last executing test programs: 2m54.954085523s ago: executing program 3 (id=4): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 2m54.835759036s ago: executing program 3 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084081}, 0x4048806) 2m39.565646034s ago: executing program 32 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084081}, 0x4048806) 2m4.176741844s ago: executing program 2 (id=252): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 2m3.82058633s ago: executing program 2 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000740)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x280a}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) 2m3.598430185s ago: executing program 2 (id=259): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0]) 2m1.760622224s ago: executing program 2 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2m1.667869479s ago: executing program 2 (id=276): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="280000000000000029000000040000002f0100000000000001050000efffff04020000000000000000010000000000002900000037000000621c00000000000004d6873c307b23d5b70c49bdb792bb9b914a398338f23f51328688c56409af18a12095667b7e96bacc0a40df9cc42e61ea91dafc26df28cc9c2d4a6171aeece8304b3e6f5b772077d1b22ecae0aa6b45820c394bad5532007f0a4666f7860b8913d877a95fa8865f25482d2420690dd6a9ddbf637fe5cb7ac99a24d1f9d0685fa938fca60a392e75c78ef26e0c8b714ee245852f0762b30d41189551814914f856ded6f5b6731c58eb1421e153cc5aea3f2a9f7f888fbdcf9b000570b7d9af7d93e6b61098383de6054fdbb796f7d5d2d198d51ceae6b254c6040000000001020000000000000000980000000000000029"], 0x1c0}, 0x200440c0) 2m0.469262241s ago: executing program 2 (id=280): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)='L', 0x1, 0x2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1}) 2m0.020810091s ago: executing program 33 (id=280): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)='L', 0x1, 0x2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1}) 4.332010939s ago: executing program 5 (id=1175): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xfffd, 0x0) close_range(r0, r2, 0x0) 4.145789788s ago: executing program 5 (id=1178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @empty, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0x9}}}}}}, 0x0) 3.907579308s ago: executing program 5 (id=1182): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.404734768s ago: executing program 1 (id=1191): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08007700ff01000054002d801e00"], 0x94}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000004) 3.403529815s ago: executing program 4 (id=1192): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 3.284912437s ago: executing program 1 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 2.828815318s ago: executing program 4 (id=1198): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.734251549s ago: executing program 0 (id=1199): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x3ff, 0x80000001, 0x11, 0x1fd, 0x1}) 2.508922974s ago: executing program 0 (id=1202): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r0, &(0x7f0000000ec0)='\n', 0x1, 0x40000, &(0x7f0000000300)={0xa, 0x100, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 2.294001124s ago: executing program 4 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x20000000) 2.268369817s ago: executing program 1 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r10, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 2.148829308s ago: executing program 0 (id=1207): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.076686414s ago: executing program 4 (id=1209): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) munlockall() 1.895920646s ago: executing program 4 (id=1211): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r1, 0x0) 1.818947834s ago: executing program 5 (id=1212): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0xa, 0xc) 1.543062535s ago: executing program 0 (id=1213): r0 = fanotify_init(0x10, 0x1000) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x8001018, r1, 0x0) fanotify_mark(r0, 0x1, 0x40001039, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1.211005415s ago: executing program 6 (id=1214): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10) 1.210560811s ago: executing program 5 (id=1215): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.044548336s ago: executing program 6 (id=1216): unshare(0x28060400) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2804, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 979.319773ms ago: executing program 0 (id=1217): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 963.330547ms ago: executing program 5 (id=1218): ioctl$KDGKBSENT(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x0, "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"}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 866.507042ms ago: executing program 6 (id=1219): r0 = syz_io_uring_setup(0xbc0, &(0x7f0000001480)={0x0, 0xac09, 0x80, 0x3, 0x10224}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{0x0}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) 804.248732ms ago: executing program 1 (id=1220): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) unlink(&(0x7f0000000040)='./file1\x00') 668.83251ms ago: executing program 6 (id=1221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "6fd5b6a9cc16ed632cb31fa4ef23a376"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24010011}, 0x10) 582.614488ms ago: executing program 6 (id=1222): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x102b23) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x8a883, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x80) 570.552325ms ago: executing program 1 (id=1223): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 362.099219ms ago: executing program 4 (id=1224): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x4814) 311.878069ms ago: executing program 1 (id=1225): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xa0203, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0xffffffffffffffff) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 260.323662ms ago: executing program 6 (id=1226): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0xee00) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0) kernel console output (not intermixed with test programs): 0x0 [ 104.339655][ T5807] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 104.339681][ T5807] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 104.339708][ T5807] aureal 0003:0755:2626.0001: unknown main item tag 0x0 [ 104.474514][ T5807] aureal 0003:0755:2626.0001: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 104.548034][ T5807] usb 1-1: USB disconnect, device number 2 [ 104.763519][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.765337][ T6021] fido_id[6021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 104.912390][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 104.914784][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.914830][ T5913] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 104.914852][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.967431][ T5913] usb 3-1: config 0 descriptor?? [ 105.142384][ T5867] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.326134][ T5867] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 105.326162][ T5867] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 105.326180][ T5867] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 105.326198][ T5867] usb 2-1: config 8 has no interface number 0 [ 105.326245][ T5867] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 105.326278][ T5867] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.336935][ T5867] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 105.336965][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.336984][ T5867] usb 2-1: Product: syz [ 105.336998][ T5867] usb 2-1: Manufacturer: syz [ 105.337010][ T5867] usb 2-1: SerialNumber: syz [ 105.438371][ T5913] steelseries 0003:1038:1410.0002: missing HID_OUTPUT_REPORT 0 [ 105.672958][ T5867] usb 2-1: USB disconnect, device number 2 [ 105.736274][ T9] usb 3-1: USB disconnect, device number 2 [ 106.329787][ T6037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.820928][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.240256][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.674390][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.822331][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 108.826478][ T5913] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 108.830346][ T5913] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 108.830374][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.830392][ T5913] usb 1-1: Product: syz [ 108.830404][ T5913] usb 1-1: Manufacturer: syz [ 108.830418][ T5913] usb 1-1: SerialNumber: syz [ 108.832440][ T5807] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.906550][ T5913] usb 1-1: config 0 descriptor?? [ 108.922790][ T5913] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 108.922893][ T5913] usb 1-1: setting power ON [ 108.923453][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 108.969537][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.973753][ T6077] netlink: 'syz.4.60': attribute type 13 has an invalid length. [ 108.973861][ T6077] netlink: 152 bytes leftover after parsing attributes in process `syz.4.60'. [ 108.973950][ T6077] : renamed from syz_tun (while UP) [ 109.017786][ T5807] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 109.017825][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.017844][ T5807] usb 2-1: Product: syz [ 109.017857][ T5807] usb 2-1: Manufacturer: syz [ 109.017870][ T5807] usb 2-1: SerialNumber: syz [ 109.057179][ T5807] usb 2-1: config 0 descriptor?? [ 109.058766][ T5913] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 109.059070][ T5913] usb 1-1: media controller created [ 109.068199][ T6077] : refused to change device tx_queue_len [ 109.068410][ T6077] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 109.114089][ T5807] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 109.136063][ T6063] dvb-usb: bulk message failed: -22 (3/0) [ 109.136086][ T6063] cxusb: i2c wr: len=79 is too big! [ 109.136086][ T6063] [ 109.142185][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.188587][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.204327][ T5807] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 109.204481][ T5807] usb 2-1: media controller created [ 109.271842][ T5913] usb 1-1: selecting invalid altsetting 6 [ 109.271864][ T5913] usb 1-1: digital interface selection failed (-22) [ 109.271879][ T5913] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 109.296655][ T5913] usb 1-1: setting power OFF [ 109.296788][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 109.296805][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 109.296818][ T5913] (NULL device *): no alternate interface [ 109.313127][ T6068] cxusb: i2c wr: len=8192 is too big! [ 109.313127][ T6068] [ 109.358953][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.464473][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 109.469503][ T5913] usb 1-1: USB disconnect, device number 3 [ 109.559519][ T5807] DVB: Unable to find symbol mt352_attach() [ 109.667254][ T6087] tipc: Started in network mode [ 109.667301][ T6087] tipc: Node identity 66bbf7c1fb7d, cluster identity 4711 [ 109.668130][ T6087] tipc: Enabled bearer , priority 10 [ 109.742287][ T5807] DVB: Unable to find symbol nxt6000_attach() [ 109.742303][ T5807] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 109.749628][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 109.801638][ T5807] dvb-usb: schedule remote query interval to 1000 msecs. [ 109.801662][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 109.801744][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 109.801768][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 109.843784][ T5807] usb 2-1: USB disconnect, device number 3 [ 110.055463][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 110.184697][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 110.222446][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.372679][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 110.379234][ T5874] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 110.379263][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.384899][ T5874] usb 5-1: config 0 descriptor?? [ 110.693739][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.708290][ T5807] tipc: Node number set to 2647062465 [ 110.775807][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.010391][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.447387][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.551948][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.763535][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.952501][ T5874] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 111.954171][ T5874] asix 5-1:0.0: probe with driver asix failed with error -71 [ 111.968759][ T5874] usb 5-1: USB disconnect, device number 2 [ 112.372327][ T6123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.80'. [ 112.372352][ T6123] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 112.556728][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.559883][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.560880][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.561995][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.582339][ T5874] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.585967][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.736576][ T5874] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 112.736603][ T5874] usb 1-1: config 0 has no interface number 0 [ 112.736632][ T5874] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 112.736670][ T5874] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 112.736696][ T5874] usb 1-1: config 0 interface 255 has no altsetting 0 [ 112.736726][ T5874] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 112.736745][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.842457][ T5874] usb 1-1: config 0 descriptor?? [ 112.845922][ T5874] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 112.918773][ T6136] sctp: [Deprecated]: syz.4.85 (pid 6136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.918773][ T6136] Use struct sctp_sack_info instead [ 113.102800][ T5874] usb 1-1: USB disconnect, device number 4 [ 113.128784][ T6141] warning: `syz.4.