last executing test programs: 18.75450942s ago: executing program 3 (id=1402): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 18.640778008s ago: executing program 3 (id=1404): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000100000000000000b703000008000000b7040000000467938e6d05de04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r2, 0x0, r1}) 18.459056263s ago: executing program 3 (id=1407): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) socket$kcm(0xa, 0x2, 0x73) 18.214362165s ago: executing program 3 (id=1410): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf25b, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x100000000000000, 0x0, 0x0) 17.886284596s ago: executing program 3 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syncfs(0xffffffffffffffff) 5.621319007s ago: executing program 1 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x4e, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df4"}}}}, 0xfdef) 5.048073709s ago: executing program 1 (id=1507): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xcd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe1d}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) 4.777826378s ago: executing program 1 (id=1510): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x78, 0x2, 0x3ff, 0x4, "bbfb2dbc0b913f641c35c476f427050501878fc4b694d9cd7e73ac0a0d5c91d0"}) 4.248598671s ago: executing program 2 (id=1515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8140aecc, &(0x7f0000000000)) 3.798265229s ago: executing program 2 (id=1519): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x20842, 0x0) setuid(0xee01) setxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 3.66106737s ago: executing program 2 (id=1521): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000140)={0x2, 0x100, 0x0, 0xfffffffe, 0xfffffffd, 0x2}) 3.12174455s ago: executing program 3 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syncfs(0xffffffffffffffff) 2.536344419s ago: executing program 0 (id=1528): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.535446818s ago: executing program 1 (id=1529): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.363930293s ago: executing program 1 (id=1531): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_getoverrun(r0) 2.116128805s ago: executing program 0 (id=1533): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x5}) poll(&(0x7f0000000100)=[{r0, 0x400}], 0x1, 0x7) 1.784991476s ago: executing program 0 (id=1534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x5, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1c, 0x7d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x69, 0x0, @gue={{0x1, 0x0, 0x3, 0x4, 0x0, @void}, "6279cb22459ff50866ff8296d4a703d3c443eead410baf7b35c112fa15932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39854510aa6af127d5df17d70aef"}}}}, 0x8b) 1.675658476s ago: executing program 4 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.521632276s ago: executing program 2 (id=1536): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x5c}, 0x8) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) 1.2319026s ago: executing program 4 (id=1537): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)='?', 0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20) 988.045941ms ago: executing program 1 (id=1538): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x20, 0x31, 0x7, {0x7, 0x23, "d17d93f0fd"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 965.601709ms ago: executing program 4 (id=1539): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x2}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x440000, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 685.435298ms ago: executing program 0 (id=1540): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 534.870464ms ago: executing program 0 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 511.43225ms ago: executing program 4 (id=1542): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfc}, 0x2) 449.287606ms ago: executing program 2 (id=1543): unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r1, r0}) 289.451648ms ago: executing program 4 (id=1544): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc2f3, 0x8, 0x0, 0x109}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x44, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3518, 0x0, 0x0, 0x0, 0x0) 150.980505ms ago: executing program 0 (id=1545): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}]}, 0x21) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 98.270773ms ago: executing program 2 (id=1546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) write$cgroup_subtree(r1, 0x0, 0x0) 0s ago: executing program 4 (id=1547): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) kernel console output (not intermixed with test programs): 562780][ T6059] mkiss: ax0: crc mode is auto. [ 100.738666][ T5963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.794178][ T5963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 100.824559][ T5963] usb 1-1: media controller created [ 100.906220][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.981132][ T5963] usb 1-1: selecting invalid altsetting 6 [ 100.987101][ T5963] usb 1-1: digital interface selection failed (-22) [ 101.022296][ T5971] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.033921][ T5963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 101.066709][ T5963] usb 1-1: setting power OFF [ 101.074623][ T5963] dvb-usb: bulk message failed: -22 (2/0) [ 101.085082][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 101.109913][ T5971] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111404][ T5963] (NULL device *): no alternate interface [ 101.146623][ T5971] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.182584][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 101.209396][ T5971] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.226132][ T5963] usb 1-1: USB disconnect, device number 2 [ 101.260967][ T5925] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.337814][ T121] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.419558][ T6075] input: syz1 as /devices/virtual/input/input5 [ 101.448194][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 101.459842][ T5925] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.468908][ T5925] usb 5-1: config 179 has no interface number 0 [ 101.497865][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 101.531336][ T121] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 101.550866][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.592312][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.599069][ T121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 101.621180][ T121] pvrusb2: ********** [ 101.625414][ T121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 101.632149][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 101.636509][ T5963] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.662253][ T121] pvrusb2: Important functionality might not be entirely working. [ 101.672102][ T121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 101.678077][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.689712][ T121] pvrusb2: ********** [ 101.702978][ T5925] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 101.737836][ T5925] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.772734][ T5925] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.781930][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.795376][ T6067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 101.803303][ T6079] netlink: 152 bytes leftover after parsing attributes in process `syz.2.56'. [ 101.818162][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 101.831479][ T2343] pvrusb2: Invalid write control endpoint [ 101.832450][ T5963] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 101.853655][ T5963] usb 1-1: config 0 has no interface number 0 [ 101.866338][ T5963] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 101.886015][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.916094][ T5963] usb 1-1: Product: syz [ 101.928690][ T5963] usb 1-1: Manufacturer: syz [ 101.948148][ T5963] usb 1-1: SerialNumber: syz [ 101.974922][ T5963] usb 1-1: config 0 descriptor?? [ 101.996501][ T5963] hub 1-1:0.132: bad descriptor, ignoring hub [ 102.015504][ T5963] hub 1-1:0.132: probe with driver hub failed with error -5 [ 102.059128][ T2343] pvrusb2: Invalid write control endpoint [ 102.065036][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 102.087614][ T5963] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input6 [ 102.102353][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 102.121503][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 102.142208][ T2343] pvrusb2: Device being rendered inoperable [ 102.158558][ T5925] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 102.179251][ T6070] pvrusb2: Attempted to execute control transfer when device not ok [ 102.198629][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 102.206078][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 102.221627][ T10] usb 2-1: USB disconnect, device number 2 [ 102.264157][ T2343] pvrusb2: Attached sub-driver cx25840 [ 102.270824][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 102.282107][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 102.762864][ T6091] mmap: syz.3.60 (6091) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.098334][ T6096] nbd0: detected capacity change from 0 to 127 [ 103.142168][ T5840] block nbd0: Receive control failed (result -104) [ 103.487257][ T6104] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 103.524926][ T6104] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 103.676779][ T6067] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 103.677844][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.689895][ T6067] usb 1-1: device reset changed ep0 maxpacket size! [ 103.707303][ T5963] usb 1-1: USB disconnect, device number 3 [ 103.833172][ T978] usb 5-1: USB disconnect, device number 2 [ 103.833236][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.833319][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.847849][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 103.895855][ T5917] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 103.918853][ T5963] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.931120][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.953311][ T5917] usb 4-1: config 0 descriptor?? [ 104.087934][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 104.103469][ T5963] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 104.134135][ T5963] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 104.154084][ T5963] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 104.177466][ T5963] usb 1-1: Product: syz [ 104.200438][ T5917] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 104.214297][ T5963] usb 1-1: Manufacturer: syz [ 104.228831][ T5963] usb 1-1: SerialNumber: syz [ 104.255160][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.291529][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 104.303258][ T5917] usb 4-1: media controller created [ 104.385332][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.447455][ T5917] az6027: usb out operation failed. (-71) [ 104.463892][ T5917] az6027: usb out operation failed. (-71) [ 104.474115][ T5963] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 104.509586][ T5917] stb0899_attach: Driver disabled by Kconfig [ 104.515661][ T5917] az6027: no front-end attached [ 104.515661][ T5917] [ 104.537803][ T5963] usb 1-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 104.545789][ T5963] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 104.576906][ T5917] az6027: usb out operation failed. (-71) [ 104.584226][ T5963] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 104.591895][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 104.623588][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 104.669704][ T5840] block nbd1: Receive control failed (result -32) [ 104.679115][ T5963] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 104.690090][ T5917] dvb-usb: schedule remote query interval to 400 msecs. [ 104.697092][ T5917] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 104.705336][ T5963] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 104.729415][ T5917] usb 4-1: USB disconnect, device number 2 [ 104.736160][ T5963] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 104.748580][ T6126] macvlan0: entered promiscuous mode [ 104.758201][ T5963] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 104.798363][ T6126] macvlan1: entered promiscuous mode [ 104.810522][ T5963] usb 1-1: USB disconnect, device number 4 [ 104.811051][ T6126] hsr1: entered promiscuous mode [ 104.846701][ T5963] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 104.888526][ T5917] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 104.946338][ T5963] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 104.973561][ T5963] visor 1-1:1.0: device disconnected [ 105.198091][ T978] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 105.269346][ T5963] kernel write not supported for file /uhid (pid: 5963 comm: kworker/1:6) [ 105.399595][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.420336][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.435928][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.445671][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.455513][ T978] usb 2-1: Product: syz [ 105.465628][ T978] usb 2-1: Manufacturer: syz [ 105.473445][ T978] usb 2-1: SerialNumber: syz [ 105.950027][ T978] usb 2-1: 0:2 : does not exist [ 106.381376][ T978] usb 2-1: USB disconnect, device number 3 [ 106.565710][ T6172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.828634][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.029451][ T5917] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 107.058737][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.091915][ T5917] usb 1-1: Product: syz [ 107.096611][ T5917] usb 1-1: Manufacturer: syz [ 107.117970][ T5917] usb 1-1: SerialNumber: syz [ 107.143723][ T5917] usb 1-1: config 0 descriptor?? [ 107.165354][ T5917] ch341 1-1:0.0: ch341-uart converter detected [ 107.325062][ T6192] netlink: 'syz.1.101': attribute type 4 has an invalid length. [ 107.976633][ T5917] usb 1-1: failed to send control message: -71 [ 107.990201][ T5917] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 108.029861][ T5917] usb 1-1: USB disconnect, device number 5 [ 108.039746][ T5917] ch341 1-1:0.0: device disconnected [ 108.075841][ T6214] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.742916][ T6232] sp0: Synchronizing with TNC [ 108.783434][ T6233] sp0: Found TNC [ 109.142598][ T978] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 