last executing test programs: 37.1587908s ago: executing program 2 (id=1202): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1c4}]}) 36.967813725s ago: executing program 2 (id=1205): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x8000001, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 36.413535191s ago: executing program 2 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) 36.206606208s ago: executing program 2 (id=1213): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 35.23613007s ago: executing program 2 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x1c, r1, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 34.902926374s ago: executing program 2 (id=1233): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004004}, 0x80) bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 34.552348419s ago: executing program 32 (id=1233): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004004}, 0x80) bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 7.334927602s ago: executing program 5 (id=1522): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x5760, 0x0) write(r0, 0x0, 0x0) 7.141867391s ago: executing program 5 (id=1527): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) 6.831473816s ago: executing program 5 (id=1531): mount$fuse(0x0, 0x0, 0x0, 0x84020c, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}], [{@euid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x19}}, {@hash}, {@fowner_gt}]}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x3ff}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 6.761004446s ago: executing program 5 (id=1532): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701"], 0x28, 0x2000c000}}], 0x2, 0x88) 6.704168294s ago: executing program 5 (id=1534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 6.33977323s ago: executing program 5 (id=1541): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "0000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c3800"}}) 6.122815774s ago: executing program 3 (id=1545): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0xfffc, @multicast1}}}, 0x88) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001300)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 5.850710874s ago: executing program 3 (id=1549): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) 5.77442192s ago: executing program 3 (id=1552): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 5.589597518s ago: executing program 3 (id=1553): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) 4.578917533s ago: executing program 3 (id=1558): socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8) close(0x4) 4.522457331s ago: executing program 3 (id=1559): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x0, 0x6000, 0x0, 0x0}, {0x1, 0x3a01, 0x0, 0x0}], 0x2}) 2.174823369s ago: executing program 1 (id=1583): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000000025}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 2.023470681s ago: executing program 1 (id=1586): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 1.840231227s ago: executing program 1 (id=1588): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x1be, 0x4) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(0x3) 1.654815042s ago: executing program 1 (id=1591): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@private=0xa010100, 0x4e62, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x1000000000, 0x8, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in=@broadcast, 0x3505, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 1.524025291s ago: executing program 4 (id=1594): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x2, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000440)}) 1.359814857s ago: executing program 4 (id=1596): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x12, 0x19, 0x8, "534a85015f0f2b8f5dd68b0cb81a0553fbc127b115288b938a4a825e7fe002c05a09fb03ce28eefc8e36339f3329659065f6bdbcafdcf17efca47d342bf35e00", "f2c20000e4d9a66a2b29a8e1f42f7907521f33f3fcdcb6f027ac9ff0cc0ac6a807db43e82b13d8bc1bb0ad752906a0a2c501ecab0549c519248f1f00", "e892038420710000009c8400", [0x4]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000009c0)={{0x0, 0x7, 0xf, 0xfffffffffffffff9, 0x6efb8e0b, 0x6, 0x9, 0x7, 0x1, 0x4, 0xd, 0x9, 0x7f, 0x7ff, 0xfffffffffffffff7}}) 1.034718161s ago: executing program 0 (id=1598): syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) stat(&(0x7f0000002000)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 868.648774ms ago: executing program 0 (id=1599): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 846.495285ms ago: executing program 4 (id=1600): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 631.132029ms ago: executing program 1 (id=1601): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r1, 0x0, 0x40000400, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) 555.867672ms ago: executing program 0 (id=1602): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close_range(r0, 0xffffffffffffffff, 0x0) 489.554879ms ago: executing program 4 (id=1603): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000003c0)="85", 0x1}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="78000000000000002900000039000000670c02a40000000000000000000000000000000000000001fc020000000000000000000000000001fc020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000bb200100000000000000000000000000021400000000000000290000004300000000100000000000001400000000000000290000000b0000008000000000000000280000000000000029000000370000003c01000000000000000100c204000000100000000000000080"], 0x150}}], 0x2, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) 416.859844ms ago: executing program 1 (id=1604): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 377.015545ms ago: executing program 0 (id=1605): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 329.400992ms ago: executing program 4 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x104, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xe8, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x13, 0x3, 0x1}}, @ipv6={{0x6}, {0x11, 0x2, @loopback}, {0x5, 0x3, 0x20}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 118.930354ms ago: executing program 4 (id=1607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000080)) 53.780297ms ago: executing program 0 (id=1608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) 0s ago: executing program 0 (id=1609): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000f6000/0x3000)=nil, 0x3000, 0x9) kernel console output (not intermixed with test programs): 146][ T5894] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.731460][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.769840][ T5894] usb 4-1: config 0 descriptor?? [ 106.793496][ T5894] cp210x 4-1:0.0: cp210x converter detected [ 106.834559][ T9] ueagle-atm 3-1:0.125: usbatm_usb_probe: bind failed: -19! [ 106.858958][ T30] audit: type=1326 audit(1764736567.479:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 106.910178][ T9] usb 3-1: USB disconnect, device number 6 [ 106.962201][ T30] audit: type=1326 audit(1764736567.479:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 107.047598][ T30] audit: type=1326 audit(1764736567.479:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 107.128424][ T30] audit: type=1326 audit(1764736567.479:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 107.212968][ T30] audit: type=1326 audit(1764736567.479:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6738 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 107.242988][ T5894] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 107.269066][ T5894] usb 4-1: cp210x converter now attached to ttyUSB0 [ 107.460372][ T24] usb 4-1: USB disconnect, device number 8 [ 107.490051][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.491118][ T6753] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.565981][ T24] cp210x 4-1:0.0: device disconnected [ 107.817115][ T6763] dvmrp8: entered allmulticast mode [ 107.840769][ T6763] dvmrp8: left allmulticast mode [ 107.894559][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 108.091973][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 108.270367][ T6782] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 108.288851][ T6778] kvm: user requested TSC rate below hardware speed [ 108.924919][ T5894] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.091401][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 109.129325][ T5894] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 109.165917][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.200240][ T5894] usb 4-1: Product: syz [ 109.216010][ T5894] usb 4-1: Manufacturer: syz [ 109.220804][ T5894] usb 4-1: SerialNumber: syz [ 109.251923][ T5894] usb 4-1: config 0 descriptor?? [ 109.265112][ T5894] usb-storage 4-1:0.0: USB Mass Storage device detected [ 109.301818][ T5894] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 109.315400][ T5894] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 109.315400][ T5894] Please send a copy of this message to and [ 109.340976][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.479666][ T5894] usb 4-1: USB disconnect, device number 9 [ 109.955200][ T6845] binder: 6844:6845 ioctl c018620c 200000000040 returned -1 [ 109.961084][ T6847] ALSA: mixer_oss: invalid OSS volume 'qQ \\j|ɰstXj`p' [ 109.981368][ T6847] ALSA: mixer_oss: invalid OSS volume '.~DY45 1 [ 113.854867][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.867991][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.878260][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.888742][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.896831][ T77] bridge_slave_0: left allmulticast mode [ 113.903298][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.921535][ T77] bridge_slave_0: left promiscuous mode [ 113.928366][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.838577][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.893098][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.925942][ T77] bond0 (unregistering): Released all slaves [ 114.989248][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 115.184335][ T6991] tipc: Started in network mode [ 115.189417][ T6991] tipc: Node identity ac14140f, cluster identity 4711 [ 115.197396][ T6991] tipc: New replicast peer: 255.255.255.255 [ 115.206456][ T6991] tipc: Enabled bearer , priority 10 [ 115.961061][ T5838] Bluetooth: hci4: command tx timeout [ 116.400002][ T5947] tipc: Node number set to 2886997007 [ 116.426192][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 116.441406][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.499346][ T77] hsr_slave_0: left promiscuous mode [ 116.507359][ T77] hsr_slave_1: left promiscuous mode [ 116.522584][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.540505][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.571167][ T5894] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 116.571967][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.601455][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.641321][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 116.654708][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.670048][ T77] veth1_macvtap: left promiscuous mode [ 116.686678][ T5886] usb 1-1: no configurations [ 116.700847][ T5886] usb 1-1: can't read configurations, error -22 [ 116.705897][ T77] veth0_macvtap: left promiscuous mode [ 116.719882][ T77] veth1_vlan: left promiscuous mode [ 116.731361][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 116.738834][ T5894] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.745343][ T77] veth0_vlan: left promiscuous mode [ 116.759831][ T5894] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.776897][ T5894] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 116.800777][ T5894] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 116.830804][ T5894] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.844327][ T5894] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.854002][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.864211][ T7046] netlink: 27 bytes leftover after parsing attributes in process `syz.1.480'. [ 117.086217][ T5894] usb 4-1: GET_CAPABILITIES returned 0 [ 117.091952][ T5894] usbtmc 4-1:16.0: can't read capabilities [ 117.290501][ T7035] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 117.303795][ T5894] usb 4-1: USB disconnect, device number 10 [ 117.336449][ T77] team0 (unregistering): Port device team_slave_1 removed [ 117.379217][ T77] team0 (unregistering): Port device team_slave_0 removed [ 117.853399][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'. [ 117.960884][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.991421][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.007595][ T6955] bridge_slave_0: entered allmulticast mode [ 118.031977][ T5838] Bluetooth: hci4: command tx timeout [ 118.033662][ T6955] bridge_slave_0: entered promiscuous mode [ 118.058095][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.092235][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.110010][ T6955] bridge_slave_1: entered allmulticast mode [ 118.146666][ T6955] bridge_slave_1: entered promiscuous mode [ 118.180292][ T7066] netlink: 'syz.4.487': attribute type 10 has an invalid length. [ 118.189418][ T7064] bridge_slave_0: left allmulticast mode [ 