last executing test programs: 5.367262896s ago: executing program 4 (id=5917): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, &(0x7f0000001240)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.042363029s ago: executing program 4 (id=5924): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) read$eventfd(r1, &(0x7f00000000c0), 0x8) 4.86191057s ago: executing program 4 (id=5926): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r1 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 4.797940913s ago: executing program 4 (id=5930): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000001dc0)={0x81, 0x0, 0x80000, {r0}}, 0x20) 4.653667303s ago: executing program 4 (id=5933): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fstat(r0, &(0x7f00000000c0)) 4.329634571s ago: executing program 4 (id=5937): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f7"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 2.444198673s ago: executing program 2 (id=5960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.989880137s ago: executing program 1 (id=5964): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0xddd3, 0x4, 0x0, 0x0) 1.49420536s ago: executing program 1 (id=5965): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b78", 0x39}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.489978869s ago: executing program 2 (id=5966): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x202e) 1.285875536s ago: executing program 1 (id=5969): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x1, r1, 0x0, 0x9, 0x7fff}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000100)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) 1.131173543s ago: executing program 2 (id=5971): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.111817101s ago: executing program 1 (id=5972): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 974.620608ms ago: executing program 0 (id=5974): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 946.939846ms ago: executing program 1 (id=5975): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x40, 0x7, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8000, 0x8, 0x2, 0x7}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 946.235288ms ago: executing program 2 (id=5976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 842.525607ms ago: executing program 3 (id=5977): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) 838.484335ms ago: executing program 0 (id=5978): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) wait4(r2, 0x0, 0x8, 0x0) 762.821272ms ago: executing program 0 (id=5979): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getpid() r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) 705.857761ms ago: executing program 2 (id=5980): r0 = epoll_create1(0x0) r1 = eventfd2(0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x10}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x20002003}) 659.22621ms ago: executing program 0 (id=5981): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x9, 0x3, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 564.337429ms ago: executing program 0 (id=5982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x62af, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x4, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) 501.809949ms ago: executing program 3 (id=5983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='&\x00'], 0x10) 460.83616ms ago: executing program 2 (id=5984): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x4, 0x2) getdents64(r1, 0xffffffffffffffff, 0x43) 386.850918ms ago: executing program 3 (id=5985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000004300)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 378.439687ms ago: executing program 0 (id=5986): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 244.247086ms ago: executing program 3 (id=5987): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) 109.911474ms ago: executing program 3 (id=5988): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec51acbc0413a1810039000000000bf0ffff2101000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x4) 61.828178ms ago: executing program 3 (id=5989): r0 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=5990): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0xfe}, 0x56, r1}) kernel console output (not intermixed with test programs): 50:50:50:50:50 [ 382.179764][T14641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.487156][T15258] macvlan2: entered promiscuous mode [ 383.441057][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 383.590928][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 383.593402][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.593441][ T9] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 383.593463][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.598665][ T9] usb 1-1: config 0 descriptor?? [ 384.072016][ T9] hid_parser_main: 8 callbacks suppressed [ 384.072043][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.072076][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.072104][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.072131][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.074138][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.074170][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.074196][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.074222][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.074249][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.074276][ T9] hid-generic 0003:0DFC:0101.0023: unknown main item tag 0x0 [ 384.179995][ T9] hid-generic 0003:0DFC:0101.0023: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.0-1/input0 [ 384.221161][ T5878] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 384.262818][ T9] usb 1-1: USB disconnect, device number 17 [ 384.327754][T15314] netlink: 'syz.2.4110': attribute type 1 has an invalid length. [ 384.375832][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 384.380545][ T5878] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 384.380574][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.380594][ T5878] usb 4-1: Product: syz [ 384.380607][ T5878] usb 4-1: Manufacturer: syz [ 384.380621][ T5878] usb 4-1: SerialNumber: syz [ 384.395074][ T5878] usb 4-1: config 0 descriptor?? [ 384.521588][T15320] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 384.583556][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4113'. [ 384.894128][ T5878] usb 4-1: USB disconnect, device number 36 [ 385.971344][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 386.134658][ T31] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 386.134690][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.160620][ T31] usb 1-1: config 0 descriptor?? [ 386.292764][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.387432][ T31] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 386.592976][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 386.634078][ T31] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 386.634103][ T31] [drm] Initialized udl on minor 2 [ 386.636949][ T31] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.637273][ T31] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 386.641325][ T5871] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.660521][ T5871] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.660702][ T5871] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 386.662830][ T31] usb 1-1: USB disconnect, device number 18 [ 386.927273][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4157'. [ 386.970651][T14648] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 386.978917][T14648] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 386.991095][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 387.191192][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 387.241143][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 387.351179][ T31] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 387.499547][T15446] netlink: 'syz.0.4169': attribute type 83 has an invalid length. [ 387.519157][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.519894][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 387.521555][ T31] usb 3-1: config index 0 descriptor too short (expected 33938, got 146) [ 387.521580][ T31] usb 3-1: config 234 has too many interfaces: 68, using maximum allowed: 32 [ 387.521599][ T31] usb 3-1: config 234 has an invalid descriptor of length 0, skipping remainder of the config [ 387.521618][ T31] usb 3-1: config 234 has 1 interface, different from the descriptor's value: 68 [ 387.521652][ T31] usb 3-1: config 234 interface 0 has no altsetting 0 [ 387.534113][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.534143][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.534162][ T31] usb 3-1: Product: syz [ 387.534175][ T31] usb 3-1: Manufacturer: syz [ 387.534189][ T31] usb 3-1: SerialNumber: syz [ 387.798002][ T31] usb 3-1: USB disconnect, device number 21 [ 388.180015][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4175'. [ 388.229018][T15462] syz_tun: entered allmulticast mode [ 388.230060][T15462] netlink: 'syz.0.4176': attribute type 39 has an invalid length. [ 388.348904][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.409416][T15462] syz_tun (unregistering): left allmulticast mode [ 388.500051][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 388.500068][ T37] audit: type=1326 audit(1761748531.261:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69fd605e67 code=0x7ffc0000 [ 388.529229][ T37] audit: type=1326 audit(1761748531.291:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69fd5ab099 code=0x7ffc0000 [ 388.529531][ T37] audit: type=1326 audit(1761748531.291:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69fd605e67 code=0x7ffc0000 [ 388.529919][ T37] audit: type=1326 audit(1761748531.291:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69fd5ab099 code=0x7ffc0000 [ 388.530114][ T37] audit: type=1326 audit(1761748531.291:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fd60efc9 code=0x7ffc0000 [ 388.617782][ T37] audit: type=1326 audit(1761748531.381:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69fd605e67 code=0x7ffc0000 [ 388.619816][ T37] audit: type=1326 audit(1761748531.381:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69fd5ab099 code=0x7ffc0000 [ 388.619868][ T37] audit: type=1326 audit(1761748531.381:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69fd605e67 code=0x7ffc0000 [ 388.619908][ T37] audit: type=1326 audit(1761748531.381:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69fd5ab099 code=0x7ffc0000 [ 388.619949][ T37] audit: type=1326 audit(1761748531.381:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15470 comm="syz.2.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69fd605e67 code=0x7ffc0000 [ 389.023453][T15485] rtc_cmos 00:00: Alarms can be up to one day in the future [ 389.035106][ T5871] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 389.183398][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.183425][ T5871] usb 3-1: config 0 has no interface number 0 [ 389.200163][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.200196][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.200216][ T5871] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.200272][ T5871] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 389.200293][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.214215][ T5871] usb 3-1: config 0 descriptor?? [ 389.510692][T15488] sctp: [Deprecated]: syz.4.4188 (pid 15488) Use of int in max_burst socket option. [ 389.510692][T15488] Use struct sctp_assoc_value instead [ 389.925070][ T5871] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0024/input/input25 [ 390.046212][ T5871] uclogic 0003:28BD:0042.0024: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 390.070918][ T5910] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 390.159280][ T5871] usb 3-1: USB disconnect, device number 22 [ 390.223358][ T5910] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 390.223386][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.256670][ T5910] usb 2-1: config 0 descriptor?? [ 390.267471][ T5910] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 390.476217][ T5910] gp8psk: usb in 128 operation failed. [ 390.677791][ T5910] gp8psk: FW Version = 44.211.228 (0x2cd3e4) Build 2011/207/21 [ 390.878699][ T5910] gp8psk: usb in 149 operation failed. [ 390.878719][ T5910] gp8psk: failed to get FPGA version [ 390.879145][ T5910] gp8psk: usb in 138 operation failed. [ 390.879159][ T5910] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 390.879198][ T5910] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 390.919920][ T5910] usb 2-1: USB disconnect, device number 23 [ 391.101026][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 391.381556][T15539] tap0: tun_chr_ioctl cmd 1074812118 [ 392.876198][T15590] program syz.4.4234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.046912][ T5871] kernel read not supported for file /rfkill (pid: 5871 comm: kworker/1:3) [ 393.085934][ T5871] kernel write not supported for file /comedi4 (pid: 5871 comm: kworker/1:3) [ 393.500924][ T1812] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 393.629375][T15613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.660982][ T1812] usb 1-1: Using ep0 maxpacket: 16 [ 393.663932][ T1812] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 393.663958][ T1812] usb 1-1: config 1 has no interface number 0 [ 393.664005][ T1812] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 393.664038][ T1812] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 393.664060][ T1812] usb 1-1: config 1 interface 105 has no altsetting 0 [ 393.668756][ T1812] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 393.668787][ T1812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.668815][ T1812] usb 1-1: Product: syz [ 393.668829][ T1812] usb 1-1: