last executing test programs: 11.068491995s ago: executing program 4 (id=2112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.783765584s ago: executing program 4 (id=2116): r0 = socket$pptp(0x18, 0x1, 0x2) io_setup(0x2, &(0x7f0000000d80)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x1, &(0x7f00000010c0)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x8, 0xfffe, r0, &(0x7f0000000dc0)="ba66c6f3382cd8", 0x7, 0x0, 0x0, 0x1, r2}]) 10.260197685s ago: executing program 4 (id=2120): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 8.4574801s ago: executing program 4 (id=2140): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x19, 0x2, {{0xd, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}}, 0x0) 8.180389232s ago: executing program 4 (id=2143): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x48, 0x7, 0xc, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) 7.833750185s ago: executing program 4 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.330364323s ago: executing program 3 (id=2190): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 3.069634282s ago: executing program 3 (id=2193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.799559031s ago: executing program 1 (id=2197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\a']) 2.273726718s ago: executing program 3 (id=2201): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.116072547s ago: executing program 1 (id=2203): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)='f', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x240408d0) 1.940965366s ago: executing program 3 (id=2204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000100)=@md5={0x1, "889b6030eff6be2671313dc19c04d763"}, 0x11, 0x1) write$tcp_mem(r0, &(0x7f0000000340)={0x4, 0x20, 0x0, 0x20, 0x3}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 1.86331079s ago: executing program 1 (id=2206): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 1.728775416s ago: executing program 3 (id=2208): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000004c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e04, 0xa6, @private2={0xfc, 0x2, '\x00', 0x1}}, r1}}, 0x30) 1.669674318s ago: executing program 0 (id=2209): io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, r1, 0x20, 0x0, &(0x7f0000000100)=[{0xe26, 0x7fffffffffffffff}, {0x9, 0xb}]}) 1.63960972s ago: executing program 1 (id=2210): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r1, &(0x7f0000000040)="9daa3de1b1c00bceab43eaba112d8410b9f4ad13ec1904c71b71f4de", 0x1c) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r2, 0x0, 0x2, 0x0) 1.523501351s ago: executing program 2 (id=2211): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xf, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 1.522960494s ago: executing program 3 (id=2212): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 1.418227478s ago: executing program 0 (id=2213): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.372699532s ago: executing program 1 (id=2214): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800000}, @TCA_CAKE_TARGET={0x8, 0x8, 0xe}]}}]}, 0x4c}}, 0x4090) 1.240257837s ago: executing program 2 (id=2215): r0 = io_uring_setup(0x4238, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x8}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000007c0), 0x0) 936.989613ms ago: executing program 2 (id=2216): setresuid(0xee01, 0xee01, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe}, 0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x3ff}) shmctl$SHM_UNLOCK(r0, 0xc) 936.775806ms ago: executing program 0 (id=2217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000700)={0x2020}, 0x2020) 746.57258ms ago: executing program 2 (id=2218): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 599.81773ms ago: executing program 2 (id=2219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}, {@flock_write}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 348.765804ms ago: executing program 0 (id=2220): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x5, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 346.784714ms ago: executing program 2 (id=2221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 199.833086ms ago: executing program 0 (id=2222): socket$inet6(0xa, 0x80003, 0xff) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) 189.774516ms ago: executing program 1 (id=2223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 0s ago: executing program 0 (id=2224): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000002a00)=[{}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) kernel console output (not intermixed with test programs): rsing attributes in process `syz.4.455'. [ 151.772424][ T6922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.455'. [ 151.939810][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.092803][ T5911] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 152.092849][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.121822][ T5911] usb 4-1: config 0 descriptor?? [ 152.291393][ T5988] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.359005][ T5911] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 152.457726][ T5988] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 152.457857][ T5988] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.457883][ T5988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.490304][ T5988] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.490402][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.490425][ T5988] usb 3-1: Product: syz [ 152.490439][ T5988] usb 3-1: Manufacturer: syz [ 152.490454][ T5988] usb 3-1: SerialNumber: syz [ 152.542638][ T6942] process 'syz.4.464' launched './file0' with NULL argv: empty string added [ 152.548791][ T5988] usb 3-1: config 0 descriptor?? [ 152.567114][ T5911] [drm:udl_init] *ERROR* Selecting channel failed [ 152.578835][ T5988] hub 3-1:0.0: bad descriptor, ignoring hub [ 152.578876][ T5988] hub 3-1:0.0: probe with driver hub failed with error -5 [ 152.622437][ T5988] usb 3-1: selecting invalid altsetting 0 [ 152.647835][ T5911] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 152.647860][ T5911] [drm] Initialized udl on minor 2 [ 152.683039][ T5911] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 152.684748][ T5911] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.707203][ T5911] usb 4-1: USB disconnect, device number 6 [ 152.718376][ T5912] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.735906][ T5912] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 152.885268][ T5988] usb 3-1: USB disconnect, device number 4 [ 153.391647][ T5988] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.582452][ T5988] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 153.582518][ T5988] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 153.582542][ T5988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.630804][ T5988] usb 3-1: string descriptor 0 read error: -22 [ 153.630970][ T5988] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.630995][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 153.672204][ T5988] usb 3-1: config 0 descriptor?? [ 153.678307][ T5988] hub 3-1:0.0: bad descriptor, ignoring hub [ 153.678347][ T5988] hub 3-1:0.0: probe with driver hub failed with error -5 [ 153.724134][ T5988] usb 3-1: selecting invalid altsetting 0 [ 153.823304][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'. [ 154.090355][ T1903] usb 3-1: USB disconnect, device number 5 [ 157.785974][ T38] audit: type=1326 audit(1756931947.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 157.786032][ T38] audit: type=1326 audit(1756931947.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 157.817822][ T38] audit: type=1326 audit(1756931947.108:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 157.817890][ T38] audit: type=1326 audit(1756931947.108:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 157.820869][ T38] audit: type=1326 audit(1756931947.118:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 157.820940][ T38] audit: type=1326 audit(1756931947.118:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 157.840384][ T38] audit: type=1326 audit(1756931947.118:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 157.840453][ T38] audit: type=1326 audit(1756931947.118:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad7d525ba7 code=0x7ffc0000 [ 157.840506][ T38] audit: type=1326 audit(1756931947.118:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad7d4cadb9 code=0x7ffc0000 [ 157.840557][ T38] audit: type=1326 audit(1756931947.118:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7089 comm="syz.1.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7d52ebe9 code=0x7ffc0000 [ 158.510986][ T5988] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.675016][ T5988] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.675054][ T5988] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.675095][ T5988] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.675118][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.731324][ T7103] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.738991][ T5988] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.851188][ T7120] mmap: syz.0.545 (7120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.052655][ T5988] usb 5-1: USB disconnect, device number 7 [ 159.120113][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.206119][ T7128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.282663][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 159.282695][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 159.282715][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 159.282734][ T10] usb 2-1: config 220 has no interface number 2 [ 159.282823][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 159.282850][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 159.282869][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 159.282887][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 159.289220][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 159.289251][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.289272][ T10] usb 2-1: Product: syz [ 159.289287][ T10] usb 2-1: Manufacturer: syz [ 159.289302][ T10] usb 2-1: SerialNumber: syz [ 159.581815][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 159.581858][ T10] usb 2-1: No valid video chain found. [ 159.581934][ T10] usb 2-1: selecting invalid altsetting 0 [ 159.603233][ T7132] QAT: failed to copy from user cfg_data. [ 159.635987][ T10] usb 2-1: selecting invalid altsetting 0 [ 159.636034][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 159.657532][ T10] usb 2-1: USB disconnect, device number 4 [ 160.058818][ T7144] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 160.259915][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 160.261364][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 160.579104][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 160.579143][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 160.725547][ T7156] netlink: 'syz.4.561': attribute type 2 has an invalid length. [ 160.725573][ T7156] netlink: 51 bytes leftover after parsing attributes in process `syz.4.561'. [ 160.726990][ T7156] netlink: 'syz.4.561': attribute type 2 has an invalid length. [ 160.727009][ T7156] netlink: 51 bytes leftover after parsing attributes in process `syz.4.561'. [ 160.956406][ T7159] batman_adv: batadv0: Adding interface: ipvlan2 [ 160.956424][ T7159] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.956455][ T7159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.956471][ T7159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.956486][ T7159] batman_adv: batadv0: Interface activated: ipvlan2 [ 161.862772][ T1903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.038600][ T7190] Bluetooth: MGMT ver 1.23 [ 162.054992][ T1903] usb 5-1: config 0 has no interfaces? [ 162.055034][ T1903] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 162.055058][ T1903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.060919][ T1903] usb 5-1: config 0 descriptor?? [ 162.369229][ T5919] usb 5-1: USB disconnect, device number 8 [ 163.602725][ T7240] netlink: 'syz.4.601': attribute type 12 has an invalid length. [ 163.602751][ T7240] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.601'. [ 163.999803][ T5988] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.149851][ T5988] usb 2-1: Using ep0 maxpacket: 32 [ 164.166737][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.166771][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.166811][ T5988] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 164.166839][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.210745][ T5988] usb 2-1: config 0 descriptor?? [ 164.682408][ T5988] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 164.859924][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.013399][ T5988] usb 2-1: USB disconnect, device number 5 [ 165.586042][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.030677][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.041364][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.042787][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.055533][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.065730][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.130089][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.169030][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.224647][ T7290] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 166.224670][ T7290] netlink: 'syz.2.623': attribute type 2 has an invalid length. [ 166.308516][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 166.308544][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.308564][ T10] usb 2-1: Product: syz [ 166.308577][ T10] usb 2-1: Manufacturer: syz [ 166.308590][ T10] usb 2-1: SerialNumber: syz [ 166.358611][ T10] usb 2-1: config 0 descriptor?? [ 166.379849][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 166.599085][ T7298] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 166.599085][ T7298] The task syz.2.625 (7298) triggered the difference, watch for misbehavior. [ 166.623459][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.014666][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'. [ 167.206095][ T5912] usb 2-1: USB disconnect, device number 6 [ 167.381610][ T37] bridge_slave_1: left allmulticast mode [ 167.382251][ T37] bridge_slave_1: left promiscuous mode [ 167.385231][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.470213][ T7312] program syz.4.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.477000][ T37] bridge_slave_0: left allmulticast mode [ 167.477034][ T37] bridge_slave_0: left promiscuous mode [ 167.477725][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.881544][ T5912] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.032808][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.032853][ T5912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.040129][ T5912] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 168.040165][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.040188][ T5912] usb 5-1: Product: syz [ 168.040204][ T5912] usb 5-1: Manufacturer: syz [ 168.040222][ T5912] usb 5-1: SerialNumber: syz [ 168.054327][ T5912] usb 5-1: config 0 descriptor?? [ 168.099607][ T5912] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 168.149815][ T59] Bluetooth: hci4: command tx timeout [ 168.156634][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.160181][ T5912] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 168.160257][ T5912] usb 5-1: media controller created [ 168.274527][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.546485][ T5912] DVB: Unable to find symbol tda10046_attach() [ 168.546502][ T5912] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 168.546517][ T5912] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 168.880854][ T5912] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 168.898124][ T5912] usb 5-1: USB disconnect, device number 9 [ 169.830952][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 170.118535][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.158429][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 170.204104][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.229825][ T5841] Bluetooth: hci4: command tx timeout [ 170.268670][ T37] bond0 (unregistering): Released all slaves [ 171.289844][ T1903] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 171.445263][ T1903] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 171.445295][ T1903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.474171][ T1903] usb 3-1: config 0 descriptor?? [ 171.487609][ T1903] gspca_main: spca508-2.14.0 probing 8086:0110 [ 171.651920][ T7285] chnl_net:caif_netlink_parms(): no params data found [ 171.738011][ T1903] gspca_spca508: reg_read err -71 [ 171.738508][ T1903] gspca_spca508: reg_read err -71 [ 171.738973][ T1903] gspca_spca508: reg_read err -71 [ 171.739429][ T1903] gspca_spca508: reg_read err -71 [ 171.739977][ T1903] gspca_spca508: reg_read err -71 [ 171.740398][ T1903] gspca_spca508: reg write: error -71 [ 171.740499][ T1903] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 171.782484][ T1903] usb 3-1: USB disconnect, device number 6 [ 171.844176][ T7391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.666'. [ 172.311445][ T5841] Bluetooth: hci4: command tx timeout [ 172.767514][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 173.260478][ T37] hsr_slave_0: left promiscuous mode [ 173.341946][ T37] hsr_slave_1: left promiscuous mode [ 173.343231][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.343328][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.454139][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.454172][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.533634][ T37] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 173.533668][ T37] batman_adv: batadv0: Removing interface: ipvlan2 [ 173.790388][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.678'. [ 