2-1: SerialNumber: syz [ 1573.829963][ T6237] usb 2-1: config 0 descriptor?? [ 1573.841140][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1573.841155][ T30] audit: type=1326 audit(1760277455.561:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4183 comm="syz.3.29870" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 1573.873128][ T6237] usb 2-1: selecting invalid altsetting 0 [ 1574.106631][ T4373] usb 2-1: USB disconnect, device number 14 [ 1574.589168][ T2962] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1574.750879][ T2962] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1574.759687][ T2962] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1574.767752][ T2962] usb 6-1: config 0 has no interface number 0 [ 1574.774077][ T2962] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1574.784185][ T2962] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1574.794218][ T2962] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1574.803576][ T2962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.813897][ T2962] usb 6-1: config 0 descriptor?? [ 1574.867988][ T4216] loop8: detected capacity change from 0 to 7 [ 1574.874626][T21421] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1574.878517][ T4216] Dev loop8: unable to read RDB block 7 [ 1574.888006][ T4216] loop8: unable to read partition table [ 1574.894092][ T4216] loop8: partition table beyond EOD, truncated [ 1574.900727][ T4216] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 1574.989545][ T6271] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1575.029233][T21421] usb 3-1: Using ep0 maxpacket: 8 [ 1575.036785][T21421] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1575.045633][T21421] usb 3-1: config 0 has no interface number 0 [ 1575.052241][T21421] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1575.066483][T21421] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1575.076305][T21421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.089121][T21421] usb 3-1: config 0 descriptor?? [ 1575.107337][T21421] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1575.149341][ T6271] usb 4-1: Using ep0 maxpacket: 16 [ 1575.156978][ T6271] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.167842][ T6271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1575.180533][ T6271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1575.190853][ T6271] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1575.201294][ T6271] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1575.216424][ T6271] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1575.226098][ T6271] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1575.235421][ T6271] usb 4-1: Manufacturer: syz [ 1575.249707][ T6271] usb 4-1: config 0 descriptor?? [ 1575.321236][T21421] usb 3-1: USB disconnect, device number 18 [ 1575.327269][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1575.401777][ T10] hid_parser_main: 450 callbacks suppressed [ 1575.401798][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.415763][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.423290][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.431423][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.438848][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.448329][ T2962] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input267 [ 1575.459944][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.467391][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.476187][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.485938][ T2962] input: failed to attach handler kbd to device input267, error: -5 [ 1575.500642][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.508063][ T10] hid-generic 00A0:0006:0003.00F9: unknown main item tag 0x0 [ 1575.529158][ T10] hid-generic 00A0:0006:0003.00F9: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1575.549380][ T6271] rc_core: IR keymap rc-hauppauge not found [ 1575.555659][ T6271] Registered IR keymap rc-empty [ 1575.561380][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.589843][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.620752][ T6271] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1575.633821][ T6271] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input268 [ 1575.641590][ T4373] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1575.656663][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.673378][ T10] usb 6-1: USB disconnect, device number 22 [ 1575.680853][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.719257][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.752418][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.779180][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.799260][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.819016][ T4373] usb 2-1: Using ep0 maxpacket: 16 [ 1575.826080][ T4373] usb 2-1: config 0 has no interfaces? [ 1575.829205][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.835280][ T4373] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1575.848298][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.856614][ T4373] usb 2-1: Product: syz [ 1575.859042][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.860916][ T4373] usb 2-1: Manufacturer: syz [ 1575.872644][ T4373] usb 2-1: SerialNumber: syz [ 1575.879796][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.879870][ T4373] usb 2-1: config 0 descriptor?? [ 1575.899313][ T6271] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1575.931190][ T6271] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1575.939516][ T6271] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1575.957288][ T6271] usb 4-1: USB disconnect, device number 3 [ 1576.164453][ T6271] usb 2-1: USB disconnect, device number 15 [ 1576.378275][ T4238] Failed to get privilege flags for destination (handle=0x2:0x40) [ 1576.389627][ T4373] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1576.549613][ T4373] usb 3-1: Using ep0 maxpacket: 8 [ 1576.560709][ T4373] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1576.577454][ T4373] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1576.597739][ T4373] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1576.607989][ T4373] usb 3-1: Product: syz [ 1576.614893][ T4373] usb 3-1: Manufacturer: syz [ 1576.619750][ T4373] usb 3-1: SerialNumber: syz [ 1576.631163][ T4373] usb 3-1: config 0 descriptor?? [ 1576.647701][ T4373] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1576.739241][ T6237] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1576.891872][ T6237] usb 6-1: config 0 has no interfaces? [ 1576.897637][ T6237] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1576.917411][ T6237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.935735][ T6237] usb 6-1: config 0 descriptor?? [ 1577.009262][ T6291] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1577.169029][ T6291] usb 2-1: Using ep0 maxpacket: 16 [ 1577.190121][ T6291] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1577.205368][ T6291] usb 2-1: config 0 has no interface number 0 [ 1577.210214][ T6271] usb 6-1: USB disconnect, device number 23 [ 1577.212318][ T6291] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1577.232863][ T6291] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1577.245264][ T6291] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1577.254652][ T6291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.263011][ T4373] gspca_zc3xx: reg_w_i err -71 [ 1577.267827][ T6291] usb 2-1: Product: syz [ 1577.272314][ T6291] usb 2-1: Manufacturer: syz [ 1577.276921][ T6291] usb 2-1: SerialNumber: syz [ 1577.301288][ T6291] usb 2-1: config 0 descriptor?? [ 1577.307827][ T4256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1577.315488][ T4256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1577.538544][ T4256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1577.547004][ T4256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1577.849141][ T4373] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1577.859127][ T4373] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1577.874779][ T4295] netlink: 156 bytes leftover after parsing attributes in process `syz.5.29918'. [ 1577.887406][ T4373] usb 3-1: USB disconnect, device number 19 [ 1577.919880][ T4295] netlink: 20 bytes leftover after parsing attributes in process `syz.5.29918'. [ 1578.172557][ T6291] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1578.199125][ T6291] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1578.232341][ T6291] asix 2-1:0.251: probe with driver asix failed with error -71 [ 1578.261910][ T6291] usb 2-1: USB disconnect, device number 16 [ 1578.380828][ T4311] netlink: 'syz.3.29926': attribute type 1 has an invalid length. [ 1578.757589][ T4324] sctp: [Deprecated]: syz.4.29931 (pid 4324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1578.757589][ T4324] Use struct sctp_sack_info instead [ 1579.360745][ T6291] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1579.539278][ T6291] usb 3-1: Using ep0 maxpacket: 8 [ 1579.560547][ T4352] netlink: 152 bytes leftover after parsing attributes in process `syz.1.29944'. [ 1579.561849][ T6291] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1579.581923][ T6291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.710534][ T6291] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1579.737996][ T6291] pvrusb2: ********** [ 1579.748124][ T6291] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1579.788964][ T6291] pvrusb2: Important functionality might not be entirely working. [ 1579.796839][ T6291] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1579.815963][ T6291] pvrusb2: ********** [ 1579.828519][ T4361] netlink: 'syz.5.29947': attribute type 6 has an invalid length. [ 1579.900764][ T2347] pvrusb2: Invalid write control endpoint [ 1579.925122][ T4366] sch_fq: defrate 0 ignored. [ 1580.039348][ T2347] pvrusb2: Invalid write control endpoint [ 1580.065445][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1580.091093][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1580.098679][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1580.126165][ T2347] pvrusb2: Device being rendered inoperable [ 1580.133306][ T4374] netlink: 'syz.4.29953': attribute type 9 has an invalid length. [ 1580.142620][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1580.151824][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29953'. [ 1580.161386][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1580.182129][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1580.187841][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1580.208575][ T4374] hsr0: entered promiscuous