Manufacturer: syz [ 393.668843][ T1812] usb 1-1: SerialNumber: syz [ 393.723444][ T5910] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 393.768783][T15605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 393.768930][T15605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 393.913942][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 393.913977][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 393.914091][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 393.914115][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.976623][ T5910] usb 4-1: config 0 descriptor?? [ 394.206450][T15605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.206579][T15605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.564650][ T1229] usb 4-1: USB disconnect, device number 37 [ 394.617089][ T1812] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 394.617607][ T1812] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 394.618115][ T1812] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 394.670099][T15655] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4263'. [ 394.696909][ T1812] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:38:fd:03:80:4e [ 394.715499][ T1812] usb 1-1: USB disconnect, device number 19 [ 394.718988][ T1812] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 394.872697][ T1812] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 394.872846][ T1812] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 394.873107][ T1812] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 395.012958][T15662] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.192163][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 395.192185][ T37] audit: type=1326 audit(1761748537.961:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.194799][ T37] audit: type=1326 audit(1761748537.961:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.195802][ T37] audit: type=1326 audit(1761748537.961:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.196289][ T37] audit: type=1326 audit(1761748537.961:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.196594][ T37] audit: type=1326 audit(1761748537.961:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.202602][ T37] audit: type=1326 audit(1761748537.971:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.202653][ T37] audit: type=1326 audit(1761748537.971:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.202691][ T37] audit: type=1326 audit(1761748537.971:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.203244][ T37] audit: type=1326 audit(1761748537.971:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 395.409054][T15670] IPVS: Scheduler module ip_vs_ not found [ 395.409439][ T37] audit: type=1326 audit(1761748538.171:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15669 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 396.122567][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 396.273915][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 396.276548][ T31] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 396.276574][ T31] usb 2-1: config 0 has no interface number 0 [ 396.279541][ T31] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 396.279569][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.279588][ T31] usb 2-1: Product: syz [ 396.279603][ T31] usb 2-1: Manufacturer: syz [ 396.279624][ T31] usb 2-1: SerialNumber: syz [ 396.280955][ T5910] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 396.286928][ T31] usb 2-1: config 0 descriptor?? [ 396.296051][ T31] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 396.480996][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 396.483551][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.483598][ T5910] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 396.483621][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.491324][ T5910] usb 3-1: config 0 descriptor?? [ 396.557527][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 396.579009][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 396.943501][ T5910] hid_parser_main: 1210 callbacks suppressed [ 396.943528][ T5910] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 396.943559][ T5910] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 396.943581][ T5910] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 396.943614][ T5910] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 396.943639][ T5910] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 396.944510][ T5910] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 396.962681][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 396.965060][ T1229] usb 2-1: USB disconnect, device number 24 [ 396.994366][ T1229] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 397.050588][ T1229] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 397.056455][ T1229] quatech2 2-1:0.51: device disconnected [ 397.366568][ T5910] usb 3-1: USB disconnect, device number 23 [ 397.383781][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'. [ 397.383824][T15736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4299'. [ 397.516448][T15738] ipvlan2: entered promiscuous mode [ 398.458583][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 398.743398][T15773] tap0: tun_chr_ioctl cmd 1074025676 [ 398.743421][T15773] tap0: owner set to 0 [ 399.091032][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 399.665025][T15790] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4324'. [ 399.861059][ T1229] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 399.868713][T15798] autofs4:pid:15798:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(6.12), cmd(0xc0189372) [ 399.868731][T15798] autofs4:pid:15798:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189372) [ 400.020981][ T1229] usb 1-1: Using ep0 maxpacket: 32 [ 400.024252][ T1229] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 400.024277][ T1229] usb 1-1: config 4 has no interface number 0 [ 400.024315][ T1229] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.024338][ T1229] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.024370][ T1229] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 400.024388][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.033408][ T1229] hub 1-1:4.128: USB hub found [ 400.231030][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 400.254305][ T1229] hub 1-1:4.128: 2 ports detected [ 400.254365][ T1229] hub 1-1:4.128: Using single TT (err -22) [ 400.395014][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.395101][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 400.395157][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 400.395188][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.416857][ T9] usb 3-1: config 0 descriptor?? [ 400.437087][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 400.468152][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 400.477742][ T1229] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 400.477768][ T1229] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 400.492078][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 400.493082][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 400.493135][ T9] usb 3-1: media controller created [ 400.496269][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.512610][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 400.512771][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 400.522264][ T1229] usb 1-1: USB disconnect, device number 20 [ 400.531083][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 400.540970][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 400.540993][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 400.706196][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 400.706233][ T5910] dvb-usb: error while querying for an remote control event. [ 400.831962][ T1229] usb 3-1: USB disconnect, device number 24 [ 401.461951][ T1229] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 401.506991][T15821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.177422][T15871] program syz.4.4362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.593586][T15861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.897526][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 402.925057][T15887] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.829844][T15912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.111408][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4391'. [ 404.432512][T15959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4401'. [ 404.432926][T15955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4401'. [ 404.433736][T15955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4401'. [ 404.921086][T15981] binder: 15978:15981 ioctl c018620b 200000000200 returned -14 [ 405.172692][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 405.172710][ T37] audit: type=1326 audit(1761748547.941:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15990 comm="syz.0.4416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x0 [ 406.180954][ T1229] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 406.233505][T16022] pimreg: tun_chr_ioctl cmd 35111 [ 406.334715][ T1229] usb 2-1: Using ep0 maxpacket: 16 [ 406.339059][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.339091][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.339114][ T1229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 406.339157][ T1229] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 406.339179][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.349844][ T1229] usb 2-1: config 0 descriptor?? [ 406.795003][ T1229] microsoft 0003:045E:07DA.0026: unknown main item tag 0x2 [ 406.795043][ T1229] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 406.795071][ T1229] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 406.795098][ T1229] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 406.795124][ T1229] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 406.818135][ T1229] microsoft 0003:045E:07DA.0026: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 406.818168][ T1229] microsoft 0003:045E:07DA.0026: no inputs found [ 406.818181][ T1229] microsoft 0003:045E:07DA.0026: could not initialize ff, continuing anyway [ 407.001923][ T31] usb 2-1: USB disconnect, device number 25 [ 407.415616][ T1229] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 407.560946][ T1229] usb 3-1: Using ep0 maxpacket: 32 [ 407.563284][ T1229] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 407.563311][ T1229] usb 3-1: config 0 has no interface number 0 [ 407.566370][ T1229] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 407.566398][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.566422][ T1229] usb 3-1: Product: syz [ 407.566436][ T1229] usb 3-1: Manufacturer: syz [ 407.566448][ T1229] usb 3-1: SerialNumber: syz [ 407.585953][ T1229] usb 3-1: config 0 descriptor?? [ 407.633805][ T1229] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 407.762851][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 407.832604][ T1229] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 407.839972][ T1229] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 407.917229][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 407.917399][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 408.246588][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 408.248161][ T5885] usb 3-1: USB disconnect, device number 25 [ 408.277946][ T5885] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 408.299433][ T5885] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 408.300138][ T5885] quatech2 3-1:0.51: device disconnected [ 408.522051][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.522173][T16080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.522819][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4458'. [ 408.529504][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4458'. [ 409.039267][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 409.061495][T16103] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4466'. [ 409.940689][T16131] serio: Serial port ptm0 [ 410.749169][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.742735][T16189] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4507'. [ 411.839237][T16192] netlink: 'syz.2.4508': attribute type 15 has an invalid length. [ 415.349415][ T37] audit: type=1326 audit(1761748558.111:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ad7efc9 code=0x7ffc0000 [ 415.350287][ T37] audit: type=1326 audit(1761748558.111:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef6ad75e67 code=0x7ffc0000 [ 415.350554][ T37] audit: type=1326 audit(1761748558.111:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef6ad1b099 code=0x7ffc0000 [ 415.352684][ T37] audit: type=1326 audit(1761748558.121:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fef6ad7efc9 code=0x7ffc0000 [ 415.352962][ T37] audit: type=1326 audit(1761748558.121:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ad7efc9 code=0x7ffc0000 [ 415.353551][ T37] audit: type=1326 audit(1761748558.121:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16303 comm="syz.4.4559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6ad7efc9 code=0x7ffc0000 [ 415.553830][T16311] input: syz1 as /devices/virtual/input/input27 [ 415.553863][T16311] input: failed to attach handler leds to device input27, error: -6 [ 415.596884][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4564'. [ 415.730994][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 415.861009][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 416.016174][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 416.016193][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.016203][ T31] usb 3-1: Product: syz [ 416.016210][ T31] usb 3-1: Manufacturer: syz [ 416.016217][ T31] usb 3-1: SerialNumber: syz [ 416.468434][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 416.468507][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 