118.201357][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.487'. [ 118.221371][ T7064] bridge_slave_0: left promiscuous mode [ 118.227408][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.248207][ T7064] bridge_slave_1: left allmulticast mode [ 118.269565][ T7064] bridge_slave_1: left promiscuous mode [ 118.290179][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.305120][ T7064] bond0: (slave bond_slave_0): Releasing backup interface [ 118.326174][ T7064] bond0: (slave bond_slave_1): Releasing backup interface [ 118.382756][ T7064] team0: Port device team_slave_0 removed [ 118.428564][ T7064] team0: Port device team_slave_1 removed [ 118.444772][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.481208][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.504700][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.521693][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.537645][ T7064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.636118][ T7066] batman_adv: batadv0: Adding interface: virt_wifi0 [ 118.653134][ T7066] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.708146][ T7066] batman_adv: batadv0: Interface activated: virt_wifi0 [ 118.891107][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.975121][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.131387][ T5947] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.224400][ T6955] team0: Port device team_slave_0 added [ 119.258642][ T6955] team0: Port device team_slave_1 added [ 119.307340][ T5947] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.341456][ T5947] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.372553][ T5947] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.392777][ T5947] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 119.447891][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.502070][ T5947] usb 4-1: config 0 descriptor?? [ 119.652613][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.659706][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.707626][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.724711][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.731947][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.758579][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.935137][ T5947] usbhid 4-1:0.0: can't add hid device: -71 [ 119.961538][ T5947] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 120.001651][ T5947] usb 4-1: USB disconnect, device number 11 [ 120.111948][ T5838] Bluetooth: hci4: command tx timeout [ 120.252977][ T6955] hsr_slave_0: entered promiscuous mode [ 120.282434][ T6955] hsr_slave_1: entered promiscuous mode [ 120.293812][ T6955] debugfs: 'hsr0' already exists in 'hsr' [ 120.320001][ T6955] Cannot create hsr debugfs directory [ 121.579755][ T6955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.625427][ T6955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.665131][ T6955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.698975][ T6955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.057476][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.119964][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.172040][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.179256][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.191342][ T5838] Bluetooth: hci4: command tx timeout [ 122.227905][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.235155][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.503022][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.657202][ T6955] veth0_vlan: entered promiscuous mode [ 122.713746][ T6955] veth1_vlan: entered promiscuous mode [ 122.797630][ T6955] veth0_macvtap: entered promiscuous mode [ 122.810349][ T7229] loop4: detected capacity change from 0 to 8 [ 122.820635][ T6955] veth1_macvtap: entered promiscuous mode [ 122.875695][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.900980][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.999723][ T6045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.039815][ T7229] Dev loop4: unable to read RDB block 8 [ 123.050246][ C0] invalid error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 123.060055][ C0] buffer_io_error: 6 callbacks suppressed [ 123.060071][ C0] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 123.074795][ T7229] loop4: unable to read partition table [ 123.076031][ T6045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.080634][ T7229] loop4: partition table beyond EOD, truncated [ 123.127907][ T7229] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 123.163739][ T6045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.227627][ T6045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.272989][ T5208] Dev loop4: unable to read RDB block 8 [ 123.278621][ T5208] loop4: unable to read partition table [ 123.345577][ T5208] loop4: partition table beyond EOD, truncated [ 123.387144][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.431513][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.537704][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.567522][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.564237][ T7291] bridge_slave_0: left allmulticast mode [ 124.586473][ T7291] bridge_slave_0: left promiscuous mode [ 124.620070][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.636973][ T7295] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 124.670443][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.561'. [ 124.713337][ T7291] bridge_slave_1: left allmulticast mode [ 124.722588][ T7291] bridge_slave_1: left promiscuous mode [ 124.736236][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.775960][ T7291] bond0: (slave bond_slave_0): Releasing backup interface [ 124.843233][ T7291] bond0: (slave bond_slave_1): Releasing backup interface [ 124.862778][ T5886] hid_parser_main: 28 callbacks suppressed [ 124.862797][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 124.896436][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 124.921854][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 124.939333][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 124.943977][ T7291] team0: Port device team_slave_0 removed [ 124.953284][ T7309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.960807][ T7309] IPv6: NLM_F_CREATE should be set when creating new route [ 124.968192][ T7309] IPv6: NLM_F_CREATE should be set when creating new route [ 124.975457][ T7309] IPv6: NLM_F_CREATE should be set when creating new route [ 124.985018][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 124.986490][ T7291] team0: Port device team_slave_1 removed [ 125.002958][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 125.018816][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.021040][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 125.037468][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 125.052959][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.061616][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 125.080969][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.088830][ T5886] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 125.097987][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.105309][ T5942] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 125.130072][ T7291] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.141021][ T5886] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz0] on syz0 [ 125.269105][ T7295] batman_adv: batadv0: Adding interface: virt_wifi0 [ 125.282116][ T5942] usb 5-1: config 0 has no interfaces? [ 125.293277][ T5942] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 125.313934][ T7295] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.371436][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.400745][ T5942] usb 5-1: config 0 descriptor?? [ 125.440121][ T7295] batman_adv: batadv0: Interface activated: virt_wifi0 [ 125.647621][ T189] usb 5-1: USB disconnect, device number 8 [ 125.941710][ T5894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.127343][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.148598][ T5894] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 126.171339][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.194446][ T5894] usb 3-1: config 0 descriptor?? [ 126.536355][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.589'. [ 126.633504][ T5894] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 126.845265][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 126.927453][ T7386] macvlan3: entered promiscuous mode [ 126.964349][ T7386] macvlan3: entered allmulticast mode [ 127.017872][ T7386] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 127.021772][ T5942] usb 3-1: USB disconnect, device number 8 [ 127.258933][ T7401] ======================================================= [ 127.258933][ T7401] WARNING: The mand mount option has been deprecated and [ 127.258933][ T7401] and is ignored by this kernel. Remove the mand [ 127.258933][ T7401] option from the mount to silence this warning. [ 127.258933][ T7401] ======================================================= [ 127.294260][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.309401][ T7403] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 127.441417][ T5942] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.591449][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 127.602681][ T5942] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.615404][ T5942] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 127.633404][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.651654][ T5942] usb 5-1: Product: syz [ 127.655872][ T5942] usb 5-1: Manufacturer: syz [ 127.677645][ T5942] usb 5-1: SerialNumber: syz [ 127.702202][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.710928][ T5942] usb 5-1: config 0 descriptor?? [ 127.876503][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 127.882317][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.608'. [ 127.891963][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.608'. [ 127.902928][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.608'. [ 127.915495][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.930911][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.941655][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.971450][ T24] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 128.000594][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.608'. [ 128.011459][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.030288][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.608'. [ 128.044643][ T24] usb 4-1: config 0 descriptor?? [ 128.058015][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.608'. [ 128.143480][ T5942] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 128.268297][ T7420] netlink: 52 bytes leftover after parsing attributes in process `syz.0.608'. [ 128.482882][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 128.549357][ T5942] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 128.576163][ T24] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 128.588879][ T24] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 128.644792][ T5942] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 128.664516][ T5942] usb 5-1: USB disconnect, device number 9 [ 128.671186][ T7408] random: crng reseeded on system resumption [ 128.774873][ T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 128.788616][ T5947] usb 4-1: USB disconnect, device number 12 [ 128.799531][ T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 128.828453][ T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 128.844486][ T24] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 129.290422][ T7456] dummy0: entered promiscuous mode [ 129.369612][ T7456] dummy0: left promiscuous mode [ 129.902145][ T5894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.082590][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.101875][ T5894] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 130.111430][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.144068][ T5894] usb 3-1: config 0 descriptor?? [ 130.311377][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.552204][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 130.583556][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 130.627079][ T24] usb 5-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 130.656709][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.685429][ T24] usb 5-1: config 0 descriptor?? [ 130.818333][ T5894] razer 0003:1532:010E.0007: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 130.922412][ T7513] __nla_validate_parse: 2 callbacks suppressed [ 130.922430][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'. [ 131.042202][ T5894] usb 3-1: USB disconnect, device number 9 [ 131.097480][ T7514] fido_id[7514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 131.151070][ T24] thrustmaster 0003:044F:B320.0008: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.4-1/input0 [ 131.202254][ T24] thrustmaster 0003:044F:B320.0008: no inputs found [ 131.323015][ T24] usb 5-1: USB disconnect, device number 10 [ 131.685001][ T7533] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.655'. [ 131.703551][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.862576][ T30] audit: type=1326 audit(1764736592.489:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 