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.492112][ T6165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.767826][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.783112][ T61] Bluetooth: hci5: command tx timeout [ 115.257392][ T6159] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 115.349388][ T5895] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 115.522647][ T5895] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 115.522675][ T5895] usb 1-1: config 162 has an invalid interface number: 183 but max is 1 [ 115.522693][ T5895] usb 1-1: config 162 has no interface number 0 [ 115.522708][ T5895] usb 1-1: config 162 has no interface number 1 [ 115.522767][ T5895] usb 1-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.522804][ T5895] usb 1-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 115.522826][ T5895] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 115.522936][ T5895] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 115.522960][ T5895] usb 1-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 115.522983][ T5895] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 115.523006][ T5895] usb 1-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 115.523028][ T5895] usb 1-1: config 162 interface 79 has no altsetting 0 [ 115.523044][ T5895] usb 1-1: config 162 interface 183 has no altsetting 0 [ 115.552803][ T5895] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 115.552832][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.552851][ T5895] usb 1-1: Product: syz [ 115.552864][ T5895] usb 1-1: Manufacturer: syz [ 115.552877][ T5895] usb 1-1: SerialNumber: syz [ 115.891771][ T5895] pl2303 1-1:162.79: required endpoints missing [ 115.901783][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.954795][ T5895] pl2303 1-1:162.183: pl2303 converter detected [ 115.955843][ T5895] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 115.956254][ T5895] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 115.956650][ T5895] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 115.957046][ T5895] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 115.957554][ T5895] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 115.957935][ T5895] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 115.958335][ T5895] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 115.962457][ T5895] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 115.962955][ T5895] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 115.964915][ T5895] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 115.965308][ T5895] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 115.985496][ T5895] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 116.028802][ T5895] usb 1-1: USB disconnect, device number 5 [ 116.103688][ T5895] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 116.104741][ T5895] pl2303 1-1:162.183: device disconnected [ 116.311583][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 116.707578][ T6197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.064732][ T61] Bluetooth: hci5: command tx timeout [ 117.462114][ T6206] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.597642][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.822570][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.972615][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 117.974030][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.979849][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.979882][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.979920][ T5867] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 117.979942][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.053030][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.094060][ T5867] usb 3-1: config 0 descriptor?? [ 118.216513][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.216545][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.216583][ T5913] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 118.216605][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.228757][ T5913] usb 5-1: config 0 descriptor?? [ 118.324395][ T5874] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.465557][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.483886][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 118.502871][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.502953][ T5874] usb 2-1: config 0 has no interface number 0 [ 118.502996][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.503022][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.503099][ T5874] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 118.503120][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.578450][ T5874] usb 2-1: config 0 descriptor?? [ 118.637875][ T5867] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 118.765256][ T6007] usb 3-1: USB disconnect, device number 3 [ 118.770646][ T5913] razer 0003:1532:010E.0004: hidraw1: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 118.905937][ T5913] usb 5-1: USB disconnect, device number 3 [ 118.938143][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.938279][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.938507][ T6124] bridge_slave_0: entered allmulticast mode [ 118.966173][ T6124] bridge_slave_0: entered promiscuous mode [ 118.970540][ T6230] fido_id[6230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 118.996988][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.997134][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.997363][ T6124] bridge_slave_1: entered allmulticast mode [ 119.005282][ T6124] bridge_slave_1: entered promiscuous mode [ 119.123408][ T61] Bluetooth: hci5: command tx timeout [ 119.176624][ T6231] fido_id[6231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 119.189358][ T6233] netlink: 312 bytes leftover after parsing attributes in process `syz.0.119'. [ 119.239858][ T5874] uclogic 0003:28BD:0071.0005: pen parameters not found [ 119.239903][ T5874] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 119.336760][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 119.336784][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 119.336808][ T6236] netlink: 'syz.0.120': attribute type 15 has an invalid length. [ 119.417548][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.484844][ T5874] usb 2-1: USB disconnect, device number 4 [ 119.520037][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.023898][ T6124] team0: Port device team_slave_0 added [ 120.036081][ T6124] team0: Port device team_slave_1 added [ 120.077203][ T6252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.202812][ T61] Bluetooth: hci5: command tx timeout [ 121.355353][ T37] audit: type=1326 audit(1759527257.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6267 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e8a0eec9 code=0x7ffc0000 [ 121.355414][ T37] audit: type=1326 audit(1759527257.324:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6267 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e8a0eec9 code=0x7ffc0000 [ 121.355452][ T37] audit: type=1326 audit(1759527257.324:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6267 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7ff3e8a0eec9 code=0x7ffc0000 [ 121.355487][ T37] audit: type=1326 audit(1759527257.324:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6267 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e8a0eec9 code=0x7ffc0000 [ 121.355523][ T37] audit: type=1326 audit(1759527257.324:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6267 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e8a0eec9 code=0x7ffc0000 [ 121.593691][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.593708][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.593731][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.615436][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.615450][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.615465][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.732525][ T6279] batadv_slave_1: entered promiscuous mode [ 121.750778][ T6279] batadv_slave_1: left promiscuous mode [ 121.935990][ T12] bridge_slave_1: left allmulticast mode [ 121.936094][ T12] bridge_slave_1: left promiscuous mode [ 121.968085][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.087585][ T12] bridge_slave_0: left allmulticast mode [ 122.087612][ T12] bridge_slave_0: left promiscuous mode [ 122.087850][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.215585][ T6304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.053645][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.312462][ T6315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.922370][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 124.928152][ T9] usb 5-1: config 5 has too many interfaces: 192, using maximum allowed: 32 [ 124.928179][ T9] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 124.928196][ T9] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 124.928213][ T9] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 192 [ 124.932071][ T9] usb 5-1: New USB device found, idVendor=8b5d, idProduct=fa95, bcdDevice=f7.76 [ 124.932099][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.932118][ T9] usb 5-1: Product: syz [ 124.932132][ T9] usb 5-1: Manufacturer: syz [ 124.932146][ T9] usb 5-1: SerialNumber: syz [ 125.298578][ T9] usb 5-1: USB disconnect, device number 4 [ 126.534672][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.037256][ T6328] process 'syz.4.155' launched './file1' with NULL argv: empty string added [ 127.303047][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.363379][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.385725][ T12] bond0 (unregistering): Released all slaves [ 127.560499][ T6124] hsr_slave_0: entered promiscuous mode [ 127.561777][ T6124] hsr_slave_1: entered promiscuous mode [ 127.587485][ T6124] debugfs: 'hsr0' already exists in 'hsr' [ 127.587511][ T6124] Cannot create hsr debugfs directory [ 127.742657][ T6336] netlink: 140 bytes leftover after parsing attributes in process `syz.1.160'. [ 128.700896][ T6352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.662423][ T989] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.707528][ T6370] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 129.824987][ T989] usb 5-1: Using ep0 maxpacket: 16 [ 129.829060][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.829108][ T989] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 129.829131][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.957280][ T989] usb 5-1: config 0 descriptor?? [ 130.737759][ T6386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.373513][ T989] hid_parser_main: 59 callbacks suppressed [ 131.373538][ T989] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 131.373571][ T989] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 131.373596][ T989] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 131.373617][ T989] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 131.373640][ T989] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 131.399194][ T989] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 131.438924][ T989] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 131.643177][ T5913] usb 5-1: USB disconnect, device number 5 [ 132.412757][ T12] hsr_slave_0: left promiscuous mode [ 132.466999][ T12] hsr_slave_1: left promiscuous mode [ 132.468219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.468330][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.502431][ T5807] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.508926][ T6422] overlayfs: failed to clone lowerpath [ 132.527763][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.527788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.658981][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 132.665635][ T5807] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 132.665660][ T5807] usb 3-1: config 0 has no interface number 0 [ 132.665708][ T5807] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.665732][ T5807] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.671480][ T5807] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 132.671508][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 132.671526][ T5807] usb 3-1: Product: syz [ 132.671539][ T5807] usb 3-1: SerialNumber: syz [ 132.681468][ T5807] usb 3-1: config 0 descriptor?? [ 132.708088][ T5807] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 132.730447][ T5807] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 132.993439][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 133.008369][ T12] veth1_macvtap: left promiscuous mode [ 133.008646][ T12] veth0_macvtap: left promiscuous mode [ 133.008926][ T12] veth1_vlan: left promiscuous mode [ 133.010547][ T12] veth0_vlan: left promiscuous mode [ 133.047990][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.049478][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.237310][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.239070][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.239308][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.239702][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.240591][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.242662][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.243320][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.243552][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.243784][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.244008][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.247200][ T5807] usb 3-1: USB disconnect, device number 4 [ 133.247282][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 133.353438][ T5807] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 133.393433][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.542547][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 133.547475][ T10] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 133.551725][ T10] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 133.551753][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.551771][ T10] usb 