109.308662][ T121] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.337826][ T5917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.345894][ T978] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 109.367783][ T978] usb 4-1: config 4 has no interface number 0 [ 109.373982][ T978] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 109.416579][ T978] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 109.429996][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.438996][ T978] usb 4-1: Product: syz [ 109.443301][ T978] usb 4-1: Manufacturer: syz [ 109.448574][ T978] usb 4-1: SerialNumber: syz [ 109.471058][ T121] usb 3-1: Using ep0 maxpacket: 32 [ 109.479750][ T121] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 109.500505][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 109.507250][ T121] usb 3-1: config 0 has no interface number 0 [ 109.526386][ T121] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.542301][ T121] usb 3-1: config 0 interface 85 has no altsetting 0 [ 109.549478][ T5917] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 109.578725][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.597503][ T121] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 109.620316][ T5917] usb 1-1: config 0 descriptor?? [ 109.625618][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.647514][ T121] usb 3-1: Product: syz [ 109.652912][ T121] usb 3-1: Manufacturer: syz [ 109.661055][ T121] usb 3-1: SerialNumber: syz [ 109.668820][ T5917] gspca_main: sunplus-2.14.0 probing 041e:400b [ 109.685879][ T121] usb 3-1: config 0 descriptor?? [ 109.892089][ T978] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 109.931268][ T978] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 109.961479][ T978] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 109.987840][ T978] usb 4-1: media controller created [ 109.997257][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.135842][ T978] DVB: Unable to find symbol dib7000p_attach() [ 110.160559][ T978] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 110.290080][ T978] rc_core: IR keymap rc-dib0700-rc5 not found [ 110.296233][ T978] Registered IR keymap rc-empty [ 110.316214][ T978] dvb-usb: could not initialize remote control. [ 110.327942][ T978] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 110.328285][ T121] appletouch 3-1:0.85: Geyser mode initialized. [ 110.337337][ T978] dib0700: There's no endpoint for remote controller [ 110.376080][ T121] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input9 [ 110.459227][ T5917] gspca_sunplus: reg_w_riv err -71 [ 110.469829][ T5917] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 110.504410][ T5917] usb 1-1: USB disconnect, device number 6 [ 110.570432][ T121] usb 3-1: USB disconnect, device number 2 [ 110.604211][ T5827] usb 4-1: USB disconnect, device number 3 [ 110.663287][ T121] appletouch 3-1:0.85: input: appletouch disconnected [ 110.702094][ T5827] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 111.737998][ T121] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.766378][ T5827] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.927831][ T121] usb 4-1: Using ep0 maxpacket: 16 [ 111.933178][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 111.949816][ T121] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.965515][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.977043][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.997846][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.011885][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.022600][ T5827] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 112.032010][ T121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.041882][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.053104][ T121] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.070282][ T5827] usb 3-1: config 0 descriptor?? [ 112.077929][ T121] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.090566][ T121] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.100676][ T121] usb 4-1: Manufacturer: syz [ 112.123721][ T121] usb 4-1: config 0 descriptor?? [ 112.154424][ T5963] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 112.234652][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 112.347042][ T5963] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 112.372471][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.396460][ T5963] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 112.416089][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.427888][ T5963] usb 1-1: Product: syz [ 112.432198][ T5963] usb 1-1: Manufacturer: syz [ 112.436930][ T5963] usb 1-1: SerialNumber: syz [ 112.460579][ T5963] usb 1-1: config 0 descriptor?? [ 112.512051][ T5963] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 112.538394][ T121] rc_core: IR keymap rc-hauppauge not found [ 112.558022][ T121] Registered IR keymap rc-empty [ 112.573052][ T5827] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 112.588420][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.617633][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.650468][ T121] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 112.684192][ T121] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 112.723004][ T5827] playstation 0003:054C:05C4.0001: Invalid byte count transferred, expected 16 got 0 [ 112.733232][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.740948][ T5827] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -22 [ 112.768147][ T5827] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 112.778690][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.801135][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.808574][ T5827] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 112.849006][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.858702][ T5827] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -22 [ 112.880746][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.928046][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.959398][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.966329][ T978] usb 3-1: USB disconnect, device number 3 [ 112.997879][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.048592][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.068002][ T121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 113.106207][ T121] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 113.177942][ T121] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 113.245932][ T121] usb 4-1: USB disconnect, device number 4 [ 113.319438][ T5963] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 113.345776][ T5963] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 113.386990][ T5963] usb 1-1: USB disconnect, device number 7 [ 113.684336][ T6332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.943330][ T6371] program syz.0.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.408045][ T121] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.584671][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.605198][ T121] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 115.630482][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.686286][ T121] usb 4-1: config 0 descriptor?? [ 115.907129][ T30] audit: type=1326 audit(1752260404.895:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6402 comm="syz.0.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efec778e929 code=0x0 [ 116.033464][ T6398] gtp0: entered promiscuous mode [ 116.053454][ T6398] gtp0: entered allmulticast mode [ 116.125964][ T6400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.188647][ T6407] mkiss: ax0: crc mode is auto. [ 116.218888][ T6400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.323069][ T6400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.371132][ T121] razer 0003:1532:010E.0002: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 116.455310][ T6400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.586472][ T121] usb 4-1: USB disconnect, device number 5 [ 116.605211][ T6412] fido_id[6412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 116.721541][ T6400] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.820235][ T6400] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.902173][ T6400] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.947803][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.971726][ T6400] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.162938][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 117.211095][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.231403][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 117.257805][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.277071][ T10] usb 5-1: Product: syz [ 117.281595][ T10] usb 5-1: Manufacturer: syz [ 117.301920][ T10] usb 5-1: SerialNumber: syz [ 117.314476][ T10] usb 5-1: config 0 descriptor?? [ 117.496423][ T6437] process 'syz.2.207' launched '/dev/fd/5' with NULL argv: empty string added [ 117.761151][ T10] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 118.179884][ T10] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 118.253732][ T10] usb 5-1: USB disconnect, device number 3 [ 118.530421][ T6461] block nbd2: server does not support multiple connections per device. [ 118.557010][ T6461] block nbd2: shutting down sockets [ 118.579255][ T6463] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 118.618515][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 118.792756][ T6467] TCP: TCP_TX_DELAY enabled [ 118.912048][ T6473] netlink: 52 bytes leftover after parsing attributes in process `syz.4.224'. [ 118.941588][ T6473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'. [ 119.324497][ T6486] veth0: entered promiscuous mode [ 119.352400][ T6484] veth0: left promiscuous mode [ 119.599744][ T6493] ip6gre1: entered promiscuous mode [ 119.635544][ T6493] ip6gre1: entered allmulticast mode [ 120.141256][ T6514] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 120.357524][ T6525] bond0: entered promiscuous mode [ 120.371057][ T6525] bond_slave_0: entered promiscuous mode [ 120.377955][ T5932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.384002][ T6525] bond_slave_1: entered promiscuous mode [ 120.401519][ T6525] bond0: left promiscuous mode [ 120.406529][ T6525] bond_slave_0: left promiscuous mode [ 120.419545][ T6525] bond_slave_1: left promiscuous mode [ 120.537937][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 120.545346][ T5932] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 120.557755][ T5932] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 120.581857][ T5932] usb 4-1: config 0 has no interface number 0 [ 120.593148][ T5932] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.638275][ T5932] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 120.691009][ T5932] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.721297][ T5932] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 120.736685][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 120.787856][ T5932] usb 4-1: Product: syz [ 120.799780][ T5932] usb 4-1: config 0 descriptor?? [ 120.813380][ T6519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.442592][ T6558] gtp0: entered promiscuous mode [ 121.452651][ T6558] gtp0: entered allmulticast mode [ 121.455412][ T5932] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input12 [ 121.741154][ T978] usb 4-1: USB disconnect, device number 6 [ 121.747093][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 121.820200][ T5932] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.000324][ T5932] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 122.024652][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.075688][ T5932] usb 2-1: config 0 descriptor?? [ 122.318652][ T5932] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 122.459240][ T6586] warning: `syz.3.276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.523459][ T5932] [drm:udl_init] *ERROR* Selecting channel failed [ 122.610380][ T5932] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 122.617151][ T5932] [drm] Initialized udl on minor 2 [ 122.647816][ T5932] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.681444][ T5932] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 122.709492][ T978] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.729787][ T978] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 122.749091][ T5932] usb 2-1: USB disconnect, device number 4 [ 123.142684][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 123.351882][ T6617] bond0: entered promiscuous mode [ 123.357239][ T6617] bond_slave_0: entered promiscuous mode [ 123.366702][ T6617] bond_slave_1: entered promiscuous mode [ 123.394877][ T6617] bond0: left promiscuous mode [ 123.413778][ T6617] bond_slave_0: left promiscuous mode [ 123.436480][ T6617] bond_slave_1: left promiscuous mode [ 124.139981][ T5932] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.334486][ T5932] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.377223][ T5932] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.419751][ T5932] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.505884][ T6661] bond0: entered promiscuous mode [ 124.511146][ T5932] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 124.513253][ T6661] bond_slave_0: entered promiscuous mode [ 124.541209][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.548224][ T6661] bond_slave_1: entered promiscuous mode [ 124.581086][ T6638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.586205][ T6661] bond0: left promiscuous mode [ 124.605089][ T6661] bond_slave_0: left promiscuous mode [ 124.611381][ T6661] bond_slave_1: left promiscuous mode [ 125.078601][ T6676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.182148][ T6683] ======================================================= [ 125.182148][ T6683] WARNING: The mand mount option has been deprecated and [ 125.182148][ T6683] and is ignored by this kernel. Remove the mand [ 125.182148][ T6683] option from the mount to silence this warning. [ 125.182148][ T6683] ======================================================= [ 125.217150][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.409250][ T5932] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 125.433138][ T5932] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input13 [ 125.584358][ T5932] usb 3-1: USB disconnect, device number 4 [ 125.590418][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 125.625018][ T6695] [U] [ 125.627966][ T6695] [U] [ 125.630703][ T6695] [U] [ 125.633448][ T6695] [U] [ 125.678082][ T6695] [U] [ 125.680874][ T6695] [U] [ 125.683609][ T6695] [U] [ 125.686352][ T6695] [U] [ 125.768806][ T6695] [U] [ 125.771587][ T6695] [U] [ 125.774318][ T6695] [U] [ 125.777055][ T6695] [U] [ 