416.671029][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 416.671101][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 416.673557][ T31] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 416.956429][ T31] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 416.975561][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4585'. [ 416.986532][ T31] usb 3-1: USB disconnect, device number 26 [ 417.651081][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.737060][T16389] netlink: 'syz.2.4598': attribute type 28 has an invalid length. [ 417.737082][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 417.769083][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4597'. [ 418.877802][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4613'. [ 418.927917][T16424] hsr_slave_0: left promiscuous mode [ 418.962732][T16424] hsr_slave_1: left promiscuous mode [ 420.651673][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.801725][T16500] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.829681][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.239560][T16522] pim6reg1: entered promiscuous mode [ 421.239585][T16522] pim6reg1: entered allmulticast mode [ 421.331042][ T5878] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 421.398768][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.480889][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 421.482672][ T5878] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 421.482689][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.489380][ T5878] pvrusb2: Hardware description: Terratec Grabster AV400 [ 421.489391][ T5878] pvrusb2: ********** [ 421.489395][ T5878] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 421.489401][ T5878] pvrusb2: Important functionality might not be entirely working. [ 421.489406][ T5878] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 421.489419][ T5878] pvrusb2: ********** [ 421.708504][ T2366] pvrusb2: Invalid write control endpoint [ 421.803367][T16539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4665'. [ 421.856077][ T2366] pvrusb2: Invalid write control endpoint [ 421.856091][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 421.856100][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 421.856108][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 421.856117][ T2366] pvrusb2: Device being rendered inoperable [ 421.857602][ T2366] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 421.857656][ T2366] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 421.859634][ T2366] pvrusb2: Attached sub-driver cx25840 [ 421.859645][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 421.859654][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 421.926904][ T5878] usb 1-1: USB disconnect, device number 21 [ 422.663596][T16567] netlink: 'syz.2.4675': attribute type 9 has an invalid length. [ 422.663618][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4675'. [ 423.095887][ T37] audit: type=1326 audit(1761748565.861:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7badb55e67 code=0x7ffc0000 [ 423.096406][ T37] audit: type=1326 audit(1761748565.861:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7badafb099 code=0x7ffc0000 [ 423.099382][ T37] audit: type=1326 audit(1761748565.861:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7badb55e67 code=0x7ffc0000 [ 423.099750][ T37] audit: type=1326 audit(1761748565.861:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7badafb099 code=0x7ffc0000 [ 423.100197][ T37] audit: type=1326 audit(1761748565.861:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7badb55e67 code=0x7ffc0000 [ 423.102101][ T37] audit: type=1326 audit(1761748565.861:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7badafb099 code=0x7ffc0000 [ 423.102709][ T37] audit: type=1326 audit(1761748565.871:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badb5efc9 code=0x7ffc0000 [ 423.103350][ T37] audit: type=1326 audit(1761748565.871:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badb5efc9 code=0x7ffc0000 [ 423.103813][ T37] audit: type=1326 audit(1761748565.871:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7badb5efc9 code=0x7ffc0000 [ 423.104441][ T37] audit: type=1326 audit(1761748565.871:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16562 comm="syz.3.4677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7badb55e67 code=0x7ffc0000 [ 423.390806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.390959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 423.391794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 424.004693][T16590] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4688'. [ 425.060472][T16611] loop5: detected capacity change from 0 to 7 [ 425.111941][ T74] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.112110][ T74] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.114955][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.114987][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.115183][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.115203][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.115360][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.115383][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.119937][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.119972][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.120110][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.120133][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.120252][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.120275][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.120357][T16611] ldm_validate_partition_table(): Disk read failed. [ 425.120521][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.120544][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.120677][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.120701][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.125323][T16611] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.125418][T16611] Buffer I/O error on dev loop5, logical block 0, async page read [ 425.125642][T16611] Dev loop5: unable to read RDB block 0 [ 425.126086][T16611] loop5: unable to read partition table [ 425.126316][T16611] loop5: partition table beyond EOD, truncated [ 425.126335][T16611] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 425.440968][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 425.656396][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.656430][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.656452][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.656500][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.656521][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.662684][ T31] usb 1-1: config 0 descriptor?? [ 426.135092][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.135132][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.135159][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.135187][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.135214][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.135241][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.135267][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.135293][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.140027][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.140067][ T31] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 426.236808][ T31] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 426.406802][ T9] usb 1-1: USB disconnect, device number 22 [ 429.558112][T16740] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 429.558141][T16740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 429.558234][T16740] vhci_hcd vhci_hcd.0: Device attached [ 429.580500][T16741] vhci_hcd: connection closed [ 429.581088][T14628] vhci_hcd: stop threads [ 429.581105][T14628] vhci_hcd: release socket [ 429.581139][T14628] vhci_hcd: disconnect device [ 429.975429][T16758] netem: change failed [ 431.287385][T16815] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 431.298643][ T37] kauditd_printk_skb: 207 callbacks suppressed [ 431.298662][ T37] audit: type=1400 audit(1761748574.061:835): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=16811 comm="syz.2.4778" saddr=100.1.1.2 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 431.359790][T16817] netlink: 'syz.0.4781': attribute type 1 has an invalid length. [ 432.121797][T16841] delete_channel: no stack [ 434.942065][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 435.103336][ T9] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 435.103366][ T9] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 435.103387][ T9] usb 2-1: config 150 has no interface number 0 [ 435.103432][ T9] usb 2-1: config 150 interface 204 has no altsetting 0 [ 435.106401][ T9] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 435.106431][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.106451][ T9] usb 2-1: Product: syz [ 435.106465][ T9] usb 2-1: Manufacturer: syz [ 435.106479][ T9] usb 2-1: SerialNumber: syz [ 435.275922][T16946] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.276787][ T5885] IPVS: starting estimator thread 0... [ 435.360950][T16949] IPVS: using max 10 ests per chain, 24000 per kthread [ 435.413544][ T9] xr_serial 2-1:150.204: skipping garbage [ 435.413600][ T9] xr_serial 2-1:150.204: xr_serial converter detected [ 435.660924][ T5885] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 435.851268][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 435.853789][ T5885] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 435.853816][ T5885] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 435.853836][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 435.853857][ T5885] usb 1-1: config 1 has no interface number 0 [ 435.853907][ T5885] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.853933][ T5885] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 435.853973][ T5885] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 435.853995][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.887148][ T5885] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 436.116256][ T5885] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 436.245480][ T9] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 436.245536][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 436.267007][ T9] usb 2-1: USB disconnect, device number 26 [ 436.269153][ T9] xr_serial 2-1:150.204: device disconnected [ 436.291084][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 436.350834][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.571186][ T9] usb 1-1: USB disconnect, device number 23 [ 436.576509][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 436.583027][T16969] pim6reg1: entered promiscuous mode [ 436.583052][T16969] pim6reg1: entered allmulticast mode [ 436.742733][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.291650][T17009] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4861'. [ 437.761226][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 437.770189][T17024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.842423][T17024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.883733][T17024] batman_adv: batadv0: Removing interface: ipvlan3 [ 437.931826][ T31] usb 3-1: config 0 has no interfaces? [ 437.935107][ T31] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 437.935137][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.935157][ T31] usb 3-1: Product: syz [ 437.935171][ T31] usb 3-1: Manufacturer: syz [ 437.935186][ T31] usb 3-1: SerialNumber: syz [ 437.958340][ T31] usb 3-1: config 0 descriptor?? [ 438.053777][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.248223][ T1229] usb 3-1: USB disconnect, device number 27 [ 439.406759][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.519235][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.623080][T17074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4893'. [ 439.623403][T17074] sch_tbf: peakrate 8 is lower than or equals to rate 8 ! [ 440.057534][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.057613][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.603997][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.069025][T17136] ipvlan2: entered allmulticast mode [ 441.069045][T17136] macvlan1: entered allmulticast mode [ 441.069058][T17136] veth1_vlan: entered allmulticast mode [ 441.086153][T17136] team0: Device ipvlan2 failed to register rx_handler [ 441.237039][ T10] kernel read not supported for file /swradio0 (pid: 10 comm: kworker/0:1) [ 441.463347][T17148] loop5: detected capacity change from 0 to 1327 [ 441.490223][T17148] loop5: detected capacity change from 1327 to 2311 [ 442.430910][ T1229] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 442.591114][ T1229] usb 4-1: Using ep0 maxpacket: 32 [ 442.595735][ T1229] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 442.595766][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.601136][ T1229] usb 4-1: config 0 descriptor?? [ 442.627366][ T1229] gspca_main: sunplus-2.14.0 probing 041e:400b [ 442.886353][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4934'. [ 443.638785][ T1229] gspca_sunplus: reg_w_riv err -71 [ 443.639019][ T1229] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 443.647449][ T1229] usb 4-1: USB disconnect, device number 38 [ 443.836467][ T10] IPVS: starting estimator thread 0... [ 443.951382][T17213] IPVS: using max 10 ests per chain, 24000 per kthread [ 444.097572][T17230] fuse: Bad value for 'fd' [ 444.250943][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 444.410906][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 444.413575][ T5885] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 444.415484][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.415509][ T9] usb 2-1: config 0 has no interface number 0 [ 