mode [ 1580.219278][ T4374] macvlan4: entered promiscuous mode [ 1580.229060][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1580.238561][ T4374] macvlan4: entered allmulticast mode [ 1580.249916][ T4374] hsr0: entered allmulticast mode [ 1580.264691][ T4374] hsr_slave_0: entered allmulticast mode [ 1580.277857][ T4374] hsr_slave_1: entered allmulticast mode [ 1580.302490][ T6291] usb 3-1: USB disconnect, device number 20 [ 1580.450803][ T4385] cifs: Unknown parameter 'fd' [ 1580.492032][ T4388] binder: binder_mmap: 4387 80000000-80003000 bad vm_flags failed -1 [ 1580.569041][ T6271] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1580.681151][ T4399] input: syz0 as /devices/virtual/input/input269 [ 1580.741482][ T6271] usb 2-1: config index 0 descriptor too short (expected 32786, got 18) [ 1580.761779][ T6271] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1580.781503][ T6271] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 1580.799832][ T6271] usb 2-1: Manufacturer: syz [ 1580.832273][ T6271] usb 2-1: config 0 descriptor?? [ 1580.848847][ T6271] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1580.866413][ T6271] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1581.066480][ T6291] usb 2-1: USB disconnect, device number 17 [ 1581.074393][ T6291] ftdi_sio 2-1:0.0: device disconnected [ 1582.099390][ T4450] netlink: 428 bytes leftover after parsing attributes in process `syz.3.29986'. [ 1582.109074][ T4450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29986'. [ 1582.589067][ T6271] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1582.751694][ T6271] usb 6-1: Using ep0 maxpacket: 16 [ 1582.758348][ T6271] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.768681][ T6271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1582.779934][ T6271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1582.790648][ T6271] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1582.801226][ T6271] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.815699][ T6271] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1582.825207][ T6271] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1582.833439][ T6271] usb 6-1: Manufacturer: syz [ 1582.841092][ T6271] usb 6-1: config 0 descriptor?? [ 1583.133060][ T6271] rc_core: IR keymap rc-hauppauge not found [ 1583.152641][ T6271] Registered IR keymap rc-empty [ 1583.169249][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.209003][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.240752][ T6271] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1583.257948][ T6271] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input270 [ 1583.293039][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.330724][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.369038][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.389802][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.409459][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.449526][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.492592][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.519310][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.539379][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.571411][ T6271] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.601657][ T6271] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1583.616944][ T6271] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1583.629185][ T6271] usb 6-1: USB disconnect, device number 24 [ 1584.327493][ T4557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.30032'. [ 1584.990322][ T6271] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1585.160810][ T6271] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1585.191223][ T6271] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1585.204287][ T6271] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1585.220695][ T6271] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1585.233574][ T6271] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1585.274309][ T6271] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1585.299501][ T6271] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1585.319774][ T6271] usb 6-1: Product: syz [ 1585.323973][ T6271] usb 6-1: Manufacturer: syz [ 1585.355985][ T6271] cdc_wdm 6-1:1.0: skipping garbage [ 1585.368982][ T6271] cdc_wdm 6-1:1.0: skipping garbage [ 1585.380635][ T6271] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1585.389410][ T6271] cdc_wdm 6-1:1.0: Unknown control protocol [ 1585.672096][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30064'. [ 1586.489052][ T6271] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1586.660316][ T6271] usb 3-1: Using ep0 maxpacket: 8 [ 1586.670917][ T6271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.685937][ T6271] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1586.696179][ T6271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.711552][ T6271] usb 3-1: config 0 descriptor?? [ 1586.743648][ T6271] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1586.939332][ T6291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1587.098966][ T6291] usb 4-1: Using ep0 maxpacket: 8 [ 1587.113275][ T6291] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1587.123003][ T6291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.132435][ T6291] usb 4-1: Product: syz [ 1587.136888][ T6291] usb 4-1: Manufacturer: syz [ 1587.142006][ T6291] usb 4-1: SerialNumber: syz [ 1587.152632][ T6291] usb 4-1: config 0 descriptor?? [ 1587.165141][ T6291] gspca_main: se401-2.14.0 probing 047d:5003 [ 1587.363936][ T6271] gspca_vc032x: reg_r err -71 [ 1587.369241][ T6271] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1587.391561][ T6271] usb 3-1: USB disconnect, device number 21 [ 1587.506807][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30097'. [ 1587.516229][ T4706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30097'. [ 1587.534202][ T4706] ip6gretap4: entered allmulticast mode [ 1587.601139][ T4711] sctp: [Deprecated]: syz.4.30098 (pid 4711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1587.601139][ T4711] Use struct sctp_sack_info instead [ 1587.752869][T21421] usb 6-1: USB disconnect, device number 25 [ 1587.788793][ T6291] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input271 [ 1588.025251][ T6271] usb 4-1: USB disconnect, device number 4 [ 1588.530343][ T4738] input: syz1 as /devices/virtual/input/input272 [ 1588.781916][ T4757] vimc link validate: Scaler:src:16x16 (0x33424752, 10, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x34324142, 12, 0, 0, 0) [ 1588.801448][ T6271] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1588.959822][ T6271] usb 6-1: Using ep0 maxpacket: 16 [ 1588.974476][ T6271] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.009825][ T6271] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.025624][ T6271] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1589.069477][ T6271] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1589.076130][ T6271] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1589.093907][ T6271] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.112994][ T6271] usb 6-1: config 0 descriptor?? [ 1589.113247][ T30] audit: type=1326 audit(1760277470.831:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.2.30130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.140020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.199719][ T30] audit: type=1326 audit(1760277470.831:8862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.2.30130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.221812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.229712][ T30] audit: type=1326 audit(1760277470.831:8863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.2.30130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.264403][ T30] audit: type=1326 audit(1760277470.831:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.2.30130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.309242][ T30] audit: type=1326 audit(1760277470.831:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.2.30130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.333732][ T30] audit: type=1326 audit(1760277470.831:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.356079][ T30] audit: type=1326 audit(1760277470.831:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.389072][ T30] audit: type=1326 audit(1760277470.831:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.411337][ T30] audit: type=1326 audit(1760277470.831:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.433420][ T30] audit: type=1326 audit(1760277470.831:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 1589.553755][ T6271] hid (null): report_id 53977 is invalid [ 1589.564501][ T6271] hid (null): unknown global tag 0xc3 [ 1589.570688][ T6271] hid (null): unknown global tag 0xd [ 1589.577301][ T6271] hid (null): unknown global tag 0xc [ 1589.584288][ T6271] hid (null): global environment stack underflow [ 1589.591336][ T6271] hid (null): invalid report_count 14229 [ 1589.597371][ T6271] hid (null): global environment stack underflow [ 1589.783371][ T6291] usb 6-1: USB disconnect, device number 26 [ 1589.788389][ T4799] input: syz0 as /devices/virtual/input/input273 [ 1590.166961][ T4816] usb usb8: usbfs: process 4816 (syz.1.30148) did not claim interface 5 before use [ 1590.277067][ T4822] macvlan0: entered promiscuous mode [ 1590.299571][ T4822] netlink: 'syz.4.30150': attribute type 1 has an invalid length. [ 1590.319537][ T4822] netlink: 'syz.4.30150': attribute type 2 has an invalid length. [ 1590.452740][ T4828] netlink: 112 bytes leftover after parsing attributes in process `syz.5.30154'. [ 1590.482160][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30154'. [ 1590.963190][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30164'. [ 1591.025564][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30167'. [ 1591.849522][ T6291] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1592.009831][ T6291] usb 4-1: Using ep0 maxpacket: 16 [ 1592.021031][ T6291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.050844][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1592.082676][ T6291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1592.109925][ T6291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1592.132641][ T6291] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1592.152442][ T6291] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1592.164792][ T6291] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1592.173285][ T6291] usb 4-1: Manufacturer: syz [ 1592.181120][ T6291] usb 4-1: config 0 descriptor?? [ 1592.409388][ T4909] sctp: [Deprecated]: syz.5.30190 (pid 4909) Use of int in max_burst socket option. [ 1592.409388][ T4909] Use struct sctp_assoc_value instead [ 1592.490612][ T6291] rc_core: IR keymap rc-hauppauge not found [ 1592.507431][ T6291] Registered IR keymap rc-empty [ 1592.514590][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.539197][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.570100][ T6291] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1592.597857][ T6291] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input275 [ 1592.639269][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.661255][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.699275][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.739718][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.761398][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.779095][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.799055][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.831421][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.870340][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.889516][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.919162][ T6291] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1592.961429][ T6291] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 1592.974562][ T6291] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1593.000339][ T6291] usb 4-1: USB disconnect, device number 5 [ 1593.199369][ T4946] netlink: 'syz.2.30206': attribute type 2 has an invalid length. [ 1593.384408][ T4955] netlink: 136 bytes leftover after parsing attributes in process `syz.2.30210'. [ 1593.394325][ T4955] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1593.623193][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30214'. [ 1593.646157][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30214'. [ 1593.839031][ T6291] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1593.889117][ T6271] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1593.989108][ T6291] usb 3-1: Using ep0 maxpacket: 8 [ 1594.005657][ T6291] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.016481][ T6291] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1594.026120][ T6291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.057195][ T6291] hub 3-1:32.0: bad descriptor, ignoring hub [ 1594.070948][ T6271] usb 2-1: config 0 has no interfaces? [ 1594.071772][ T6291] hub 3-1:32.0: probe with driver hub failed with error -5 [ 1594.078942][ T6271] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1594.108573][ T6271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.140983][ T6271] usb 2-1: config 0 descriptor?? [ 1594.421920][ T6271] usb 2-1: USB disconnect, device number 18 [ 1594.579222][ T6291] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 1595.407522][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1595.407538][ T30] audit: type=1326 audit(1760277477.121:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5016 comm="syz.3.30238" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 1595.590188][ T6291] usb 3-1: USB disconnect, device number 22 [ 1595.928996][ T4373] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1595.930282][ T30] audit: type=1326 audit(1760277477.651:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.30251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1595.978641][ T30] audit: type=1326 audit(1760277477.671:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.30251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1596.001505][ T30] audit: type=1326 audit(1760277477.681:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.30251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1596.023607][ T30] audit: type=1326 audit(1760277477.681:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.30251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1596.046479][ T30] audit: type=1326 audit(1760277477.681:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.30251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1596.072338][ T30] audit: type=1326 audit(1760277477.681:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.30251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1596.109350][ T30] audit: type=1326 audit(1760277477.681:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz.1.30251" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1596.139036][ T4373] usb 3-1: Using ep0 maxpacket: 32 [ 1596.155894][ T4373] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1596.166836][ T4373] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1596.177223][ T4373] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1596.186742][ T4373] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1596.196196][ T4373] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1596.205550][ T4373] usb 3-1: Product: syz [ 1596.211743][ T4373] usb 3-1: Manufacturer: syz [ 1596.216366][ T4373] usb 3-1: SerialNumber: syz [ 1596.230274][ T4373] usb 3-1: config 0 descriptor?? [ 1596.391299][ T5065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30259'. [ 1596.659181][ T4373] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1596.878976][ T6271] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1597.032060][ T6271] usb 2-1: config 7 has an invalid interface number: 192 but max is 0 [ 1597.041209][ T6271] usb 2-1: config 7 has no interface number 0 [ 1597.047360][ T6271] usb 2-1: config 7 interface 192 has no altsetting 0 [ 1597.060701][ T6271] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 1597.061980][ T4373] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1597.086638][ T6271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.086797][ T4373] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1597.105274][ T6271] usb 2-1: Product: syz [ 1597.115211][ T6271] usb 2-1: Manufacturer: syz [ 1597.121642][ T4373] usb 3-1: USB disconnect, device number 23 [ 1597.139001][ T6271] usb 2-1: SerialNumber: syz [ 1597.383946][ T6271] usb 2-1: USB disconnect, device number 19 [ 1597.754845][ T5124] hub 1-0:1.0: USB hub found [ 1597.760808][ T5124] hub 1-0:1.0: 1 port detected [ 1597.949095][ T4373] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1598.105780][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30291'. [ 1598.124586][ T4373] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 1598.143426][ T4373] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.170580][ T4373] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1598.189492][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.201659][ T4373] usb 3-1: Product: syz [ 1598.206322][ T4373] usb 3-1: Manufacturer: syz [ 1598.211342][ T4373] usb 3-1: SerialNumber: syz [ 1598.222310][ T4373] usb 3-1: config 0 descriptor?? [ 1598.236351][ T4373] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1598.302424][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30295'. [ 1598.317309][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30295'. [ 1598.904877][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30302'. [ 1599.067672][ T4373] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1599.089527][ T4373] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1599.113901][ T4373] usb 3-1: USB disconnect, device number 24 [ 1599.609058][ T4373] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1599.643343][ T5193] cifs: Unknown parameter 'f' [ 1599.687246][ T5195] program syz.2.30311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1599.758947][ T4373] usb 4-1: Using ep0 maxpacket: 16 [ 1599.766366][ T4373] usb 4-1: config 0 has no interfaces? [ 1599.782429][ T4373] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1599.791945][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.800450][ T4373] usb 4-1: Product: syz [ 1599.804853][ T4373] usb 4-1: Manufacturer: syz [ 1599.809552][ T4373] usb 4-1: SerialNumber: syz [ 1599.816965][ T4373] usb 4-1: config 0 descriptor?? [ 1600.055169][ T6271] usb 4-1: USB disconnect, device number 6 [ 1600.139074][T21421] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1600.288988][T21421] usb 3-1: Using ep0 maxpacket: 8 [ 1600.295511][T21421] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.306858][T21421] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1600.319024][T21421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1600.330418][T21421] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1600.345478][T21421] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1600.354846][T21421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1600.363100][T21421] usb 3-1: Product: syz [ 1600.367400][T21421] usb 3-1: Manufacturer: syz [ 1600.372139][T21421] usb 3-1: SerialNumber: syz [ 1600.379578][T21421] usb 3-1: config 0 descriptor?? [ 1600.599626][T21421] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1600.611525][T21421] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1600.800261][T21421] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1600.807857][T21421] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1600.820432][T21421] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1601.013944][T21421] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1601.035758][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.042565][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.049533][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.056172][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.062833][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.070418][T21421] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1601.078981][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.086348][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.093736][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.100495][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.107033][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.113893][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.120459][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.126986][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.133609][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.140186][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.146722][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.153342][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.159915][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.166442][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.173045][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.179591][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.186540][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.193180][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