125.802742][ T6695] [U] [ 125.805525][ T6695] [U] [ 125.808278][ T6695] [U] [ 125.811013][ T6695] [U] [ 125.855322][ T6695] [U] [ 125.858116][ T6695] [U] [ 125.860849][ T6695] [U] [ 125.863582][ T6695] [U] [ 125.910762][ T6695] [U] [ 125.913553][ T6695] [U] [ 125.916283][ T6695] [U] [ 125.919012][ T6695] [U] [ 125.956546][ T6695] [U] [ 125.959341][ T6695] [U] [ 125.962080][ T6695] [U] [ 125.964813][ T6695] [U] [ 126.012454][ T6695] [U] [ 126.015245][ T6695] [U] [ 126.017970][ T6695] [U] [ 126.020699][ T6695] [U] [ 126.052483][ T6695] [U] [ 126.055263][ T6695] [U] [ 126.057999][ T6695] [U] [ 126.060725][ T6695] [U] [ 126.091947][ T6695] [U] [ 126.094725][ T6695] [U] [ 126.097463][ T6695] [U] [ 126.100196][ T6695] [U] [ 126.125948][ T6709] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 126.134687][ T6695] [U] [ 126.137469][ T6695] [U] [ 126.140181][ T6695] [U] [ 126.142882][ T6695] [U] [ 126.170978][ T6695] [U] [ 126.173776][ T6695] [U] [ 126.176510][ T6695] [U] [ 126.179255][ T6695] [U] [ 126.214910][ T6695] [U] [ 126.217691][ T6695] [U] [ 126.220424][ T6695] [U] [ 126.223174][ T6695] [U] [ 126.246423][ T6695] [U] [ 126.249203][ T6695] [U] [ 126.251936][ T6695] [U] [ 126.254668][ T6695] [U] [ 126.285496][ T6695] [U] [ 126.288303][ T6695] [U] [ 126.291037][ T6695] [U] [ 126.293761][ T6695] [U] [ 126.335842][ T6695] [U] [ 126.338625][ T6695] [U] [ 126.341389][ T6695] [U] [ 126.344125][ T6695] [U] [ 126.383488][ T6695] [U] [ 126.386270][ T6695] [U] [ 126.389018][ T6695] [U] [ 126.391746][ T6695] [U] [ 126.436540][ T6695] [U] [ 126.439342][ T6695] [U] [ 126.442079][ T6695] [U] [ 126.444814][ T6695] [U] [ 126.522018][ T6695] [U] [ 126.660911][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 126.764842][ T6730] syz.0.342 (6730): /proc/6729/oom_adj is deprecated, please use /proc/6729/oom_score_adj instead. [ 127.257952][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.420720][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 127.452934][ T10] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 127.500608][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 127.524026][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.547777][ T10] usb 4-1: Product: syz [ 127.552011][ T10] usb 4-1: Manufacturer: syz [ 127.589094][ T10] usb 4-1: SerialNumber: syz [ 127.619167][ T10] usb 4-1: config 0 descriptor?? [ 127.651279][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 127.688899][ T10] usb 4-1: setting power ON [ 127.693581][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 127.754836][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.803319][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 127.817297][ T10] usb 4-1: media controller created [ 127.834071][ T6738] dvb-usb: bulk message failed: -22 (3/0) [ 127.904272][ T6738] dvb-usb: bulk message failed: -22 (37/0) [ 127.944716][ T6772] dvb-usb: bulk message failed: -22 (3/0) [ 127.962897][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.977005][ T6772] dvb-usb: bulk message failed: -22 (3/0) [ 128.039919][ T10] usb 4-1: selecting invalid altsetting 6 [ 128.045744][ T10] usb 4-1: digital interface selection failed (-22) [ 128.097617][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 128.131921][ T10] usb 4-1: setting power OFF [ 128.151151][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 128.156965][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 128.166682][ T10] (NULL device *): no alternate interface [ 128.211050][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 128.276153][ T10] usb 4-1: USB disconnect, device number 7 [ 128.442551][ T6782] syz.2.365 (6782) used greatest stack depth: 18552 bytes left [ 128.570752][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 129.447890][ T6818] netlink: 452 bytes leftover after parsing attributes in process `syz.3.381'. [ 129.620114][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 130.077959][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.257796][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 130.277604][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.297198][ T6850] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 130.300346][ T10] usb 4-1: config 0 has no interface number 0 [ 130.305923][ T6850] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 130.327679][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.352054][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.357292][ T6850] netlink: 188 bytes leftover after parsing attributes in process `syz.2.396'. [ 130.387857][ T10] usb 4-1: Product: syz [ 130.392109][ T10] usb 4-1: Manufacturer: syz [ 130.396789][ T10] usb 4-1: SerialNumber: syz [ 130.396975][ T6850] NCSI netlink: No device for ifindex 458760 [ 130.448818][ T10] usb 4-1: config 0 descriptor?? [ 130.487922][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.586564][ T6858] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.399'. [ 130.682889][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.750606][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.752116][ T6863] ubi31: attaching mtd0 [ 131.066149][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.067954][ T5903] usb 4-1: USB disconnect, device number 8 [ 131.108339][ T5963] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.134386][ T5903] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.188547][ T5903] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 131.215209][ T5903] quatech2 4-1:0.51: device disconnected [ 131.297801][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 131.324081][ T5963] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 131.337803][ T5963] usb 1-1: config 0 has no interface number 0 [ 131.351684][ T5963] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.378205][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.386274][ T5963] usb 1-1: Product: syz [ 131.408126][ T5963] usb 1-1: Manufacturer: syz [ 131.423076][ T5963] usb 1-1: SerialNumber: syz [ 131.459439][ T5963] usb 1-1: config 0 descriptor?? [ 131.479800][ T5963] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.698389][ T5963] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.746802][ T5963] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 132.147983][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 132.149622][ T10] usb 1-1: USB disconnect, device number 8 [ 132.209203][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 132.286183][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.330735][ T10] quatech2 1-1:0.51: device disconnected [ 132.535397][ T6899] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.015976][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.022739][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.281348][ T121] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.477921][ T121] usb 2-1: Using ep0 maxpacket: 8 [ 133.521694][ T121] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 133.531937][ T121] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 133.575469][ T121] usb 2-1: Product: syz [ 133.580741][ T121] usb 2-1: Manufacturer: syz [ 133.585388][ T121] usb 2-1: SerialNumber: syz [ 133.603486][ T121] usb 2-1: config 0 descriptor?? [ 133.627062][ T121] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 133.640660][ T6942] Bluetooth: MGMT ver 1.23 [ 133.649560][ T94] block nbd0: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 30 seconds [ 133.662407][ T94] block nbd0: Possible stuck request ffff8880255001c0: control (read@1024,1024B). Runtime 30 seconds [ 133.675926][ T94] block nbd0: Possible stuck request ffff888025500380: control (read@2048,1024B). Runtime 30 seconds [ 133.687070][ T94] block nbd0: Possible stuck request ffff888025500540: control (read@3072,1024B). Runtime 30 seconds [ 134.064391][ T6952] sg_write: process 190 (syz.2.445) changed security contexts after opening file descriptor, this is not allowed. [ 134.278210][ T121] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 134.531276][ T121] usb 2-1: USB disconnect, device number 5 [ 135.030846][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'. [ 135.536214][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 135.599603][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 135.802123][ T6991] IPVS: persistence engine module ip_vs_pe_ not found [ 135.898542][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 136.222058][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 136.347827][ T978] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.559753][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.577568][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.602322][ T978] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 136.647829][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.678481][ T978] usb 3-1: config 0 descriptor?? [ 137.120093][ T978] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 137.307284][ T978] hid-led 0003:1D34:0004.0003: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 137.395972][ T978] hid-led 0003:1D34:0004.0003: Dream Cheeky Webmail Notifier initialized [ 137.506403][ T978] usb 3-1: USB disconnect, device number 5 [ 137.553012][ T7038] fido_id[7038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 138.231741][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 138.430242][ T7073] nbd: nbd4 already in use [ 138.578011][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.715665][ T7085] bridge0: entered promiscuous mode [ 138.761593][ T7085] macsec2: entered allmulticast mode [ 138.771205][ T7085] bridge0: entered allmulticast mode [ 138.782176][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 138.791899][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.803911][ T5932] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 138.828995][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.846753][ T5932] usb 1-1: Product: syz [ 138.851650][ T5932] usb 1-1: Manufacturer: syz [ 138.856622][ T5932] usb 1-1: SerialNumber: syz [ 138.865196][ T5932] usb 1-1: config 0 descriptor?? [ 138.967897][ T121] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.138442][ T121] usb 3-1: Using ep0 maxpacket: 8 [ 139.163494][ T121] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.194608][ T121] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 139.210212][ T121] usb 3-1: can't read configurations, error -71 [ 139.302752][ T5932] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 139.734857][ T5963] usb 1-1: USB disconnect, device number 9 [ 140.828662][ T978] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 140.878178][ T121] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.030995][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.058262][ T121] usb 5-1: Using ep0 maxpacket: 32 [ 141.071792][ T978] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 141.095081][ T121] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 141.118355][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.136050][ T121] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 141.160385][ T978] usb 3-1: config 0 descriptor?? [ 141.172346][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.203429][ T121] usb 5-1: Product: syz [ 141.207673][ T121] usb 5-1: Manufacturer: syz [ 141.248121][ T121] usb 5-1: SerialNumber: syz [ 141.282722][ T121] usb 5-1: config 0 descriptor?? [ 141.308474][ T7153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 141.345507][ T121] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 141.631127][ T978] magicmouse 0003:05AC:0265.0004: unbalanced collection at end of report description [ 141.678239][ T978] magicmouse 0003:05AC:0265.0004: magicmouse hid parse failed [ 141.683327][ T121] usb 5-1: USB disconnect, device number 4 [ 141.685815][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 141.685882][ T978] magicmouse 0003:05AC:0265.0004: probe with driver magicmouse failed with error -22 [ 141.825450][ T978] usb 3-1: USB disconnect, device number 8 [ 142.540744][ T7203] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.548'. [ 143.455304][ T978] IPVS: starting estimator thread 0... [ 143.557930][ T7235] IPVS: using max 28 ests per chain, 67200 per kthread [ 143.576934][ T7239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.559'. [ 145.501172][ T121] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.540205][ T121] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.565170][ T121] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 145.609317][ T121] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 145.808818][ T7306] fido_id[7306]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.698130][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 147.033072][ T7346] batman_adv: batadv0: Adding interface: dummy0 [ 147.060012][ T7346] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.097519][ T7346] batman_adv: batadv0: Interface activated: dummy0 [ 148.224176][ T7387] netlink: 822 bytes leftover after parsing attributes in process `syz.0.624'. [ 148.417804][ T5963] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.571806][ T5963] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.617230][ T5963] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.680077][ T5963] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.704409][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.750179][ T5963] usb 2-1: SerialNumber: syz [ 149.017275][ T5963] usb 2-1: 0:2 : does not exist [ 149.138003][ T5963] usb 2-1: USB disconnect, device number 6 [ 149.229076][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.812365][ T7445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.649'. [ 151.023120][ T7449] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 151.048907][ T7449] netlink: 17 bytes leftover after parsing attributes in process `syz.1.650'. [ 151.838072][ T7465] CIFS: VFS: Malformed UNC in devname [ 152.476514][ T7484] netlink: 27 bytes leftover after parsing attributes in process `syz.1.667'. [ 153.667893][ T5963] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.851220][ T5963] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 153.876990][ T5963] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.920256][ T5963] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.940925][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 153.965988][ T5963] usb 2-1: Product: syz [ 153.979343][ T5963] usb 2-1: Manufacturer: syz [ 153.990756][ T5963] usb 2-1: SerialNumber: syz [ 154.013987][ T5963] usb 2-1: config 0 descriptor?? [ 154.043741][ T5963] usb 2-1: selecting invalid altsetting 0 [ 154.365528][ T5963] usb 2-1: USB disconnect, device number 7 [ 154.678676][ T978] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.734037][ T7535] bond0: entered promiscuous mode [ 154.748138][ T7535] bond_slave_0: entered promiscuous mode [ 154.778137][ T7535] bond_slave_1: entered promiscuous mode [ 154.811592][ T7535] bond0: left promiscuous mode [ 154.816443][ T7535] bond_slave_0: left promiscuous mode [ 154.830097][ T7535] bond_slave_1: left promiscuous mode [ 154.857853][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 154.866218][ T978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 154.890311][ T978] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 154.900797][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.910454][ T978] usb 3-1: Product: syz [ 154.915015][ T978] usb 3-1: Manufacturer: syz [ 154.925383][ T978] usb 3-1: SerialNumber: syz [ 154.943291][ T978] usb 3-1: config 0 descriptor?? [ 154.958339][ T7529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.984986][ T978] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 154.995858][ T7542] netlink: 'syz.0.694': attribute type 3 has an invalid length. [ 155.415178][ T5963] usb 3-1: USB disconnect, device number 9 [ 155.415298][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 155.469071][ T7551] bridge0: entered promiscuous mode [ 155.491632][ T7551] macvlan2: entered promiscuous mode [ 155.889203][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.048770][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 156.059698][ T5925] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 156.102097][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.119207][ T5963] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5963 comm: kworker/1:6) [ 156.164701][ T5925] usb 2-1: config 0 descriptor?? [ 156.427939][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 156.489274][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.505977][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 156.523557][ T5925] usb 2-1: media controller created [ 156.597425][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.675065][ T5925] az6027: usb out operation failed. (-71) [ 156.685326][ T5925] az6027: usb out operation failed. (-71) [ 156.712699][ T5925] stb0899_attach: Driver disabled by Kconfig [ 156.743396][ T5925] az6027: no front-end attached [ 156.743396][ T5925] [ 156.774467][ T5925] az6027: usb out operation failed. (-71) [ 156.784231][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 156.795138][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 156.825499][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 156.842925][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 156.878264][ T5925] usb 2-1: USB disconnect, device number 8 [ 156.898609][ T5963] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.996653][ T5925] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 157.095268][ T5963] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 157.126631][ T5963] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 157.145587][ T5963] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 157.160737][ T7592] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 157.163327][ T5963] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 157.193713][ T5963] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 157.206544][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.719'. [ 157.232494][ T5963] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 157.252003][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.272980][ T5963] usb 3-1: Product: syz [ 157.277222][ T5963] usb 3-1: Manufacturer: syz [ 157.348647][ T5963] usb 3-1: SerialNumber: syz [ 157.399741][ T7582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.430150][ T5963] usb 3-1: ucan: probing device on interface #0 [ 157.436490][ T5963] usb 3-1: ucan: invalid out_ep MaxPacketSize [ 157.483363][ T5963] usb 3-1: ucan: probe failed; try to update the device firmware [ 157.698428][ T5963] usb 3-1: USB disconnect, device number 10 [ 157.890483][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 157.895348][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.045106][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 159.691143][ T7674] /dev/nullb0: Can't open blockdev [ 160.721278][ T5963] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.900469][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 160.933672][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.949873][ T5963] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 160.978678][ T5963] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 16129, setting to 1024 [ 161.021141][ T5963] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 161.067014][ T5963] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.082828][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.101907][ T5963] usb 2-1: Product: syz [ 161.108832][ T5963] usb 2-1: Manufacturer: syz [ 161.113495][ T5963] usb 2-1: SerialNumber: syz [ 161.356666][ T5963] cdc_ncm 2-1:1.0: bind() failure [ 161.399819][ T5963] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 161.419572][ T5963] cdc_ncm 2-1:1.1: bind() failure [ 161.448394][ T5963] usb 2-1: USB disconnect, device number 9 [ 161.979323][ T7725] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 161.987141][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 162.199046][ T7730] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 162.237294][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 163.009639][ T7753] loop4: detected capacity change from 0 to 524255232 [ 163.739418][ T94] block nbd0: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 60 seconds [ 163.750253][ T94] block nbd0: Possible stuck request ffff8880255001c0: control (read@1024,1024B). Runtime 60 seconds [ 163.761994][ T94] block nbd0: Possible stuck request ffff888025500380: control (read@2048,1024B). Runtime 60 seconds [ 163.773100][ T94] block nbd0: Possible stuck request ffff888025500540: control (read@3072,1024B). Runtime 60 seconds [ 164.428333][ T121] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.567841][ T5932] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.602074][ T121] usb 1-1: Using ep0 maxpacket: 32 [ 164.622502][ T121] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 164.637918][ T121] usb 1-1: config 0 has no interface number 0 [ 164.651197][ T121] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 164.670805][ T121] usb 1-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 164.691834][ T121] usb 1-1: Product: syz [ 164.696071][ T121] usb 1-1: Manufacturer: syz [ 164.717765][ T121] usb 1-1: SerialNumber: syz [ 164.738750][ T121] usb 1-1: config 0 descriptor?? [ 164.758122][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 164.782788][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.804780][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.827918][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.871525][ T5932] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 164.891056][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.947613][ T5932] usb 2-1: config 0 descriptor?? [ 165.013564][ T121] sierra 1-1:0.153: Sierra USB modem converter detected [ 165.053707][ T121] usb 1-1: USB disconnect, device number 10 [ 165.072199][ T121] sierra 1-1:0.153: device disconnected [ 165.402569][ T5932] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input18 [ 165.531177][ T5932] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input19 [ 165.628309][ T5932] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input20 [ 165.751852][ T5932] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0006/input/input21 [ 165.891772][ T5932] hid-udraw 0003:20D6:CB17.0006: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 166.008185][ T5932] usb 2-1: USB disconnect, device number 10 [ 166.134103][ T7816] fido_id[7816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 166.345106][ T7831] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 166.352972][ T7831] netlink: 'syz.1.813': attribute type 3 has an invalid length. [ 166.363718][ T7831] netlink: 216 bytes leftover after parsing attributes in process `syz.1.813'. [ 166.373857][ T7831] NCSI netlink: No device for ifindex 813332851 [ 166.558041][ T5903] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.662684][ T7842] netlink: 'syz.4.818': attribute type 10 has an invalid length. [ 166.713026][ T7842] team0: Port device geneve1 added [ 166.718092][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 166.734138][ T5903] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 166.742743][ T5903] usb 4-1: config 0 has no interface number 0 [ 166.758616][ T5903] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 166.769495][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.777539][ T5903] usb 4-1: Product: syz [ 166.782146][ T5903] usb 4-1: Manufacturer: syz [ 166.786792][ T5903] usb 4-1: SerialNumber: syz [ 166.800498][ T5903] usb 4-1: config 0 descriptor?? [ 166.808930][ T5903] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 166.858006][ T5925] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 167.019740][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 167.048222][ T5903] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 167.051013][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 167.081893][ T5903] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 167.119661][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.144589][ T5925] usb 2-1: Product: syz [ 167.193875][ T5925] usb 2-1: Manufacturer: syz [ 167.214879][ T5925] usb 2-1: SerialNumber: syz [ 167.331514][ T5925] usb 2-1: config 0 descriptor?? [ 167.474447][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 167.489544][ T5963] usb 4-1: USB disconnect, device number 9 [ 167.507858][ T30] audit: type=1400 audit(1752260456.495:3): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=7864 comm="syz.2.827" name="155" dev="tmpfs" ino=790 [ 167.548653][ T5963] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 167.581988][ T5925] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 167.586473][ T5963] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 167.620131][ T5925] eb 9a 47 80 9b f8 7a f0 [ 167.629263][ T5925] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 167.649660][ T5963] quatech2 4-1:0.51: device disconnected [ 167.737066][ T7869] kvm_intel: kvm [7868]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 167.838098][ T5925] usb 2-1: USB disconnect, device number 11 [ 167.955149][ T30] audit: type=1800 audit(1752260456.945:4): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.832" name="file1" dev="tmpfs" ino=805 res=0 errno=0 [ 168.149115][ T7886] cifs: Unknown parameter 'mode' [ 168.192474][ T5963] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.331724][ T7895] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 168.399210][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.423941][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 168.451322][ T5963] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 168.484301][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.843'. [ 168.507318][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.533455][ T5963] usb 5-1: config 0 descriptor?? [ 168.664831][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 168.689830][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.846'. [ 168.708463][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 168.732739][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.846'. [ 168.746691][ T7905] netlink: 44 bytes leftover after parsing attributes in process `syz.3.846'. [ 169.009382][ T7912] netlink: 'syz.1.849': attribute type 8 has an invalid length. [ 169.038761][ T5963] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 169.381214][ T5963] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 169.396705][ T5963] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 169.432988][ T5963] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71 [ 169.478024][ T5963] usb 5-1: USB disconnect, device number 5 [ 169.788298][ T5925] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 169.978888][ T5925] usb 4-1: config 0 has no interfaces? [ 170.005337][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.032561][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.065110][ T5925] usb 4-1: Product: syz [ 170.082682][ T5925] usb 4-1: Manufacturer: syz [ 170.095124][ T5925] usb 4-1: SerialNumber: syz [ 170.135982][ T5925] usb 4-1: config 0 descriptor?? [ 170.426645][ T978] usb 4-1: USB disconnect, device number 10 [ 170.438677][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 170.636603][ T7962] vivid-000: disconnect [ 170.657419][ T7960] vivid-000: reconnect [ 170.807405][ T7971] overlayfs: workdir and upperdir must be separate subtrees [ 170.887159][ T7976] syz.0.878: attempt to access beyond end of device [ 170.887159][ T7976] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 170.916135][ T7976] SQUASHFS error: Failed to read block 0x0: -5 [ 172.037920][ T5903] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 172.228211][ T5903] usb 2-1: config 0 has an invalid interface number: 186 but max is 1 [ 172.236517][ T5903] usb 2-1: config 0 has no interface number 1 [ 172.261853][ T5903] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 172.292306][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.317869][ T5903] usb 2-1: Product: syz [ 172.322159][ T5903] usb 2-1: Manufacturer: syz [ 172.326792][ T5903] usb 2-1: SerialNumber: syz [ 172.364432][ T5903] usb 2-1: config 0 descriptor?? [ 172.616266][ T5903] usb 2-1: USB disconnect, device number 12 [ 172.622848][ T121] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.792081][ T121] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 172.821824][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.856179][ T121] usb 1-1: Product: syz [ 172.866328][ T121] usb 1-1: Manufacturer: syz [ 172.888719][ T121] usb 1-1: SerialNumber: syz [ 172.904501][ T121] usb 1-1: config 0 descriptor?? [ 172.939850][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.954492][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.962719][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.972982][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.982203][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.286775][ T8028] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 173.606145][ T8017] chnl_net:caif_netlink_parms(): no params data found [ 173.743706][ T121] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.767343][ T121] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 173.788575][ T121] asix 1-1:0.0: probe with driver asix failed with error -71 [ 173.804334][ T121] usb 1-1: USB disconnect, device number 11 [ 173.932751][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.952858][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.963135][ T8017] bridge_slave_0: entered allmulticast mode [ 173.972795][ T8017] bridge_slave_0: entered