444.415554][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.415578][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.415615][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 444.415638][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.422080][ T9] usb 2-1: config 0 descriptor?? [ 444.563382][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.563415][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.563436][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.563477][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.563499][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.623268][ T5885] usb 1-1: config 0 descriptor?? [ 445.080150][ T5885] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 445.125400][ T9] uclogic 0003:28BD:0094.0028: pen parameters not found [ 445.125426][ T9] uclogic 0003:28BD:0094.0028: interface is invalid, ignoring [ 445.143787][ T9] usb 2-1: USB disconnect, device number 27 [ 445.355484][ T9] usb 1-1: USB disconnect, device number 24 [ 445.653320][T17250] team0: Device ipip0 is of different type [ 446.011685][ T5878] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 446.141154][ T5885] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 446.163596][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 446.166069][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.166120][ T5878] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.169249][ T5878] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 446.169276][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.169294][ T5878] usb 3-1: Product: syz [ 446.169308][ T5878] usb 3-1: Manufacturer: syz [ 446.169322][ T5878] usb 3-1: SerialNumber: syz [ 446.237851][ T5878] usb 3-1: bad CDC descriptors [ 446.239117][ T5878] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 446.239184][ T5878] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 446.295999][ T5885] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 446.296025][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.299294][ T5885] usb 2-1: config 0 descriptor?? [ 446.325090][ T5885] cp210x 2-1:0.0: cp210x converter detected [ 446.515950][ T1229] usb 3-1: USB disconnect, device number 28 [ 446.726230][ T5885] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 446.727796][ T5885] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 446.754571][ T5885] usb 2-1: cp210x converter now attached to ttyUSB0 [ 446.949538][ T9] usb 2-1: USB disconnect, device number 28 [ 446.978618][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 446.979096][ T9] cp210x 2-1:0.0: device disconnected [ 447.091040][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 447.561048][ T5885] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 447.710844][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 447.713339][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.713370][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.713408][ T5885] usb 1-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 447.713429][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.768567][ T5885] usb 1-1: config 0 descriptor?? [ 448.003379][T17307] loop6: detected capacity change from 0 to 7 [ 448.053001][T17307] loop6: [POWERTEC] p1 p2 p3 [ 448.053950][T17307] loop6: p1 start 411 is beyond EOD, truncated [ 448.053973][T17307] loop6: p2 start 16777216 is beyond EOD, truncated [ 448.053989][T17307] loop6: p3 start 1635021614 is beyond EOD, truncated [ 448.092775][ T5885] usbhid 1-1:0.0: can't add hid device: -71 [ 448.092895][ T5885] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 448.121497][ T5885] usb 1-1: USB disconnect, device number 25 [ 448.137724][T17326] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4993'. [ 448.865057][T17338] netlink: 'syz.4.4998': attribute type 11 has an invalid length. [ 448.933875][T17334] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 449.330947][ T5878] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 449.484070][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.484097][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.486961][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.486989][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.487009][ T5878] usb 4-1: Product: syz [ 449.487022][ T5878] usb 4-1: Manufacturer: syz [ 449.487037][ T5878] usb 4-1: SerialNumber: syz [ 449.972460][ T5878] usb 4-1: 0:2 : does not exist [ 450.401937][ T5878] usb 4-1: USB disconnect, device number 39 [ 450.693579][T17388] tap0: tun_chr_ioctl cmd 2147767507 [ 450.694029][T17388] tap0: tun_chr_ioctl cmd 2147767507 [ 450.824407][T17394] netlink: 'syz.2.5025': attribute type 10 has an invalid length. [ 450.966091][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.969982][T17394] bridge_slave_1: left allmulticast mode [ 450.970008][T17394] bridge_slave_1: left promiscuous mode [ 450.992115][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.007386][T17399] trusted_key: syz.3.5027 sent an empty control message without MSG_MORE. [ 451.093540][T17394] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 451.717728][T17439] sock: sock_set_timeout: `syz.0.5045' (pid 17439) tries to set negative timeout [ 451.872845][ T37] audit: type=1326 audit(1761748594.641:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17446 comm="syz.0.5049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b68f0efc9 code=0x0 [ 452.001010][ T1229] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 452.160936][ T1229] usb 2-1: Using ep0 maxpacket: 8 [ 452.166532][ T1229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 452.166562][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.166580][ T1229] usb 2-1: Product: syz [ 452.166594][ T1229] usb 2-1: Manufacturer: syz [ 452.166608][ T1229] usb 2-1: SerialNumber: syz [ 452.208011][ T1229] usb 2-1: config 0 descriptor?? [ 452.420677][ T1229] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 452.546086][T17458] input: syz1 as /devices/virtual/input/input28 [ 452.855007][ T1229] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 452.882181][ T1229] usb 2-1: USB disconnect, device number 29 [ 453.169046][ T37] audit: type=1326 audit(1761748595.931:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17471 comm="syz.4.5060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef6ad7efc9 code=0x0 [ 453.191996][ T5910] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 453.198183][T17474] loop8: detected capacity change from 0 to 8 [ 453.199419][T17474] Dev loop8: unable to read RDB block 8 [ 453.199470][T17474] loop8: unable to read partition table [ 453.199702][T17474] loop8: partition table beyond EOD, truncated [ 453.199719][T17474] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 453.343214][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.343248][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.343272][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 453.343301][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.343341][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.343363][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.417874][ T5910] usb 4-1: config 0 descriptor?? [ 453.869482][ T5910] hid_parser_main: 5 callbacks suppressed [ 453.869508][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869543][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869571][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869595][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869618][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869643][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869667][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869693][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869720][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.869744][ T5910] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 453.969078][ T5910] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 454.157491][ T5878] usb 4-1: USB disconnect, device number 40 [ 455.207431][T17555] loop8: detected capacity change from 0 to 8 [ 455.208705][T17555] Dev loop8: unable to read RDB block 8 [ 455.208750][T17555] loop8: unable to read partition table [ 455.208988][T17555] loop8: partition table beyond EOD, truncated [ 455.209006][T17555] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 455.738230][T17564] sctp: [Deprecated]: syz.0.5100 (pid 17564) Use of int in max_burst socket option deprecated. [ 455.738230][T17564] Use struct sctp_assoc_value instead [ 456.131071][ T5878] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 456.288009][ T5878] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 456.288041][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.288060][ T5878] usb 4-1: Product: syz [ 456.288073][ T5878] usb 4-1: Manufacturer: syz [ 456.288086][ T5878] usb 4-1: SerialNumber: syz [ 456.510915][ T1229] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 456.660878][ T1229] usb 2-1: Using ep0 maxpacket: 32 [ 456.663248][ T1229] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 456.663275][ T1229] usb 2-1: config 0 has no interface number 0 [ 456.663326][ T1229] usb 2-1: config 0 interface 184 has no altsetting 0 [ 456.666339][ T1229] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 456.666368][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.666388][ T1229] usb 2-1: Product: syz [ 456.666401][ T1229] usb 2-1: Manufacturer: syz [ 456.666415][ T1229] usb 2-1: SerialNumber: syz [ 456.717120][ T1229] usb 2-1: config 0 descriptor?? [ 456.733066][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 456.733126][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 456.775086][ T1229] smsc75xx v1.0.0 [ 457.164232][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 457.164293][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 457.195553][ T1229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 457.195582][ T1229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 457.195602][ T1229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 457.195898][ T1229] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 457.231492][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 457.231935][T17593] loop8: detected capacity change from 0 to 8 [ 457.237074][T17593] Dev loop8: unable to read RDB block 8 [ 457.237120][T17593] loop8: unable to read partition table [ 457.237343][T17593] loop8: partition table beyond EOD, truncated [ 457.237361][T17593] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 457.286812][ T1229] usb 2-1: USB disconnect, device number 30 [ 457.308505][ T5878] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 457.352142][ T5878] usb 4-1: USB disconnect, device number 41 [ 457.468472][T17599] program syz.2.5117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.480522][T17599] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 457.681163][T17603] vivid-000: disconnect [ 457.682366][T17603] vivid-000: reconnect [ 457.925817][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5126'. [ 458.514926][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5139'. [ 458.546224][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 458.546267][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.546292][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.546305][ T5806] Workqueue: hci3 hci_rx_work [ 458.546335][ T5806] Call Trace: [ 458.546347][ T5806] [ 458.546356][ T5806] dump_stack_lvl+0x189/0x250 [ 458.546392][ T5806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.546421][ T5806] ? __pfx__printk+0x10/0x10 [ 458.546451][ T5806] ? kernfs_path_from_node+0x2c/0x280 [ 458.546472][ T5806] ? kernfs_path_from_node+0x243/0x280 [ 458.546492][ T5806] ? kernfs_path_from_node+0x2c/0x280 [ 458.546516][ T5806] sysfs_create_dir_ns+0x259/0x280 [ 458.546535][ T5806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 458.546558][ T5806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.546589][ T5806] ? rt_spin_unlock+0x161/0x200 [ 458.546612][ T5806] kobject_add_internal+0x5a5/0xb50 [ 458.546648][ T5806] kobject_add+0x155/0x220 [ 458.546682][ T5806] ? __pfx_kobject_add+0x10/0x10 [ 458.546715][ T5806] ? get_device_parent+0x370/0x3a0 [ 458.546745][ T5806] device_add+0x408/0xb50 [ 458.546774][ T5806] hci_conn_add_sysfs+0xd5/0x1e0 [ 458.546806][ T5806] le_conn_complete_evt+0xf39/0x1500 [ 458.546842][ T5806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.546865][ T5806] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 458.546889][ T5806] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.546916][ T5806] ? skb_pull_data+0xfb/0x200 [ 458.546947][ T5806] hci_le_conn_complete_evt+0x187/0x450 [ 458.546982][ T5806] hci_event_packet+0x78f/0x1200 [ 458.547003][ T5806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.547027][ T5806] ? __pfx_hci_event_packet+0x10/0x10 [ 458.547057][ T5806] ? hci_send_to_monitor+0xe2/0x570 [ 458.547084][ T5806] hci_rx_work+0x46a/0xe80 [ 458.547111][ T5806] ? process_scheduled_works+0x9ef/0x17b0 [ 458.547138][ T5806] process_scheduled_works+0xae1/0x17b0 [ 458.547195][ T5806] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.547237][ T5806] worker_thread+0x8a0/0xda0 [ 458.547277][ T5806] ? __kthread_parkme+0x7b/0x200 [ 458.547313][ T5806] kthread+0x711/0x8a0 [ 458.547344][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 458.547368][ T5806] ? __pfx_kthread+0x10/0x10 [ 458.547391][ T5806] ? rt_spin_unlock+0x150/0x200 [ 458.547416][ T5806] ? rt_spin_unlock+0x161/0x200 [ 458.547433][ T5806] ? __pfx_kthread+0x10/0x10 [ 458.547461][ T5806] ret_from_fork+0x4bc/0x870 [ 458.547496][ T5806] ? __pfx_ret_from_fork+0x10/0x10 [ 458.547531][ T5806] ? __switch_to_asm+0x39/0x70 [ 458.547551][ T5806] ? __switch_to_asm+0x33/0x70 [ 458.547576][ T5806] ? __pfx_kthread+0x10/0x10 [ 458.547604][ T5806] ret_from_fork_asm+0x1a/0x30 [ 458.547646][ T5806] [ 458.550242][ T5806] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.550287][ T5806] Bluetooth: hci3: failed to register connection device [ 458.823955][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 