131.908650][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.916712][ T30] audit: type=1326 audit(1764736592.489:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 131.959311][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.981657][ T5942] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.991004][ T30] audit: type=1326 audit(1764736592.519:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 131.993809][ T24] usb 2-1: Product: syz [ 132.032148][ T24] usb 2-1: Manufacturer: syz [ 132.046980][ T24] usb 2-1: SerialNumber: syz [ 132.047290][ T30] audit: type=1326 audit(1764736592.519:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 132.090914][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.106431][ T30] audit: type=1326 audit(1764736592.519:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 132.155616][ T30] audit: type=1326 audit(1764736592.549:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 132.188363][ T5947] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.210443][ T5942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.220703][ T5942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.256361][ T30] audit: type=1326 audit(1764736592.549:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 132.303032][ T30] audit: type=1326 audit(1764736592.549:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 132.325830][ T5942] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 132.332697][ T7554] capability: warning: `syz.3.666' uses deprecated v2 capabilities in a way that may be insecure [ 132.335861][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.357084][ T5942] usb 3-1: SerialNumber: syz [ 132.369328][ T30] audit: type=1326 audit(1764736592.559:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 132.421619][ T30] audit: type=1326 audit(1764736592.569:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 132.523591][ T7558] loop3: detected capacity change from 0 to 524287999 [ 132.554341][ T7561] netlink: 'syz.0.669': attribute type 25 has an invalid length. [ 132.562515][ T7561] netlink: 'syz.0.669': attribute type 7 has an invalid length. [ 132.570284][ T7561] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 132.598215][ T7561] netlink: 156 bytes leftover after parsing attributes in process `syz.0.669'. [ 132.617710][ T5942] usb 3-1: 0:2 : does not exist [ 132.627973][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.667675][ T5942] usb 3-1: USB disconnect, device number 10 [ 132.906595][ T5894] usb 2-1: USB disconnect, device number 8 [ 132.926829][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.933235][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.347287][ T7589] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 133.371576][ T5942] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.502424][ T7597] syz.0.687 uses obsolete (PF_INET,SOCK_PACKET) [ 133.532087][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 133.539713][ T5942] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 133.552242][ T5947] usb 2-1: Service connection timeout for: 256 [ 133.558791][ T5947] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 133.567167][ T5942] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 133.585040][ T5947] ath9k_htc: Failed to initialize the device [ 133.612818][ T5942] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 133.619943][ T5894] usb 2-1: ath9k_htc: USB layer deinitialized [ 133.624159][ T5942] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 133.624189][ T5942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.626266][ T5942] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 133.644654][ T189] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.672372][ T5942] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 133.712074][ T5942] usb 4-1: Product: syz [ 133.728090][ T5942] usb 4-1: Manufacturer: syz [ 133.738431][ T5942] usb 4-1: SerialNumber: syz [ 133.763323][ T5942] usb 4-1: config 0 descriptor?? [ 133.793622][ T5942] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 133.830638][ T5942] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 133.900345][ T189] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 133.920472][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.941309][ T189] usb 3-1: Product: syz [ 133.945511][ T189] usb 3-1: Manufacturer: syz [ 133.950241][ T189] usb 3-1: SerialNumber: syz [ 133.964253][ T189] usb 3-1: config 0 descriptor?? [ 134.148468][ T189] usb 4-1: USB disconnect, device number 13 [ 134.151828][ T7577] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 134.154523][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 134.195951][ T5894] usb 3-1: USB disconnect, device number 11 [ 134.233480][ T189] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 135.401435][ T5894] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.511377][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 135.624933][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 135.631664][ T5914] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.651780][ T5894] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 135.660271][ T5894] usb 5-1: config 0 has no interface number 0 [ 135.690596][ T5894] usb 5-1: config 0 interface 209 has no altsetting 0 [ 135.713291][ T5894] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 135.731645][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.740315][ T5894] usb 5-1: Product: syz [ 135.746473][ T5894] usb 5-1: Manufacturer: syz [ 135.761345][ T5894] usb 5-1: SerialNumber: syz [ 135.811331][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 135.820911][ T5914] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 135.831052][ T5894] usb 5-1: config 0 descriptor?? [ 135.836522][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.882443][ T5914] usb 1-1: config 0 descriptor?? [ 136.105061][ T5914] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 136.156457][ T5894] usb 5-1: USB disconnect, device number 11 [ 136.193878][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.220301][ T5914] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 136.233980][ T5914] usb 1-1: media controller created [ 136.310307][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.364225][ T5914] az6027: usb out operation failed. (-71) [ 136.374419][ T5914] az6027: usb out operation failed. (-71) [ 136.380270][ T5914] stb0899_attach: Driver disabled by Kconfig [ 136.390647][ T5914] az6027: no front-end attached [ 136.390647][ T5914] [ 136.412528][ T5914] az6027: usb out operation failed. (-71) [ 136.440142][ T5914] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 136.474828][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 136.501951][ T5914] dvb-usb: schedule remote query interval to 400 msecs. [ 136.508942][ T5914] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 136.551559][ T5914] usb 1-1: USB disconnect, device number 7 [ 136.638560][ T5914] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.963018][ T7672] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 137.838891][ T30] audit: type=1326 audit(1764736598.459:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 137.901318][ T30] audit: type=1326 audit(1764736598.459:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 137.973084][ T30] audit: type=1326 audit(1764736598.459:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 138.021313][ T30] audit: type=1326 audit(1764736598.459:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 138.082245][ T30] audit: type=1326 audit(1764736598.459:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 138.141451][ T30] audit: type=1326 audit(1764736598.459:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 138.201377][ T30] audit: type=1326 audit(1764736598.459:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 138.284914][ T30] audit: type=1326 audit(1764736598.459:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 138.341346][ T30] audit: type=1326 audit(1764736598.459:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd582f8f749 code=0x7ffc0000 [ 138.501360][ T5942] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.561410][ T5914] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 138.661494][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 138.668342][ T5942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.691771][ T5942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.713379][ T5942] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.724882][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.733592][ T5914] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.742440][ T5942] usb 2-1: Product: syz [ 138.749379][ T5942] usb 2-1: Manufacturer: syz [ 138.754320][ T5942] usb 2-1: SerialNumber: syz [ 138.782585][ T5914] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.834763][ T5914] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.881303][ T5914] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 138.944096][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.975208][ T5942] usb 2-1: 0:2 : does not exist [ 138.985299][ T7694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 138.996654][ T5942] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 139.087597][ T5942] usb 2-1: USB disconnect, device number 9 [ 139.197897][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.066612][ T5914] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 140.096004][ T5914] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input14 [ 140.148054][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 140.165366][ T5914] usb 5-1: USB disconnect, device number 12 [ 140.321622][ T5886] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 140.430360][ T7763] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 140.515143][ T5886] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 140.525898][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.526500][ T7768] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.758'. [ 140.537470][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.565183][ T5886] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 140.578512][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.579780][ T7768] openvswitch: netlink: Message has 16 unknown bytes. [ 140.620160][ T5886] usb 4-1: config 0 descriptor?? [ 140.882946][ T3812] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.912757][ T3812] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.953530][ T3812] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.982708][ T3812] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.039693][ T7783] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 141.411167][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 141.549535][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 141.566595][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.605240][ T5886] usb 4-1: USB disconnect, device number 14 [ 142.128870][ T7823] sctp: [Deprecated]: syz.1.784 (pid 7823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.128870][ T7823] Use struct sctp_sack_info instead [ 142.164951][ T7827] sch_fq: defrate 0 ignored. [ 142.202472][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 143.281779][ T5886] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.472297][ T5886] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.489272][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.530414][ T5886] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.571676][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.600161][ T5886] usb 2-1: SerialNumber: syz [ 143.815347][ T5886] usb 2-1: 0:2 : does not exist [ 143.876136][ T5886] usb 2-1: USB disconnect, device number 10 [ 143.959975][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.616695][ T7925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.829'. [ 144.627919][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.829'. [ 144.951697][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 145.138679][ T7952] loop9: detected capacity change from 0 to 7 [ 145.147602][ T7952] Dev loop9: unable to read RDB block 7 [ 145.171730][ T7952] loop9: unable to read partition table [ 145.192358][ T7952] loop9: partition table beyond EOD, truncated [ 145.211371][ T7952] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 145.731577][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 145.903744][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 145.925330][ T5886] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.951427][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.968305][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.978663][ T5886] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.013690][ T5886] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.034156][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.422977][ T5886] usb 3-1: GET_CAPABILITIES returned 0 [ 146.428536][ T5886] usbtmc 3-1:16.0: can't read capabilities [ 146.655060][ T5886] usb 3-1: USB disconnect, device number 12 [ 146.675895][ T8005] xt_cgroup: invalid path, errno=-2 [ 147.004554][ T5947] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 147.171721][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 147.187950][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 147.226484][ T5947] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 147.263577][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.286217][ T5947] usb 4-1: config 0 descriptor?? [ 147.337693][ T5947] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 147.392680][ T30] audit: type=1326 audit(1764736608.009:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533dd8f749 code=0x7ffc0000 [ 147.424965][ T30] audit: type=1326 audit(1764736608.039:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533dd8f749 code=0x7ffc0000 [ 147.510815][ T30] audit: type=1326 audit(1764736608.039:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f533dd8f749 code=0x7ffc0000 [ 147.559024][ T5193] bcm5974 4-1:0.0: could not read from device [ 147.569449][ T30] audit: type=1326 audit(1764736608.039:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533dd8f749 code=0x7ffc0000 [ 147.605837][ T5947] bcm5974 4-1:0.0: could not read from device [ 147.633226][ T30] audit: type=1326 audit(1764736608.039:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f533dd8f749 code=0x7ffc0000 [ 147.657464][ T5193] bcm5974 4-1:0.0: could not read from device [ 147.682819][ T5947] input: failed to attach handler mousedev to device input16, error: -5 [ 147.703947][ T30] audit: type=1326 audit(1764736608.079:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.2.