5-1: Product: syz [ 133.551784][ T10] usb 5-1: Manufacturer: syz [ 133.551798][ T10] usb 5-1: SerialNumber: syz [ 133.613586][ T10] usb 5-1: config 0 descriptor?? [ 133.639922][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 133.639974][ T10] usb 5-1: setting power ON [ 133.639994][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 133.668905][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.670557][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 133.670595][ T10] usb 5-1: media controller created [ 133.717726][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.745240][ T10] usb 5-1: selecting invalid altsetting 6 [ 133.745265][ T10] usb 5-1: digital interface selection failed (-22) [ 133.745279][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 133.746065][ T10] usb 5-1: setting power OFF [ 133.746085][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 133.746100][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 133.746110][ T10] (NULL device *): no alternate interface [ 133.860018][ T6432] dvb-usb: bulk message failed: -22 (3/0) [ 133.860044][ T6432] dvb-usb: bulk message failed: -22 (4/0) [ 133.860058][ T6432] cxusb: i2c read failed [ 133.861063][ T6432] dvb-usb: bulk message failed: -22 (3/0) [ 133.895188][ T37] audit: type=1326 audit(1759527269.864:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.905543][ T37] audit: type=1326 audit(1759527269.884:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.916341][ T37] audit: type=1326 audit(1759527269.894:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd04672d710 code=0x7ffc0000 [ 133.917049][ T37] audit: type=1326 audit(1759527269.894:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.921385][ T37] audit: type=1326 audit(1759527269.894:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.922731][ T37] audit: type=1326 audit(1759527269.894:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.924787][ T37] audit: type=1326 audit(1759527269.904:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.928573][ T37] audit: type=1326 audit(1759527269.904:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.940727][ T37] audit: type=1326 audit(1759527269.914:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 133.945404][ T37] audit: type=1326 audit(1759527269.914:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x7ffc0000 [ 134.090918][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'. [ 134.166638][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 134.170467][ T10] usb 5-1: USB disconnect, device number 6 [ 134.677776][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.197'. [ 134.802489][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.965053][ T10] usb 1-1: config 0 has an invalid interface number: 217 but max is 1 [ 134.965077][ T10] usb 1-1: config 0 has no interface number 1 [ 134.965111][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.966854][ T10] usb 1-1: config 0 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.966882][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 134.966894][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.026594][ T10] usb 1-1: config 0 descriptor?? [ 135.055675][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 135.242734][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 135.242766][ T10] gspca_sn9c20x: Device initialization failed [ 135.242847][ T10] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 135.250387][ T10] usb 1-1: USB disconnect, device number 6 [ 135.842199][ T6450] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 135.842584][ T6450] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 135.842599][ T6450] netlink: 216 bytes leftover after parsing attributes in process `syz.0.198'. [ 135.985584][ T12] team0 (unregistering): Port device team_slave_1 removed [ 136.142652][ T5807] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.233249][ T12] team0 (unregistering): Port device team_slave_0 removed [ 136.312464][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 136.316334][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.316360][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.316382][ T5807] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.316394][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.320152][ T5807] usb 1-1: config 0 descriptor?? [ 136.329244][ T5807] hub 1-1:0.0: USB hub found [ 136.529952][ T5807] hub 1-1:0.0: 1 port detected [ 136.730957][ T5807] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 136.730982][ T5807] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 136.740013][ T5807] usbhid 1-1:0.0: can't add hid device: -71 [ 136.740148][ T5807] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 136.769611][ T5807] usb 1-1: USB disconnect, device number 7 [ 139.108986][ T6124] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.207271][ T6477] loop6: detected capacity change from 0 to 524288000 [ 139.227980][ T6124] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.354132][ T6124] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.420690][ T6124] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.425392][ T6482] loop6: detected capacity change from 524288000 to 1 [ 139.539812][ T6489] Zero length message leads to an empty skb [ 140.077742][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.170014][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.194507][ T10] kernel read not supported for file /usbmon9 (pid: 10 comm: kworker/0:1) [ 140.214516][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.214946][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.239702][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.240622][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.097307][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 141.126196][ T6539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.171920][ T6543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.228'. [ 141.314372][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.432776][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 141.963724][ T989] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.023699][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.281794][ T6565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.328563][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.467342][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.645138][ T989] usb 1-1: Using ep0 maxpacket: 32 [ 142.659886][ T989] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.659913][ T989] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 142.659937][ T989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.672946][ T989] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 142.672973][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.672991][ T989] usb 1-1: Product: syz [ 142.673004][ T989] usb 1-1: Manufacturer: syz [ 142.673017][ T989] usb 1-1: SerialNumber: syz [ 142.690549][ T989] usb 1-1: config 0 descriptor?? [ 142.798323][ T37] audit: type=1326 audit(1759527278.774:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6570 comm="syz.2.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd04672eec9 code=0x0 [ 142.893005][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.344992][ T989] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 144.106069][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.446282][ T989] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 144.446736][ T989] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 144.448610][ T989] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 144.500544][ T989] usb 1-1: USB disconnect, device number 8 [ 144.561272][ T6595] netlink: 'syz.1.240': attribute type 21 has an invalid length. [ 144.859804][ T6124] veth0_vlan: entered promiscuous mode [ 144.905060][ T6124] veth1_vlan: entered promiscuous mode [ 145.070761][ T6124] veth0_macvtap: entered promiscuous mode [ 145.126717][ T6124] veth1_macvtap: entered promiscuous mode [ 145.398174][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.465324][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.994195][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.231579][ T6608] syz.2.243 (6608) used greatest stack depth: 18680 bytes left [ 146.232463][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.368222][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.400125][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.456125][ T6616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.247'. [ 146.517821][ T150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.518713][ T150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.518970][ T150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.519221][ T150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.122121][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.122141][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.389086][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.389105][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.969381][ T6659] program syz.1.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.982683][ T5913] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.133445][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 148.137236][ T5913] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 148.137269][ T5913] usb 3-1: config 0 has no interface number 0 [ 148.154509][ T5913] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 148.154538][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.154556][ T5913] usb 3-1: Product: syz [ 148.154569][ T5913] usb 3-1: Manufacturer: syz [ 148.154582][ T5913] usb 3-1: SerialNumber: syz [ 148.191649][ T5913] usb 3-1: config 0 descriptor?? [ 148.247822][ T5913] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 148.525871][ T5913] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 148.712193][ T5913] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 148.903306][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 148.911543][ T5913] usb 3-1: USB disconnect, device number 5 [ 148.939829][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 148.981131][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 148.982056][ T5913] quatech2 3-1:0.51: device disconnected [ 149.372490][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.522736][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 149.525248][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 149.525293][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 149.525316][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.562394][ T5874] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.592771][ T10] usb 1-1: config 0 descriptor?? [ 149.627455][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 149.757618][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 149.757649][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.757683][ T5874] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 149.757700][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.812043][ T5874] usb 5-1: config 0 descriptor?? [ 149.833996][ T5163] bcm5974 1-1:0.0: could not read from device [ 149.916327][ T10] bcm5974 1-1:0.0: could not read from device [ 149.967026][ T5163] bcm5974 1-1:0.0: could not read from device [ 150.046021][ T10] input: failed to attach handler mousedev to device input7, error: -5 [ 150.080894][ T10] usb 1-1: USB disconnect, device number 9 [ 150.380906][ T5874] elo 0003:04E7:0030.0007: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 150.435096][ T6709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.438913][ T6709] kAFS: No cell specified [ 150.530188][ T989] usb 5-1: USB disconnect, device number 7 [ 151.717078][ T3543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.835098][ T6738] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.890609][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.901391][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.911457][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.917011][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.917739][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.985640][ T989] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.133767][ T989] usb 2-1: Using ep0 maxpacket: 16 [ 152.137990][ T989] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.138023][ T989] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.138045][ T989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.138079][ T989] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 152.138101][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.213653][ T989] usb 2-1: config 0 descriptor?? [ 152.290128][ T6746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.295439][ T6746] kAFS: No cell specified [ 152.363944][ T3543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.403049][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 152.554429][ T10] usb 6-1: config 0 has an invalid interface number: 46 but max is 0 [ 152.554457][ T10] usb 6-1: config 0 has no interface number 0 [ 152.554504][ T10] usb 6-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 152.557097][ T10] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 152.557124][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.557143][ T10] usb 6-1: Product: syz [ 152.557156][ T10] usb 6-1: Manufacturer: syz [ 152.557169][ T10] usb 6-1: SerialNumber: syz [ 152.575553][ T10] usb 6-1: config 0 descriptor?? [ 152.578820][ T6745] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 152.587937][ T10] ums-karma 6-1:0.46: USB Mass Storage device detected [ 152.671923][ T989] cougar 0003:060B:500A.0008: unexpected long global item [ 152.680012][ T989] cougar 0003:060B:500A.0008: parse failed [ 152.680073][ T989] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22 [ 152.705162][ T10] ums-karma 6-1:0.46: probe with driver ums-karma failed with error -5 [ 152.743287][ T3543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.790295][ T10] usb 6-1: USB disconnect, device number 2 [ 152.861666][ T9] usb 2-1: USB disconnect, device number 5 [ 153.792205][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.816988][ T61] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.977095][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.083902][ T61] Bluetooth: hci1: command tx timeout [ 