458.836386][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 458.836620][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 458.836804][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 458.836962][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 458.837155][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 458.837483][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 458.837651][T17658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5144'. [ 460.760977][ T5871] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 460.811239][ T5885] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 460.914439][ T5871] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 460.914469][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.942883][ T5871] usb 3-1: config 0 descriptor?? [ 460.961006][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 460.972738][ T5885] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 460.972766][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.972782][ T5885] usb 4-1: Product: syz [ 460.972795][ T5885] usb 4-1: Manufacturer: syz [ 460.972807][ T5885] usb 4-1: SerialNumber: syz [ 460.980011][ T5885] usb 4-1: config 0 descriptor?? [ 460.994462][ T5885] gspca_main: se401-2.14.0 probing 047d:5003 [ 461.405808][ T5885] gspca_se401: Frame size: 0x2 bayer [ 461.405820][ T5885] gspca_se401: Frame size: 0x127 bayer [ 461.405827][ T5885] gspca_se401: Frame size: 256x0 bayer [ 461.639219][ T5885] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 461.740874][ T5885] usb 4-1: USB disconnect, device number 42 [ 462.041824][ T5871] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 462.045861][T17731] bond0: ARP target 170.170.170.170 is already present [ 462.045889][T17731] bond0: option arp_ip_target: invalid value (2863311530) [ 462.059468][ T5871] usb 3-1: USB disconnect, device number 29 [ 462.299740][T17740] kernel profiling enabled (shift: 0) [ 462.936941][T17756] loop2: detected capacity change from 0 to 7 [ 462.976715][T17756] Dev loop2: unable to read RDB block 7 [ 462.976765][T17756] loop2: unable to read partition table [ 462.976989][T17756] loop2: partition table beyond EOD, truncated [ 462.977008][T17756] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 463.336200][T17762] __nla_validate_parse: 34 callbacks suppressed [ 463.336220][T17762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5192'. [ 463.336248][T17762] netlink: 'syz.1.5192': attribute type 7 has an invalid length. [ 463.336261][T17762] netlink: 'syz.1.5192': attribute type 8 has an invalid length. [ 463.336280][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'. [ 463.403023][T17762] erspan0: entered promiscuous mode [ 463.422097][T17762] erspan0: left promiscuous mode [ 463.680895][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 463.681357][T17740] warn_alloc: 1 callbacks suppressed [ 463.681369][T17740] syz.0.5180: vmalloc error: size 655589376, failed to allocated page array size 1280448, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 463.684994][T17740] CPU: 0 UID: 0 PID: 17740 Comm: syz.0.5180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.685021][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.685034][T17740] Call Trace: [ 463.685042][T17740] [ 463.685051][T17740] dump_stack_lvl+0x189/0x250 [ 463.685086][T17740] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 463.685113][T17740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.685142][T17740] ? __pfx__printk+0x10/0x10 [ 463.685167][T17740] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 463.685191][T17740] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 463.685229][T17740] warn_alloc+0x22e/0x3b0 [ 463.685269][T17740] ? __pfx_warn_alloc+0x10/0x10 [ 463.685316][T17740] ? __get_vm_area_node+0x2bc/0x350 [ 463.685343][T17740] ? profile_init+0xb4/0x100 [ 463.685367][T17740] __vmalloc_node_range_noprof+0x690/0x12d0 [ 463.685423][T17740] ? policy_nodemask+0x27c/0x720 [ 463.685459][T17740] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 463.685490][T17740] ? alloc_pages_mpol+0x2ab/0x380 [ 463.685518][T17740] ? profile_init+0xb4/0x100 [ 463.685544][T17740] vzalloc_noprof+0xb2/0xf0 [ 463.685568][T17740] ? profile_init+0xb4/0x100 [ 463.685589][T17740] profile_init+0xb4/0x100 [ 463.685609][T17740] profiling_store+0x70/0x120 [ 463.685636][T17740] ? __pfx_sysfs_kf_write+0x10/0x10 [ 463.685653][T17740] kernfs_fop_write_iter+0x3b0/0x540 [ 463.685694][T17740] vfs_write+0x5d5/0xb40 [ 463.685726][T17740] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 463.685754][T17740] ? __pfx_vfs_write+0x10/0x10 [ 463.685775][T17740] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 463.685807][T17740] ? mutex_lock_nested+0x154/0x1d0 [ 463.685825][T17740] ? fdget_pos+0x253/0x320 [ 463.685863][T17740] ksys_write+0x14b/0x260 [ 463.685891][T17740] ? __pfx_ksys_write+0x10/0x10 [ 463.685920][T17740] ? do_syscall_64+0xbe/0xfa0 [ 463.685951][T17740] do_syscall_64+0xfa/0xfa0 [ 463.685973][T17740] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.685998][T17740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.686018][T17740] ? clear_bhb_loop+0x60/0xb0 [ 463.686043][T17740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.686062][T17740] RIP: 0033:0x7f0b68f0efc9 [ 463.686082][T17740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.686099][T17740] RSP: 002b:00007f0b6716e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.686121][T17740] RAX: ffffffffffffffda RBX: 00007f0b69165fa0 RCX: 00007f0b68f0efc9 [ 463.686136][T17740] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 463.686150][T17740] RBP: 00007f0b68f91f91 R08: 0000000000000000 R09: 0000000000000000 [ 463.686163][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.686176][T17740] R13: 00007f0b69166038 R14: 00007f0b69165fa0 R15: 00007ffe1a093638 [ 463.686213][T17740] [ 463.686236][T17740] Mem-Info: [ 463.686246][T17740] active_anon:257 inactive_anon:4803 isolated_anon:0 [ 463.686246][T17740] active_file:16493 inactive_file:41019 isolated_file:0 [ 463.686246][T17740] unevictable:768 dirty:322 writeback:0 [ 463.686246][T17740] slab_reclaimable:11830 slab_unreclaimable:103752 [ 463.686246][T17740] mapped:29251 shmem:1354 pagetables:1515 [ 463.686246][T17740] sec_pagetables:0 bounce:0 [ 463.686246][T17740] kernel_misc_reclaimable:0 [ 463.686246][T17740] free:1294869 free_pcp:4653 free_cma:0 [ 463.686305][T17740] Node 0 active_anon:1028kB inactive_anon:19212kB active_file:65644kB inactive_file:164076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116876kB dirty:1288kB writeback:0kB shmem:3880kB kernel_stack:13888kB pagetables:5904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.686351][T17740] Node 1 active_anon:0kB inactive_anon:0kB active_file:328kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.686392][T17740] Node 0 DMA free:15328kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.686449][T17740] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 463.686484][T17740] Node 0 DMA32 free:1256836kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:19212kB active_file:65644kB inactive_file:164076kB unevictable:1536kB writepending:1288kB zspages:0kB present:3129332kB managed:2576096kB mlocked:0kB bounce:0kB free_pcp:18604kB local_pcp:10172kB free_cma:0kB [ 463.686549][T17740] lowmem_reserve[]: 0 0 1 1 1 [ 463.686583][T17740] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.686643][T17740] lowmem_reserve[]: 0 0 0 0 0 [ 463.686677][T17740] Node 1 Normal free:3907312kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:328kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.689666][T17740] lowmem_reserve[]: 0 0 0 0 0 [ 463.689697][T17740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 463.690368][T17740] Node 0 DMA32: 799*4kB (M) 213*8kB (ME) 375*16kB (ME) 256*32kB (UME) 180*64kB (UME) 111*128kB (ME) 46*256kB (UME) 20*512kB (M) 6*1024kB (M) 2*2048kB (UM) 288*4096kB (M) = 1256724kB [ 463.690531][T17740] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 463.690636][T17740] Node 1 Normal: 160*4kB (UME) 52*8kB (UME) 31*16kB (UME) 209*32kB (UME) 87*64kB (UME) 32*128kB (UE) 11*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3907312kB [ 463.710980][T17740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.711000][T17740] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 463.711017][T17740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.711033][T17740] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 463.711050][T17740] 58862 total pagecache pages [ 463.711069][T17740] 0 pages in swap cache [ 463.711076][T17740] Free swap = 124996kB [ 463.711083][T17740] Total swap = 124996kB [ 463.711091][T17740] 2097051 pages RAM [ 463.711098][T17740] 0 pages HighMem/MovableOnly [ 463.711105][T17740] 421001 pages reserved [ 463.711112][T17740] 0 pages cma reserved [ 463.830869][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 463.839080][ T10] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 463.839106][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.839124][ T10] usb 4-1: config 0 has no interface number 0 [ 463.839153][ T10] usb 4-1: too many endpoints for config 0 interface 54 altsetting 205: 134, using maximum allowed: 30 [ 463.839188][ T10] usb 4-1: config 0 interface 54 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 463.839213][ T10] usb 4-1: config 0 interface 54 has no altsetting 0 [ 463.848110][ T10] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 463.848137][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.848155][ T10] usb 4-1: Product: syz [ 463.848168][ T10] usb 4-1: Manufacturer: syz [ 463.848180][ T10] usb 4-1: SerialNumber: syz [ 464.192854][ T10] usb 4-1: config 0 descriptor?? [ 464.395009][ T10] usb 4-1: no audio or video endpoints found [ 464.550335][ T5871] usb 4-1: USB disconnect, device number 43 [ 465.063408][T17799] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 465.063433][T17799] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 465.427012][T17808] netlink: 'syz.1.5214': attribute type 3 has an invalid length. [ 465.427034][T17808] netlink: 'syz.1.5214': attribute type 7 has an invalid length. [ 465.427046][T17808] netlink: 'syz.1.5214': attribute type 8 has an invalid length. [ 465.427058][T17808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5214'. [ 465.662006][T17820] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 467.641600][T17871] wg2: entered promiscuous mode [ 467.641638][T17871] wg2: entered allmulticast mode [ 467.731209][ T5806] Bluetooth: hci3: command 0x040f tx timeout [ 468.222087][T17903] overlayfs: failed to clone lowerpath [ 468.270494][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5254'. [ 468.443405][T17914] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5256'. [ 468.552223][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5259'. [ 468.552252][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5259'. [ 468.701125][ T5871] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 468.880938][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 468.883264][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.883295][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.883317][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.883356][ T5871] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.883378][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.888860][ T5871] usb 4-1: config 0 descriptor?? [ 469.078668][T17934] genirq: Flags mismatch irq 4. 00202000 (pcl816) vs. 00202080 (ttyS0) [ 469.086041][T17934] comedi comedi3: comedi_config --init_data is deprecated [ 469.256696][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.379209][ T5871] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002B/input/input30 [ 469.392375][ T5871] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 469.502109][ T5910] usb 4-1: USB disconnect, device number 44 [ 469.751009][T17950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5273'. [ 470.168171][ T37] audit: type=1400 audit(1761748612.921:838): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=17967 comm="syz.3.5280" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 netif=wpan0 [ 470.264556][T17975] syzkaller1: entered promiscuous mode [ 470.264582][T17975] syzkaller1: entered allmulticast mode [ 470.427111][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.836325][T18003] loop9: detected capacity change from 0 to 6 [ 470.857307][ C0] blk_print_req_error: 5 callbacks suppressed [ 470.857328][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.857355][ C0] buffer_io_error: 5 callbacks suppressed [ 470.857364][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.858841][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.858877][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.918552][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.918586][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.918863][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.918888][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.919203][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.919230][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.919313][T18003] ldm_validate_partition_table(): Disk read failed. [ 470.919514][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.919541][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.919786][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.919809][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.923253][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.923285][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.923540][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.923666][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.923744][T18003] Dev loop9: unable to read RDB block 0 [ 470.923926][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.923950][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 470.925877][T18003] loop9: unable to read partition table [ 470.926110][T18003] loop9: partition table beyond EOD, truncated [ 470.926127][T18003] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 470.990895][ T1229] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 471.040903][ T5910] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 471.174362][ T1229] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 471.174391][ T1229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 471.177783][ T1229] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 471.177811][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 471.177829][ T1229] usb 1-1: Product: syz [ 471.177843][ T1229] usb 1-1: Manufacturer: syz [ 471.177856][ T1229] usb 1-1: SerialNumber: syz [ 471.237117][ T5910] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 471.237146][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.268672][ T5910] usb 2-1: config 0 descriptor?? [ 471.283936][ T1229] usb 1-1: config 0 descriptor?? [ 471.289984][ T1229] usb 1-1: selecting invalid altsetting 0 [ 471.303253][ T5910] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 471.411017][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 471.495899][ T5871] usb 1-1: USB disconnect, device number 26 [ 471.566523][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.566616][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.566638][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.566679][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.566698][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.650664][ T10] usb 4-1: config 0 descriptor?? [ 471.689849][ T5910] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 472.100331][ T5910] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 472.124694][ T10] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 472.306447][ T10] usb 2-1: USB disconnect, device number 31 [ 472.862276][T18049] loop2: detected capacity change from 0 to 7 [ 472.863477][T18049] Dev loop2: unable to read RDB block 7 [ 472.863523][T18049] loop2: unable to read partition table [ 472.863950][T18049] loop2: partition table beyond EOD, truncated [ 472.863971][T18049] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 473.057076][T18057] sp0: Synchronizing with TNC [ 473.380941][ T5878] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 473.566596][ T5878] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 473.566626][ T5878] usb 3-1: config 8 has no interface number 0 [ 473.566673][ T5878] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 473.566701][ T5878] usb 3-1: config 8 interface 177 has no altsetting 0 [ 473.566733][ T5878] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 473.566754][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.575757][T18061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 473.800841][ T5878] usb 3-1: string descriptor 0 read error: -71 [ 473.804846][ C1] ir_toy 3-1:8.177: out urb status: -71 [ 474.185082][T18095] syzkaller1: entered promiscuous mode [ 474.185107][T18095] syzkaller1: entered allmulticast mode [ 474.188266][T18097] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 474.318042][ T1229] usb 4-1: USB disconnect, device number 45 [ 474.320964][ T5878] ir_toy 3-1:8.177: could not write reset command: -110 [ 474.321230][ T5878] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 474.346675][ T5878] usb 3-1: USB disconnect, device number 30 [ 474.425046][T18101] binder: 18100:18101 ioctl c0306201 0 returned -14 [ 476.346975][ T37] audit: type=1326 audit(1761748619.111:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.347284][ T37] audit: type=1326 audit(1761748619.111:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.382292][ T37] audit: type=1326 audit(1761748619.151:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.384359][ T37] audit: type=1326 audit(1761748619.151:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.385298][ T37] audit: type=1326 audit(1761748619.151:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.385576][ T37] audit: type=1326 audit(1761748619.151:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.391603][ T37] audit: type=1326 audit(1761748619.161:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.392665][ T37] audit: type=1326 audit(1761748619.161:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.392951][ T37] audit: type=1326 audit(1761748619.161:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.394905][ T37] audit: type=1326 audit(1761748619.161:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18153 comm="syz.0.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 476.621297][T18159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.869280][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 476.984494][T18174] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 477.029545][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 477.029579][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 477.029606][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 477.029640][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 477.029663][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.080072][ T10] usb 1-1: config 0 descriptor?? [ 477.084298][T18160] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 477.154898][ T5885] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 477.303133][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 477.305529][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.305561][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.305599][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 477.305622][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.313164][ T5885] usb 4-1: config 0 descriptor?? [ 477.318559][ T5885] hub 4-1:0.0: USB hub found [ 477.520098][ T10] hid_parser_main: 5 callbacks suppressed [ 477.520121][ T10] ryos 0003:1E7D:3138.002D: unknown main item tag 0x0 [ 477.520152][ T10] ryos 0003:1E7D:3138.002D: item fetching failed at offset 3/5 [ 477.527111][ T5885] hub 4-1:0.0: 1 port detected [ 477.549005][ T10] ryos 0003:1E7D:3138.002D: parse failed [ 477.549082][ T10] ryos 0003:1E7D:3138.002D: probe with driver ryos failed with error -22 [ 477.755970][ T5878] usb 1-1: USB disconnect, device number 27 [ 477.948913][ T5885] usb 4-1: USB disconnect, device number 46 [ 478.400942][ T1812] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 478.502780][T18224] netlink: 'syz.1.5394': attribute type 1 has an invalid length. [ 478.553446][ T1812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.553472][ T1812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.553509][ T1812] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 478.553529][ T1812] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 478.555024][ T1812] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.555050][ T1812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 478.555069][ T1812] usb 3-1: SerialNumber: syz [ 478.794095][ T1812] usb 3-1: 0:2 : does not exist [ 478.794201][ T1812] usb 3-1: unit 5 not found! [ 478.849542][ T1812] usb 3-1: USB disconnect, device number 31 [ 478.956638][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5400'. [ 479.076369][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.252512][T18237] team0: Port device team_slave_1 removed [ 479.435659][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.350965][ T5878] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 480.501308][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 480.529319][ T5878] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 480.529363][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 480.529389][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.529412][ T5878] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.529453][ T5878] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 480.529477][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.791298][ T5878] usb 1-1: usb_control_msg returned -32 [ 480.791350][ T5878] usbtmc 1-1:16.0: can't read capabilities [ 480.835452][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5430'. [ 481.311095][T18318] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 481.311095][T18318] The task syz.1.5433 (18318) triggered the difference, watch for misbehavior. [ 481.451013][T18322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.551023][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.794661][T18330] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5442'. [ 482.899749][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5451'. [ 482.899778][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5451'. [ 483.118584][ T10] usb 1-1: USB disconnect, device number 28 [ 484.029216][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 484.029233][ T37] audit: type=1326 audit(1761748626.791:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.029283][ T37] audit: type=1326 audit(1761748626.791:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.029323][ T37] audit: type=1326 audit(1761748626.791:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.029361][ T37] audit: type=1326 audit(1761748626.791:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.030885][ T37] audit: type=1326 audit(1761748626.791:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.030927][ T37] audit: type=1326 audit(1761748626.791:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.030957][ T37] audit: type=1326 audit(1761748626.791:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.031201][ T37] audit: type=1326 audit(1761748626.801:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.051524][ T37] audit: type=1326 audit(1761748626.801:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.051576][ T37] audit: type=1326 audit(1761748626.801:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18383 comm="syz.1.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad42c4efc9 code=0x7ffc0000 [ 484.161507][T18388] netlink: 'syz.0.5466': attribute type 1 has an invalid length. [ 484.583273][T18403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5474'. [ 485.634565][T18451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.132777][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.341227][ T5871] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 486.490981][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 486.493451][ T5871] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 486.493510][ T5871] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.493536][ T5871] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.493558][ T5871] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 486.493583][ T5871] usb 1-1: config 7 interface 0 has no altsetting 0 [ 486.493615][ T5871] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 486.493637][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.900290][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.044553][ T5871] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.002E/input/input34 [ 487.145973][ T5871] kye 0003:0458:5010.002E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 487.641666][T18515] netlink: 'syz.4.5525': attribute type 1 has an invalid length. [ 488.204935][ C1] kye 0003:0458:5010.002E: usb_submit_urb(ctrl) failed: -1 [ 488.481270][T18553] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5541'. [ 488.812649][ T5885] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 488.963020][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 488.975055][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 488.978925][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 488.978954][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.978973][ T5885] usb 2-1: Product: syz [ 488.978987][ T5885] usb 2-1: Manufacturer: syz [ 488.979001][ T5885] usb 2-1: SerialNumber: syz [ 489.043132][ T5885] usb 2-1: config 0 descriptor?? [ 489.049280][ T5885] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 489.049316][ T5885] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 489.089365][ T5878] usb 1-1: USB disconnect, device number 29 [ 489.362313][T18582] netlink: 'syz.4.5554': attribute type 1 has an invalid length. [ 489.362335][T18582] netlink: 'syz.4.5554': attribute type 2 has an invalid length. [ 489.406596][T18582] netlink: 'syz.4.5554': attribute type 1 has an invalid length. [ 489.406619][T18582] netlink: 'syz.4.5554': attribute type 2 has an invalid length. [ 489.651905][ T5885] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 489.971529][ T5885] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 489.971576][ T5885] em28xx 2-1:0.0: board has no eeprom [ 490.051218][ T5885] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 490.051248][ T5885] em28xx 2-1:0.0: dvb set to bulk mode. [ 490.052743][ T5878] em28xx 2-1:0.0: Binding DVB extension [ 490.102477][ T5885] usb 2-1: USB disconnect, device number 32 [ 490.104652][ T5885] em28xx 2-1:0.0: Disconnecting em28xx [ 490.199783][ T5878] em28xx 2-1:0.0: Registering input extension [ 490.216795][ T5885] em28xx 2-1:0.0: Closing input extension [ 490.304078][ T5885] em28xx 2-1:0.0: Freeing device [ 490.541383][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5572'. [ 490.830017][T18636] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5581'. [ 491.064198][ T5878] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 491.212860][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 491.215377][ T5878] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 491.215402][ T5878] usb 4-1: config 0 has no interface number 0 [ 491.255899][ T5878] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 491.255929][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.255948][ T5878] usb 4-1: Product: syz [ 491.255962][ T5878] usb 4-1: Manufacturer: syz [ 491.255976][ T5878] usb 4-1: SerialNumber: syz [ 491.294693][ T5878] usb 4-1: config 0 descriptor?? [ 491.308758][ T5878] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 491.526426][ T5878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 