173.858097][ T37] veth1_macvtap: left promiscuous mode [ 173.858378][ T37] veth0_macvtap: left promiscuous mode [ 173.858718][ T37] veth1_vlan: left promiscuous mode [ 173.858971][ T37] veth0_vlan: left promiscuous mode [ 174.390151][ T5841] Bluetooth: hci4: command tx timeout [ 175.139877][ T5911] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.289926][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 175.294593][ T5911] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.294622][ T5911] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.294648][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.305046][ T5911] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 175.305082][ T5911] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 175.305105][ T5911] usb 2-1: Product: syz [ 175.305122][ T5911] usb 2-1: Manufacturer: syz [ 175.305139][ T5911] usb 2-1: SerialNumber: syz [ 175.319724][ T5911] usb 2-1: config 0 descriptor?? [ 175.788238][ T5911] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 176.215259][ T5911] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 176.215960][ T5911] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 176.223921][ T5911] usb 2-1: USB disconnect, device number 7 [ 177.170665][ T37] team0 (unregistering): Port device team_slave_1 removed [ 177.400825][ T37] team0 (unregistering): Port device team_slave_0 removed [ 180.427866][ T7450] tipc: Enabling of bearer rejected, already enabled [ 180.428001][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 180.455972][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.456201][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.456430][ T7285] bridge_slave_0: entered allmulticast mode [ 180.479896][ T7285] bridge_slave_0: entered promiscuous mode [ 180.502912][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.503126][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.503357][ T7285] bridge_slave_1: entered allmulticast mode [ 180.506668][ T7285] bridge_slave_1: entered promiscuous mode [ 180.996120][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.018879][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.433025][ T7285] team0: Port device team_slave_0 added [ 181.447792][ T7285] team0: Port device team_slave_1 added [ 181.590134][ T5988] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 181.752583][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.752627][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.752727][ T5988] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 181.752751][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.803401][ T5988] usb 1-1: config 0 descriptor?? [ 182.270353][ T5988] sony 0003:054C:024B.000D: unexpected long global item [ 182.271217][ T5988] sony 0003:054C:024B.000D: parse failed [ 182.271329][ T5988] sony 0003:054C:024B.000D: probe with driver sony failed with error -22 [ 182.397146][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.397164][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.397193][ T7285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.447680][ T1241] usb 1-1: USB disconnect, device number 5 [ 182.452146][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.452166][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.452199][ T7285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.802995][ T7285] hsr_slave_0: entered promiscuous mode [ 182.804416][ T7285] hsr_slave_1: entered promiscuous mode [ 182.805339][ T7285] debugfs: 'hsr0' already exists in 'hsr' [ 182.805365][ T7285] Cannot create hsr debugfs directory [ 183.401168][ T7522] netlink: 312 bytes leftover after parsing attributes in process `syz.2.719'. [ 183.521115][ T7518] bond_slave_0: entered promiscuous mode [ 183.521200][ T7518] bond_slave_1: entered promiscuous mode [ 183.526281][ T7518] macvlan2: entered promiscuous mode [ 183.526302][ T7518] bond0: entered promiscuous mode [ 183.531487][ T7518] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.533594][ T7518] bond0: left promiscuous mode [ 183.534538][ T7518] bond_slave_0: left promiscuous mode [ 183.534628][ T7518] bond_slave_1: left promiscuous mode [ 184.240712][ T7538] macvtap1: entered allmulticast mode [ 184.248025][ T7538] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 184.325004][ T7546] netlink: 'syz.4.729': attribute type 13 has an invalid length. [ 184.342440][ T7538] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 184.529934][ T1241] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 184.601341][ T7546] macvtap0: entered promiscuous mode [ 184.647332][ T7546] macvtap0: refused to change device tx_queue_len [ 184.688491][ T1241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.688527][ T1241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.688567][ T1241] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 184.688600][ T1241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.743267][ T1241] usb 2-1: config 0 descriptor?? [ 184.905044][ T7550] syzkaller1: tun_chr_ioctl cmd 35108 [ 185.227521][ T1241] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 185.227561][ T1241] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 185.227590][ T1241] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 185.227615][ T1241] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 185.227641][ T1241] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 185.227666][ T1241] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 185.227690][ T1241] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 185.283899][ T1241] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 185.420841][ T1241] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00 [ 185.437490][ T7558] kvm: kvm [7557]: vcpu10, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x1 [ 185.623252][ T1241] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 185.640852][ T1241] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 185.667181][ T1241] usb 2-1: USB disconnect, device number 8 [ 