.199825][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.206479][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.213141][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.219786][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.226411][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.233060][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.239740][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.246379][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.253042][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.259694][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.266345][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.273112][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.279883][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.286511][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.293246][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.299865][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.306501][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.313159][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.319811][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.326452][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.333124][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.339776][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.346393][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.353080][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.359770][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.366421][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.373085][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.379739][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.386588][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.393231][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.399881][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.406525][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.418938][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.425588][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.433117][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.439933][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.446571][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.453284][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.459933][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.466563][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.473211][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.479862][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.486675][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.493341][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.499968][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.506607][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.513307][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.519947][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.526585][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.533224][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.539874][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.546549][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.553207][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.559858][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.566487][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.573130][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.579970][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.586832][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.593540][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.600296][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.606907][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.613586][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.620239][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.626872][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.633535][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.640214][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.646849][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.653654][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.660279][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.666917][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.673611][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.680263][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.686888][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.699199][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.705860][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.712513][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.719158][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.725785][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.732421][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.739074][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.745713][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.752494][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.759183][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.765820][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.772468][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.779128][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.785780][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.799255][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.805914][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.812605][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.819229][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.825860][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.832510][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.839143][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.845765][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.852379][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.859016][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.865633][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.872261][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.878899][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.885512][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.892158][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.898864][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.905482][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.912129][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.918747][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.925368][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.932041][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.938669][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.945339][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.952002][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.958598][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.965232][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.971865][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.978486][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.985133][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.991819][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1601.998573][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.005226][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.011865][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.018504][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.025151][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.031800][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.038426][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.045070][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.051697][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.058310][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.064933][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.071559][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.078176][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.084824][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.091464][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.098159][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.104793][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.111417][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.118039][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.124684][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.131303][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.137919][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.144558][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.151217][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.157827][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.164467][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.171105][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.177721][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.184329][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.190951][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.197563][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.206523][ C0] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 1602.213511][T21421] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1602.229227][T21421] usb 3-1: USB disconnect, device number 25 [ 1602.679235][ T4373] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1602.729090][T21421] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1602.838980][ T4373] usb 4-1: Using ep0 maxpacket: 16 [ 1602.847099][ T4373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.865694][ T4373] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1602.875919][ T4373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.889665][ T4373] usb 4-1: config 0 descriptor?? [ 1602.891120][T21421] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1602.913621][T21421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.939553][T21421] usb 3-1: config 0 descriptor?? [ 1603.087294][ T5280] netlink: 'syz.5.30350': attribute type 11 has an invalid length. [ 1603.096653][ T5280] netlink: 36 bytes leftover after parsing attributes in process `syz.5.30350'. [ 1603.314553][ T4373] mcp2221 0003:04D8:00DD.00FB: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1603.379306][T21421] hid_parser_main: 5 callbacks suppressed [ 1603.379329][T21421] kye 0003:0458:0153.00FC: unknown main item tag 0x0 [ 1603.403658][T21421] kye 0003:0458:0153.00FC: unknown main item tag 0x0 [ 1603.419140][T21421] kye 0003:0458:0153.00FC: unknown main item tag 0x0 [ 1603.436228][T21421] kye 0003:0458:0153.00FC: unknown main item tag 0x0 [ 1603.456869][T21421] kye 0003:0458:0153.00FC: unknown main item tag 0x0 [ 1603.468936][T21421] kye 0003:0458:0153.00FC: unknown main item tag 0x0 [ 1603.486065][T21421] kye 0003:0458:0153.00FC: unknown main item tag 0x0 [ 1603.502440][T21421] kye 0003:0458:0153.00FC: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.2-1/input0 [ 1603.582980][T21421] usb 3-1: USB disconnect, device number 26 [ 1603.608630][ T5291] fido_id[5291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1603.720995][ T4373] usb 4-1: USB disconnect, device number 7 [ 1603.873389][ T5294] netlink: 52 bytes leftover after parsing attributes in process `syz.1.30355'. [ 1605.239487][ T6291] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1605.403551][ T6291] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1605.433504][ T6291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.462338][ T6291] usb 2-1: config 0 descriptor?? [ 1605.479702][ T6291] cp210x 2-1:0.0: cp210x converter detected [ 1605.789024][T21421] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1605.881722][ T6291] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1605.904510][ T6291] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1605.941081][T21421] usb 6-1: Using ep0 maxpacket: 32 [ 1605.947903][T21421] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1605.956574][T21421] usb 6-1: config 0 has no interface number 0 [ 1605.964761][T21421] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1605.974074][T21421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.982438][T21421] usb 6-1: Product: syz [ 1605.987886][T21421] usb 6-1: Manufacturer: syz [ 1605.993763][T21421] usb 6-1: SerialNumber: syz [ 1606.001731][T21421] usb 6-1: config 0 descriptor?? [ 1606.064496][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30388'. [ 1606.073900][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30388'. [ 1606.108088][ T6271] usb 2-1: USB disconnect, device number 20 [ 1606.131310][ T6271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1606.145072][ T6271] cp210x 2-1:0.0: device disconnected [ 1606.188758][ T5370] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1606.218262][T21421] radio-si470x 6-1:0.35: this is not a si470x device. [ 1606.260111][T21421] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1606.472595][T21421] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1606.585888][ T5387] vlan3: entered promiscuous mode [ 1606.592223][ T5387] batadv0: entered promiscuous mode [ 1606.709608][T21421] usb 6-1: USB disconnect, device number 27 [ 1606.716777][T21421] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1606.891263][ T5394] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1607.468992][ T6291] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1607.513047][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.514399][T21421] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1607.519628][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.621000][ T6291] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1607.630071][ T6291] usb 2-1: config 6 has an invalid interface number: 158 but max is 0 [ 1607.638358][ T6291] usb 2-1: config 6 has no interface number 0 [ 1607.644750][ T6291] usb 2-1: config 6 interface 158 has no altsetting 0 [ 1607.653829][ T6291] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 1607.663099][ T6291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.671299][ T6291] usb 2-1: Product: syz [ 1607.675463][ T6291] usb 2-1: Manufacturer: syz [ 1607.679963][T21421] usb 6-1: Using ep0 maxpacket: 32 [ 1607.680291][ T6291] usb 2-1: SerialNumber: syz [ 1607.689445][T21421] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1607.700015][T21421] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1607.709915][T21421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.720306][T21421] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1607.732359][T21421] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1607.741622][T21421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.752040][T21421] usb 6-1: Product: syz [ 1607.756220][T21421] usb 6-1: Manufacturer: syz [ 1607.761288][T21421] usb 6-1: SerialNumber: syz [ 1608.000383][ T5416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.023142][ T5416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.061992][T21421] usb 6-1: 0:2 : does not exist [ 1608.101130][T21421] usb 6-1: USB disconnect, device number 28 [ 1608.143264][ T2897] udevd[2897]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1608.549224][ T4373] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1608.721571][ T4373] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1608.739156][ T4373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.759736][ T4373] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1608.784012][ T4373] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1608.794429][ T4373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.806423][ T4373] usb 6-1: Product: syz [ 1608.810751][ T4373] usb 6-1: Manufacturer: syz [ 1608.815692][ T4373] usb 6-1: SerialNumber: syz [ 1608.851059][ T6291] rtsx_usb 2-1:6.158: probe with driver rtsx_usb failed with error -110 [ 1608.872191][ T6291] usb 2-1: USB disconnect, device number 21 [ 1609.041947][ T4373] usb 6-1: 0:2 : does not exist [ 1609.100900][ T4373] usb 6-1: USB disconnect, device number 29 [ 1609.169766][ T2348] udevd[2348]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1610.283106][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30448'. [ 1610.303595][ T5507] netlink: 104 bytes leftover after parsing attributes in process `syz.3.30448'. [ 1610.313420][ T5507] netlink: 104 bytes leftover after parsing attributes in process `syz.3.30448'. [ 1611.277765][ T5554] netlink: 71 bytes leftover after parsing attributes in process `syz.4.30469'. [ 1611.800002][ T5577] kvm: kvm [5575]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x81 [ 1611.885192][ T30] audit: type=1326 audit(1760277493.601:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1611.907312][ C1] vkms_vblank_simulate: vblank timer overrun [ 1611.924167][ T30] audit: type=1326 audit(1760277493.631:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1611.946928][ T30] audit: type=1326 audit(1760277493.641:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1611.990144][ T30] audit: type=1326 audit(1760277493.641:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1612.043522][ T30] audit: type=1326 audit(1760277493.641:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1612.100575][ T30] audit: type=1326 audit(1760277493.641:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1612.122700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1612.130755][ T30] audit: type=1326 audit(1760277493.641:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1612.189211][ T30] audit: type=1326 audit(1760277493.641:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1612.212690][ T30] audit: type=1326 audit(1760277493.641:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1612.244067][ T30] audit: type=1326 audit(1760277493.641:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz.4.30480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1612.299345][T21421] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1612.451200][T21421] usb 4-1: Using ep0 maxpacket: 32 [ 1612.458329][T21421] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1612.469857][T21421] usb 4-1: config 0 has no interface number 0 [ 1612.475988][T21421] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1612.488740][T21421] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1612.501339][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30493'. [ 1612.511716][T21421] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1612.528990][T21421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.547363][T21421] usb 4-1: Product: syz [ 1612.557522][T21421] usb 4-1: Manufacturer: syz [ 1612.573800][T21421] usb 4-1: SerialNumber: syz [ 1612.586924][T21421] usb 4-1: config 0 descriptor?? [ 1612.802278][ T4373] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1612.960776][ T4373] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1612.974379][ T4373] usb 2-1: config 4 has no interface number 0 [ 1612.990791][ T4373] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1613.003882][ T4373] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1613.016201][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.027119][ T4373] usb 2-1: Product: syz [ 1613.031662][ T4373] usb 2-1: Manufacturer: syz [ 1613.036272][ T4373] usb 2-1: SerialNumber: syz [ 1613.359730][T21421] appletouch 4-1:0.85: Geyser mode initialized. [ 1613.371241][T21421] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input276 [ 1613.399977][ C1] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1613.475397][ T4373] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1613.503748][ T4373] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1613.521645][ T4373] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1613.534067][ T4373] usb 2-1: media controller created [ 1613.543372][ T4373] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1613.613470][T21421] usb 4-1: USB disconnect, device number 8 [ 1613.632955][ T4373] DVB: Unable to find symbol dib7000p_attach() [ 1613.648212][ T4373] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1613.658778][T21421] appletouch 4-1:0.85: input: appletouch disconnected [ 1613.761292][ T4373] rc_core: IR keymap rc-dib0700-rc5 not found [ 1613.767402][ T4373] Registered IR keymap rc-empty [ 1613.776082][ T4373] dvb-usb: could not initialize remote control. [ 1613.782802][ T4373] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1613.791738][ T4373] dib0700: There's no endpoint for remote controller [ 1614.017687][T21421] usb 2-1: USB disconnect, device number 22 [ 1614.038054][T21421] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1614.681845][ T5674] netlink: 'syz.1.30519': attribute type 4 has an invalid length. [ 1616.961978][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30552'. [ 1617.012768][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30552'. [ 1617.038631][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30552'. [ 1617.068676][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30552'. [ 1617.080249][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30552'. [ 1617.749056][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1617.900882][ T6291] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1618.063125][ T6291] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1618.075179][ T6291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.107742][ T6291] usb 6-1: config 0 descriptor?? [ 1618.328328][ T6291] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1618.536811][ T6291] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1618.543695][ T6291] [drm] Initialized udl on minor 2 [ 1618.739122][ T6291] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1618.757197][ T6291] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1618.960558][ T4373] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1618.966150][T21421] usb 6-1: USB disconnect, device number 30 [ 1618.977083][ T4373] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1619.539497][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.30598'. [ 1619.618671][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.632670][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.645410][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.653591][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.661632][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.671368][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.678790][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.687789][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.700939][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.708360][ T6271] hid-generic 0000:0000:0000.00FD: unknown main item tag 0x0 [ 1619.709913][ T4373] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1619.716637][T21421] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1619.734327][ T6271] hid-generic 0000:0000:0000.00FD: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1619.837806][ T5868] fido_id[5868]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1619.869939][ T4373] usb 3-1: Using ep0 maxpacket: 8 [ 1619.876944][ T4373] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.889301][T21421] usb 2-1: Using ep0 maxpacket: 32 [ 1619.894781][ T4373] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.907014][ T4373] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1619.914485][T21421] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1619.914817][ T4373] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 1619.934923][ T4373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.947260][ T4373] usb 3-1: config 0 descriptor?? [ 1619.960785][T21421] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1619.974718][T21421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.985601][T21421] usb 2-1: Product: syz [ 1619.991112][T21421] usb 2-1: Manufacturer: syz [ 1619.995740][T21421] usb 2-1: SerialNumber: syz [ 1620.011190][T21421] usb 2-1: config 0 descriptor?? [ 1620.017492][ T5856] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1620.037277][T21421] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input278 [ 1620.167105][ T4373] usbhid 3-1:0.0: can't add hid device: -71 [ 1620.176083][ T4373] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1620.205973][ T4373] usb 3-1: USB disconnect, device number 27 [ 1620.292897][ T5880] bond0: option resend_igmp: invalid value (65536) [ 1620.299893][ T5880] bond0: option resend_igmp: allowed values 0 - 255 [ 1620.341619][ T6291] usb 2-1: USB disconnect, device number 23 [ 1620.341744][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1620.658951][ T4373] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1620.819002][ T4373] usb 4-1: Using ep0 maxpacket: 16 [ 1620.829304][ T4373] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1620.849006][ T4373] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 1620.857403][ T4373] usb 4-1: config 166 has no interface number 0 [ 1620.869125][ T4373] usb 4-1: config 166 has no interface number 1 [ 1620.875514][ T4373] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1620.919889][ T4373] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1620.939470][ T4373] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1620.955553][ T4373] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1620.989072][ T4373] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1621.011306][ T4373] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1621.048937][ T4373] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1621.077288][ T4373] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1621.098987][ T4373] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1621.143513][ T4373] usb 4-1: config 166 interface 177 has no altsetting 0 [ 1621.158988][ T4373] usb 4-1: config 166 interface 34 has no altsetting 0 [ 1621.178548][ T4373] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1621.198063][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.216510][ T4373] usb 4-1: Product: syz [ 1621.220929][ T4373] usb 4-1: Manufacturer: syz [ 1621.248145][ T4373] usb 4-1: SerialNumber: syz [ 1621.470267][ T4373] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1621.480004][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30620'. [ 1621.672790][ T4373] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 1621.923277][ T4373] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 1622.073864][ T4373] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1622.089637][ T4373] uvcvideo 4-1:166.34: No valid video chain found. [ 1622.114312][ T4373] usb 4-1: USB disconnect, device number 9 [ 1622.328196][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30634'. [ 1622.365783][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30634'. [ 1622.386182][ T5948] netlink: 'syz.1.30634': attribute type 15 has an invalid length. [ 1622.949635][ T5968] netlink: 'syz.1.30643': attribute type 15 has an invalid length. [ 1622.996421][ T5970] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1623.002972][ T5970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1623.032463][ T5970] vhci_hcd vhci_hcd.0: Device attached [ 1623.279183][ T4373] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1623.319098][ T6291] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1623.481570][ T6291] usb 6-1: Using ep0 maxpacket: 16 [ 1623.488790][ T6291] usb 6-1: config 0 has no interfaces? [ 1623.494783][ T6291] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1623.516755][ T6291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.542751][ T6291] usb 6-1: config 0 descriptor?? [ 1623.776706][ T5973] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1623.777624][T21421] usb 6-1: USB disconnect, device number 31 [ 1623.794200][ T1155] vhci_hcd: stop threads [ 1623.799842][ T1155] vhci_hcd: release socket [ 1623.810391][ T1155] vhci_hcd: disconnect device [ 1624.600007][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1624.600024][ T30] audit: type=1326 audit(1760277506.321:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1624.672153][ T30] audit: type=1326 audit(1760277506.321:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1624.737505][ T30] audit: type=1326 audit(1760277506.321:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1624.783435][ T6045] dvmrp0: entered allmulticast mode [ 1624.797662][ T6049] netlink: 'syz.2.30680': attribute type 3 has an invalid length. [ 1624.807901][ T30] audit: type=1326 audit(1760277506.321:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1624.825729][ T6053] input: syz1 as /devices/virtual/input/input279 [ 1624.830861][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30680'. [ 1624.899401][ T30] audit: type=1326 audit(1760277506.321:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1624.927676][ T30] audit: type=1326 audit(1760277506.321:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1624.950794][ T30] audit: type=1326 audit(1760277506.321:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1624.977086][ T30] audit: type=1326 audit(1760277506.321:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.30677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1625.048220][ T6059] input: syz0 as /devices/virtual/input/input280 [ 1625.451572][ T6291] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1625.624405][ T6291] usb 6-1: Using ep0 maxpacket: 8 [ 1625.635768][ T6291] usb 6-1: config 0 has no interfaces? [ 1625.644033][ T6291] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1625.664024][ T6291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.680677][ T6291] usb 6-1: Product: syz [ 1625.690169][ T6291] usb 6-1: Manufacturer: syz [ 1625.705356][ T6291] usb 6-1: SerialNumber: syz [ 1625.718227][ T6291] usb 6-1: config 0 descriptor?? [ 1625.962302][ T6271] usb 6-1: USB disconnect, device number 32 [ 1626.126836][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30706'. [ 1626.195541][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30707'. [ 1626.287142][ T6114] netlink: 'syz.3.30710': attribute type 15 has an invalid length. [ 1626.575483][T21421] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1626.742793][T21421] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1626.752038][T21421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.760268][T21421] usb 3-1: Product: syz [ 1626.764442][T21421] usb 3-1: Manufacturer: syz [ 1626.770586][T21421] usb 3-1: SerialNumber: syz [ 1626.778121][T21421] usb 3-1: config 0 descriptor?? [ 1627.050815][T21421] usb 3-1: USB disconnect, device number 28 [ 1627.712108][ T6143] delete_channel: no stack [ 1628.179311][ T6271] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1628.199046][ T6291] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1628.340954][ T6271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.352312][ T6271] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1628.361524][ T6271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.370892][ T6291] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1628.372618][ T6271] usb 4-1: config 0 descriptor?? [ 1628.379205][ T4373] vhci_hcd: vhci_device speed not set [ 1628.390245][ T6291] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1628.402257][ T6291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1628.413431][ T6291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1628.424385][ T6291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1628.437585][ T6291] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1628.446807][ T6291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.459141][ T6291] usb 2-1: config 0 descriptor?? [ 1628.549300][T21421] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1628.709123][T21421] usb 3-1: Using ep0 maxpacket: 16 [ 1628.720497][T21421] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.731287][T21421] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1628.743943][T21421] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1628.758889][T21421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.766944][T21421] usb 