491.559188][ T5878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 491.560909][ T5910] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 491.726611][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 491.729625][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 491.729665][ T5910] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 491.729687][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.748690][ T5910] usb 1-1: config 0 descriptor?? [ 491.911420][ T1812] kernel write not supported for file bpf-prog (pid: 1812 comm: kworker/0:4) [ 491.929132][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 491.930343][ T1812] usb 4-1: USB disconnect, device number 47 [ 492.011231][ T1812] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 492.028743][ T1812] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 492.034733][ T1812] quatech2 4-1:0.51: device disconnected [ 492.096723][T18683] syzkaller1: entered promiscuous mode [ 492.096747][T18683] syzkaller1: entered allmulticast mode [ 492.234552][ T5910] hid (null): global environment stack underflow [ 492.234598][ T5910] hid (null): report_id 0 is invalid [ 492.236460][ T5910] hid (null): global environment stack underflow [ 492.236586][ T5910] hid (null): unknown global tag 0xc [ 492.236601][ T5910] hid (null): report_id 25068 is invalid [ 492.236789][ T5910] hid (null): report_id 0 is invalid [ 492.236803][ T5910] hid (null): global environment stack overflow [ 492.238390][ T5910] hid (null): unknown global tag 0xc [ 492.238408][ T5910] hid (null): unknown global tag 0x58 [ 492.437410][ T5878] usb 1-1: USB disconnect, device number 30 [ 493.323278][T18724] veth1_vlan: left allmulticast mode [ 493.385705][T18724] macvlan0: left allmulticast mode [ 493.410108][T18724] netlink: 'syz.4.5622': attribute type 2 has an invalid length. [ 494.376932][T18775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5645'. [ 494.377081][T18775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.378076][T18775] batadv_slave_0: entered promiscuous mode [ 494.420879][ T5910] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 494.579550][ T5910] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 494.579580][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.579598][ T5910] usb 2-1: Product: syz [ 494.579609][ T5910] usb 2-1: Manufacturer: syz [ 494.579622][ T5910] usb 2-1: SerialNumber: syz [ 494.593564][ T5910] usb 2-1: config 0 descriptor?? [ 494.810941][ T1812] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 494.833734][ T5910] usb 2-1: USB disconnect, device number 33 [ 494.963088][ T1812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.963114][ T1812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.964265][ T1812] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 494.964290][ T1812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 494.964307][ T1812] usb 3-1: SerialNumber: syz [ 495.100967][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 495.174754][ T1812] usb 3-1: 0:2 : does not exist [ 495.174808][ T1812] usb 3-1: unit 55 not found! [ 495.192248][ T1812] usb 3-1: USB disconnect, device number 32 [ 495.250998][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 495.252855][ T10] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 495.252881][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.252900][ T10] usb 4-1: config 0 has no interface number 0 [ 495.255213][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 495.255241][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.255260][ T10] usb 4-1: Product: syz [ 495.255270][ T10] usb 4-1: Manufacturer: syz [ 495.255277][ T10] usb 4-1: SerialNumber: syz [ 495.258718][ T10] usb 4-1: config 0 descriptor?? [ 495.265898][ T10] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 495.265996][ T10] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 495.266814][ T10] uvcvideo 4-1:0.31: Failed to create links for entity 6 [ 495.266833][ T10] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 495.468340][ T1812] usb 4-1: USB disconnect, device number 48 [ 495.955223][T18820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5666'. [ 496.003043][ T5910] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 496.097210][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5668'. [ 496.115841][T18824] gretap0: entered promiscuous mode [ 496.115957][T18824] macsec1: entered promiscuous mode [ 496.116119][T18824] macsec1: entered allmulticast mode [ 496.116133][T18824] gretap0: entered allmulticast mode [ 496.167460][T18824] gretap0: left allmulticast mode [ 496.167741][T18824] gretap0: left promiscuous mode [ 496.169699][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 496.177569][ T5910] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 496.177597][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.203309][ T5910] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 496.830576][ T37] audit: type=1326 audit(1761748639.591:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 496.832996][ T37] audit: type=1326 audit(1761748639.591:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 496.857322][ T37] audit: type=1326 audit(1761748639.621:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 496.857665][ T37] audit: type=1326 audit(1761748639.621:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 496.858441][ T37] audit: type=1326 audit(1761748639.621:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 496.859049][ T37] audit: type=1326 audit(1761748639.621:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 497.144336][ T37] audit: type=1326 audit(1761748639.911:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 497.144772][ T37] audit: type=1326 audit(1761748639.911:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 497.229203][ T5910] gspca_nw80x: reg_w err -71 [ 497.229301][ T5910] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 497.237580][ T5910] usb 3-1: USB disconnect, device number 33 [ 497.274856][ T37] audit: type=1326 audit(1761748640.041:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 497.274902][ T37] audit: type=1326 audit(1761748640.041:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18849 comm="syz.0.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7ffc0000 [ 497.701018][ T5871] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 497.851116][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 497.858780][ T5871] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 497.858811][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.892390][ T5871] usb 1-1: config 0 descriptor?? [ 497.940923][ T5910] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 498.101724][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.121119][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.121150][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 498.121194][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 498.121216][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.143084][ T5910] usb 2-1: config 0 descriptor?? [ 498.148635][T18869] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 498.365807][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.454051][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.591999][ T5910] logitech-hidpp-device 0003:046D:C262.0030: unbalanced collection at end of report description [ 498.592816][ T5910] logitech-hidpp-device 0003:046D:C262.0030: hidpp_probe:parse failed [ 498.592935][ T5910] logitech-hidpp-device 0003:046D:C262.0030: probe with driver logitech-hidpp-device failed with error -22 [ 498.935185][T18901] loop2: detected capacity change from 0 to 7 [ 498.940229][T18901] Dev loop2: unable to read RDB block 7 [ 498.940273][T18901] loop2: unable to read partition table [ 498.940511][T18901] loop2: partition table beyond EOD, truncated [ 498.940529][T18901] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 498.971176][ T5871] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 498.971465][ T5871] asix 1-1:0.0: probe with driver asix failed with error -71 [ 499.007031][ T5871] usb 1-1: USB disconnect, device number 31 [ 499.062050][ T5910] usb 2-1: USB disconnect, device number 34 [ 499.361179][ T5885] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 499.514625][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.514699][ T5885] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 499.544390][ T5885] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.544420][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.544438][ T5885] usb 4-1: Product: syz [ 499.544451][ T5885] usb 4-1: Manufacturer: syz [ 499.544465][ T5885] usb 4-1: SerialNumber: syz [ 499.586835][ T5885] cdc_mbim 4-1:1.0: skipping garbage [ 499.802313][T18910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.413195][T18910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.417472][ T5885] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 500.623087][ T5885] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 500.626926][ T5885] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 500.692543][ T5885] wwan wwan0: port wwan0mbim0 attached [ 500.726791][ T5885] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:18:be:50:be:38 [ 500.746536][ T5885] usb 4-1: USB disconnect, device number 49 [ 500.748888][ T5885] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 500.888610][T18974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5735'. [ 500.923021][ T5885] wwan wwan0: port wwan0mbim0 disconnected [ 501.514268][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.820892][ T1812] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 501.911292][ T5871] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 501.993613][ T1812] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 501.993644][ T1812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.009554][ T1812] usb 2-1: config 0 descriptor?? [ 502.024979][ T1812] gspca_main: spca508-2.14.0 probing 8086:0110 [ 502.061139][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 502.065617][ T5871] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 502.065650][ T5871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 502.065674][ T5871] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.065704][ T5871] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.065749][ T5871] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 502.065771][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.221925][ T1812] gspca_spca508: reg_read err -32 [ 502.222921][ T1812] gspca_spca508: reg_read err -32 [ 502.224164][ T1812] gspca_spca508: reg_read err -32 [ 502.360927][ T5871] usb 3-1: usb_control_msg returned -32 [ 502.360973][ T5871] usbtmc 3-1:16.0: can't read capabilities [ 502.427970][ T1812] gspca_spca508: reg_read err -71 [ 502.429518][ T1812] gspca_spca508: reg write: error -71 [ 502.429606][ T1812] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 502.442965][ T1812] usb 2-1: USB disconnect, device number 35 [ 502.467034][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5749'. [ 503.450883][ T5885] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 503.601096][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 503.626477][ T5885] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 503.626506][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.626525][ T5885] usb 4-1: Product: syz [ 503.626539][ T5885] usb 4-1: Manufacturer: syz [ 503.626552][ T5885] usb 4-1: SerialNumber: syz [ 503.664794][ T5885] usb 4-1: config 0 descriptor?? [ 503.677801][ T5885] gspca_main: sq905-2.14.0 probing 2770:9120 [ 504.301120][T19049] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.312279][ T10] IPVS: starting estimator thread 0... [ 504.400929][T19052] IPVS: using max 9 ests per chain, 21600 per kthread [ 504.681559][ T10] usb 3-1: USB disconnect, device number 34 [ 504.687412][ T5885] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 504.687507][ T5885] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 504.747761][ T5885] usb 4-1: USB disconnect, device number 50 [ 505.246031][T19087] input: syz0 as /devices/virtual/input/input36 [ 505.317546][T19093] sctp: [Deprecated]: syz.3.5785 (pid 19093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.317546][T19093] Use struct sctp_sack_info instead [ 505.921958][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 505.921976][ T37] audit: type=1326 audit(1761748648.691:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19079 comm="syz.0.