154.217523][ T3543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.338704][ T6760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.298'. [ 154.462527][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.618364][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.633724][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 154.643956][ T5874] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 154.643986][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.644005][ T5874] usb 5-1: Product: syz [ 154.644019][ T5874] usb 5-1: Manufacturer: syz [ 154.644033][ T5874] usb 5-1: SerialNumber: syz [ 154.815444][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.976591][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.324671][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.419932][ T6769] tty tty1: ldisc open failed (-12), clearing slot 0 [ 155.441005][ T5874] usb 5-1: config 0 descriptor?? [ 155.548840][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.817064][ T5874] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 156.065100][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.162490][ T61] Bluetooth: hci1: command tx timeout [ 156.235052][ T6786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.238814][ T6786] kAFS: No cell specified [ 156.256066][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 156.470282][ T5874] gspca_sunplus: reg_w_riv err -71 [ 156.470378][ T5874] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 156.492347][ T5874] usb 5-1: USB disconnect, device number 8 [ 156.761302][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.925578][ T3543] bridge_slave_1: left allmulticast mode [ 156.925606][ T3543] bridge_slave_1: left promiscuous mode [ 156.925851][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.013660][ T3543] bridge_slave_0: left allmulticast mode [ 157.013687][ T3543] bridge_slave_0: left promiscuous mode [ 157.013933][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.242440][ T61] Bluetooth: hci1: command tx timeout [ 158.983046][ T3543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.046156][ T3543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.089071][ T3543] bond0 (unregistering): Released all slaves [ 159.972384][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 160.126007][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.126146][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.126168][ T10] usb 6-1: config 0 has no interface number 0 [ 160.126223][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.126456][ T6739] bridge_slave_0: entered allmulticast mode [ 160.129156][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 160.129163][ T6739] bridge_slave_0: entered promiscuous mode [ 160.129183][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.129256][ T10] usb 6-1: Product: syz [ 160.129270][ T10] usb 6-1: Manufacturer: syz [ 160.129284][ T10] usb 6-1: SerialNumber: syz [ 160.131627][ T6860] syz_tun: entered allmulticast mode [ 160.161457][ T6856] syz_tun: left allmulticast mode [ 160.166219][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.166342][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.166574][ T6739] bridge_slave_1: entered allmulticast mode [ 160.183133][ T6739] bridge_slave_1: entered promiscuous mode [ 160.242845][ T10] usb 6-1: config 0 descriptor?? [ 160.322724][ T61] Bluetooth: hci1: command tx timeout [ 160.471371][ T10] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 160.492167][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 160.521784][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 160.521846][ T10] usb 6-1: media controller created [ 160.571062][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.824885][ T5807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.245133][ T6880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.696587][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 161.762495][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 161.783413][ T5807] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 161.783443][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.783462][ T5807] usb 2-1: Product: syz [ 161.783475][ T5807] usb 2-1: Manufacturer: syz [ 161.783488][ T5807] usb 2-1: SerialNumber: syz [ 161.802443][ T10] usb 6-1: USB disconnect, device number 3 [ 161.858379][ T5807] usb 2-1: config 0 descriptor?? [ 161.892839][ T5807] gspca_main: sq930x-2.14.0 probing 2770:930c [ 162.014739][ T6875] netlink: 'syz.0.343': attribute type 25 has an invalid length. [ 162.034154][ T6876] netlink: 'syz.0.343': attribute type 25 has an invalid length. [ 162.042042][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.079437][ T5867] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.156801][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.226858][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 162.237103][ T5867] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.237131][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.237150][ T5867] usb 5-1: Product: syz [ 162.237162][ T5867] usb 5-1: Manufacturer: syz [ 162.237176][ T5867] usb 5-1: SerialNumber: syz [ 162.249944][ T5867] usb 5-1: config 0 descriptor?? [ 162.333478][ T3543] hsr_slave_0: left promiscuous mode [ 162.372776][ T3543] hsr_slave_1: left promiscuous mode [ 162.378157][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.378184][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.425889][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.425917][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.510138][ T5867] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 162.582428][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.695399][ T5807] gspca_sq930x: ucbus_write failed -71 [ 162.695556][ T5807] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 162.720000][ T5807] usb 2-1: USB disconnect, device number 6 [ 162.732456][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 162.754813][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.755857][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.755899][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 162.755920][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.949713][ T3543] veth1_macvtap: left promiscuous mode [ 162.949821][ T3543] veth0_macvtap: left promiscuous mode [ 162.950075][ T3543] veth1_vlan: left promiscuous mode [ 162.950254][ T3543] veth0_vlan: left promiscuous mode [ 162.954573][ T5867] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 162.984549][ T10] usb 1-1: config 0 descriptor?? [ 162.987363][ T5867] usb 5-1: USB disconnect, device number 9 [ 163.427582][ T10] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 163.427617][ T10] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 163.427645][ T10] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 163.427672][ T10] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 163.427699][ T10] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 163.427725][ T10] savu 0003:1E7D:2D5A.0009: unbalanced collection at end of report description [ 163.428514][ T10] savu 0003:1E7D:2D5A.0009: parse failed [ 163.428580][ T10] savu 0003:1E7D:2D5A.0009: probe with driver savu failed with error -22 [ 164.164515][ T989] usb 1-1: USB disconnect, device number 10 [ 164.381630][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.518308][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.998244][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.864445][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.845653][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.993936][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.451964][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.789010][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.887197][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.925495][ T6996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.976303][ T6996] afs: Unknown parameter 'dy' [ 169.981086][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.290037][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.553185][ T3543] team0 (unregistering): Port device team_slave_1 removed [ 170.695709][ T7005] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 170.695731][ T7005] netlink: 51 bytes leftover after parsing attributes in process `syz.0.386'. [ 170.696885][ T7005] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 170.696903][ T7005] netlink: 51 bytes leftover after parsing attributes in process `syz.0.386'. [ 170.860763][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.087251][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.195268][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.329410][ T7011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.708300][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.916588][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.054432][ T3543] team0 (unregistering): Port device team_slave_0 removed [ 172.330321][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.882677][ T6007] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.045209][ T6007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.045241][ T6007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.045265][ T6007] usb 1-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 173.045326][ T6007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.049267][ T6007] usb 1-1: config 0 descriptor?? [ 173.246952][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.472981][ T6007] lg-g15 0003:046D:C22E.000A: item fetching failed at offset 4/5 [ 173.473815][ T6007] lg-g15 0003:046D:C22E.000A: probe with driver lg-g15 failed with error -22 [ 173.669637][ T5807] usb 1-1: USB disconnect, device number 11 [ 174.692470][ T5807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 174.711498][ T7019] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 174.842571][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 174.845153][ T5807] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 174.845199][ T5807] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.845238][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.845265][ T5807] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.845289][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.845314][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.845338][ T5807] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.845363][ T5807] usb 1-1: config 168 interface 0 has no altsetting 0 [ 174.846910][ T5807] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 174.846951][ T5807] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.847052][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.847079][ T5807] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.847111][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.847135][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.847161][ T5807] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.847185][ T5807] usb 1-1: config 168 interface 0 has no altsetting 0 [ 174.848483][ T5807] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 174.848519][ T5807] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.848558][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.848584][ T5807] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.848609][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.848634][ T5807] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.848659][ T5807] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.848684][ T5807] usb 1-1: config 168 interface 0 has no altsetting 0 [ 174.948264][ T7045] program syz.5.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.027071][ T6739] team0: Port device team_slave_0 added [ 175.070222][ T6739] team0: Port device team_slave_1 added [ 175.161309][ T5807] usb 1-1: string descriptor 0 read error: -22 [ 175.161452][ T5807] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 175.161475][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.238526][ T5807] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 175.522606][ T6007] usb 1-1: USB disconnect, device number 12 [ 175.563602][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.563617][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.563640][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.578907][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.408'. [ 175.578949][ T7060] netlink: 56 bytes leftover after parsing attributes in process `syz.5.408'. [ 175.594306][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.594322][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.594353][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.895153][ T7070] netlink: 'syz.5.412': attribute type 10 has an invalid length. [ 175.949225][ T7071] netlink: 'syz.5.412': attribute type 10 has an invalid length. [ 175.949247][ T7071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.412'. [ 176.101676][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.299623][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.713349][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.906428][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.364854][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.368216][ T7070] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 177.388113][ T7071] batadv0: entered promiscuous mode [ 177.388140][ T7071] batadv0: entered allmulticast mode [ 177.426240][ T7071] bond0: (slave batadv0): Releasing backup interface [ 177.491741][ T7071] bridge0: port 3(batadv0) entered blocking state [ 177.491894][ T7071] bridge0: port 3(batadv0) entered disabled state [ 177.602458][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 177.602477][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 177.788143][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.914355][ T6739] hsr_slave_0: entered promiscuous mode [ 177.954398][ T6739] hsr_slave_1: entered promiscuous mode [ 178.314151][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.520946][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.926458][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.133220][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.237393][ T7113] netlink: 277 bytes leftover after parsing attributes in process `syz.0.425'. [ 179.285838][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.682456][ T5874] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 179.836274][ T5874] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.836299][ T5874] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.841592][ T5874] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.841620][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.841638][ T5874] usb 2-1: Product: syz [ 179.841651][ T5874] usb 2-1: Manufacturer: syz [ 179.841663][ T5874] usb 2-1: SerialNumber: syz [ 180.116202][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 180.323538][ T5874] usb 2-1: cannot find UAC_HEADER [ 180.602440][ T5807] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 180.603884][ T5874] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 180.630191][ T5874] usb 2-1: USB disconnect, device number 7 [ 180.705548][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.767000][ T5807] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.767031][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.792062][ T5807] usb 5-1: config 0 descriptor?? [ 180.818917][ T5807] cp210x 5-1:0.0: cp210x converter detected [ 180.845223][ T6739] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.900549][ T6739] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.936307][ T6739] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.979254][ T6739] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.124157][ T5874] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 181.224425][ T5807] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 181.239971][ T5807] usb 5-1: cp210x converter now attached to ttyUSB0 [ 181.284470][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.284495][ T5874] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 181.284546][ T5874] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 181.284568][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.361092][ T5874] usb 1-1: config 0 descriptor?? [ 181.402987][ T5874] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 181.403045][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 181.426914][ T5874] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 181.447632][ T5874] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 181.447712][ T5874] usb 1-1: media controller created [ 181.480877][ T989] usb 5-1: USB disconnect, device number 10 [ 181.483072][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.545627][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.571406][ T989] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.595254][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 181.595410][ T5874] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 181.630286][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.630652][ T7152] dvb-usb: bulk message failed: -22 (2/0) [ 181.650368][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 181.678589][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.690094][ T5874] dvb-usb: schedule remote query interval to 150 msecs. [ 181.690116][ T5874] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 181.692785][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.695210][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.695358][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.732400][ T5874] usb 1-1: USB disconnect, device number 13 [ 181.786381][ T989] cp210x 5-1:0.0: device disconnected [ 181.924960][ T5874] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 182.730191][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.954891][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.179200][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.448145][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.645590][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.032394][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.183829][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.205868][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.468972][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.878310][ T7222] kAFS: No cell specified [ 185.120722][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.462552][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.800333][ T6739] veth0_vlan: entered promiscuous mode [ 185.864312][ T6739] veth1_vlan: entered promiscuous mode [ 185.953057][ T6739] veth0_macvtap: entered promiscuous mode [ 185.959596][ T6739] veth1_macvtap: entered promiscuous mode [ 186.005530][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.024667][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.051257][ T1119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.051463][ T1119] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.051510][ T1119] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.051542][ T1119] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.115644][ T7244] syz.5.458 (7244) used greatest stack depth: 18584 bytes left [ 186.202442][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 186.340472][ T7251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 186.608408][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.819124][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.218543][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.430714][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.517430][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.590346][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 187.734489][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 187.740130][ T5867] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 187.740158][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.776843][ T5867] usb 6-1: config 0 descriptor?? [ 187.902385][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 187.970549][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.970570][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.176542][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.176562][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.453288][ T31] usb 6-1: USB disconnect, device number 4 [ 188.643398][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 189.370402][ T7320] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 189.371667][ T7320] macvtap1: entered allmulticast mode [ 189.371689][ T7320] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 189.788401][ T7330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.175145][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.240048][ T7320] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 190.240192][ T7320] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 190.515095][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.515952][ T7328] batadv_slave_0: entered promiscuous mode [ 190.646103][ T7342] netlink: 96 bytes leftover after parsing attributes in process `syz.5.487'. [ 190.646445][ T7342] netlink: 96 bytes leftover after parsing attributes in process `syz.5.487'. [ 190.646680][ T7342] netlink: 96 bytes leftover after parsing attributes in process `syz.5.487'. [ 190.646697][ T7342] netlink: 96 bytes leftover after parsing attributes in process `syz.5.487'. [ 191.135761][ T7362] bridge0: port 3(syz_tun) entered blocking state [ 191.136214][ T7362] bridge0: port 3(syz_tun) entered disabled state [ 191.136801][ T7362] syz_tun: entered allmulticast mode [ 191.233071][ T7362] syz_tun: entered promiscuous mode [ 191.239035][ T7362] bridge0: port 3(syz_tun) entered blocking state [ 191.239481][ T7362] bridge0: port 3(syz_tun) entered forwarding state [ 191.300064][ T7364] sch_fq: defrate 0 ignored. [ 192.466451][ T7405] overlayfs: conflicting lowerdir path [ 192.752504][ T5874] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.902563][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 192.907978][ T5874] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 192.908004][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.908020][ T5874] usb 5-1: Product: syz [ 192.908032][ T5874] usb 5-1: Manufacturer: syz [ 192.908043][ T5874] usb 5-1: SerialNumber: syz [ 192.952336][ T5874] usb 5-1: config 0 descriptor?? [ 192.972969][ T5874] gspca_main: se401-2.14.0 probing 047d:5003 [ 193.597369][ T5874] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 193.807958][ T5874] usb 5-1: USB disconnect, device number 11 [ 193.883011][ T7429] syz.1.518 (7429) used greatest stack depth: 17784 bytes left [ 194.254008][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.889663][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.102273][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.105459][ T7444] kAFS: No cell specified [ 195.111409][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.111475][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.636107][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 196.044797][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.062412][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 196.064816][ T31] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 196.064840][ T31] usb 7-1: config 0 has no interface number 0 [ 196.067327][ T31] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 196.067352][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.067369][ T31] usb 7-1: Product: syz [ 196.067380][ T31] usb 7-1: Manufacturer: syz [ 196.067392][ T31] usb 7-1: SerialNumber: syz [ 196.169264][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.451386][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.865546][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.986796][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.001283][ T31] usb 7-1: config 0 descriptor?? [ 197.034771][ T31] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 197.330319][ T31] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 197.374763][ T7490] netlink: 'syz.5.535': attribute type 1 has an invalid length. [ 197.374783][ T7490] netlink: 172 bytes leftover after parsing attributes in process `syz.5.535'. [ 197.376527][ T31] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 197.446592][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.447121][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.662736][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.671703][ T5874] usb 7-1: USB disconnect, device number 2 [ 197.829368][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.884173][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.885286][ T5874] quatech2 7-1:0.51: device disconnected [ 198.400951][ T7511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 198.400988][ T7511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 198.448760][ T7512] syz.5.546 uses obsolete (PF_INET,SOCK_PACKET) [ 198.855336][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.344645][ T7527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.386644][ T7527] kAFS: No cell specified [ 199.467447][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.488587][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.605616][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.720366][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.6.552'. [ 200.116003][ T7537] serio: Serial port ptm0 [ 200.192863][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.349323][ T5913] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.349349][ T5913] usb 5-1: config 0 has no interface number 0 [ 200.367865][ T5913] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 200.367894][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.367913][ T5913] usb 5-1: Product: syz [ 200.367926][ T5913] usb 5-1: Manufacturer: syz [ 200.367940][ T5913] usb 5-1: SerialNumber: syz [ 200.405600][ T5913] usb 5-1: config 0 descriptor?? [ 200.631087][ T5913] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 200.677652][ T5913] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.677992][ T5913] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 200.678043][ T5913] usb 5-1: media controller created [ 200.728467][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.895109][ T7564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.401125][ T7579] netlink: 844 bytes leftover after parsing attributes in process `syz.6.575'. [ 201.432578][ T989] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 201.582429][ T989] usb 2-1: Using ep0 maxpacket: 32 [ 201.588221][ T989] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 201.588247][ T989] usb 2-1: config 0 has no interface number 0 [ 201.588686][ T989] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 201.588713][ T989] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 201.588735][ T989] usb 2-1: config 0 interface 126 has no altsetting 0 [ 201.746923][ T989] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 201.747161][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.747182][ T989] usb 2-1: Product: syz [ 201.747196][ T989] usb 2-1: Manufacturer: syz [ 201.747207][ T989] usb 2-1: SerialNumber: syz [ 201.810985][ T989] usb 2-1: config 0 descriptor?? [ 201.815843][ T7574] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 201.830139][ T7574] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 201.844319][ T5913] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 202.084519][ T5913] usb 5-1: USB disconnect, device number 12 [ 202.122388][ T5867] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 202.264954][ T989] ir_usb 2-1:0.126: IR Dongle converter detected [ 202.282815][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 202.285200][ T5867] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.285236][ T5867] usb 7-1: config 0 has no interface number 0 [ 202.288214][ T5867] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.288241][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.288261][ T5867] usb 7-1: Product: syz [ 202.288275][ T5867] usb 7-1: Manufacturer: syz [ 202.288288][ T5867] usb 7-1: SerialNumber: syz [ 202.304283][ T5867] usb 7-1: config 0 descriptor?? [ 202.316441][ T5867] quatech2 7-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 202.482853][ T989] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 202.627071][ T5867] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 202.691016][ T5867] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 202.719993][ T989] usb 2-1: USB disconnect, device number 8 [ 202.775916][ T989] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 202.777879][ T989] ir_usb 2-1:0.126: device disconnected [ 203.015765][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.016591][ T5867] usb 7-1: USB disconnect, device number 3 [ 203.067777][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.125257][ T5867] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 203.129738][ T5867] quatech2 7-1:0.1: device disconnected [ 203.700856][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 204.797421][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.610'. [ 204.797882][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 204.797902][ T7656] nbd: socks must be embedded in a SOCK_ITEM attr [ 205.257000][ T7660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.711465][ T7657] afs: Unknown parameter 'dy' [ 208.686937][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.762381][ T5807] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 208.872479][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.936066][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 208.936114][ T5807] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 208.936136][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.975058][ T5807] usb 5-1: config 0 descriptor?? [ 208.975872][ T7710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.415376][ T5807] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 209.415414][ T5807] ryos 0003:1E7D:3138.000B: unknown main item tag 0x1 [ 209.445516][ T5807] ryos 0003:1E7D:3138.000B: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 209.447818][ T7735] syz_tun: entered allmulticast mode [ 209.455431][ T7735] syz_tun: left allmulticast mode [ 209.657208][ T1228] usb 5-1: USB disconnect, device number 13 [ 209.810003][ T7747] tmpfs: Cannot retroactively limit size [ 211.770864][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.770903][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.770927][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.770951][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.770975][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.770997][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.771021][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.771045][ T5867] hid-generic 00A0:0008:0003.000C: unknown main item tag 0x0 [ 211.818243][ T5867] hid-generic 00A0:0008:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 211.922667][ T5127] Bluetooth: hci2: command 0x0406 tx timeout [ 211.956275][ T5127] Bluetooth: hci4: command 0x0406 tx timeout [ 211.956310][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 212.055688][ T7817] netlink: 'syz.4.678': attribute type 14 has an invalid length. [ 212.079386][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.666948][ T7834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.172459][ T5867] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 213.202511][ T1228] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 213.325123][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 213.327311][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.327335][ T5867] usb 1-1: config 0 has no interface number 0 [ 213.368674][ T1228] usb 6-1: Using ep0 maxpacket: 8 [ 213.369829][ T5867] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 213.369858][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.369877][ T5867] usb 1-1: Product: syz [ 213.369891][ T5867] usb 1-1: Manufacturer: syz [ 213.369904][ T5867] usb 1-1: SerialNumber: syz [ 213.371325][ T1228] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 213.381058][ T1228] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 213.381086][ T1228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.381103][ T1228] usb 6-1: Product: syz [ 213.381116][ T1228] usb 6-1: Manufacturer: syz [ 213.381129][ T1228] usb 6-1: SerialNumber: syz [ 213.400142][ T5867] usb 1-1: config 0 descriptor?? [ 213.409168][ T1228] usb 6-1: config 0 descriptor?? [ 213.415131][ T5867] quatech2 1-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 213.488110][ T1228] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 213.499029][ T1228] usb 6-1: setting power ON [ 213.502973][ T1228] dvb-usb: bulk message failed: -22 (2/0) [ 213.590871][ T1228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.601598][ T1228] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 213.602941][ T1228] usb 6-1: media controller created [ 213.644193][ T7844] dvb-usb: bulk message failed: -22 (3/0) [ 213.644218][ T7844] dvb-usb: bulk message failed: -22 (4/0) [ 213.644232][ T7844] cxusb: i2c read failed [ 213.644655][ T7844] dvb-usb: bulk message failed: -22 (3/0) [ 213.644674][ T7844] dvb-usb: bulk message failed: -22 (4/0) [ 213.644688][ T7844] cxusb: i2c read failed [ 213.711191][ T5867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 213.885262][ T5867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 213.892444][ T1228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.075522][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 214.077406][ T5867] usb 1-1: USB disconnect, device number 14 [ 214.107064][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.698'. [ 214.123290][ T1228] usb 6-1: selecting invalid altsetting 6 [ 214.123313][ T1228] usb 6-1: digital interface selection failed (-22) [ 214.123327][ T1228] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 214.125963][ T1228] usb 6-1: setting power OFF [ 214.125983][ T1228] dvb-usb: bulk message failed: -22 (2/0) [ 214.125998][ T1228] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 214.126010][ T1228] (NULL device *): no alternate interface [ 214.303347][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 214.320569][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 214.321487][ T5867] quatech2 1-1:0.1: device disconnected [ 214.430465][ T1228] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 214.477635][ T1228] usb 6-1: USB disconnect, device number 5 [ 214.492361][ T5882] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.639353][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.709'. [ 214.655131][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 214.657189][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.657219][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.657255][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.657277][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.664224][ T5882] usb 2-1: config 0 descriptor?? [ 214.705402][ T5882] hub 2-1:0.0: USB hub found [ 214.853195][ T1228] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.980788][ T5882] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 215.007948][ T1228] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.007983][ T1228] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.008074][ T1228] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.008096][ T1228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.076615][ T7876] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 215.144036][ T1228] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.189861][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 215.189985][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.243289][ T5882] usb 2-1: USB disconnect, device number 9 [ 215.417030][ T7904] netlink: 60 bytes leftover after parsing attributes in process `syz.6.717'. [ 215.426426][ T7904] netlink: 60 bytes leftover after parsing attributes in process `syz.6.717'. [ 215.740150][ T1228] usb 6-1: USB disconnect, device number 6 [ 217.353336][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.435143][ T7941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.443870][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.693976][ T7943] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 217.740562][ T7945] netlink: 'syz.4.737': attribute type 4 has an invalid length. [ 217.807283][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.335865][ T5808] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 218.589695][ T7970] ptrace attach of "./syz-executor exec"[7972] was attempted by "./syz-executor exec"[7970] [ 219.620898][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.769852][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.015972][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.304071][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.417122][ T7989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.454490][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.593766][ T7990] afs: Unknown parameter 'dy' [ 220.596642][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.873992][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.874603][ T5874] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 221.022862][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 221.027463][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.027509][ T5874] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.027531][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.069682][ T5874] usb 1-1: config 0 descriptor?? [ 221.257625][ T8007] program syz.5.761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.272675][ T5807] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 221.422364][ T5807] usb 7-1: Using ep0 maxpacket: 32 [ 221.424862][ T5807] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.424889][ T5807] usb 7-1: config 0 has no interface number 0 [ 221.424937][ T5807] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.424961][ T5807] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.424996][ T5807] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 221.425017][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.453034][ T5807] usb 7-1: config 0 descriptor?? [ 221.527442][ T5874] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 221.976067][ T5874] usb 1-1: USB disconnect, device number 15 [ 222.107390][ T5807] uclogic 0003:28BD:0094.000E: pen parameters not found [ 222.107423][ T5807] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 222.327251][ T6007] usb 7-1: USB disconnect, device number 4 [ 222.483386][ T5807] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 222.634853][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.634896][ T5807] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 222.634917][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.656291][ T5807] usb 5-1: config 0 descriptor?? [ 223.314781][ T5807] razer 0003:1532:010E.000F: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 223.542333][ T5874] usb 5-1: USB disconnect, device number 14 [ 223.661078][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.754726][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.322485][ T5807] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 224.476311][ T5807] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 224.476339][ T5807] usb 7-1: config 0 has no interface number 0 [ 224.481458][ T5807] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 224.481489][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.481508][ T5807] usb 7-1: Product: syz [ 224.481521][ T5807] usb 7-1: Manufacturer: syz [ 224.481535][ T5807] usb 7-1: SerialNumber: syz [ 224.497933][ T5807] usb 7-1: config 0 descriptor?? [ 224.954330][ T5807] usb 7-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 224.954365][ T5807] usb 7-1: Firmware version (0.0) predates our first public release. [ 224.954382][ T5807] usb 7-1: Please update to version 0.2 or newer [ 225.534649][ T5807] usb 7-1: USB disconnect, device number 5 [ 226.133577][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.176352][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.343746][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.449542][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 226.481407][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.628106][ T10] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 226.628136][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.628156][ T10] usb 5-1: Product: syz [ 226.628169][ T10] usb 5-1: Manufacturer: syz [ 226.628182][ T10] usb 5-1: SerialNumber: syz [ 226.665230][ T10] usb 5-1: config 0 descriptor?? [ 226.689405][ T10] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 015 [ 227.158095][ T10] (null): failure reading functionality [ 227.186420][ T10] i2c i2c-1: failure reading functionality [ 227.192961][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 227.215473][ T10] usb 5-1: USB disconnect, device number 15 [ 227.272518][ T6007] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 227.381625][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.827'. [ 227.422335][ T6007] usb 2-1: Using ep0 maxpacket: 32 [ 227.424575][ T6007] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 227.424601][ T6007] usb 2-1: config 0 has no interface number 0 [ 227.427551][ T6007] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 227.427578][ T6007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.427597][ T6007] usb 2-1: Product: syz [ 227.427611][ T6007] usb 2-1: Manufacturer: syz [ 227.427625][ T6007] usb 2-1: SerialNumber: syz [ 227.521695][ T8165] netlink: 'syz.6.830': attribute type 1 has an invalid length. [ 227.521716][ T8165] netlink: 236 bytes leftover after parsing attributes in process `syz.6.830'. [ 227.702125][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.753752][ T6007] usb 2-1: config 0 descriptor?? [ 227.939046][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.335305][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.561693][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.571916][ T6007] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 228.600401][ T6007] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 228.623883][ T6007] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 228.892850][ T8176] netlink: 165 bytes leftover after parsing attributes in process `syz.0.833'. [ 229.043065][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 229.048604][ T5807] usb 2-1: USB disconnect, device number 10 [ 229.073690][ T5807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 229.081561][ T5807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 229.105812][ T5807] quatech2 2-1:0.51: device disconnected [ 229.378161][ T8194] ======================================================= [ 229.378161][ T8194] WARNING: The mand mount option has been deprecated