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533dd8f749 code=0x7ffc0000 [ 147.734712][ T5193] bcm5974 4-1:0.0: could not read from device [ 147.741553][ T5947] usb 4-1: USB disconnect, device number 15 [ 147.813426][ T8045] sctp: [Deprecated]: syz.2.884 (pid 8045) Use of int in max_burst socket option deprecated. [ 147.813426][ T8045] Use struct sctp_assoc_value instead [ 147.931730][ T189] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.091536][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 148.109596][ T189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.123999][ T189] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 148.163494][ T189] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 148.174188][ T189] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 148.196589][ T189] usb 1-1: config 128 has no interface number 0 [ 148.203219][ T189] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 148.249535][ T189] usb 1-1: config 128 interface 127 has no altsetting 0 [ 148.260394][ T189] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 148.280286][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.299919][ T189] usb 1-1: Product: syz [ 148.321722][ T189] usb 1-1: Manufacturer: syz [ 148.326384][ T189] usb 1-1: SerialNumber: syz [ 148.377950][ T8043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.649179][ T189] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.654209][ T8066] netlink: 'syz.2.892': attribute type 1 has an invalid length. [ 148.692741][ T8066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.743643][ T189] usb 1-1: USB disconnect, device number 8 [ 148.894391][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.948133][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'. [ 149.584592][ T5923] IPVS: starting estimator thread 0... [ 149.671427][ T8109] IPVS: using max 36 ests per chain, 86400 per kthread [ 150.642811][ T8153] input: syz1 as /devices/virtual/input/input17 [ 151.060122][ T8167] vivid-003: disconnect [ 151.079086][ T8166] vivid-003: reconnect [ 151.592360][ T8192] netlink: 'syz.2.948': attribute type 6 has an invalid length. [ 151.642703][ T8192] netlink: 'syz.2.948': attribute type 6 has an invalid length. [ 151.921550][ T5947] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 152.103071][ T5947] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.114043][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.142559][ T5947] usb 4-1: config 0 descriptor?? [ 152.151786][ T5947] cp210x 4-1:0.0: cp210x converter detected [ 152.251356][ T5914] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 152.402179][ T5914] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 152.415084][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.424546][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.435923][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.444478][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.456110][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.469466][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.478138][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.501363][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.516235][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.523985][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.533807][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.545156][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.554427][ T5947] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 152.568351][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.568491][ T5947] usb 4-1: cp210x converter now attached to ttyUSB0 [ 152.596195][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.619619][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.630166][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.639649][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.651061][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.659691][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.668918][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.681404][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.689853][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.710379][ T5914] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.721466][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.735865][ T5914] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 152.745439][ T5914] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 152.754809][ T5914] usb 5-1: Product: syz [ 152.759086][ T5914] usb 5-1: Manufacturer: syz [ 152.763799][ T5914] usb 5-1: SerialNumber: syz [ 152.771775][ T113] usb 4-1: USB disconnect, device number 16 [ 152.772339][ T5914] usb 5-1: config 0 descriptor?? [ 152.795181][ T113] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.799730][ T5914] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 152.843272][ T113] cp210x 4-1:0.0: device disconnected [ 153.136972][ T5923] usb 5-1: USB disconnect, device number 13 [ 153.137662][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 153.155323][ T5923] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 153.872494][ T5914] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.041370][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 154.056104][ T5914] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 154.087744][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.123143][ T5914] usb 4-1: config 0 descriptor?? [ 154.146948][ T8257] netlink: 6 bytes leftover after parsing attributes in process `syz.1.977'. [ 154.218320][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 154.357543][ T5914] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 154.386489][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.423823][ T5914] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 154.431120][ T5914] usb 4-1: media controller created [ 154.505991][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.565924][ T8251] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 154.604620][ T5914] az6027: usb out operation failed. (-71) [ 154.627154][ T5914] az6027: usb out operation failed. (-71) [ 154.639876][ T5914] stb0899_attach: Driver disabled by Kconfig [ 154.648942][ T5914] az6027: no front-end attached [ 154.648942][ T5914] [ 154.659413][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 154.668775][ T5914] az6027: usb out operation failed. (-71) [ 154.688667][ T5914] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 154.725204][ T5914] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 154.778869][ T5914] dvb-usb: schedule remote query interval to 400 msecs. [ 154.783243][ T8271] use of bytesused == 0 is deprecated and will be removed in the future, [ 154.803319][ T5914] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 154.817026][ T8271] use the actual size instead. [ 154.848484][ T5914] usb 4-1: USB disconnect, device number 17 [ 154.931411][ T5914] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 155.393047][ T30] audit: type=1326 audit(1764736616.009:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 155.461784][ T30] audit: type=1326 audit(1764736616.009:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 155.545580][ T30] audit: type=1326 audit(1764736616.049:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 155.621871][ T30] audit: type=1326 audit(1764736616.049:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 155.622707][ T8303] input: syz1 as /devices/virtual/input/input19 [ 155.723082][ T30] audit: type=1326 audit(1764736616.049:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 155.838816][ T30] audit: type=1326 audit(1764736616.049:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1893b8df90 code=0x7ffc0000 [ 155.904197][ T30] audit: type=1326 audit(1764736616.049:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 156.022319][ T30] audit: type=1326 audit(1764736616.049:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 156.113899][ T30] audit: type=1326 audit(1764736616.049:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 156.113948][ T30] audit: type=1326 audit(1764736616.049:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1893b8f749 code=0x7ffc0000 [ 156.761356][ T5886] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 156.881167][ T8356] macsec0: entered promiscuous mode [ 156.888083][ T8356] veth1_macvtap: entered promiscuous mode [ 156.894674][ T8356] macsec0: left promiscuous mode [ 156.912410][ T5923] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 156.921878][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 156.928946][ T5886] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 156.940640][ T5886] usb 3-1: config 0 has no interface number 0 [ 156.953373][ T5886] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.974572][ T5886] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.997530][ T5886] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 157.015294][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 157.027400][ T5886] usb 3-1: Product: syz [ 157.031754][ T5886] usb 3-1: SerialNumber: syz [ 157.040217][ T5886] usb 3-1: config 0 descriptor?? [ 157.049443][ T5886] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 157.064044][ T5886] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input20 [ 157.083620][ T5923] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.097445][ T5923] usb 4-1: config 0 has no interface number 0 [ 157.112612][ T5923] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 157.135403][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.164667][ T5923] usb 4-1: config 0 descriptor?? [ 157.179529][ T5923] usb 4-1: selecting invalid altsetting 1 [ 157.198886][ T5923] dvb_ttusb_budget: ttusb_init_controller: error [ 157.216483][ T5923] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 157.264298][ T5886] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.343563][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.343735][ T5947] usb 3-1: USB disconnect, device number 13 [ 157.350925][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 157.397054][ T5947] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 157.437653][ T5923] DVB: Unable to find symbol cx22700_attach() [ 157.441735][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 157.451571][ T5886] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 157.466607][ T5886] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 157.516390][ T5886] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 157.557700][ T5886] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 157.581315][ T5923] DVB: Unable to find symbol tda10046_attach() [ 157.595842][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.596229][ T5923] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 157.617157][ T5886] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 157.627542][ T5923] usb 4-1: USB disconnect, device number 18 [ 157.633973][ T5886] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 157.645166][ T5886] usb 2-1: Product: syz [ 157.652523][ T5886] usb 2-1: Manufacturer: syz [ 157.656760][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 157.657532][ T5886] usb 2-1: SerialNumber: syz [ 157.671012][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 157.676158][ T5886] usb 2-1: config 0 descriptor?? [ 157.688873][ T5886] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 157.745289][ T5886] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 158.151424][ T5914] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.187802][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 158.257877][ T5886] usb 2-1: USB disconnect, device number 11 [ 158.279900][ T5886] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 158.321483][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 158.332807][ T5914] usb 1-1: config 0 has no interfaces? [ 158.341870][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.343747][ T113] IPVS: starting estimator thread 0... [ 158.350957][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.370915][ T5914] usb 1-1: config 0 descriptor?? [ 158.461354][ T8409] IPVS: using max 31 ests per chain, 74400 per kthread [ 