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68f0efc9 code=0x7fc00000 [ 505.940878][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 506.090938][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 506.095987][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.096015][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.096027][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 506.096051][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 506.096064][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.099141][ T10] usb 3-1: config 0 descriptor?? [ 506.592861][ T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0031/input/input37 [ 506.676424][ T10] appleir 0003:05AC:8241.0031: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 506.814264][ T5885] usb 3-1: USB disconnect, device number 35 [ 507.351187][ T5871] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 507.504888][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 507.509822][ T5871] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 507.509856][ T5871] usb 2-1: config 0 interface 0 has no altsetting 0 [ 507.509888][ T5871] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 507.509910][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.562356][ T5871] usb 2-1: config 0 descriptor?? [ 507.863321][T19175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.271130][ T5878] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 508.302520][ T5910] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 508.354522][ T5871] corsair-cpro 0003:1B1C:0C10.0032: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 508.421451][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 508.429372][ T5878] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.429397][ T5878] usb 1-1: config 0 has no interface number 0 [ 508.456499][ T5910] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 508.456532][ T5910] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.456553][ T5910] usb 4-1: config 0 interface 0 has no altsetting 0 [ 508.456586][ T5910] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 508.456608][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.460345][ T5878] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 508.460422][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.460441][ T5878] usb 1-1: Product: syz [ 508.460454][ T5878] usb 1-1: Manufacturer: syz [ 508.460467][ T5878] usb 1-1: SerialNumber: syz [ 508.492351][ T5910] usb 4-1: config 0 descriptor?? [ 508.562779][ T5871] corsair-cpro 0003:1B1C:0C10.0032: probe with driver corsair-cpro failed with error -71 [ 508.567642][ T5878] usb 1-1: config 0 descriptor?? [ 508.590433][ T5878] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 508.743665][ T5871] usb 2-1: USB disconnect, device number 36 [ 508.987503][ T5910] hid-steam 0003:28DE:1102.0033: unknown main item tag 0x0 [ 508.987571][ T5910] hid-steam 0003:28DE:1102.0033: unknown main item tag 0x0 [ 508.988810][ T5910] hid-steam 0003:28DE:1102.0033: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 509.041949][ T5910] hid-steam 0003:28DE:1102.0033: Steam Controller 'XXXXXXXXXX' connected [ 509.066211][ T5910] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0033/input/input38 [ 509.090330][ T5910] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 509.090365][ T5910] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 509.117176][ T5910] hid-steam 0003:28DE:1102.0034: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 509.169472][T19197] loop8: detected capacity change from 0 to 7 [ 509.185056][T19197] Dev loop8: unable to read RDB block 7 [ 509.185106][T19197] loop8: unable to read partition table [ 509.185339][T19197] loop8: partition table beyond EOD, truncated [ 509.185363][T19197] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 509.588367][ T5878] gspca_spca1528: reg_w err -71 [ 509.588477][ T5878] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 509.620214][ T5878] usb 1-1: USB disconnect, device number 32 [ 509.802907][ T5878] usb 4-1: USB disconnect, device number 51 [ 509.934970][ T5878] hid-steam 0003:28DE:1102.0033: Steam Controller 'XXXXXXXXXX' disconnected [ 511.630865][ T5910] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 511.731075][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 511.800935][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 511.816689][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.816723][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.816762][ T5910] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 511.816785][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.825870][ T5910] usb 3-1: config 0 descriptor?? [ 512.244499][ T5910] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 512.244545][ T5910] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 512.244571][ T5910] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 512.244596][ T5910] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 512.244622][ T5910] mcp2221 0003:04D8:00DD.0035: unknown main item tag 0x0 [ 512.246276][ T5910] mcp2221 0003:04D8:00DD.0035: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 512.442809][ T5885] usb 3-1: USB disconnect, device number 36 [ 513.479791][T19314] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5883'. [ 513.879068][T19323] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5887'. [ 514.369770][T19344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5896'. [ 514.369797][T19344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5896'. [ 514.575527][T19319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5885'. [ 515.034196][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 515.083491][T19369] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5906'. [ 515.213589][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.213623][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.213643][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.213684][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.213705][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.242876][ T10] usb 3-1: config 0 descriptor?? [ 515.590624][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5910'. [ 515.590658][T19379] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5910'. [ 515.745600][ T10] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 515.833939][T19383] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5913'. [ 515.933759][ T5885] usb 3-1: USB disconnect, device number 37 [ 516.714359][T19425] input: syz0 as /devices/virtual/input/input40 [ 517.180900][ T1229] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 517.333359][ T1229] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 517.333389][ T1229] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 517.333410][ T1229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 517.333430][ T1229] usb 1-1: config 1 has no interface number 0 [ 517.333494][ T1229] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 517.333520][ T1229] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 517.333561][ T1229] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 517.333583][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.436489][ T1229] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 517.467045][ T37] audit: type=1326 audit(1761748916.230:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19452 comm="syz.1.5942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad42c4efc9 code=0x0 [ 517.993006][ T1229] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 518.228843][ T5885] usb 1-1: USB disconnect, device number 33 [ 518.237226][ T5885] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 518.409855][T19491] netlink: 'syz.2.5951': attribute type 12 has an invalid length. [ 518.409877][T19491] netlink: 'syz.2.5951': attribute type 29 has an invalid length. [ 518.409898][T19491] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5951'. [ 518.525113][T19496] tipc: Started in network mode [ 518.525143][T19496] tipc: Node identity ac1414aa, cluster identity 4711 [ 518.529415][T19496] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.529639][T19496] tipc: Enabled bearer , priority 10 [ 518.661939][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.801235][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 518.941115][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.081447][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.220956][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.330995][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 519.331019][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 519.331522][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 519.360927][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.501164][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 519.646290][ T5878] tipc: Node number set to 2886997162 [ 519.791142][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 520.060969][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 521.410936][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 521.410962][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 521.411922][ C1] ------------[ cut here ]------------ [ 521.411933][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 521.412020][ C1] WARNING: CPU: 1 PID: 29 at kernel/workqueue.c:2258 __queue_work+0x2e5/0x1010 [ 521.412050][ C1] Modules linked in: [ 521.412065][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 521.412081][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.412091][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 521.412108][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 b6 a1 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 ed e9 34 00 eb 2e e8 e6 e9 34 00 e9 [ 521.412120][ C1] RSP: 0018:ffffc90000a3f808 EFLAGS: 00010046 [ 521.412132][ C1] RAX: 468adcf0d4330d00 RBX: 0000000000000000 RCX: ffff88801be99e00 [ 521.412143][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 521.412152][ C1] RBP: ffff88805aae49a0 R08: 0000000000000000 R09: 0000000000000100 [ 521.412161][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 521.412171][ C1] R13: dffffc0000000000 R14: ffff888027f06968 R15: ffff88801be9a94c [ 521.412182][ C1] FS: 0000000000000000(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 521.412194][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.412204][ C1] CR2: 000000110c2db583 CR3: 000000005ca2e000 CR4: 00000000003526f0 [ 521.412218][ C1] Call Trace: [ 521.412225][ C1] [ 521.412245][ C1] call_timer_fn+0x17e/0x5f0 [ 521.412268][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 521.412287][ C1] ? call_timer_fn+0xbe/0x5f0 [ 521.412307][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 521.412337][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 521.412356][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 521.412374][ C1] __run_timer_base+0x709/0x970 [ 521.412403][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 521.412433][ C1] run_timer_softirq+0xb7/0x180 [ 521.412460][ C1] handle_softirqs+0x22f/0x710 [ 521.412486][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 521.412512][ C1] run_ktimerd+0xcf/0x190 [ 521.412531][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 521.412548][ C1] ? schedule+0x91/0x360 [ 521.412574][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 521.412594][ C1] smpboot_thread_fn+0x542/0xa60 [ 521.412613][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 521.412639][ C1] kthread+0x711/0x8a0 [ 521.412664][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 521.412682][ C1] ? __pfx_kthread+0x10/0x10 [ 521.412700][ C1] ? rt_spin_unlock+0x150/0x200 [ 521.412721][ C1] ? rt_spin_unlock+0x161/0x200 [ 521.412734][ C1] ? __pfx_kthread+0x10/0x10 [ 521.412757][ C1] ret_from_fork+0x4bc/0x870 [ 521.412779][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 521.412806][ C1] ? __switch_to_asm+0x39/0x70 [ 521.412823][ C1] ? __switch_to_asm+0x33/0x70 [ 521.412839][ C1] ? __pfx_kthread+0x10/0x10 [ 521.412864][ C1] ret_from_fork_asm+0x1a/0x30 [ 521.412896][ C1] [ 521.412916][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 521.412929][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 521.412947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 521.412957][ C1] Call Trace: [ 521.412964][ C1] [ 521.412972][ C1] dump_stack_lvl+0x99/0x250 [ 521.412997][ C1] ? __asan_memcpy+0x40/0x70 [ 521.413015][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.413035][ C1] ? __pfx__printk+0x10/0x10 [ 521.413066][ C1] vpanic+0x237/0x6d0 [ 521.413085][ C1] ? __pfx_vpanic+0x10/0x10 [ 521.413113][ C1] panic+0xb9/0xc0 [ 521.413131][ C1] ? __pfx_panic+0x10/0x10 [ 521.413163][ C1] __warn+0x31b/0x4b0 [ 521.413180][ C1] ? __queue_work+0x2e5/0x1010 [ 521.413207][ C1] ? __queue_work+0x2e5/0x1010 [ 521.413227][ C1] report_bug+0x2be/0x4f0 [ 521.413248][ C1] ? __queue_work+0x2e5/0x1010 [ 521.413269][ C1] ? __queue_work+0x2e5/0x1010 [ 521.413290][ C1] ? __queue_work+0x2e7/0x1010 [ 521.413312][ C1] handle_bug+0x84/0x160 [ 521.413340][ C1] exc_invalid_op+0x1a/0x50 [ 521.413368][ C1] asm_exc_invalid_op+0x1a/0x20 [ 521.413388][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 521.413415][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 b6 a1 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 ed e9 34 00 eb 2e e8 e6 e9 34 00 e9 [ 521.413434][ C1] RSP: 0018:ffffc90000a3f808 EFLAGS: 00010046 [ 521.413462][ C1] RAX: 468adcf0d4330d00 RBX: 0000000000000000 RCX: ffff88801be99e00 [ 521.413478][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 521.413492][ C1] RBP: ffff88805aae49a0 R08: 0000000000000000 R09: 0000000000000100 [ 521.413506][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 521.413523][ C1] R13: dffffc0000000000 R14: ffff888027f06968 R15: ffff88801be9a94c [ 521.413558][ C1] ? __queue_work+0x2e4/0x1010 [ 521.413600][ C1] call_timer_fn+0x17e/0x5f0 [ 521.413627][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 521.413653][ C1] ? call_timer_fn+0xbe/0x5f0 [ 521.413679][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 521.413717][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 521.413742][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 521.413772][ C1] __run_timer_base+0x709/0x970 [ 521.413814][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 521.413857][ C1] run_timer_softirq+0xb7/0x180 [ 521.413881][ C1] handle_softirqs+0x22f/0x710 [ 521.413914][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 521.413945][ C1] run_ktimerd+0xcf/0x190 [ 521.413968][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 521.413991][ C1] ? schedule+0x91/0x360 [ 521.414022][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 521.414045][ C1] smpboot_thread_fn+0x542/0xa60 [ 521.414071][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 521.414106][ C1] kthread+0x711/0x8a0 [ 521.414139][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 521.414164][ C1] ? __pfx_kthread+0x10/0x10 [ 521.414189][ C1] ? rt_spin_unlock+0x150/0x200 [ 521.414217][ C1] ? rt_spin_unlock+0x161/0x200 [ 521.414234][ C1] ? __pfx_kthread+0x10/0x10 [ 521.414258][ C1] ret_from_fork+0x4bc/0x870 [ 521.414278][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 521.414309][ C1] ? __switch_to_asm+0x39/0x70 [ 521.414328][ C1] ? __switch_to_asm+0x33/0x70 [ 521.414345][ C1] ? __pfx_kthread+0x10/0x10 [ 521.414373][ C1] ret_from_fork_asm+0x1a/0x30 [ 521.414409][ C1] [ 521.414684][ C1] Kernel Offset: disabled