3-1: Product: syz [ 1628.771433][T21421] usb 3-1: Manufacturer: syz [ 1628.776061][T21421] usb 3-1: SerialNumber: syz [ 1628.810257][ T6271] keytouch 0003:0926:3333.00FE: fixing up Keytouch IEC report descriptor [ 1628.840310][ T6271] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.00FE/input/input281 [ 1628.881321][ T6291] hid_parser_main: 73 callbacks suppressed [ 1628.881344][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1628.905035][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1628.918699][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1628.936558][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1628.952042][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1628.973324][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1628.989010][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1629.002883][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1629.015150][T21421] usb 3-1: 0:2 : does not exist [ 1629.018996][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1629.025332][ T6271] keytouch 0003:0926:3333.00FE: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1629.049416][T21421] usb 3-1: unit 9 not found! [ 1629.060811][ T6291] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1629.139612][ T6291] plantronics 0003:047F:FFFF.00FF: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1629.142080][T21421] usb 3-1: USB disconnect, device number 29 [ 1629.190358][ T6291] usb 2-1: USB disconnect, device number 24 [ 1629.256268][ T6271] usb 4-1: USB disconnect, device number 10 [ 1629.334778][ T6177] fido_id[6177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1629.412080][ T6179] netlink: 'syz.5.30736': attribute type 14 has an invalid length. [ 1631.494737][ T6316] netlink: 'syz.1.30779': attribute type 5 has an invalid length. [ 1632.759644][ T6370] netlink: 56 bytes leftover after parsing attributes in process `syz.4.30803'. [ 1632.909974][ T6376] binder: 6375:6376 ioctl c018620c 80000900 returned -1 [ 1633.213988][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.30812'. [ 1633.226407][ T6390] bridge0: port 1(team0) entered disabled state [ 1633.743542][T21421] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1633.767997][ T6390] team0 (unregistering): left allmulticast mode [ 1633.781427][ T6390] bridge0: port 1(team0) entered disabled state [ 1633.867344][ T6407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30819'. [ 1633.920922][T21421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1633.959702][T21421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1633.993491][T21421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1634.033258][T21421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1634.074143][T21421] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1634.089697][T21421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.097724][T21421] usb 4-1: Product: syz [ 1634.115560][T21421] usb 4-1: Manufacturer: syz [ 1634.124609][T21421] usb 4-1: SerialNumber: syz [ 1634.132876][T21421] usb 4-1: config 0 descriptor?? [ 1634.328990][ T4373] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1634.361050][T21421] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1634.489499][ T4373] usb 6-1: Using ep0 maxpacket: 32 [ 1634.500886][ T4373] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1634.513167][ T4373] usb 6-1: config 0 has no interface number 0 [ 1634.530741][ T4373] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1634.547873][ T4373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.559938][ T4373] usb 6-1: Product: syz [ 1634.564212][ T4373] usb 6-1: Manufacturer: syz [ 1634.570883][ T4373] usb 6-1: SerialNumber: syz [ 1634.581844][ T4373] usb 6-1: config 0 descriptor?? [ 1634.587486][ T6402] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 1634.601422][ T4373] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1634.603105][T21421] usb 4-1: USB disconnect, device number 11 [ 1634.706383][ T6440] netlink: 'syz.2.30835': attribute type 1 has an invalid length. [ 1634.715800][ T6440] netlink: 'syz.2.30835': attribute type 2 has an invalid length. [ 1634.728138][ T6440] netlink: 'syz.2.30835': attribute type 1 has an invalid length. [ 1634.736942][ T6440] netlink: 'syz.2.30835': attribute type 2 has an invalid length. [ 1634.808274][ T4373] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1634.843857][ T4373] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1635.280124][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1635.289661][ T4373] usb 6-1: USB disconnect, device number 33 [ 1635.304076][ T4373] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1635.337174][ T4373] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1635.354309][ T4373] quatech2 6-1:0.51: device disconnected [ 1635.961271][ T6487] netlink: 27 bytes leftover after parsing attributes in process `syz.3.30856'. [ 1636.129380][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30861'. [ 1636.249440][ T6502] geneve2: entered allmulticast mode [ 1636.354164][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30867'. [ 1636.714084][ T30] audit: type=1326 audit(1760277518.431:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.4.30877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1636.736211][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.782491][ T30] audit: type=1326 audit(1760277518.431:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6528 comm="syz.4.30877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000 [ 1636.804596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.869005][ T30] audit: type=1326 audit(1760277518.431:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1636.923362][ T30] audit: type=1326 audit(1760277518.441:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1636.987247][ T30] audit: type=1326 audit(1760277518.441:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1637.059075][ T30] audit: type=1326 audit(1760277518.441:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1637.112441][ T30] audit: type=1326 audit(1760277518.441:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1637.168793][ T30] audit: type=1326 audit(1760277518.441:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1637.192600][ T6551] vivid-003: disconnect [ 1637.212142][ T6546] vivid-003: reconnect [ 1637.239955][ T30] audit: type=1326 audit(1760277518.441:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1637.287313][ T30] audit: type=1326 audit(1760277518.441:8932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.30878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1637.529714][ C1] ------------[ cut here ]------------ [ 1637.535711][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1637.546612][ C1] WARNING: CPU: 1 PID: 3460 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 1637.556683][ C1] Modules linked in: [ 1637.560631][ C1] CPU: 1 UID: 0 PID: 3460 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1637.570235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1637.580356][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1637.587189][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 1637.593493][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 cc 8a 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 9f 4f c0 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1637.613154][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 1637.619289][ C1] RAX: 20cb47e929187a00 RBX: 000000000000000c RCX: ffff88803039bc80 [ 1637.627278][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1637.635312][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1637.643327][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888031e02ca8 [ 1637.651353][ C1] R13: 0000000000000000 R14: ffff888068908e80 R15: ffff88806890b138 [ 1637.659381][ C1] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 1637.668327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1637.674963][ C1] CR2: 00000000f7293d43 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1637.682980][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1637.690999][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1637.699001][ C1] Call Trace: [ 1637.702311][ C1] [ 1637.705180][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1637.710517][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1637.715829][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1637.721713][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1637.728064][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1637.733517][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1637.739308][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 1637.744985][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1637.751047][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1637.756633][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1637.762244][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1637.767808][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 1637.773426][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1637.779033][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1637.784515][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1637.790665][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1637.796228][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1637.803500][ C1] __iterate_interfaces+0x2ab/0x590 [ 1637.808712][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1637.814841][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1637.822653][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1637.828741][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1637.835828][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1637.841070][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1637.846897][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1637.852171][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1637.858182][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1637.863974][ C1] ? read_tsc+0x9/0x20 [ 1637.868060][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1637.873940][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1637.879106][ C1] handle_softirqs+0x286/0x870 [ 1637.883900][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1637.888727][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1637.894680][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1637.899935][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1637.904579][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1637.909838][ C1] irq_exit_rcu+0x9/0x30 [ 1637.914103][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1637.919803][ C1] [ 1637.922747][ C1] [ 1637.925690][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1637.931714][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 1637.937050][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 fb ac f3 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1637.956732][ C1] RSP: 0018:ffffc9000bf8f358 EFLAGS: 00000206 [ 1637.962855][ C1] RAX: 20cb47e929187a00 RBX: 0000000000000000 RCX: 20cb47e929187a00 [ 1637.970888][ C1] RDX: 0000000000000000 RSI: ffffffff8d9d1510 RDI: ffffffff8bc076e0 [ 1637.978901][ C1] RBP: ffffffff8173cd25 R08: 0000000000000000 R09: ffffffff8173cd25 [ 1637.986918][ C1] R10: ffffc9000bf8f518 R11: ffffffff81ac6cd0 R12: 0000000000000002 [ 1637.994940][ C1] R13: ffffffff8e13d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 1638.002974][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.008115][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1638.014306][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.019501][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.024641][ C1] ? kasan_save_track+0x3e/0x80 [ 1638.029549][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.034694][ C1] unwind_next_frame+0xc2/0x2390 [ 1638.039710][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.044854][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.050018][ C1] ? stack_trace_save+0x9c/0xe0 [ 1638.054929][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1638.061132][ C1] arch_stack_walk+0x11c/0x150 [ 1638.065932][ C1] ? kasan_save_track+0x3e/0x80 [ 1638.070847][ C1] stack_trace_save+0x9c/0xe0 [ 1638.075550][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1638.080969][ C1] ? chacha_block_generic+0x53/0xc80 [ 1638.086313][ C1] kasan_save_track+0x3e/0x80 [ 1638.091059][ C1] ? kasan_save_track+0x3e/0x80 [ 1638.095990][ C1] __kasan_save_free_info+0x46/0x50 [ 1638.101248][ C1] __kasan_slab_free+0x5c/0x80 [ 1638.106061][ C1] ? skb_release_data+0x62d/0x7c0 [ 1638.111141][ C1] kfree+0x19a/0x6d0 [ 1638.115057][ C1] skb_release_data+0x62d/0x7c0 [ 1638.119987][ C1] consume_skb+0x9e/0xf0 [ 1638.124258][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 1638.129955][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1638.135738][ C1] process_scheduled_works+0xae1/0x17b0 [ 1638.141358][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1638.147406][ C1] worker_thread+0x8a0/0xda0 [ 1638.152107][ C1] kthread+0x711/0x8a0 [ 1638.156197][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1638.161363][ C1] ? __pfx_kthread+0x10/0x10 [ 1638.165973][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1638.171249][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1638.176466][ C1] ? __pfx_kthread+0x10/0x10 [ 1638.181107][ C1] ret_from_fork+0x4bc/0x870 [ 1638.185836][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1638.191009][ C1] ? __switch_to_asm+0x39/0x70 [ 1638.195795][ C1] ? __switch_to_asm+0x33/0x70 [ 1638.200625][ C1] ? __pfx_kthread+0x10/0x10 [ 1638.205262][ C1] ret_from_fork_asm+0x1a/0x30 [ 1638.210097][ C1] [ 1638.213124][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1638.220413][ C1] CPU: 1 UID: 0 PID: 3460 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1638.229968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1638.240037][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1638.246836][ C1] Call Trace: [ 1638.250127][ C1] [ 1638.252991][ C1] dump_stack_lvl+0x99/0x250 [ 1638.257622][ C1] ? __asan_memcpy+0x40/0x70 [ 1638.262242][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1638.267459][ C1] ? __pfx__printk+0x10/0x10 [ 1638.272083][ C1] vpanic+0x237/0x6d0 [ 1638.276096][ C1] ? __pfx_vpanic+0x10/0x10 [ 1638.280651][ C1] panic+0xb9/0xc0 [ 1638.284398][ C1] ? __pfx_panic+0x10/0x10 [ 1638.288841][ C1] __warn+0x31b/0x4b0 [ 1638.292832][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1638.298481][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1638.304124][ C1] report_bug+0x2be/0x4f0 [ 1638.308467][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1638.314114][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1638.319763][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 1638.325421][ C1] handle_bug+0x84/0x160 [ 1638.329687][ C1] exc_invalid_op+0x1a/0x50 [ 1638.334212][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1638.339076][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 1638.345512][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 c0 cc 8a 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 9f 4f c0 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1638.365138][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 1638.371230][ C1] RAX: 20cb47e929187a00 RBX: 000000000000000c RCX: ffff88803039bc80 [ 1638.379213][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1638.387190][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1638.395163][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888031e02ca8 [ 1638.403125][ C1] R13: 0000000000000000 R14: ffff888068908e80 R15: ffff88806890b138 [ 1638.411097][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 1638.416737][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1638.422015][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1638.427299][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1638.433115][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1638.439436][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1638.444808][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1638.450529][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 1638.456173][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1638.462155][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1638.467692][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1638.473235][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1638.478773][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 1638.484312][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1638.489859][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1638.495312][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1638.501380][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1638.506925][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1638.514120][ C1] __iterate_interfaces+0x2ab/0x590 [ 1638.519312][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1638.525371][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1638.532599][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1638.538664][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1638.545680][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1638.550868][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1638.556663][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1638.561858][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1638.567841][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1638.573553][ C1] ? read_tsc+0x9/0x20 [ 1638.577613][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1638.583422][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1638.588533][ C1] handle_softirqs+0x286/0x870 [ 1638.593290][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1638.598049][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1638.603329][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1638.608524][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1638.613108][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1638.618314][ C1] irq_exit_rcu+0x9/0x30 [ 1638.622547][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1638.628176][ C1] [ 1638.631095][ C1] [ 1638.634013][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1638.639979][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 1638.645256][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 fb ac f3 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1638.664853][ C1] RSP: 0018:ffffc9000bf8f358 EFLAGS: 00000206 [ 1638.670918][ C1] RAX: 20cb47e929187a00 RBX: 0000000000000000 RCX: 20cb47e929187a00 [ 1638.678882][ C1] RDX: 0000000000000000 RSI: ffffffff8d9d1510 RDI: ffffffff8bc076e0 [ 1638.686852][ C1] RBP: ffffffff8173cd25 R08: 0000000000000000 R09: ffffffff8173cd25 [ 1638.694811][ C1] R10: ffffc9000bf8f518 R11: ffffffff81ac6cd0 R12: 0000000000000002 [ 1638.702772][ C1] R13: ffffffff8e13d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 1638.710736][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.715847][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1638.721986][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.727103][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.732208][ C1] ? kasan_save_track+0x3e/0x80 [ 1638.737045][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.742148][ C1] unwind_next_frame+0xc2/0x2390 [ 1638.747079][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.752188][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1638.757294][ C1] ? stack_trace_save+0x9c/0xe0 [ 1638.762136][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1638.768277][ C1] arch_stack_walk+0x11c/0x150 [ 1638.773041][ C1] ? kasan_save_track+0x3e/0x80 [ 1638.777883][ C1] stack_trace_save+0x9c/0xe0 [ 1638.782548][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1638.787910][ C1] ? chacha_block_generic+0x53/0xc80 [ 1638.793191][ C1] kasan_save_track+0x3e/0x80 [ 1638.797859][ C1] ? kasan_save_track+0x3e/0x80 [ 1638.802734][ C1] __kasan_save_free_info+0x46/0x50 [ 1638.807929][ C1] __kasan_slab_free+0x5c/0x80 [ 1638.812681][ C1] ? skb_release_data+0x62d/0x7c0 [ 1638.817699][ C1] kfree+0x19a/0x6d0 [ 1638.821588][ C1] skb_release_data+0x62d/0x7c0 [ 1638.826446][ C1] consume_skb+0x9e/0xf0 [ 1638.830680][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 1638.836316][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1638.842033][ C1] process_scheduled_works+0xae1/0x17b0 [ 1638.847596][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1638.853589][ C1] worker_thread+0x8a0/0xda0 [ 1638.858197][ C1] kthread+0x711/0x8a0 [ 1638.862258][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1638.867363][ C1] ? __pfx_kthread+0x10/0x10 [ 1638.871945][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1638.877140][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1638.882327][ C1] ? __pfx_kthread+0x10/0x10 [ 1638.886910][ C1] ret_from_fork+0x4bc/0x870 [ 1638.891493][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1638.896606][ C1] ? __switch_to_asm+0x39/0x70 [ 1638.901368][ C1] ? __switch_to_asm+0x33/0x70 [ 1638.906124][ C1] ? __pfx_kthread+0x10/0x10 [ 1638.910702][ C1] ret_from_fork_asm+0x1a/0x30 [ 1638.915472][ C1] [ 1638.918741][ C1] Kernel Offset: disabled [ 1638.923053][ C1] Rebooting in 86400 seconds..