158.618493][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.641724][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.672976][ T5886] usb 1-1: USB disconnect, device number 9 [ 159.141725][ T113] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.315607][ T113] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.337334][ T113] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 159.404206][ T113] usb 1-1: config 0 interface 0 has no altsetting 0 [ 159.410877][ T113] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 159.488294][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.511048][ T113] usb 1-1: config 0 descriptor?? [ 159.537474][ T113] yurex 1-1:0.0: Could not submitting URB [ 159.557464][ T113] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 159.742192][ T113] usbhid 1-1:0.0: can't add hid device: -71 [ 159.770624][ T113] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.820912][ T113] usb 1-1: USB disconnect, device number 10 [ 161.381490][ T113] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.560512][ T113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.591727][ T113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.617864][ T113] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 161.629374][ T113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.647127][ T113] usb 4-1: config 0 descriptor?? [ 162.072104][ T113] hid_parser_main: 5 callbacks suppressed [ 162.072125][ T113] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 162.119584][ T113] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 162.497328][ T113] usb 4-1: USB disconnect, device number 19 [ 163.211406][ T8560] kvm: kvm [8557]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 163.622204][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.653878][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 163.801310][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 163.822898][ T5886] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 163.851309][ T5886] usb 1-1: config 0 has no interface number 0 [ 163.870077][ T5886] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 163.882235][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.890369][ T5886] usb 1-1: Product: syz [ 163.904340][ T5886] usb 1-1: Manufacturer: syz [ 163.919551][ T5886] usb 1-1: SerialNumber: syz [ 163.943295][ T5886] usb 1-1: config 0 descriptor?? [ 163.965426][ T5886] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 164.069822][ T8594] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 164.077784][ T5894] IPVS: starting estimator thread 0... [ 164.175989][ T8595] IPVS: using max 34 ests per chain, 81600 per kthread [ 164.177660][ T5886] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 164.227712][ T8597] binder: 8596:8597 ioctl c018620c 200000000000 returned -22 [ 164.239078][ T5886] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 164.434056][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.458651][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.693565][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 164.703281][ T5886] usb 1-1: USB disconnect, device number 11 [ 164.728935][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 164.779436][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 164.803804][ T5886] quatech2 1-1:0.51: device disconnected [ 165.131362][ T5894] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 165.322403][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.351505][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.381326][ T5894] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 165.391823][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.430845][ T5894] usb 4-1: config 0 descriptor?? [ 165.895976][ T5894] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 165.903538][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 165.921828][ T113] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.924145][ T5894] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 165.962112][ T5894] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 165.971483][ T5894] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 165.978319][ T5894] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 165.992035][ T5894] elan 0003:04F3:0755.000A: failed to start in urb: -90 [ 166.010596][ T5894] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 166.083182][ T5915] usb 4-1: USB disconnect, device number 20 [ 166.102399][ T113] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.124317][ T8661] fido_id[8661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 166.277997][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.316028][ T113] usb 1-1: config 0 descriptor?? [ 166.330102][ T113] cp210x 1-1:0.0: cp210x converter detected [ 166.728791][ T113] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 166.800498][ T113] usb 1-1: cp210x converter now attached to ttyUSB0 [ 166.980714][ T113] usb 1-1: USB disconnect, device number 12 [ 166.998647][ T113] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.028039][ T113] cp210x 1-1:0.0: device disconnected [ 167.535142][ T8706] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1173'. [ 167.558185][ T8706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.790630][ T8712] syzkaller1: entered promiscuous mode [ 167.834124][ T8712] syzkaller1: entered allmulticast mode [ 167.969650][ T8716] syzkaller1: entered promiscuous mode [ 167.996233][ T8716] syzkaller1: entered allmulticast mode [ 168.131702][ T5886] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 168.331608][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 168.343918][ T5886] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 168.381303][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.418980][ T5886] usb 4-1: config 0 descriptor?? [ 168.458787][ T5886] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 168.753813][ T5947] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.912331][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 168.933074][ T5947] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 168.961297][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.981365][ T113] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 168.995242][ T5947] pvrusb2: Hardware description: Terratec Grabster AV400 [ 169.010288][ T5947] pvrusb2: ********** [ 169.015608][ T5947] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 169.030289][ T5947] pvrusb2: Important functionality might not be entirely working. [ 169.043750][ T5947] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 169.055527][ T5947] pvrusb2: ********** [ 169.067806][ T5886] gspca_vc032x: reg_w err -71 [ 169.074380][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.079977][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.087122][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.107475][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.121526][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.126937][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.137344][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.151478][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.157674][ T113] usb 2-1: Using ep0 maxpacket: 8 [ 169.161677][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.171504][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.174521][ T113] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 169.176821][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.176836][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.176845][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.176854][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.176862][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.176871][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.186517][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.223082][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.233473][ T2350] pvrusb2: Invalid write control endpoint [ 169.276958][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 169.295545][ T5886] gspca_vc032x: Unknown sensor... [ 169.298175][ T113] pvrusb2: Hardware description: Terratec Grabster AV400 [ 169.300714][ T5886] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 169.323294][ T2350] pvrusb2: Invalid write control endpoint [ 169.340171][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 169.358244][ T113] pvrusb2: ********** [ 169.362648][ T5886] usb 4-1: USB disconnect, device number 21 [ 169.380519][ T113] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 169.402667][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 169.412327][ T113] pvrusb2: Important functionality might not be entirely working. [ 169.421486][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 169.441475][ T113] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 169.460857][ T2350] pvrusb2: Device being rendered inoperable [ 169.472125][ T8735] pvrusb2: Attempted to execute control transfer when device not ok [ 169.487015][ T113] pvrusb2: ********** [ 169.522329][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 169.524861][ T189] usb 1-1: USB disconnect, device number 13 [ 169.530579][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 169.550924][ T2350] pvrusb2: Attached sub-driver cx25840 [ 169.557049][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.569052][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.580839][ T2350] pvrusb2: Invalid write control endpoint [ 169.657918][ T2350] pvrusb2: Invalid write control endpoint [ 169.673086][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 169.685235][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 169.721644][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 169.744589][ T2350] pvrusb2: Device being rendered inoperable [ 169.750875][ T2350] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 169.762508][ T2350] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 169.779025][ T2350] pvrusb2: Attached sub-driver cx25840 [ 169.784912][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.796067][ T113] usb 2-1: USB disconnect, device number 12 [ 169.807875][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 170.021369][ T189] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 170.193423][ T189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.211313][ T189] usb 5-1: config 0 has no interfaces? [ 170.218168][ T189] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.257930][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.287356][ T189] usb 5-1: config 0 descriptor?? [ 170.489779][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1208'. [ 170.730793][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.767547][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.806091][ T113] usb 5-1: USB disconnect, device number 14 [ 171.048260][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 171.447907][ T8818] vivid-003: disconnect [ 171.456273][ T8817] vivid-003: reconnect [ 172.268233][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.420046][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.430891][ T189] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 172.556307][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.593258][ T189] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.600943][ T189] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.641693][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.681286][ T189] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.711734][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.731286][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.792093][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 172.812146][ T189] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 172.841838][ T189] usb 2-1: config 168 interface 0 has no altsetting 0 [ 172.870185][ T189] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 172.899453][ T189] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.942278][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.973629][ T189] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.007613][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.046961][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.058716][ T13] bridge_slave_1: left allmulticast mode [ 173.071510][ T13] bridge_slave_1: left promiscuous mode [ 173.077318][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.091663][ T189] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 173.114538][ T13] bridge_slave_0: left allmulticast mode [ 173.130447][ T189] usb 2-1: config 168 interface 0 has no altsetting 0 [ 173.137515][ T13] bridge_slave_0: left promiscuous mode [ 173.144661][ T189] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 173.161492][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.169446][ T189] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 173.191559][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 173.202844][ T189] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 173.216170][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 173.242421][ T189] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 173.265447][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.275618][ T189] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 173.289696][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.302544][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.310863][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.319061][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.336196][ T189] usb 2-1: config 168 interface 0 has no altsetting 0 [ 173.348698][ T189] usb 2-1: string descriptor 0 read error: -22 [ 173.350484][ T8866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.355231][ T189] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 173.371146][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.387849][ T189] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 173.669846][ T189] usb 2-1: USB disconnect, device number 13 [ 174.578940][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.596422][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.608144][ T13] bond0 (unregistering): Released all slaves [ 175.091375][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.262701][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 175.280495][ T5923] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 175.299342][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.320663][ T5923] usb 5-1: Product: syz [ 175.334836][ T5923] usb 5-1: Manufacturer: syz [ 175.348399][ T5923] usb 5-1: SerialNumber: syz [ 175.370175][ T5923] usb 5-1: config 0 descriptor?? [ 175.391395][ T5838] Bluetooth: hci4: command tx timeout [ 175.615713][ T5923] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 175.633368][ T13] hsr_slave_0: left promiscuous mode [ 175.642368][ T13] hsr_slave_1: left promiscuous mode [ 175.648592][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.661970][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.685266][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.701302][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.723046][ T113] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 175.757883][ T13] veth1_macvtap: left promiscuous mode [ 175.784602][ T13] veth0_macvtap: left promiscuous mode [ 175.802267][ T13] veth1_vlan: left promiscuous mode [ 175.808756][ T13] veth0_vlan: left promiscuous mode [ 175.812698][ T5923] gspca_sunplus: reg_w_riv err -71 [ 175.828631][ T5923] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 175.859659][ T5923] usb 5-1: USB disconnect, device number 15 [ 175.901935][ T113] usb 1-1: Using ep0 maxpacket: 16 [ 175.909297][ T113] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.933554][ T113] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.943780][ T113] usb 1-1: config 0 interface 0 has no altsetting 0 [ 175.950581][ T113] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 175.962620][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.975548][ T113] usb 1-1: config 0 descriptor?? [ 176.285558][ T8935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.404667][ T113] hid (null): global environment stack underflow [ 176.477079][ T113] cougar 0003:060B:500A.000B: usage count exceeds max: fixing up report descriptor [ 176.488699][ T113] cougar 0003:060B:500A.000B: unexpected long global item [ 176.499403][ T113] cougar 0003:060B:500A.000B: parse failed [ 176.523233][ T113] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22 [ 176.609204][ T113] usb 1-1: USB disconnect, device number 14 [ 176.936366][ T13] team0 (unregistering): Port device team_slave_1 removed [ 177.003560][ T13] team0 (unregistering): Port device team_slave_0 removed [ 177.472483][ T5838] Bluetooth: hci4: command tx timeout [ 177.732461][ T30] audit: type=1326 audit(1764736638.359:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d2ed2b829 code=0x7ffc0000 [ 177.771198][ T30] audit: type=1326 audit(1764736638.379:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d2ed2b829 code=0x7ffc0000 [ 177.794261][ T30] audit: type=1326 audit(1764736638.379:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d2ed2b829 code=0x7ffc0000 [ 177.894946][ T30] audit: type=1326 audit(1764736638.379:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 177.922814][ T30] audit: type=1326 audit(1764736638.379:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 178.013098][ T30] audit: type=1326 audit(1764736638.379:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d2ed2b829 code=0x7ffc0000 [ 178.076962][ T30] audit: type=1326 audit(1764736638.379:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d2ed2b829 code=0x7ffc0000 [ 178.104966][ T8867] chnl_net:caif_netlink_parms(): no params data found [ 178.132054][ T30] audit: type=1326 audit(1764736638.379:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d2ed2b829 code=0x7ffc0000 [ 178.185256][ T30] audit: type=1326 audit(1764736638.379:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2d2ed2b829 code=0x7ffc0000 [ 178.207783][ T5894] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.238924][ T30] audit: type=1326 audit(1764736638.379:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2ed8f749 code=0x7ffc0000 [ 178.311817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.320967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.364238][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.379996][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.430565][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.491322][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.510358][ T5894] usb 2-1: Product: syz [ 178.526105][ T5894] usb 2-1: Manufacturer: syz [ 178.541550][ T5894] usb 2-1: SerialNumber: syz [ 178.582667][ T13] IPVS: stop unused estimator thread 0... [ 178.758255][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.807363][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.841577][ T8867] bridge_slave_0: entered allmulticast mode [ 178.849307][ T8867] bridge_slave_0: entered promiscuous mode [ 178.879093][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.889392][ T8996] input: syz0 as /devices/virtual/input/input21 [ 178.896043][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.903769][ T8867] bridge_slave_1: entered allmulticast mode [ 178.910306][ T8996] input: failed to attach handler leds to device input21, error: -6 [ 178.921557][ T8867] bridge_slave_1: entered promiscuous mode [ 179.046712][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.102696][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.227876][ T8867] team0: Port device team_slave_0 added [ 179.256275][ T8867] team0: Port device team_slave_1 added [ 179.424347][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.448946][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.474978][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.553588][ T5838] Bluetooth: hci4: command tx timeout [ 179.566583][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.621002][ T5894] cdc_ncm 2-1:1.0: bind() failure [ 179.628369][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.648693][ T5894] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 179.655833][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.682712][ T5894] cdc_ncm 2-1:1.1: bind() failure [ 179.704573][ T5894] usb 2-1: USB disconnect, device number 14 [ 179.742579][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.760476][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 179.873870][ T8867] hsr_slave_0: entered promiscuous mode [ 179.901165][ T8867] hsr_slave_1: entered promiscuous mode [ 179.921437][ T8867] debugfs: 'hsr0' already exists in 'hsr' [ 179.937900][ T8867] Cannot create hsr debugfs directory [ 180.294108][ T5894] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 180.454391][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 180.482947][ T5894] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 180.501955][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.510119][ T5894] usb 1-1: Product: syz [ 180.520272][ T5894] usb 1-1: Manufacturer: syz [ 180.542481][ T5894] usb 1-1: SerialNumber: syz [ 180.587518][ T5894] usb 1-1: config 0 descriptor?? [ 180.600649][ T5894] option 1-1:0.0: GSM modem (1-port) converter detected [ 180.842407][ T5914] usb 1-1: USB disconnect, device number 15 [ 180.873035][ T5914] option 1-1:0.0: device disconnected [ 181.144175][ T8867] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.272067][ T8867] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.337368][ T8867] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.384256][ T8867] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.631347][ T5838] Bluetooth: hci4: command tx timeout [ 181.687762][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.760371][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.793532][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.800745][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.881018][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.888336][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.994594][ T9108] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 182.068951][ T9108] bond1: entered promiscuous mode [ 182.074925][ T9108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.097559][ T9112] bond1: (slave bridge1): making interface the new active one [ 182.128176][ T9112] bridge1: entered promiscuous mode [ 182.174128][ T9112] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 182.272638][ T9116] dlm: non-version read from control device 4 [ 182.382039][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.560186][ T8867] veth0_vlan: entered promiscuous mode [ 182.589388][ T8867] veth1_vlan: entered promiscuous mode [ 182.690790][ T8867] veth0_macvtap: entered promiscuous mode [ 182.731607][ T8867] veth1_macvtap: entered promiscuous mode [ 182.761354][ T5886] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 182.786978][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.832425][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.867228][ T3516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.908256][ T3516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.955110][ T3516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.974303][ T5886] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 182.979369][ T3516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.020083][ T5886] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 183.042899][ T5886] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.054867][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.101540][ T9129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.121611][ T9129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.183726][ T5886] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.266525][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.300327][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.400376][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.455270][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.485396][ T5915] usb 4-1: USB disconnect, device number 22 [ 184.041380][ T113] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.181926][ T5915] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 184.191560][ T113] usb 6-1: Using ep0 maxpacket: 16 [ 184.198450][ T113] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 184.206680][ T113] usb 6-1: config 0 has no interface number 0 [ 184.213868][ T113] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 184.225415][ T113] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.238617][ T113] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 184.248891][ T113] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 184.251655][ T5894] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 184.258171][ T113] usb 6-1: Product: syz [ 184.269432][ T113] usb 6-1: SerialNumber: syz [ 184.279538][ T113] usb 6-1: config 0 descriptor?? [ 184.290291][ T113] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 184.299652][ T113] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input22 [ 184.331340][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 184.350045][ T9176] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.360311][ T5915] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 184.379624][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.411559][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 184.412011][ T5915] usb 5-1: Product: syz [ 184.420867][ T5915] usb 5-1: Manufacturer: syz [ 184.422538][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.436536][ T5915] usb 5-1: SerialNumber: syz [ 184.446747][ T5915] usb 5-1: config 0 descriptor?? [ 184.483509][ T5894] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.522816][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.537242][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.537623][ T189] usb 6-1: USB disconnect, device number 2 [ 184.544256][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 184.577604][ T5894] usb 1-1: config 0 descriptor?? [ 184.608050][ T189] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 184.661051][ T5915] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.007723][ T5894] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 185.228534][ T1228] usb 1-1: USB disconnect, device number 16 [ 185.278346][ T9196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.513939][ T5915] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 185.562213][ T5915] usb 5-1: USB disconnect, device number 16 [ 186.771322][ T5894] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.844571][ T9240] loop2: detected capacity change from 0 to 7 [ 186.870978][ T5840] Dev loop2: unable to read RDB block 7 [ 186.891632][ T5840] loop2: unable