and [ 229.378161][ T8194] and is ignored by this kernel. Remove the mand [ 229.378161][ T8194] option from the mount to silence this warning. [ 229.378161][ T8194] ======================================================= [ 229.649813][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.888615][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.302326][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.359847][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.490768][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.672938][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.812038][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.850'. [ 231.409985][ T8239] vlan2: entered promiscuous mode [ 231.410007][ T8239] bond0: entered promiscuous mode [ 231.410020][ T8239] bond_slave_0: entered promiscuous mode [ 231.410258][ T8239] bond_slave_1: entered promiscuous mode [ 231.554680][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.750117][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.058726][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.257874][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.456277][ T37] audit: type=1326 audit(1759527368.434:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.503051][ T37] audit: type=1326 audit(1759527368.474:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.503095][ T37] audit: type=1326 audit(1759527368.474:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.503130][ T37] audit: type=1326 audit(1759527368.474:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.503164][ T37] audit: type=1326 audit(1759527368.474:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.503198][ T37] audit: type=1326 audit(1759527368.474:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.503233][ T37] audit: type=1326 audit(1759527368.484:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.503270][ T37] audit: type=1326 audit(1759527368.484:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.538237][ T37] audit: type=1326 audit(1759527368.514:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f15cfe8eec9 code=0x7ffc0000 [ 232.538288][ T37] audit: type=1326 audit(1759527368.514:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 232.744670][ T8255] autofs4:pid:8255:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189374) [ 232.744700][ T8255] autofs4:pid:8255:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 232.761577][ T8248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.076897][ T8270] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 233.510049][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.6.880'. [ 234.025861][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.447016][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.856665][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.036712][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.552886][ T8294] Falling back ldisc for ttyS3. [ 235.678449][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.896'. [ 236.032122][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 236.122634][ T5874] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 236.159542][ T8341] netlink: 84 bytes leftover after parsing attributes in process `syz.5.909'. [ 236.284976][ T5874] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.285013][ T5874] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.285048][ T5874] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.285078][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.346312][ T8329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.380938][ T5874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.059004][ T6007] usb 2-1: USB disconnect, device number 11 [ 237.132683][ T5874] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 237.297297][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 237.307948][ T5874] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 237.307975][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.307994][ T5874] usb 5-1: Product: syz [ 237.308007][ T5874] usb 5-1: Manufacturer: syz [ 237.308021][ T5874] usb 5-1: SerialNumber: syz [ 237.350249][ T5874] usb 5-1: config 0 descriptor?? [ 237.522446][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 237.616780][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.823235][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.213587][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.424291][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.469748][ T5874] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 238.581370][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.761812][ T8384] mmap: syz.0.924 (8384) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 238.965848][ T8386] tap0: tun_chr_ioctl cmd 1074025675 [ 238.965870][ T8386] tap0: persist disabled [ 239.552505][ T8402] capability: warning: `syz.6.934' uses deprecated v2 capabilities in a way that may be insecure [ 239.642675][ T5874] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.812413][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 239.814836][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.814892][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.815085][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.815108][ T5874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.815130][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.818439][ T5874] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.818468][ T5874] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.818489][ T5874] usb 2-1: Manufacturer: syz [ 239.897149][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.936298][ T5874] usb 2-1: config 0 descriptor?? [ 239.976251][ T989] usb 5-1: USB disconnect, device number 16 [ 240.097722][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.261017][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.308393][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.579687][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.617461][ T8412] tty tty1: ldisc open failed (-12), clearing slot 0 [ 240.735706][ T5874] rc_core: IR keymap rc-hauppauge not found [ 240.735726][ T5874] Registered IR keymap rc-empty [ 240.736442][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.760582][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.784418][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 240.787975][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 240.821069][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.851505][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.872603][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.892498][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.912418][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.932437][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.952439][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.972466][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.992575][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 241.012443][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 241.026689][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 241.032454][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 241.050880][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.940'. [ 241.062452][ T5874] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 241.109395][ T5874] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.122479][ T5874] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.153138][ T5874] usb 2-1: USB disconnect, device number 12 [ 241.375473][ T5808] Bluetooth: hci1: link tx timeout [ 241.389829][ T5808] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.843584][ T989] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 242.020865][ T989] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 242.020895][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.020916][ T989] usb 6-1: Product: syz [ 242.020930][ T989] usb 6-1: Manufacturer: syz [ 242.020944][ T989] usb 6-1: SerialNumber: syz [ 242.036850][ T989] usb 6-1: config 0 descriptor?? [ 242.365407][ T989] usb 6-1: USB disconnect, device number 7 [ 243.226238][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.965'. [ 243.447230][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 243.513129][ T8485] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 243.966191][ T8500] netlink: 'syz.5.977': attribute type 1 has an invalid length. [ 244.509102][ T8517] loop7: detected capacity change from 0 to 6 [ 244.547504][ T5999] loop7: [POWERTEC] p1 [ 244.547787][ T5999] loop7: p1 start 1680801792 is beyond EOD, truncated [ 244.612358][ T8517] loop7: [POWERTEC] p1 [ 244.613015][ T8517] loop7: p1 start 1680801792 is beyond EOD, truncated [ 245.897053][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 246.005339][ T5867] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 246.048463][ T31] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 246.048525][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.049995][ T31] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.050030][ T31] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.050048][ T31] usb 1-1: Manufacturer: syz [ 246.098035][ T31] usb 1-1: config 0 descriptor?? [ 246.152400][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 246.160925][ T5867] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 246.160953][ T5867] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.160976][ T5867] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.161000][ T5867] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.161021][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.166740][ T5867] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 246.166769][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.166786][ T5867] usb 2-1: Product: syz [ 246.166801][ T5867] usb 2-1: Manufacturer: syz [ 246.166814][ T5867] usb 2-1: SerialNumber: syz [ 246.180355][ T5867] usb 2-1: config 0 descriptor?? [ 246.256772][ T31] rc_core: IR keymap rc-hauppauge not found [ 246.256792][ T31] Registered IR keymap rc-empty [ 246.258608][ T31] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 246.261557][ T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 246.384113][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 246.439817][ T8565] input: syz0 as /devices/virtual/input/input13 [ 246.466744][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1004'. [ 246.475857][ T10] usb 1-1: USB disconnect, device number 16 [ 246.492636][ T5867] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 246.592142][ T5163] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 246.704560][ T8545] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 246.736939][ T5163] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 246.814841][ T6007] usb 2-1: USB disconnect, device number 13 [ 247.825831][ T37] kauditd_printk_skb: 214 callbacks suppressed [ 247.825848][ T37] audit: type=1326 audit(1759527383.804:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 247.826180][ T37] audit: type=1326 audit(1759527383.804:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 247.826419][ T37] audit: type=1326 audit(1759527383.804:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.5.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 249.206340][ T8635] vxcan1: tx address claim with dlc 0 [ 250.507374][ T8688] 9pnet: p9_errstr2errno: server reported unknown error  [ 250.622419][ T6007] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 250.699134][ T8696] team_slave_0: entered promiscuous mode [ 250.699182][ T8696] team_slave_1: entered promiscuous mode [ 250.700626][ T8696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.784557][ T6007] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 250.784595][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.802011][ T8696] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 250.822481][ T6007] usb 7-1: config 0 descriptor?? [ 250.839193][ T6007] cp210x 7-1:0.0: cp210x converter detected [ 251.249372][ T6007] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 251.261716][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.273522][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.566000][ T6007] usb 7-1: cp210x converter now attached to ttyUSB0 [ 251.581814][ T6007] usb 7-1: USB disconnect, device number 6 [ 251.594926][ T6007] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.522895][ T6007] cp210x 7-1:0.0: device disconnected [ 253.292666][ T5874] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 253.462777][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.462827][ T5874] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 253.462851][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.509169][ T5874] usb 7-1: config 0 descriptor?? [ 253.552918][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1066'. [ 253.964263][ T5874] macally 0003:060B:0001.0010: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 254.144614][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.858355][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.093632][ T31] usb 7-1: USB disconnect, device number 7 [ 255.183952][ T8759] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.240356][ T8752] fido_id[8752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 255.390594][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1075'. [ 255.912391][ T5867] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 255.938110][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.938178][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.691601][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.708819][ T8786] tty tty1: ldisc open failed (-12), clearing slot 0 [ 256.850992][ T5867] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.851018][ T5867] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.857234][ T5867] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.857264][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.857284][ T5867] usb 7-1: SerialNumber: syz [ 257.150029][ T5867] usb 7-1: 0:2 : does not exist [ 257.197859][ T5867] usb 7-1: USB disconnect, device number 8 [ 257.276528][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.432362][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 257.582348][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 257.588857][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.588914][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.588939][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.633173][ T10] usb 1-1: config 0 descriptor?? [ 257.864769][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 258.048902][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'. [ 258.131675][ T8813] netlink: 'syz.5.1096': attribute type 1 has an invalid length. [ 258.131699][ T8813] netlink: 'syz.5.1096': attribute type 2 has an invalid length. [ 258.377354][ T6007] usb 1-1: USB disconnect, device number 17 [ 258.731623][ T6007] IPVS: starting estimator thread 0... [ 258.902656][ T8832] IPVS: using max 9 ests per chain, 21600 per kthread [ 259.116005][ T8844] input: syz1 as /devices/virtual/input/input15 [ 260.043047][ T8881] nbd: device at index 6 is going down [ 261.200469][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200517][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200538][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200560][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200589][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200611][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200632][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200653][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200674][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.200694][ T8910] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 261.749126][ T37] audit: type=1326 audit(1759527397.724:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8921 comm="syz.5.