promiscuous mode [ 173.983521][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.991176][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.998398][ T5903] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 173.999053][ T8017] bridge_slave_1: entered allmulticast mode [ 174.020229][ T8017] bridge_slave_1: entered promiscuous mode [ 174.083782][ T8017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.097148][ T8017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.169075][ T8017] team0: Port device team_slave_0 added [ 174.169774][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.179941][ T8017] team0: Port device team_slave_1 added [ 174.197822][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 174.222662][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.243350][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.263498][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.270942][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.276832][ T5903] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.296912][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.298348][ T8017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.377887][ T5903] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.397795][ T5903] usb 2-1: Manufacturer: syz [ 174.415824][ T5903] usb 2-1: config 0 descriptor?? [ 174.421949][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.421969][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.422020][ T8017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.649696][ T8017] hsr_slave_0: entered promiscuous mode [ 174.656695][ T8017] hsr_slave_1: entered promiscuous mode [ 174.737417][ T8017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.765721][ T8017] Cannot create hsr debugfs directory [ 175.019730][ T5840] Bluetooth: hci2: command tx timeout [ 175.117968][ T5903] rc_core: IR keymap rc-hauppauge not found [ 175.136983][ T5903] Registered IR keymap rc-empty [ 175.183081][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.248039][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.309750][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 175.354210][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 175.407468][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.470584][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.508899][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.526369][ T8017] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.578097][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.599178][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.620414][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.659428][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.687903][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.712313][ T8017] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.722370][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.756545][ T8077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 175.767817][ T5903] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.796483][ T5903] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 175.819871][ T8017] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.824554][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 175.838992][ T5903] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.875636][ T5903] usb 2-1: USB disconnect, device number 13 [ 175.970327][ T8017] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.400465][ T8017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.419255][ T8017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.488623][ T8017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.516085][ T8017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.579881][ T8100] delete_channel: no stack [ 176.948729][ T8017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.076193][ T8017] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.088568][ T5840] Bluetooth: hci2: command tx timeout [ 177.190791][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.198033][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.281169][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.288430][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.358365][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.521208][ T8017] veth0_vlan: entered promiscuous mode [ 178.539857][ T8153] capability: warning: `syz.1.952' uses 32-bit capabilities (legacy support in use) [ 178.555458][ T8017] veth1_vlan: entered promiscuous mode [ 178.681381][ T8017] veth0_macvtap: entered promiscuous mode [ 178.721895][ T8017] veth1_macvtap: entered promiscuous mode [ 178.816748][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.879958][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.891007][ T8165] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 178.909241][ T8017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.933934][ T8165] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 178.962547][ T8017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.979487][ T8165] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.008194][ T8017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.016991][ T8017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.028416][ T8165] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 179.059354][ T8168] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.067230][ T8168] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 179.127889][ T8168] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 179.156050][ T8168] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 179.167982][ T5840] Bluetooth: hci2: command tx timeout [ 179.615486][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.623913][ T5963] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 179.652375][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.710836][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.720291][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.782586][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.971'. [ 179.804296][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.971'. [ 179.812862][ T5963] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 179.851153][ T5963] usb 2-1: config 7 has no interface number 0 [ 179.881228][ T5963] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 179.903045][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.928011][ T5963] usb 2-1: Product: syz [ 179.932328][ T5963] usb 2-1: Manufacturer: syz [ 179.937081][ T5963] usb 2-1: SerialNumber: syz [ 180.091742][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.974'. [ 180.614331][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 180.727014][ T5963] as10x_usb: device has been detected [ 180.740872][ T5963] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 180.779119][ T5963] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 181.026044][ T5963] as10x_usb: error during firmware upload part1 [ 181.035404][ T5963] Registered device Elgato EyeTV DTT Deluxe [ 181.054432][ T5963] usb 2-1: USB disconnect, device number 14 [ 181.133273][ T5963] Unregistered device Elgato EyeTV DTT Deluxe [ 181.136771][ T5963] as10x_usb: device has been disconnected [ 181.247843][ T5840] Bluetooth: hci2: command tx timeout [ 181.519217][ T8244] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.583253][ T8244] bridge0: entered allmulticast mode [ 181.719901][ T8252] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 181.838081][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.009918][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 182.024839][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.060226][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.117800][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.127525][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.150123][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.164366][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.197586][ T5903] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.243149][ T5903] usb 1-1: Manufacturer: syz [ 182.261368][ T5903] usb 1-1: config 0 descriptor?? [ 182.677795][ T5903] rc_core: IR keymap rc-hauppauge not found [ 182.687302][ T5903] Registered IR keymap rc-empty [ 182.721394][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.750223][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.793668][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 182.838936][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 182.861831][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.890238][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.922840][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.951497][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.977842][ T5827] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.008510][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 183.021943][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.049524][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.077961][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.093525][ T8301] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 183.113314][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.153595][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.185112][ T5827] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 183.193606][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.208161][ T5827] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 183.245600][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.259605][ T5903] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 183.281345][ T5827] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.290410][ T5903] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 183.310988][ T5827] usb 4-1: config 0 has no interface number 0 [ 183.337665][ T5903] usb 1-1: USB disconnect, device number 12 [ 183.344600][ T5827] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 183.385063][ T5827] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 183.408523][ T5827] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.438298][ T5827] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.497995][ T5827] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 183.530197][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.559774][ T5827] usb 4-1: config 0 descriptor?? [ 183.581978][ T5827] gspca_main: spca561-2.14.0 probing abcd:cdee [ 183.789993][ T5827] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 183.818824][ T5827] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.825909][ T5827] usb 4-1: MIDIStreaming interface descriptor not found [ 184.003468][ T5827] usb 4-1: USB disconnect, device number 11 [ 184.232353][ T8322] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[8322] [ 185.199362][ T8351] loop6: detected capacity change from 0 to 524287999 [ 185.587073][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 186.050168][ T8370] netlink: 888 bytes leftover after parsing attributes in process `syz.3.1051'. [ 186.357770][ T5963] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 186.554076][ T5963] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.579507][ T5963] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 186.607853][ T5963] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 186.638630][ T5827] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.651412][ T5963] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.656576][ T8384] syz.0.1057 uses obsolete (PF_INET,SOCK_PACKET) [ 186.674946][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.706460][ T8372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.725515][ T5963] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.748862][ T8388] overlayfs: failed to clone upperpath [ 186.821225][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 186.846564][ T5827] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 186.876575][ T5827] usb 4-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 186.896106][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.916705][ T5827] usb 4-1: Product: syz [ 186.941676][ T5827] usb 4-1: Manufacturer: syz [ 186.946387][ T5827] usb 4-1: SerialNumber: syz [ 187.102519][ T5903] usb 2-1: USB disconnect, device number 15 [ 187.197136][ T5827] ftdi_sio 4-1:64.0: Ignoring interface reserved for JTAG [ 187.220143][ T5827] usb 4-1: USB disconnect, device number 12 [ 187.250514][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 187.283312][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 187.670100][ T8412] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1070'. [ 187.751992][ T8414] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1071'. [ 187.982413][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 188.366228][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.378500][ T8435] Bluetooth: hci5: Frame reassembly failed (-84) [ 189.288834][ T30] audit: type=1326 audit(1752260478.265:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.445364][ T30] audit: type=1326 audit(1752260478.265:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.521865][ T30] audit: type=1326 audit(1752260478.285:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.601072][ T30] audit: type=1326 audit(1752260478.405:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.623779][ T30] audit: type=1326 audit(1752260478.405:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.682027][ T30] audit: type=1326 audit(1752260478.435:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.777100][ T30] audit: type=1326 audit(1752260478.435:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.835241][ T30] audit: type=1326 audit(1752260478.435:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 189.964822][ T30] audit: type=1326 audit(1752260478.475:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f955ad8e929 code=0x7ffc0000 [ 190.051653][ T30] audit: type=1326 audit(1752260478.475:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8467 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f955ad2ab19 code=0x7ffc0000 [ 190.368110][ T5840] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 190.888063][ T5925] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 191.062144][ T5925] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 191.104134][ T5925] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 191.149467][ T5925] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 191.177801][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.526938][ T8538] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 191.526938][ T8538] The task syz.0.1120 (8538) triggered the difference, watch for misbehavior. [ 191.889449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.217949][ T5903] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 192.231619][ T5925] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 192.250797][ T5925] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input24 [ 192.276177][ T5925] input: failed to attach handler kbd to device input24, error: -5 [ 192.348403][ T5925] usb 2-1: USB disconnect, device number 16 [ 192.376220][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 192.404231][ T5903] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.428787][ T5903] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.443215][ T5903] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 192.457224][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.481935][ T5903] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 192.491724][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.503340][ T5903] usb 3-1: config 0 descriptor?? [ 192.943135][ T5903] hid (null): invalid report_size 27418 [ 193.117782][ T5925] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 193.216771][ T5903] usb 3-1: USB disconnect, device number 11 [ 193.367796][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 193.375731][ T5925] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 193.386682][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.411413][ T5925] usb 4-1: config 0 descriptor?? [ 193.601677][ C1] Unknown status report in ack skb [ 193.795773][ T8588] 9pnet_fd: Insufficient options for proto=fd [ 193.811126][ T94] block nbd0: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 90 seconds [ 193.825019][ T94] block nbd0: Possible stuck request ffff8880255001c0: control (read@1024,1024B). Runtime 90 seconds [ 193.836124][ T94] block nbd0: Possible stuck request ffff888025500380: control (read@2048,1024B). Runtime 90 seconds [ 193.847192][ T94] block nbd0: Possible stuck request ffff888025500540: control (read@3072,1024B). Runtime 90 seconds [ 193.893221][ T5925] kye 0003:0458:5015.