to read partition table [ 186.897640][ T5840] loop2: partition table beyond EOD, truncated [ 186.910666][ T9240] Dev loop2: unable to read RDB block 7 [ 186.923877][ T9240] loop2: unable to read partition table [ 186.940119][ T9240] loop2: partition table beyond EOD, truncated [ 186.947736][ T9240] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 186.971578][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 186.979554][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.988302][ T5208] Dev loop2: unable to read RDB block 7 [ 187.007380][ T5208] loop2: unable to read partition table [ 187.008615][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.017729][ T5208] loop2: partition table beyond EOD, truncated [ 187.044117][ T5894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.065295][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.094683][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.104182][ T1228] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 187.163039][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.187705][ T5894] usb 5-1: SerialNumber: syz [ 187.232086][ T5894] hub 5-1:1.0: bad descriptor, ignoring hub [ 187.238046][ T5894] hub 5-1:1.0: probe with driver hub failed with error -5 [ 187.284237][ T5894] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 187.352387][ T1228] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.423968][ T1228] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.508328][ T1228] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.542672][ T1228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.691665][ T9221] raw-gadget.0 gadget.4: fail, usb_ep_set_wedge returned -11 [ 187.853603][ T113] usb 5-1: USB disconnect, device number 17 [ 188.070435][ T1228] usb 6-1: usb_control_msg returned -32 [ 188.091677][ T1228] usbtmc 6-1:16.0: can't read capabilities [ 188.446379][ T9283] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 189.670236][ T9324] loop3: detected capacity change from 0 to 7 [ 189.679106][ T5840] Dev loop3: unable to read RDB block 7 [ 189.686831][ T5840] loop3: AHDI p3 p4 [ 189.690903][ T5840] loop3: partition table partially beyond EOD, truncated [ 189.700229][ T5840] loop3: p3 start 1702000233 is beyond EOD, truncated [ 189.723217][ T9324] Dev loop3: unable to read RDB block 7 [ 189.733739][ T9324] loop3: AHDI p3 p4 [ 189.765569][ T9324] loop3: partition table partially beyond EOD, truncated [ 189.775863][ T9324] loop3: p3 start 1702000233 is beyond EOD, truncated [ 189.902430][ T189] usb 6-1: USB disconnect, device number 3 [ 190.370737][ T189] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 190.498156][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 190.498172][ T30] audit: type=1326 audit(1764736651.119:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1893b8f749 code=0x0 [ 190.561429][ T189] usb 6-1: Using ep0 maxpacket: 8 [ 190.568293][ T189] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.578663][ T189] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.589395][ T189] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 190.603402][ T189] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 190.613659][ T189] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.626849][ T189] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.639080][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.869180][ T189] usb 6-1: GET_CAPABILITIES returned 0 [ 190.890882][ T189] usbtmc 6-1:16.0: can't read capabilities [ 190.903247][ T9354] dummy0: entered promiscuous mode [ 190.940046][ T9354] bond0: entered promiscuous mode [ 190.952005][ T9354] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 190.981994][ T9354] hsr1: entered allmulticast mode [ 190.987294][ T9354] dummy0: entered allmulticast mode [ 190.994083][ T9354] bond0: entered allmulticast mode [ 191.534617][ T9369] syzkaller1: entered promiscuous mode [ 191.551321][ T9369] syzkaller1: entered allmulticast mode [ 191.612955][ T1228] usb 6-1: USB disconnect, device number 4 [ 192.256672][ T9394] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1425'. [ 192.468848][ T113] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 192.638031][ T113] usb 4-1: config 0 has no interfaces? [ 192.643849][ T113] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.670524][ T113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.710825][ T113] usb 4-1: config 0 descriptor?? [ 193.202763][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.271794][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.307928][ T189] usb 4-1: USB disconnect, device number 23 [ 194.231336][ T189] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 194.360300][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.366896][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.391492][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 194.403520][ T189] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 194.424552][ T189] usb 2-1: config 0 has no interface number 0 [ 194.430751][ T189] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 194.458457][ T189] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 194.467992][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.480172][ T189] usb 2-1: Product: syz [ 194.490357][ T189] usb 2-1: Manufacturer: syz [ 194.499679][ T189] usb 2-1: SerialNumber: syz [ 194.522160][ T189] usb 2-1: config 0 descriptor?? [ 194.551830][ T9453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.771332][ T5914] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 194.820442][ T9453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.961282][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 194.987712][ T5914] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 195.043777][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.074585][ T5914] usb 1-1: Product: syz [ 195.080391][ T5914] usb 1-1: Manufacturer: syz [ 195.109526][ T5914] usb 1-1: SerialNumber: syz [ 195.135191][ T5914] usb 1-1: config 0 descriptor?? [ 195.157210][ T5914] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 195.390541][ T5914] usb 1-1: USB disconnect, device number 17 [ 195.497243][ T189] asix 2-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 195.722946][ T189] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.768526][ T189] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 195.797928][ T189] asix 2-1:0.188: probe with driver asix failed with error -71 [ 195.809746][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.831574][ T189] usb 2-1: USB disconnect, device number 15 [ 195.884180][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.897668][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.906781][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.953089][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.961804][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.971151][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.024438][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.052775][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.068539][ T9526] input: syz0 as /devices/virtual/input/input24 [ 196.071503][ T9517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.361762][ T113] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 196.435777][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 196.435870][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 196.442775][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 196.450083][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 196.511496][ T5947] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 196.533697][ T113] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.561665][ T113] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.579252][ T113] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.592135][ T113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.608809][ T113] usb 1-1: Product: syz [ 196.618248][ T113] usb 1-1: Manufacturer: syz [ 196.632408][ T113] usb 1-1: SerialNumber: syz [ 196.710182][ T5947] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.747157][ T5947] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 196.777634][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.810003][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 196.824656][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 196.863078][ T5947] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.883931][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.899433][ T113] usb 1-1: 0:2 : does not exist [ 196.929910][ T5947] usb 5-1: Product: syz [ 196.936367][ T5947] usb 5-1: Manufacturer: syz [ 196.941182][ T113] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 196.963847][ T5947] cdc_wdm 5-1:1.0: skipping garbage [ 196.969119][ T5947] cdc_wdm 5-1:1.0: skipping garbage [ 197.012692][ T113] usb 1-1: USB disconnect, device number 18 [ 197.027015][ T5947] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 197.047950][ T5947] cdc_wdm 5-1:1.0: Unknown control protocol [ 197.067743][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.200633][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.207579][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.214548][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.221176][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.227779][ T5947] usb 5-1: USB disconnect, device number 18 [ 197.233872][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 197.233896][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 197.233920][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 197.613764][ T9580] input: syz1 as /devices/virtual/input/input25 [ 197.790562][ T30] audit: type=1326 audit(1764736658.409:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13d18f749 code=0x7fc00000 [ 197.901309][ T189] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 198.095727][ T189] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.105836][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.125598][ T189] usb 2-1: Product: syz [ 198.129813][ T189] usb 2-1: Manufacturer: syz [ 198.157976][ T189] usb 2-1: SerialNumber: syz [ 198.186565][ T189] usb 2-1: config 0 descriptor?? [ 198.412525][ T189] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.581713][ T5947] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 198.752094][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 198.759682][ T5947] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 198.768664][ T5947] usb 5-1: config 179 has no interface number 0 [ 198.785663][ T5947] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 198.825526][ T5947] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 198.852462][ T5947] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 198.875505][ T5947] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 198.907561][ T5947] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 198.932843][ T5947] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 198.958576][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.976577][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 198.982769][ T9609] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.015957][ T189] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 199.044440][ T189] usb 2-1: USB disconnect, device number 16 [ 199.125437][ T9640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.338856][ T5947] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input26 [ 199.517311][ T5886] usb 5-1: USB disconnect, device number 19 [ 199.517355][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 199.532601][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 200.207808][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1529'. [ 200.372914][ T9695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.978027][ T9724] netlink: 'syz.0.1546': attribute type 13 has an invalid length. [ 200.995561][ T9724] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 201.024074][ T9724] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.041520][ T189] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.056455][ T9724] gretap1: entered promiscuous mode [ 201.066691][ T9724] gretap1: entered allmulticast mode [ 201.162415][ T5923] net_ratelimit: 769 callbacks suppressed [ 201.162434][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.211944][ T189] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 201.251320][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.280750][ T189] usb 6-1: Product: syz [ 201.286927][ T189] usb 6-1: Manufacturer: syz [ 201.301286][ T189] usb 6-1: SerialNumber: syz [ 201.338437][ T189] usb 6-1: config 0 descriptor?? [ 201.369894][ T189] hub 6-1:0.0: bad descriptor, ignoring hub [ 201.388535][ T189] hub 6-1:0.0: probe with driver hub failed with error -5 [ 201.571770][ T189] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 201.614452][ T189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.638337][ T189] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 201.668189][ T189] usb 6-1: media controller created [ 201.712034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.744068][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.880753][ T189] DVB: Unable to find symbol dib7000p_attach() [ 201.891354][ T189] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 201.961539][ T189] rc_core: IR keymap rc-dib0700-rc5 not found [ 201.972623][ T189] Registered IR keymap rc-empty [ 