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 261.749458][ T37] audit: type=1326 audit(1759527397.724:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8921 comm="syz.5.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 261.749953][ T37] audit: type=1326 audit(1759527397.724:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8921 comm="syz.5.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 261.750712][ T37] audit: type=1326 audit(1759527397.724:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8921 comm="syz.5.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 261.751089][ T37] audit: type=1326 audit(1759527397.724:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8921 comm="syz.5.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 261.751817][ T37] audit: type=1326 audit(1759527397.724:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8921 comm="syz.5.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e98feec9 code=0x7ffc0000 [ 262.182385][ T5867] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 262.332583][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 262.337429][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.337460][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.337481][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.337528][ T5867] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.337553][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.417517][ T5867] usb 6-1: config 0 descriptor?? [ 262.542392][ T5874] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 262.544073][ T1228] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 262.633078][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.633568][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.706098][ T5874] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 262.706125][ T5874] usb 5-1: config 0 has no interface number 0 [ 262.711688][ T5874] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 262.712084][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.712110][ T5874] usb 5-1: Product: syz [ 262.712123][ T5874] usb 5-1: Manufacturer: syz [ 262.712135][ T5874] usb 5-1: SerialNumber: syz [ 262.766436][ T1228] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 262.766832][ T1228] usb 2-1: config 1 has no interface number 0 [ 262.766882][ T1228] usb 2-1: config 1 interface 105 has no altsetting 0 [ 262.807296][ T1228] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 262.807377][ T1228] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 262.807398][ T1228] usb 2-1: Product: syz [ 262.807411][ T1228] usb 2-1: Manufacturer: syz [ 262.807425][ T1228] usb 2-1: SerialNumber: syz [ 262.857253][ T5867] hid_parser_main: 7 callbacks suppressed [ 262.857277][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x2 [ 262.857638][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.857675][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.857703][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.857730][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.857756][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.857782][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.857809][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.857835][ T5867] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 262.939454][ T5874] usb 5-1: config 0 descriptor?? [ 262.989415][ T5867] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 262.989450][ T5867] microsoft 0003:045E:07DA.0011: no inputs found [ 262.989677][ T5867] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 263.183185][ T989] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 263.269538][ T31] usb 6-1: USB disconnect, device number 8 [ 263.355847][ T989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.355880][ T989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.355919][ T989] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 263.355942][ T989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.365759][ T989] usb 7-1: config 0 descriptor?? [ 264.030177][ T1228] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 265.043474][ T1228] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 265.047763][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.077889][ T989] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 265.164048][ T989] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 265.363835][ T5874] usb 5-1: Firmware version (0.0) predates our first public release. [ 265.363862][ T5874] usb 5-1: Please update to version 0.2 or newer [ 265.393611][ T1228] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 6a:a5:db:09:72:b1 [ 265.432529][ T1228] usb 2-1: USB disconnect, device number 14 [ 265.435625][ T1228] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 265.523253][ T5874] usb 5-1: USB disconnect, device number 17 [ 265.644682][ T989] playstation 0003:054C:0DF2.0012: Failed to retrieve feature with reportID 5: -71 [ 265.644722][ T989] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense calibration info: -71 [ 265.644771][ T989] playstation 0003:054C:0DF2.0012: Failed to get calibration data from DualSense [ 265.644795][ T989] playstation 0003:054C:0DF2.0012: Failed to create dualsense. [ 265.648950][ T989] playstation 0003:054C:0DF2.0012: probe with driver playstation failed with error -71 [ 265.710166][ T989] usb 7-1: USB disconnect, device number 9 [ 265.739597][ T1228] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 265.739734][ T1228] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 265.739873][ T1228] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 266.312139][ T8995] usb usb8: usbfs: process 8995 (syz.0.1164) did not claim interface 0 before use [ 266.474370][ T9002] net_ratelimit: 3319 callbacks suppressed [ 266.474391][ T9002] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 266.513670][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1168'. [ 266.538848][ T9003] dummy0: entered promiscuous mode [ 266.566235][ T9003] dummy0: left promiscuous mode [ 267.626040][ T5807] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 267.648490][ T9046] capability: warning: `syz.4.1187' uses 32-bit capabilities (legacy support in use) [ 267.651312][ T9046] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 267.651338][ T9046] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.776985][ T5807] usb 6-1: Using ep0 maxpacket: 16 [ 267.779276][ T5807] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 267.779302][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.822946][ T5807] usb 6-1: config 0 descriptor?? [ 267.828441][ T5807] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 267.876950][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 268.609415][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.814302][ T37] audit: type=1400 audit(1759527404.784:251): lsm=SMACK fn=smack_inode_removexattr action=denied subject="w" object="_" requested=w pid=9077 comm="syz.6.1203" name="file1" dev="tmpfs" ino=770 [ 268.835212][ T5807] gspca_sonixj: reg_w1 err -71 [ 268.852472][ T5807] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 268.857371][ T5807] usb 6-1: USB disconnect, device number 9 [ 269.302051][ T9095] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 269.665206][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.683686][ T9104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.959524][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.572413][ T5867] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 270.723390][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 270.725915][ T5867] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 270.725940][ T5867] usb 6-1: config 0 has no interface number 0 [ 270.728960][ T5867] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 270.728989][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.729008][ T5867] usb 6-1: Product: syz [ 270.729022][ T5867] usb 6-1: Manufacturer: syz [ 270.729036][ T5867] usb 6-1: SerialNumber: syz [ 270.745323][ T5867] usb 6-1: config 0 descriptor?? [ 270.774358][ T5867] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 270.926756][ T9131] random: crng reseeded on system resumption [ 271.032805][ T5867] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 271.083279][ T5867] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 271.222023][ T5816] ------------[ cut here ]-[ 271.222023][ T5816] ------------[ cut here ]------------ [ 271.222036][ T5816] kernel BUG at arch/x86/mm/physaddr.c:28! [ 271.223330][ T5816] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 271.223360][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 271.223380][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.223394][ T5816] RIP: 0010:__phys_addr+0x173/0x180 [ 271.223427][ T5816] Code: e8 42 23 49 00 48 c7 c7 f0 d6 21 8d 48 89 de 4c 89 f2 e8 80 f5 39 03 e9 4d ff ff ff e8 26 23 49 00 90 0f 0b e8 1e 23 49 00 90 <0f> 0b e8 16 23 49 00 90 0f 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 [ 271.223441][ T5816] RSP: 0000:ffffc90004b1fcb8 EFLAGS: 00010293 [ 271.223457][ T5816] RAX: ffffffff817414a2 RBX: 0000607fffc8d6d0 RCX: ffff88802bf7bc00 [ 271.223471][ T5816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.223481][ T5816] RBP: ffffe8ffffc8d6d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.223491][ T5816] R10: dffffc0000000000 R11: fffffbfff1d6a987 R12: ffffea0000000000 [ 271.223503][ T5816] R13: 0000000000000000 R14: 000000000000002e R15: 0000000000000001 [ 271.223515][ T5816] FS: 000055556b83e500(0000) GS:ffff88812703b000(0000) knlGS:0000000000000000 [ 271.223529][ T5816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.223540][ T5816] CR2: 00007ffd308eec38 CR3: 0000000028610000 CR4: 00000000003526f0 [ 271.223554][ T5816] Call Trace: [ 271.223560][ T5816] [ 271.223568][ T5816] qlist_free_all+0x39/0x140 [ 271.223590][ T5816] kasan_quarantine_reduce+0x148/0x160 [ 271.223610][ T5816] __kasan_slab_alloc+0x22/0x80 [ 271.223630][ T5816] ? getname_flags+0xb8/0x540 [ 271.223650][ T5816] kmem_cache_alloc_noprof+0x181/0x6b0 [ 271.223671][ T5816] ? do_unlinkat+0x50e/0x570 [ 271.223690][ T5816] ? kmem_cache_free+0x19a/0x910 [ 271.223712][ T5816] getname_flags+0xb8/0x540 [ 271.223734][ T5816] ? do_unlinkat+0x50e/0x570 [ 271.223754][ T5816] user_path_at+0x24/0x60 [ 271.223771][ T5816] __x64_sys_umount+0xee/0x160 [ 271.223791][ T5816] ? __pfx___x64_sys_umount+0x10/0x10 [ 271.223819][ T5816] ? rcu_is_watching+0x15/0xb0 [ 271.223838][ T5816] ? do_syscall_64+0xbe/0x3b0 [ 271.223863][ T5816] do_syscall_64+0xfa/0x3b0 [ 271.223885][ T5816] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.223906][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.223922][ T5816] ? clear_bhb_loop+0x60/0xb0 [ 271.223941][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.223956][ T5816] RIP: 0033:0x7f15cfe901f7 [ 271.223976][ T5816] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 271.223990][ T5816] RSP: 002b:00007ffd308ef3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 271.224007][ T5816] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15cfe901f7 [ 271.224019][ T5816] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd308ef4a0 [ 271.224030][ T5816] RBP: 00007ffd308ef4a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.224041][ T5816] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd308f0530 [ 271.224052][ T5816] R13: 00007f15cff11d7d R14: 0000000000042224 R15: 00007ffd308f0570 [ 271.224070][ T5816] [ 271.224076][ T5816] Modules linked in: [ 271.224105][ T5816] ---[ end trace 0000000000000000 ]--- [ 271.225934][ T5816] RIP: 0010:__phys_addr+0x173/0x180 [ 271.225959][ T5816] Code: e8 42 23 49 00 48 c7 c7 f0 d6 21 8d 48 89 de 4c 89 f2 e8 80 f5 39 03 e9 4d ff ff ff e8 26 23 49 00 90 0f 0b e8 1e 23 49 00 90 <0f> 0b e8 16 23 49 00 90 0f 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 [ 271.225974][ T5816] RSP: 0000:ffffc90004b1fcb8 EFLAGS: 00010293 [ 271.225990][ T5816] RAX: ffffffff817414a2 RBX: 0000607fffc8d6d0 RCX: ffff88802bf7bc00 [ 271.226004][ T5816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.226015][ T5816] RBP: ffffe8ffffc8d6d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.226026][ T5816] R10: dffffc0000000000 R11: fffffbfff1d6a987 R12: ffffea0000000000 [ 271.226369][ T5816] R13: 0000000000000000 R14: 000000000000002e R15: 0000000000000001 [ 271.226382][ T5816] FS: 000055556b83e500(0000) GS:ffff88812703b000(0000) knlGS:0000000000000000 [ 271.226398][ T5816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.226410][ T5816] CR2: 00007ffd308eec38 CR3: 0000000028610000 CR4: 00000000003526f0 [ 271.226427][ T5816] Kernel panic - not syncing: Fatal exception [ 271.226742][ T5816] Kernel Offset: disabled