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 193.915857][ T5925] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 193.933715][ T5925] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 193.940891][ T5925] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 193.950709][ T5925] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 193.957476][ T5925] kye 0003:0458:5015.0009: unknown main item tag 0x0 [ 193.971008][ T5925] kye 0003:0458:5015.0009: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 193.995121][ T5925] kye 0003:0458:5015.0009: tablet-enabling feature report not found [ 194.003558][ T5925] kye 0003:0458:5015.0009: tablet enabling failed [ 194.454284][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468683][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.516361][ T8614] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1155'. [ 194.610324][ T978] usb 4-1: USB disconnect, device number 13 [ 194.787322][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 195.153476][ T8637] sctp: [Deprecated]: syz.2.1166 (pid 8637) Use of int in maxseg socket option. [ 195.153476][ T8637] Use struct sctp_assoc_value instead [ 195.473319][ T8646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.652928][ T8652] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1173'. [ 197.256201][ T8707] loop2: detected capacity change from 0 to 8 [ 197.449033][ T8710] netlink: 'syz.1.1199': attribute type 29 has an invalid length. [ 197.477270][ T8710] netlink: 'syz.1.1199': attribute type 29 has an invalid length. [ 197.505139][ T8710] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1199'. [ 197.835274][ T8721] netlink: 'syz.0.1204': attribute type 12 has an invalid length. [ 197.851591][ T8721] netlink: 'syz.0.1204': attribute type 29 has an invalid length. [ 197.896399][ T8721] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1204'. [ 197.914238][ T8721] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1204'. [ 199.241063][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 199.241083][ T30] audit: type=1326 audit(1752260488.235:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 199.286990][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1228'. [ 199.303885][ T30] audit: type=1326 audit(1752260488.235:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.325355][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.337984][ T30] audit: type=1326 audit(1752260488.235:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.359387][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.369712][ T30] audit: type=1326 audit(1752260488.235:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.408157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 199.416859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 199.425366][ T30] audit: type=1326 audit(1752260488.235:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.455847][ T8770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1228'. [ 199.483874][ T30] audit: type=1326 audit(1752260488.235:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.523057][ T30] audit: type=1326 audit(1752260488.235:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.544462][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.616665][ T30] audit: type=1326 audit(1752260488.235:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.689354][ T30] audit: type=1326 audit(1752260488.235:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.710774][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.787847][ T30] audit: type=1326 audit(1752260488.235:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8766 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa87cd2ab19 code=0x7ffc0000 [ 199.809276][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.355010][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 200.670370][ T8806] loop6: detected capacity change from 0 to 7 [ 200.681488][ T8806] Dev loop6: unable to read RDB block 7 [ 200.687160][ T8806] loop6: unable to read partition table [ 200.699913][ T8806] loop6: partition table beyond EOD, truncated [ 200.730919][ T8806] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 200.740468][ T5963] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.909661][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 200.923185][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 200.958308][ T5963] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.972329][ T5963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 201.017824][ T5963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.062369][ T5963] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.081108][ T5963] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.091479][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.342966][ T5963] usb 2-1: GET_CAPABILITIES returned 0 [ 201.360640][ T5963] usbtmc 2-1:16.0: can't read capabilities [ 201.571124][ T8798] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 201.618834][ T978] usb 2-1: USB disconnect, device number 17 [ 202.279727][ T8852] netlink: 'syz.3.1264': attribute type 29 has an invalid length. [ 202.844677][ T8871] tipc: Started in network mode [ 202.858267][ T5963] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.871048][ T8871] tipc: Node identity ac14142f, cluster identity 4711 [ 202.899504][ T8871] tipc: New replicast peer: 0.0.0.0 [ 202.905192][ T8871] tipc: Enabled bearer , priority 10 [ 202.919475][ T8874] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 203.040083][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 203.062718][ T5963] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.090216][ T5963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.117928][ T5963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.139894][ T5963] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.157131][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.175838][ T5963] usb 3-1: Product: syz [ 203.192292][ T5963] usb 3-1: Manufacturer: syz [ 203.212606][ T5963] usb 3-1: SerialNumber: syz [ 203.545516][ T8885] @: renamed from vlan0 (while UP) [ 203.646541][ T5963] usb 3-1: 0:2 : does not exist [ 203.915585][ T5917] tipc: Node number set to 2886997039 [ 204.197877][ T5932] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 204.269994][ T5963] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 204.358277][ T5963] usb 3-1: USB disconnect, device number 12 [ 204.367857][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 204.395561][ T5932] usb 4-1: config 0 has an invalid interface number: 200 but max is 2 [ 204.405487][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.424524][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.443378][ T5932] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 204.463237][ T5932] usb 4-1: config 0 has no interface number 0 [ 204.478047][ T5932] usb 4-1: config 0 interface 200 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.505613][ T5932] usb 4-1: config 0 interface 200 has no altsetting 0 [ 204.546012][ T5932] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=d3.fc [ 204.565790][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.586044][ T5932] usb 4-1: Product: syz [ 204.590394][ T5932] usb 4-1: Manufacturer: syz [ 204.595174][ T5932] usb 4-1: SerialNumber: syz [ 204.614910][ T5932] usb 4-1: config 0 descriptor?? [ 204.632074][ T5932] option 4-1:0.200: GSM modem (1-port) converter detected [ 204.897368][ T5932] usb 4-1: USB disconnect, device number 14 [ 204.914815][ T5932] option 4-1:0.200: device disconnected [ 204.951476][ T8898] orangefs_mount: mount request failed with -4 [ 205.078088][ T8909] kvm: kvm [8908]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000280 [ 205.183786][ T8911] could not open pipe file descriptor [ 205.696831][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 205.696850][ T30] audit: type=1326 audit(1752260494.685:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 205.768293][ T30] audit: type=1326 audit(1752260494.725:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 205.842729][ T30] audit: type=1326 audit(1752260494.725:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 205.872018][ T30] audit: type=1326 audit(1752260494.725:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 205.893500][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.934795][ T30] audit: type=1326 audit(1752260494.735:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 205.981661][ T30] audit: type=1326 audit(1752260494.735:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 206.004402][ T30] audit: type=1326 audit(1752260494.735:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 206.025967][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.034031][ T30] audit: type=1326 audit(1752260494.735:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 206.066591][ T30] audit: type=1326 audit(1752260494.735:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 206.118494][ T30] audit: type=1326 audit(1752260494.735:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8917 comm="syz.3.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa87cd8e929 code=0x7ffc0000 [ 206.775667][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 206.788147][ T8946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1307'. [ 207.411296][ T5932] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.442194][ T8969] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 207.538668][ T5925] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 207.580331][ T5932] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.597761][ T5932] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 207.622267][ T5932] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 207.652970][ T5932] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.672382][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.716911][ T8965] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.728491][ T5925] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.736587][ T5925] usb 2-1: config 0 has no interface number 0 [ 207.752466][ T5925] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 207.781396][ T5932] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.803652][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.828616][ T5925] usb 2-1: Product: syz [ 207.837972][ T5925] usb 2-1: Manufacturer: syz [ 207.842660][ T5925] usb 2-1: SerialNumber: syz [ 207.915533][ T5925] usb 2-1: config 0 descriptor?? [ 208.157976][ T5925] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 208.277967][ T5925] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.278357][ T5917] usb 3-1: USB disconnect, device number 13 [ 208.300706][ T5925] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 208.322160][ T5925] usb 2-1: media controller created [ 208.416857][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.636733][ T5925] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 208.715724][ T5925] usb 2-1: USB disconnect, device number 18 [ 209.127899][ T5932] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 209.178219][ T9009] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.290564][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 209.323508][ T5932] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 209.369209][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.387472][ T5932] usb 4-1: Product: syz [ 209.400969][ T5932] usb 4-1: Manufacturer: syz [ 209.405643][ T5932] usb 4-1: SerialNumber: syz [ 209.435920][ T5932] usb 4-1: config 0 descriptor?? [ 209.463283][ T5932] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 209.815355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.865072][ T5963] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.046765][ T5963] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.078109][ T5963] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 210.112799][ T5963] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 210.142356][ T5963] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.173440][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.222472][ T9031] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 210.226272][ T9041] xt_CT: No such helper "snmp" [ 210.254834][ T5963] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.494177][ T5932] gspca_stk1135: reg_w 0x7 err -71 [ 210.516370][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.542893][ T5932] gspca_stk1135: Sensor write failed [ 210.556595][ T9052] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1350'. [ 210.567955][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.574368][ T5932] gspca_stk1135: Sensor write failed [ 210.621317][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.621317][ T5963] IPVS: starting estimator thread 0... [ 210.621350][ T5932] gspca_stk1135: Sensor read failed [ 210.723594][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.730998][ T5932] gspca_stk1135: Sensor read