201.997039][ T189] dvb-usb: could not initialize remote control. [ 202.019743][ T5914] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 202.027680][ T189] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 202.075482][ T5914] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.194419][ T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.512310][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.811822][ T9772] loop8: detected capacity change from 0 to 8 [ 202.823227][ T113] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 202.844784][ T5840] Dev loop8: unable to read RDB block 8 [ 202.852728][ T5840] loop8: unable to read partition table [ 202.861015][ T5840] loop8: partition table beyond EOD, truncated [ 202.882203][ T9772] Dev loop8: unable to read RDB block 8 [ 202.887959][ T9772] loop8: unable to read partition table [ 202.912644][ T9772] loop8: partition table beyond EOD, truncated [ 202.918919][ T9772] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 202.981679][ T113] usb 4-1: Using ep0 maxpacket: 8 [ 202.999259][ T113] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.020817][ T113] usb 4-1: config 4 interface 0 has no altsetting 0 [ 203.031912][ T5923] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.062124][ T113] usb 4-1: string descriptor 0 read error: -22 [ 203.086938][ T113] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 203.106013][ T113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.168971][ T113] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 203.215534][ T113] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.228850][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 203.241030][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.257401][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.272672][ T113] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 203.284386][ T5923] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 203.295551][ T113] usb 4-1: media controller created [ 203.310665][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.360059][ T5923] usb 2-1: config 0 descriptor?? [ 203.378206][ T113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.849110][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.863260][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.870395][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.882729][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.898459][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.906895][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.914557][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.922017][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.950864][ T5923] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 203.964799][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.018068][ T5923] sony 0003:054C:0268.000D: hiddev0,hidraw0: USB HID v80.09 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 204.065685][ T5923] sony 0003:054C:0268.000D: failed to claim input [ 204.108437][ T5923] usb 2-1: USB disconnect, device number 17 [ 204.228931][ T9797] fido_id[9797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 204.285430][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.513692][ T113] zl10353_read_register: readreg error (reg=127, ret==0) [ 204.521414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 204.888408][ T9824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.318119][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.552013][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.615337][ T9853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.758374][ T9860] loop7: detected capacity change from 0 to 7 [ 205.768297][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.777645][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.789004][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.798255][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.806563][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.815909][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.824847][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.834074][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.852495][ T9862] support for cryptoloop has been removed. Use dm-crypt instead. [ 205.867690][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.876960][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.885984][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.895242][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.903638][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.912937][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.920920][ T9860] ldm_validate_partition_table(): Disk read failed. [ 205.931024][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.940424][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.949553][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.958757][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.967371][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.976580][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 205.989502][ T9860] Dev loop7: unable to read RDB block 0 [ 206.009766][ T9860] loop7: unable to read partition table [ 206.017989][ T9860] loop7: partition table beyond EOD, truncated [ 206.034733][ T9860] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 206.079842][ T5208] ldm_validate_partition_table(): Disk read failed. [ 206.087851][ T5208] Dev loop7: unable to read RDB block 0 [ 206.110297][ T5208] loop7: unable to read partition table [ 206.131623][ T5208] loop7: partition table beyond EOD, truncated [ 206.360194][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.538796][ T9894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.835529][ T9906] netlink: 'syz.4.1606': attribute type 3 has an invalid length. [ 207.075459][ T9764] ------------[ cut here ]------------ [ 207.081690][ T9764] usb 6-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType c0 [ 207.090228][ T9764] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#1: syz.3.1559/9764 [ 207.090976][ T189] usb 6-1: USB disconnect, device number 5 [ 207.098608][ T9764] Modules linked in: [ 207.109280][ T9764] CPU: 1 UID: 0 PID: 9764 Comm: syz.3.1559 Not tainted syzkaller #0 PREEMPT(full) [ 207.119633][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.130886][ T9764] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 207.136791][ T9764] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 207.157552][ T9764] RSP: 0018:ffffc90005337820 EFLAGS: 00010246 [ 207.163765][ T9764] RAX: 0000000000000000 RBX: ffff888140baad00 RCX: 0000000080000580 [ 207.171815][ T9764] RDX: ffff888030f2ab00 RSI: ffffffff8c129580 RDI: ffffffff8f8ccc80 [ 207.179813][ T9764] RBP: 1ffff1100ec9ae64 R08: 00000000000000c0 R09: 0000000000000000 [ 207.188225][ T9764] R10: ffffc90005337920 R11: fffff52000a66f30 R12: ffff88802fe5c100 [ 207.196524][ T9764] R13: ffff8880764d7320 R14: 0000000080000580 R15: ffff888030f2ab00 [ 207.204596][ T9764] FS: 00007fa13e0856c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 207.213624][ T9764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.220403][ T9764] CR2: 00007f5f5e137fd7 CR3: 000000004c6ce000 CR4: 00000000003526f0 [ 207.229456][ T9764] Call Trace: [ 207.233548][ T9764] [ 207.236509][ T9764] ? __init_swait_queue_head+0xa9/0x150 [ 207.242378][ T9764] usb_start_wait_urb+0x114/0x4c0 [ 207.247530][ T9764] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 207.253194][ T9764] usb_control_msg+0x232/0x3e0 [ 207.257967][ T9764] dib0700_i2c_xfer+0xba7/0xf70 [ 207.262877][ T9764] __i2c_transfer+0x871/0x20e0 [ 207.267673][ T9764] ? i2c_transfer+0x120/0x3a0 [ 207.272479][ T9764] ? __pfx___i2c_transfer+0x10/0x10 [ 207.277700][ T9764] ? rt_mutex_lock_nested+0x172/0x1e0 [ 207.283206][ T9764] ? i2c_transfer+0x120/0x3a0 [ 207.287914][ T9764] i2c_transfer+0x25b/0x3a0 [ 207.292482][ T9764] ? __pfx_i2c_transfer+0x10/0x10 [ 207.297609][ T9764] ? _copy_from_user+0x94/0xb0 [ 207.302530][ T9764] i2cdev_ioctl_rdwr+0x460/0x740 [ 207.307606][ T9764] i2cdev_ioctl+0x64b/0x7f0 [ 207.312224][ T9764] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 207.317302][ T9764] ? __fget_files+0x3a0/0x420 [ 207.322115][ T9764] ? __fget_files+0x2a/0x420 [ 207.327698][ T9764] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.333502][ T9764] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 207.338664][ T9764] __se_sys_ioctl+0xfc/0x170 [ 207.343365][ T9764] do_syscall_64+0xfa/0xf80 [ 207.348069][ T9764] ? rcu_is_watching+0x15/0xb0 [ 207.353035][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.359138][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 207.363934][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.369849][ T9764] RIP: 0033:0x7fa13d18f749 [ 207.374356][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.394576][ T9764] RSP: 002b:00007fa13e085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.403067][ T9764] RAX: ffffffffffffffda RBX: 00007fa13d3e5fa0 RCX: 00007fa13d18f749 [ 207.411274][ T9764] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 207.419280][ T9764] RBP: 00007fa13d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.428515][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.437304][ T9764] R13: 00007fa13d3e6038 R14: 00007fa13d3e5fa0 R15: 00007fa13d50fa28 [ 207.445459][ T9764] [ 207.448496][ T9764] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.455863][ T9764] CPU: 1 UID: 0 PID: 9764 Comm: syz.3.1559 Not tainted syzkaller #0 PREEMPT(full) [ 207.465185][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.475340][ T9764] Call Trace: [ 207.478636][ T9764] [ 207.482275][ T9764] dump_stack_lvl+0x99/0x250 [ 207.486884][ T9764] ? __asan_memcpy+0x40/0x70 [ 207.491473][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.496683][ T9764] ? __pfx__printk+0x10/0x10 [ 207.501283][ T9764] vpanic+0x237/0x6d0 [ 207.505275][ T9764] ? __pfx_vpanic+0x10/0x10 [ 207.509773][ T9764] ? is_bpf_text_address+0x292/0x2b0 [ 207.515070][ T9764] ? is_bpf_text_address+0x26/0x2b0 [ 207.520295][ T9764] panic+0xb9/0xc0 [ 207.524022][ T9764] ? __pfx_panic+0x10/0x10 [ 207.528444][ T9764] __warn+0x317/0x4b0 [ 207.532513][ T9764] __report_bug+0x288/0x500 [ 207.537024][ T9764] ? __pfx___report_bug+0x10/0x10 [ 207.542222][ T9764] ? stack_depot_save_flags+0x422/0x850 [ 207.547793][ T9764] report_bug_entry+0x16a/0x220 [ 207.552635][ T9764] ? usb_submit_urb+0x112e/0x1890 [ 207.557652][ T9764] ? usb_submit_urb+0x1133/0x1890 [ 207.562770][ T9764] handle_bug+0xca/0x200 [ 207.567026][ T9764] exc_invalid_op+0x1a/0x50 [ 207.571538][ T9764] asm_exc_invalid_op+0x1a/0x20 [ 207.576384][ T9764] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 207.582024][ T9764] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 207.601644][ T9764] RSP: 0018:ffffc90005337820 EFLAGS: 00010246 [ 207.607721][ T9764] RAX: 0000000000000000 RBX: ffff888140baad00 RCX: 0000000080000580 [ 207.615863][ T9764] RDX: ffff888030f2ab00 RSI: ffffffff8c129580 RDI: ffffffff8f8ccc80 [ 207.624006][ T9764] RBP: 1ffff1100ec9ae64 R08: 00000000000000c0 R09: 0000000000000000 [ 207.631970][ T9764] R10: ffffc90005337920 R11: fffff52000a66f30 R12: ffff88802fe5c100 [ 207.640092][ T9764] R13: ffff8880764d7320 R14: 0000000080000580 R15: ffff888030f2ab00 [ 207.648177][ T9764] ? __init_swait_queue_head+0xa9/0x150 [ 207.653736][ T9764] usb_start_wait_urb+0x114/0x4c0 [ 207.658761][ T9764] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 207.664406][ T9764] usb_control_msg+0x232/0x3e0 [ 207.669182][ T9764] dib0700_i2c_xfer+0xba7/0xf70 [ 207.674041][ T9764] __i2c_transfer+0x871/0x20e0 [ 207.678825][ T9764] ? i2c_transfer+0x120/0x3a0 [ 207.683524][ T9764] ? __pfx___i2c_transfer+0x10/0x10 [ 207.688721][ T9764] ? rt_mutex_lock_nested+0x172/0x1e0 [ 207.694151][ T9764] ? i2c_transfer+0x120/0x3a0 [ 207.698839][ T9764] i2c_transfer+0x25b/0x3a0 [ 207.703547][ T9764] ? __pfx_i2c_transfer+0x10/0x10 [ 207.708591][ T9764] ? _copy_from_user+0x94/0xb0 [ 207.713355][ T9764] i2cdev_ioctl_rdwr+0x460/0x740 [ 207.718311][ T9764] i2cdev_ioctl+0x64b/0x7f0 [ 207.722807][ T9764] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 207.727827][ T9764] ? __fget_files+0x3a0/0x420 [ 207.732582][ T9764] ? __fget_files+0x2a/0x420 [ 207.737177][ T9764] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.742114][ T9764] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 207.747133][ T9764] __se_sys_ioctl+0xfc/0x170 [ 207.751720][ T9764] do_syscall_64+0xfa/0xf80 [ 207.756225][ T9764] ? rcu_is_watching+0x15/0xb0 [ 207.760986][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.767043][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 207.771764][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.777748][ T9764] RIP: 0033:0x7fa13d18f749 [ 207.782166][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.801778][ T9764] RSP: 002b:00007fa13e085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.810197][ T9764] RAX: ffffffffffffffda RBX: 00007fa13d3e5fa0 RCX: 00007fa13d18f749 [ 207.818257][ T9764] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 207.826221][ T9764] RBP: 00007fa13d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.834178][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.842142][ T9764] R13: 00007fa13d3e6038 R14: 00007fa13d3e5fa0 R15: 00007fa13d50fa28 [ 207.850116][ T9764] [ 207.853485][ T9764] Kernel Offset: disabled [ 207.857800][ T9764] Rebooting in 86400 seconds..