failed [ 210.736352][ T5932] gspca_stk1135: Detected sensor type unknown (0x0) [ 210.745237][ T9053] IPVS: using max 28 ests per chain, 67200 per kthread [ 210.746011][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.777125][ T5925] usb 1-1: USB disconnect, device number 13 [ 210.786536][ T5932] gspca_stk1135: Sensor read failed [ 210.797387][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.824098][ T5932] gspca_stk1135: Sensor read failed [ 210.834236][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.864038][ T5932] gspca_stk1135: Sensor write failed [ 210.883696][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 210.890628][ T5932] gspca_stk1135: Sensor write failed [ 210.909073][ T5932] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 210.948342][ T5932] usb 4-1: USB disconnect, device number 15 [ 211.389157][ T9071] input: syz1 as /devices/virtual/input/input25 [ 211.890570][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 211.897274][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 212.291408][ T9090] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1363'. [ 212.360520][ T9096] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1363'. [ 212.375856][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 213.145884][ T9120] loop4: detected capacity change from 0 to 7 [ 213.211000][ T9120] Dev loop4: unable to read RDB block 7 [ 213.223019][ T9120] loop4: unable to read partition table [ 213.230986][ T9120] loop4: partition table beyond EOD, truncated [ 213.237310][ T9120] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.801263][ T9129] netlink: 'syz.1.1380': attribute type 2 has an invalid length. [ 213.802048][ T9127] 9pnet_fd: Insufficient options for proto=fd [ 215.408121][ T9172] syzkaller1: entered promiscuous mode [ 215.422905][ T9172] syzkaller1: entered allmulticast mode [ 215.502626][ T9175] vcan0: tx drop: invalid sa for name 0x0000040000000000 [ 215.558334][ T5925] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 215.645691][ T9180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.737750][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 215.755198][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.779583][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.796026][ T5925] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 215.837069][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.891518][ T5925] usb 2-1: config 0 descriptor?? [ 216.244588][ T9194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.334688][ T5925] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 216.418899][ T5963] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 216.448565][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.512770][ T5925] ft260 0003:0403:6030.000A: chip code: 6424 8183 [ 216.628029][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 216.632294][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.640447][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 216.696028][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.744890][ T5963] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.754588][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.792827][ T5925] ft260 0003:0403:6030.000A: failed to retrieve system status [ 216.796847][ T5963] usb 1-1: Product: syz [ 216.811781][ T5925] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -32 [ 216.826080][ T5963] usb 1-1: Manufacturer: syz [ 216.847174][ T5963] usb 1-1: SerialNumber: syz [ 216.863664][ T5963] usb 1-1: config 0 descriptor?? [ 216.867920][ T5925] usb 2-1: USB disconnect, device number 19 [ 216.910593][ T5963] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 216.950461][ T5963] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 216.994470][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.164518][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.408291][ T5903] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.517937][ T5963] em28xx 1-1:0.0: chip ID is em28174 [ 217.517988][ T49] bridge_slave_1: left allmulticast mode [ 217.595792][ T49] bridge_slave_1: left promiscuous mode [ 217.609749][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.621649][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.633594][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.644303][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.645184][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.658705][ T5903] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.673994][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.682883][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.695165][ T5903] usb 3-1: config 0 descriptor?? [ 217.700499][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.712683][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.731934][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.759761][ T10] usb 1-1: USB disconnect, device number 14 [ 217.771023][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 217.840825][ T10] em28xx 1-1:0.0: Freeing device [ 217.880482][ T49] bridge_slave_0: left allmulticast mode [ 217.924354][ T49] bridge_slave_0: left promiscuous mode [ 217.942958][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.193801][ T5903] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 218.390998][ T5903] usb 3-1: USB disconnect, device number 14 [ 219.089430][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.147272][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.171424][ T49] bond0 (unregistering): Released all slaves [ 219.819797][ T5840] Bluetooth: hci2: command tx timeout [ 220.722765][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 220.722785][ T30] audit: type=1400 audit(1752260509.715:242): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9279 comm="syz.0.1436" daddr=224.0.0.1 dest=20000 netif=wpan0 [ 221.407832][ T49] hsr_slave_0: left promiscuous mode [ 221.455528][ T49] hsr_slave_1: left promiscuous mode [ 221.470914][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.516217][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.526693][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.544771][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.615691][ T49] veth1_macvtap: left promiscuous mode [ 221.637229][ T49] veth0_macvtap: left promiscuous mode [ 221.651952][ T49] veth1_vlan: left promiscuous mode [ 221.668202][ T49] veth0_vlan: left promiscuous mode [ 221.888187][ T5840] Bluetooth: hci2: command tx timeout [ 222.812059][ T49] team0 (unregistering): Port device team_slave_1 removed [ 222.851282][ T49] team0 (unregistering): Port device team_slave_0 removed [ 223.667388][ T9209] chnl_net:caif_netlink_parms(): no params data found [ 223.891359][ T94] block nbd0: Possible stuck request ffff888025500000: control (read@0,1024B). Runtime 120 seconds [ 223.902710][ T94] block nbd0: Possible stuck request ffff8880255001c0: control (read@1024,1024B). Runtime 120 seconds [ 223.916148][ T94] block nbd0: Possible stuck request ffff888025500380: control (read@2048,1024B). Runtime 120 seconds [ 223.927424][ T94] block nbd0: Possible stuck request ffff888025500540: control (read@3072,1024B). Runtime 120 seconds [ 223.980455][ T5840] Bluetooth: hci2: command tx timeout [ 224.294552][ T9338] syz.4.1455 (9338) used greatest stack depth: 17688 bytes left [ 224.409251][ T978] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 224.428731][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.476456][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.495357][ T9209] bridge_slave_0: entered allmulticast mode [ 224.524566][ T9209] bridge_slave_0: entered promiscuous mode [ 224.572218][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.577850][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 224.597868][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.599895][ T978] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 224.605201][ T9209] bridge_slave_1: entered allmulticast mode [ 224.648425][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.655988][ T9209] bridge_slave_1: entered promiscuous mode [ 224.676076][ T978] usb 1-1: Product: syz [ 224.682313][ T978] usb 1-1: Manufacturer: syz [ 224.686978][ T978] usb 1-1: SerialNumber: syz [ 224.756127][ T978] usb 1-1: config 0 descriptor?? [ 224.780496][ T978] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 224.811332][ T978] usb 1-1: setting power ON [ 224.824720][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 224.845898][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.864230][ T978] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 224.875464][ T978] usb 1-1: media controller created [ 224.894315][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.965042][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.985000][ T9352] dvb-usb: bulk message failed: -22 (4/0) [ 225.069839][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.103466][ T978] usb 1-1: selecting invalid altsetting 6 [ 225.125912][ T978] usb 1-1: digital interface selection failed (-22) [ 225.143460][ T978] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 225.194114][ T978] usb 1-1: setting power OFF [ 225.208714][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 225.215742][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 225.234363][ T978] (NULL device *): no alternate interface [ 225.351632][ T9209] team0: Port device team_slave_0 added [ 225.375660][ T978] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 225.389253][ T9209] team0: Port device team_slave_1 added [ 225.434736][ T978] usb 1-1: USB disconnect, device number 15 [ 225.631465][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.646615][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.711535][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.770800][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.786204][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.812377][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.826856][ T9394] loop3: detected capacity change from 0 to 7 [ 225.837543][ T9394] Dev loop3: unable to read RDB block 7 [ 225.843670][ T9394] loop3: unable to read partition table [ 225.850196][ T9394] loop3: partition table beyond EOD, truncated [ 225.856425][ T9394] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.866849][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.041533][ T9209] hsr_slave_0: entered promiscuous mode [ 226.048110][ T5840] Bluetooth: hci2: command tx timeout [ 226.049981][ T9209] hsr_slave_1: entered promiscuous mode [ 226.071981][ T9209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.129658][ T9209] Cannot create hsr debugfs directory [ 226.513418][ T9421] netlink: 'syz.2.1481': attribute type 1 has an invalid length. [ 226.553535][ T9421] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1481'. [ 227.141223][ T30] audit: type=1400 audit(1752260516.135:243): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9443 comm="syz.1.1487" src=1 dest=20000 netif=wpan0 [ 227.196158][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.236282][ T9450] hub 9-0:1.0: USB hub found [ 227.252996][ T9450] hub 9-0:1.0: 1 port detected [ 227.255992][ T9209] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.422847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.431248][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.513338][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.520655][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.148423][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 228.204770][ T9477] netlink: 'syz.0.1495': attribute type 2 has an invalid length. [ 228.232291][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 228.567617][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.817196][ T9498] syzkaller1: entered promiscuous mode [ 228.838823][ T9498] syzkaller1: entered allmulticast mode [ 229.592891][ T9209] veth0_vlan: entered promiscuous mode [ 229.617349][ T9209] veth1_vlan: entered promiscuous mode [ 229.732430][ T9209] veth0_macvtap: entered promiscuous mode [ 229.757906][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 229.761809][ T9209] veth1_macvtap: entered promiscuous mode [ 229.869166][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.903790][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.927921][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 229.936355][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.995621][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 230.043525][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.088656][ T10] usb 2-1: config 0 descriptor?? [ 230.224033][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.265758][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.388004][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.433961][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.582246][ T10] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.000C/input/input27 [ 230.715366][ T10] creative-sb0540 0003:041E:3100.000C: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 230.834777][ T10] usb 2-1: USB disconnect, device number 20 [ 230.924603][ T9561] fido_id[9561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 230.958185][ T5932] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.027020][ T30] audit: type=1400 audit(1752260520.015:244): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9566 comm="syz.0.1525" src=1 dest=20000 netif=wpan0 [ 231.132575][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.161967][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.197557][ T993] bridge_slave_1: left allmulticast mode [ 231.208306][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.227772][ T993] bridge_slave_1: left promiscuous mode [ 231.233657][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.259300][ T5932] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.297761][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.320116][ T993] bridge_slave_0: left allmulticast mode [ 231.325859][ T993] bridge_slave_0: left promiscuous mode [ 231.333488][ T5932] usb 3-1: config 0 descriptor?? [ 231.356471][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.778763][ T5932] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 231.846063][ T5932] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 231.918221][ T9586] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1532'. [ 232.017974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.068113][ T30] audit: type=1326 audit(1752260521.055:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99bc52ab19 code=0x7ffc0000 [ 232.096667][ T5932] usb 3-1: USB disconnect, device number 15 [ 232.164716][ T30] audit: type=1326 audit(1752260521.055:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc58e929 code=0x7ffc0000 [ 232.208405][ T30] audit: type=1326 audit(1752260521.055:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc58e929 code=0x7ffc0000 [ 232.278554][ T30] audit: type=1326 audit(1752260521.055:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc58e929 code=0x7ffc0000 [ 232.316783][ T30] audit: type=1326 audit(1752260521.055:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99bc52ab19 code=0x7ffc0000 [ 232.348136][ T30] audit: type=1326 audit(1752260521.055:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc58e929 code=0x7ffc0000 [ 232.379688][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 232.433842][ T30] audit: type=1326 audit(1752260521.055:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc58e929 code=0x7ffc0000 [ 232.588121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.607838][ T30] audit: type=1326 audit(1752260521.055:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99bc52ab19 code=0x7ffc0000 [ 232.759094][ T30] audit: type=1326 audit(1752260521.055:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc58e929 code=0x7ffc0000 [ 232.886150][ T30] audit: type=1326 audit(1752260521.055:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99bc52ab19 code=0x7ffc0000 [ 232.994262][ T30] audit: type=1326 audit(1752260521.055:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9587 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99bc52ab19 code=0x7ffc0000 [ 233.139473][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.150087][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.159588][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.171532][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.180337][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.180803][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.276142][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.306520][ T993] bond0 (unregistering): Released all slaves [ 233.347087][ T9594] syzkaller1: entered promiscuous mode [ 233.356924][ T9594] syzkaller1: entered allmulticast mode [ 233.558233][ T5932] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 233.748128][ T5932] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.767439][ T5932] usb 2-1: config 0 has no interface number 0 [ 233.787087][ T5932] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.834990][ T5932] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.867010][ T5932] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.898313][ T5932] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 233.915684][ T993] hsr_slave_0: left promiscuous mode [ 233.946206][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.976001][ T5932] usb 2-1: config 0 descriptor?? [ 233.985150][ T993] hsr_slave_1: left promiscuous mode [ 234.007640][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.037100][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.112566][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.138635][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.215013][ T9625] loop8: detected capacity change from 0 to 8 [ 234.264441][ T9625] Dev loop8: unable to read RDB block 8 [ 234.293577][ T993] veth1_macvtap: left promiscuous mode [ 234.304586][ T9625] loop8: unable to read partition table [ 234.332802][ T993] veth0_macvtap: left promiscuous mode [ 234.340484][ T9625] loop8: partition table beyond EOD, truncated [ 234.347089][ T993] veth1_vlan: left promiscuous mode [ 234.363761][ T993] veth0_vlan: left promiscuous mode [ 339.417665][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 339.424752][ C1] rcu: 0-...!: (0 ticks this GP) idle=a5cc/1/0x4000000000000000 softirq=43342/43342 fqs=0 [ 339.436100][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3483/1:b..l [ 339.444145][ C1] rcu: (detected by 1, t=10506 jiffies, g=35241, q=352 ncpus=2) [ 339.451909][ C1] Sending NMI from CPU 1 to CPUs 0: [ 339.451955][ C0] NMI backtrace for cpu 0 [ 339.451991][ C0] CPU: 0 UID: 0 PID: 9623 Comm: syz.2.1546 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 339.452022][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.452041][ C0] RIP: 0010:lock_acquire+0x4/0x360 [ 339.452065][ C0] Code: 10 a9 00 ff ff 00 0f 95 c0 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 [ 339.452080][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00000046 [ 339.452095][ C0] RAX: 0000000000010002 RBX: ffff8880281d12e8 RCX: 0000000000000000 [ 339.452107][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880281d1300 [ 339.452118][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 339.452128][ C0] R10: dffffc0000000000 R11: ffffffff89879e40 R12: ffff8880281d1340 [ 339.452141][ C0] R13: ffff8880281d1000 R14: dffffc0000000000 R15: ffff888054c1e4d8 [ 339.452155][ C0] FS: 00007f955bba66c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 339.452170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.452182][ C0] CR2: 0000200000157000 CR3: 000000007aa58000 CR4: 00000000003526f0 [ 339.452198][ C0] Call Trace: [ 339.452210][ C0] [ 339.452217][ C0] _raw_spin_lock+0x2e/0x40 [ 339.452242][ C0] ? advance_sched+0xc4/0xc90 [ 339.452265][ C0] advance_sched+0xc4/0xc90 [ 339.452288][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 339.452312][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.452342][ C0] ? __pfx_advance_sched+0x10/0x10 [ 339.452363][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 339.452393][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 339.452411][ C0] ? read_tsc+0x9/0x20 [ 339.452436][ C0] ? rcu_is_watching+0x15/0xb0 [ 339.452458][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 339.452492][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 339.452513][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 339.452539][ C0] [ 339.452545][ C0] [ 339.452551][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.452576][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 339.452600][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5a a8 33 f6 48 89 df e8 b2 3f 34 f6 e8 8d 1b 5d f6 fb bf 01 00 00 00 72 3c 26 f6 65 8b 05 3b 6a 32 07 85 c0 74 07 5b c3 cc cc cc cc [ 339.452614][ C0] RSP: 0018:ffffc90003187730 EFLAGS: 00000286 [ 339.452629][ C0] RAX: 67ba123b68bb1900 RBX: ffff888054fcbe70 RCX: 67ba123b68bb1900 [ 339.452642][ C0] RDX: 0000000000000006 RSI: ffffffff8d985128 RDI: 0000000000000001 [ 339.452653][ C0] RBP: ffffc90003187870 R08: ffffffff8fa0c9f7 R09: 1ffffffff1f4193e [ 339.452666][ C0] R10: dffffc0000000000 R11: fffffbfff1f4193f R12: ffffc900031877c0 [ 339.452679][ C0] R13: 0000000000000cc0 R14: 0000000000000cc0 R15: 00000003fffffffc [ 339.452701][ C0] shmem_add_to_page_cache+0x863/0xb10 [ 339.452730][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 339.452762][ C0] shmem_alloc_and_add_folio+0x846/0xf60 [ 339.452789][ C0] ? filemap_get_entry+0xad/0x2f0 [ 339.452811][ C0] ? filemap_get_entry+0xad/0x2f0 [ 339.452834][ C0] ? filemap_get_entry+0x28f/0x2f0 [ 339.452857][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 339.452883][ C0] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 339.452908][ C0] shmem_get_folio_gfp+0x59d/0x1660 [ 339.452941][ C0] shmem_write_begin+0xf7/0x2b0 [ 339.452968][ C0] generic_perform_write+0x2c4/0x910 [ 339.453001][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 339.453027][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 339.453050][ C0] ? mnt_put_write_access_file+0xc0/0x100 [ 339.453072][ C0] ? file_update_time+0x416/0x490 [ 339.453093][ C0] shmem_file_write_iter+0xf8/0x120 [ 339.453120][ C0] vfs_write+0x548/0xa90 [ 339.453145][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 339.453170][ C0] ? __pfx_vfs_write+0x10/0x10 [ 339.453198][ C0] ? __fget_files+0x2a/0x420 [ 339.453218][ C0] ksys_write+0x145/0x250 [ 339.453243][ C0] ? __pfx_ksys_write+0x10/0x10 [ 339.453264][ C0] ? rcu_is_watching+0x15/0xb0 [ 339.453285][ C0] ? do_syscall_64+0xbe/0x3b0 [ 339.453303][ C0] do_syscall_64+0xfa/0x3b0 [ 339.453318][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.453342][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.453359][ C0] ? clear_bhb_loop+0x60/0xb0 [ 339.453379][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.453395][ C0] RIP: 0033:0x7f955ad8e929 [ 339.453411][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.453425][ C0] RSP: 002b:00007f955bba6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.453441][ C0] RAX: ffffffffffffffda RBX: 00007f955afb5fa0 RCX: 00007f955ad8e929 [ 339.453453][ C0] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 339.453491][ C0] RBP: 00007f955ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 339.453502][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.453512][ C0] R13: 0000000000000000 R14: 00007f955afb5fa0 R15: 00007ffe6ebbf0b8 [ 339.453533][ C0] [ 339.453942][ C1] task:kworker/u8:7 state:R running task stack:24216 pid:3483 tgid:3483 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 339.977581][ C1] Workqueue: iou_exit io_ring_exit_work [ 339.983171][ C1] Call Trace: [ 339.986489][ C1] [ 339.989453][ C1] __schedule+0x16a2/0x4cb0 [ 339.994015][ C1] ? __lock_acquire+0xab9/0xd20 [ 339.998912][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 340.004330][ C1] ? __pfx___schedule+0x10/0x10 [ 340.009215][ C1] ? __lock_acquire+0xab9/0xd20 [ 340.014107][ C1] ? __lock_acquire+0xab9/0xd20 [ 340.018994][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 340.024419][ C1] preempt_schedule_irq+0xb5/0x150 [ 340.029571][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 340.035343][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 340.041190][ C1] irqentry_exit+0x6f/0x90 [ 340.045770][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.051896][ C1] RIP: 0010:__asan_memset+0x31/0x50 [ 340.057139][ C1] Code: 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b 41 5e <5d> e9 c9 ac 46 09 31 c0 5b 41 5e 5d e9 0e 62 49 09 cc 66 66 66 66 [ 340.076786][ C1] RSP: 0018:ffffc9000bf27368 EFLAGS: 00000202 [ 340.082914][ C1] RAX: 1ffff920017e4e01 RBX: ffffc9000bf27480 RCX: ffffffff8172b6d8 [ 340.090922][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000bf27498 [ 340.099014][ C1] RBP: 0000000000000000 R08: ffffc9000bf274a7 R09: 1ffff920017e4e94 [ 340.107020][ C1] R10: dffffc0000000000 R11: fffff520017e4e95 R12: ffffc9000bf27580 [ 340.115044][ C1] R13: ffffc9000bf27498 R14: ffffc9000bf27448 R15: ffffc9000bf27490 [ 340.123056][ C1] ? unwind_next_frame+0xc98/0x2390 [ 340.128295][ C1] unwind_next_frame+0xc98/0x2390 [ 340.133362][ C1] ? unwind_next_frame+0xa5/0x2390 [ 340.138522][ C1] ? stack_trace_save+0x9c/0xe0 [ 340.143419][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 340.149676][ C1] arch_stack_walk+0x11c/0x150 [ 340.154620][ C1] ? kasan_save_track+0x3e/0x80 [ 340.159530][ C1] stack_trace_save+0x9c/0xe0 [ 340.164263][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 340.169661][ C1] ? kthread+0x711/0x8a0 [ 340.174129][ C1] kasan_save_track+0x3e/0x80 [ 340.178913][ C1] __kasan_kmalloc+0x93/0xb0 [ 340.183545][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 340.188961][ C1] ? kmem_cache_free+0x166/0x400 [ 340.194032][ C1] ? __io_req_caches_free+0x8f/0x140 [ 340.199357][ C1] kmem_cache_free+0x166/0x400 [ 340.204169][ C1] __io_req_caches_free+0x8f/0x140 [ 340.209315][ C1] io_req_caches_free+0x21/0x30 [ 340.214204][ C1] io_ring_exit_work+0x415/0x930 [ 340.219204][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 340.224726][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.229961][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 340.235733][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 340.241488][ C1] process_scheduled_works+0xade/0x17b0 [ 340.247124][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 340.253158][ C1] worker_thread+0x8a0/0xda0 [ 340.257866][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 340.264242][ C1] ? __kthread_parkme+0x7b/0x200 [ 340.269219][ C1] kthread+0x711/0x8a0 [ 340.273339][ C1] ? __pfx_worker_thread+0x10/0x10 [ 340.278484][ C1] ? __pfx_kthread+0x10/0x10 [ 340.283116][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.288353][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.293590][ C1] ? __pfx_kthread+0x10/0x10 [ 340.298220][ C1] ret_from_fork+0x3fc/0x770 [ 340.302891][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 340.308041][ C1] ? __switch_to_asm+0x39/0x70 [ 340.312843][ C1] ? __switch_to_asm+0x33/0x70 [ 340.317639][ C1] ? __pfx_kthread+0x10/0x10 [ 340.322266][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.327089][ C1] [ 340.330151][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g35241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 340.342502][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=14298 [ 340.350424][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g35241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 340.361834][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 340.371833][ C1] rcu: RCU grace-period kthread stack dump: [ 340.377745][ C1] task:rcu_preempt state:I stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 340.389706][ C1] Call Trace: [ 340.393013][ C1] [ 340.395981][ C1] __schedule+0x16a2/0x4cb0 [ 340.400538][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 340.405787][ C1] ? schedule+0x165/0x360 [ 340.410176][ C1] ? __lock_acquire+0xab9/0xd20 [ 340.415075][ C1] ? __pfx___schedule+0x10/0x10 [ 340.419997][ C1] ? schedule+0x91/0x360 [ 340.424285][ C1] schedule+0x165/0x360 [ 340.428491][ C1] schedule_timeout+0x12b/0x270 [ 340.433388][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 340.438841][ C1] ? __pfx_process_timeout+0x10/0x10 [ 340.444166][ C1] ? prepare_to_swait_event+0x341/0x380 [ 340.449758][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 340.454673][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 340.459640][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.464879][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 340.470206][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 340.475534][ C1] ? finish_swait+0xcd/0x1f0 [ 340.480166][ C1] rcu_gp_kthread+0x99/0x390 [ 340.484788][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 340.490014][ C1] ? __kthread_parkme+0x7b/0x200 [ 340.494978][ C1] ? __kthread_parkme+0x1a1/0x200 [ 340.500042][ C1] kthread+0x711/0x8a0 [ 340.504152][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 340.509379][ C1] ? __pfx_kthread+0x10/0x10 [ 340.514004][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.519235][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.524465][ C1] ? __pfx_kthread+0x10/0x10 [ 340.529086][ C1] ret_from_fork+0x3fc/0x770 [ 340.533709][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 340.538863][ C1] ? __switch_to_asm+0x39/0x70 [ 340.543668][ C1] ? __switch_to_asm+0x33/0x70 [ 340.548462][ C1] ? __pfx_kthread+0x10/0x10 [ 340.553092][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.557907][ C1]