186.129009][ T7285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.188222][ T7285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.284964][ T7285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.426503][ T7285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.530079][ T7575] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 186.530101][ T7575] netlink: 72 bytes leftover after parsing attributes in process `syz.1.741'. [ 186.530132][ T7575] netlink: 97 bytes leftover after parsing attributes in process `syz.1.741'. [ 186.969425][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.036187][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.076586][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.076745][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.117983][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.118208][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.512632][ T7598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.516361][ T7598] bond0: (slave bond1): Enslaving as an active interface with an up link [ 188.869844][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.888110][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.022118][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 189.024765][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 189.041161][ T5912] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 189.041197][ T5912] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 189.041222][ T5912] usb 3-1: Product: syz [ 189.041239][ T5912] usb 3-1: Manufacturer: syz [ 189.041256][ T5912] usb 3-1: SerialNumber: syz [ 189.248336][ T7285] veth0_vlan: entered promiscuous mode [ 189.292106][ T7285] veth1_vlan: entered promiscuous mode [ 189.333973][ T5912] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 189.334000][ T5912] usb 3-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 189.334019][ T5912] usb 3-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 189.334037][ T5912] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 189.530504][ T5912] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 189.530611][ T5912] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 189.557667][ T7285] veth0_macvtap: entered promiscuous mode [ 189.570279][ T5912] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 189.589207][ T5912] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 189.602362][ T7285] veth1_macvtap: entered promiscuous mode [ 189.615121][ T5912] usb 3-1: USB disconnect, device number 7 [ 189.656721][ T5912] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 189.688473][ T5912] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 189.701960][ T5912] visor 3-1:1.0: device disconnected [ 189.708297][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.749050][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.823500][ T1112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.824623][ T1112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.824907][ T1112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.825474][ T1112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.348572][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.348594][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.491830][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.491861][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.613997][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 190.614015][ T38] audit: type=1326 audit(1756931979.908:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7651 comm="syz.2.769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05240ebe9 code=0x0 [ 190.651229][ T5988] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.699748][ T5911] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.760341][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 190.760364][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 190.809708][ T5988] usb 1-1: Using ep0 maxpacket: 16 [ 190.813312][ T5988] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.813338][ T5988] usb 1-1: config 0 has no interface number 0 [ 190.841977][ T5988] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 190.842009][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.842029][ T5988] usb 1-1: Product: syz [ 190.842043][ T5988] usb 1-1: Manufacturer: syz [ 190.842057][ T5988] usb 1-1: SerialNumber: syz [ 190.852424][ T5988] usb 1-1: config 0 descriptor?? [ 190.901524][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 190.904880][ T5988] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 190.908654][ T5911] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.908680][ T5911] usb 5-1: config 0 has no interface number 0 [ 190.942024][ T5911] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 190.942121][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.942143][ T5911] usb 5-1: Product: syz [ 190.942158][ T5911] usb 5-1: Manufacturer: syz [ 190.942173][ T5911] usb 5-1: SerialNumber: syz [ 190.996619][ T5911] usb 5-1: config 0 descriptor?? [ 191.017027][ T5911] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 191.257875][ T5911] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 191.302018][ T5911] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 191.520071][ T1241] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.637217][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 191.638578][ T9] usb 5-1: USB disconnect, device number 10 [ 191.650993][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 191.673432][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 191.674100][ T9] quatech2 5-1:0.51: device disconnected [ 191.686435][ T5988] gspca_spca1528: reg_w err -71 [ 191.704368][ T5988] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 191.708633][ T1241] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 191.708662][ T1241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.746791][ T1241] usb 4-1: config 0 descriptor?? [ 191.748216][ T5988] usb 1-1: USB disconnect, device number 6 [ 191.795174][ T1241] cp210x 4-1:0.0: cp210x converter detected [ 192.161345][ T1241] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 192.371032][ T1241] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 192.371066][ T1241] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 192.382908][ T1241] usb 4-1: cp210x converter now attached to ttyUSB0 [ 192.410406][ T1241] usb 4-1: USB disconnect, device number 7 [ 192.456224][ T1241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.456762][ T1241] cp210x 4-1:0.0: device disconnected [ 192.884622][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 193.402308][ T10] IPVS: starting estimator thread 0... [ 193.529855][ T7694] IPVS: using max 7 ests per chain, 16800 per kthread [ 194.521018][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 195.519205][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 195.519245][ T7759] netlink: 'syz.1.817': attribute type 30 has an invalid length. [ 195.519263][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 195.833819][ T7765] can0: slcan on ttyS3. [ 196.066461][ T7767] can0 (unregistered): slcan off ttyS3. [ 196.695472][ T7800] netlink: 564 bytes leftover after parsing attributes in process `syz.1.836'. [ 196.695504][ T7800] netlink: 564 bytes leftover after parsing attributes in process `syz.1.836'. [ 197.213610][ T7826] input: syz1 as /devices/virtual/input/input7 [ 197.229913][ T5911] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 197.328837][ T7830] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 197.349239][ T6811] Bluetooth: hci5: Frame reassembly failed (-84) [ 197.390018][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 197.395491][ T5911] usb 4-1: config 0 has an invalid interface number: 24 but max is 0 [ 197.395520][ T5911] usb 4-1: config 0 has no interface number 0 [ 197.396783][ T5911] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.396818][ T5911] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.397090][ T5911] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 197.397117][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.405491][ T5911] usb 4-1: config 0 descriptor?? [ 197.853562][ T5911] hid (null): unknown global tag 0xe [ 197.853599][ T5911] hid (null): global environment stack underflow [ 197.853625][ T5911] hid (null): global environment stack underflow [ 197.886096][ T7839] block nbd1: NBD_DISCONNECT [ 198.070317][ T31] usb 4-1: USB disconnect, device number 8 [ 198.380510][ T5911] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 198.386952][ T7855] syz.2.862 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 198.535871][ T5911] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.535902][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.535923][ T5911] usb 5-1: Product: syz [ 198.535937][ T5911] usb 5-1: Manufacturer: syz [ 198.535952][ T5911] usb 5-1: SerialNumber: syz [ 198.551816][ T5911] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 198.661913][ T5988] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.352681][ T59] Bluetooth: hci5: command 0x1003 tx timeout [ 199.355754][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.438030][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.438112][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.475146][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.477869][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.549258][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.875'. [ 199.560066][ T5911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.720326][ T5911] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 199.720479][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.723174][ T5911] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 199.723201][ T5911] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 199.724458][ T5911] usb 2-1: Manufacturer: syz [ 199.749912][ T5988] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 199.753889][ T5988] ath9k_htc: Failed to initialize the device [ 199.786304][ T5911] usb 2-1: config 0 descriptor?? [ 199.938054][ T5988] usb 5-1: ath9k_htc: USB layer deinitialized [ 199.966178][ T1241] usb 5-1: USB disconnect, device number 11 [ 200.009876][ T5911] rc_core: IR keymap rc-hauppauge not found [ 200.009899][ T5911] Registered IR keymap rc-empty [ 200.027085][ T5911] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 200.051475][ T5911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 200.095732][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 200.163032][ T5911] usb 2-1: USB disconnect, device number 9 [ 201.199982][ T1241] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 201.361798][ T1241] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 201.361830][ T1241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.361850][ T1241] usb 5-1: Product: syz [ 201.361865][ T1241] usb 5-1: Manufacturer: syz [ 201.361880][ T1241] usb 5-1: SerialNumber: syz [ 201.564388][ T1241] usb 5-1: config 0 descriptor?? [ 201.578571][ T1241] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 012 [ 202.010395][ T1241] (null): failure reading functionality [ 202.039184][ T1241] i2c i2c-2: connected i2c-tiny-usb device [ 202.257519][ T9] usb 5-1: USB disconnect, device number 12 [ 202.339876][ T1241] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.359903][ T1903] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 202.496179][ T1241] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 202.496213][ T1241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.496233][ T1241] usb 3-1: Product: syz [ 202.496248][ T1241] usb 3-1: Manufacturer: syz [ 202.496263][ T1241] usb 3-1: SerialNumber: syz [ 202.531978][ T1903] usb 4-1: config 0 has an invalid interface number: 209 but max is 0 [ 202.532007][ T1903] usb 4-1: config 0 has no interface number 0 [ 202.532064][ T1903] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=53.a6 [ 202.532087][ T1903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.588785][ T1903] usb 4-1: config 0 descriptor?? [ 202.611486][ T1903] ftdi_sio 4-1:0.209: FTDI USB Serial Device converter detected [ 202.613472][ T1903] ftdi_sio ttyUSB0: unknown device type: 0x53a6 [ 202.842167][ T5988] usb 4-1: USB disconnect, device number 9 [ 202.844728][ T5988] ftdi_sio 4-1:0.209: device disconnected [ 203.418982][ T1241] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 203.419045][ T1241] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 203.442781][ T7971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.463810][ T1241] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 203.464873][ T7970] netem: incorrect ge model size [ 203.464909][ T7970] netem: change failed [ 203.490888][ T1241] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 203.509936][ T1241] usb 3-1: USB disconnect, device number 8 [ 203.824332][ T7983] Can't find a SQUASHFS superblock on nullb0 [ 204.475850][ T8008] netlink: 44 bytes leftover after parsing attributes in process `syz.0.933'. [ 204.939819][ T5912] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.009805][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 205.089737][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 205.097822][ T5912] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 205.097851][ T5912] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 205.097873][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 205.097903][ T5912] usb 4-1: config 1 has no interface number 0 [ 205.097958][ T5912] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.097985][ T5912] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 205.098028][ T5912] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 205.098051][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.163402][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 205.163472][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.165466][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 205.165497][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 205.165521][ T9] usb 2-1: Manufacturer: syz [ 205.263104][ T5912] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 205.274473][ T9] usb 2-1: config 0 descriptor?? [ 205.304954][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 205.503445][ T5912] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 205.550474][ T9] rc_core: IR keymap rc-hauppauge not found [ 205.550496][ T9] Registered IR keymap rc-empty [ 205.552096][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 205.555260][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 205.592883][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 205.648798][ T9] usb 2-1: USB disconnect, device number 10 [ 205.943363][ T6804] usb 4-1: USB disconnect, device number 10 [ 205.946434][ T6804] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 206.210499][ T5911] kernel write not supported for file /binder/transactions (pid: 5911 comm: kworker/1:3) [ 206.354098][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 206.522312][ T8065] bond0: (slave bond_slave_1): Releasing backup interface [ 206.634236][ T8074] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 207.239806][ T6804] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 207.411008][ T6804] usb 1-1: Using ep0 maxpacket: 16 [ 207.416149][ T6804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.416216][ T6804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.416245][ T6804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.416267][ T6804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.416292][ T6804] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.417855][ T6804] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.417882][ T6804] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.417903][ T6804] usb 1-1: Manufacturer: syz [ 207.438480][ T6804] usb 1-1: config 0 descriptor?? [ 207.879891][ T6804] rc_core: IR keymap rc-hauppauge not found [ 207.879913][ T6804] Registered IR keymap rc-empty [ 207.880103][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.919905][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.941582][ T6804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 207.968812][ T6804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 208.012238][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.033818][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.050200][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.070026][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.093074][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.111042][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.129837][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.150929][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.170046][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.189902][ T6804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.238098][ T6804] mceusb 1-1:0.0: Registered Ѕ with mce emulator interface version 1 [ 208.238125][ T6804] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.320072][ T6804] usb 1-1: USB disconnect, device number 7 [ 208.679744][ T5912] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 208.833625][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.833662][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.833704][ T5912] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 208.833727][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.880935][ T5912] usb 2-1: config 0 descriptor?? [ 209.314112][ T5912] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 209.330729][ T5912] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 209.498967][ T5912] cp2112 0003:10C4:EA90.0010: error requesting version [ 209.512061][ T5912] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71 [ 209.544090][ T5912] usb 2-1: USB disconnect, device number 11 [ 210.149868][ T1241] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 210.299755][ T1241] usb 1-1: Using ep0 maxpacket: 16 [ 210.320796][ T1241] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 210.320825][ T1241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.320845][ T1241] usb 1-1: Product: syz [ 210.320859][ T1241] usb 1-1: Manufacturer: syz [ 210.320873][ T1241] usb 1-1: SerialNumber: syz [ 210.327436][ T1241] usb 1-1: config 0 descriptor?? [ 210.353423][ T1241] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 210.562369][ T1241] gp8psk: usb in 128 operation failed. [ 210.565491][ T1241] gp8psk: usb in 137 operation failed. [ 210.565512][ T1241] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.580397][ T1241] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 210.580469][ T1241] usb 1-1: media controller created [ 210.680909][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 210.719370][ T1241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.815830][ T1241] gp8psk_fe: Frontend revision 1 attached [ 210.823803][ T1241] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 210.836452][ T1241] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 210.841717][ T8163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.841925][ T8163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 210.947128][ T8163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 211.078397][ T8163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.080722][ T8163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 211.151408][ T8163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 211.248059][ T8163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.249723][ T8163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 211.323462][ T8163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 211.407638][ T8163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.408570][ T8163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 211.436780][ T1241] gp8psk: usb in 137 operation failed. [ 211.436801][ T1241] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 211.436814][ T1241] gp8psk: found Genpix USB device pID = 201 (hex) [ 211.457041][ T1241] usb 1-1: USB disconnect, device number 8 [ 211.530028][ T8163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 211.633558][ T8163] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.633769][ T8163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 211.717625][ T8163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 211.791340][ T8163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 211.843880][ T1241] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 212.161788][ T8187] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1012'. [ 213.109850][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.119062][ T8191] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.269864][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.469853][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.672398][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 213.977345][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 214.559766][ T5911] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.724074][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 214.729448][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.729483][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.729506][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.729541][ T5911] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 214.729564][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.817280][ T5911] usb 5-1: config 0 descriptor?? [ 215.189840][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 215.285553][ T5911] cougar 0003:060B:500A.0011: unexpected long global item [ 215.286407][ T5911] cougar 0003:060B:500A.0011: parse failed [ 215.286515][ T5911] cougar 0003:060B:500A.0011: probe with driver cougar failed with error -22 [ 215.349779][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.465558][ T6804] usb 5-1: USB disconnect, device number 13 [ 215.503354][ T8278] program syz.0.1055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.509873][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 215.752532][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.209799][ T5912] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.373302][ T8300] netlink: 'syz.4.1064': attribute type 3 has an invalid length. [ 216.373328][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 216.402164][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.402195][ T5912] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.402220][ T5912] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.408395][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 216.408425][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 216.408447][ T5912] usb 1-1: Product: syz [ 216.408461][ T5912] usb 1-1: Manufacturer: syz [ 216.408476][ T5912] usb 1-1: SerialNumber: syz [ 216.723229][ T5912] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 216.932044][ T1241] usb 1-1: USB disconnect, device number 9 [ 216.965820][ T1241] usblp0: removed [ 217.269871][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.429961][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.591125][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.832302][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 217.972908][ T8340] netlink: 'syz.2.1085': attribute type 4 has an invalid length. [ 217.972934][ T8340] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1085'. [ 218.257826][ T8350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.915805][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.311394][ T8385] Bluetooth: MGMT ver 1.23 [ 220.532494][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 220.689872][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 220.692836][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.692862][ T10] usb 5-1: config 0 has no interface number 0 [ 220.711915][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.711945][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.711967][ T10] usb 5-1: Product: syz [ 220.711981][ T10] usb 5-1: Manufacturer: syz [ 220.711996][ T10] usb 5-1: SerialNumber: syz [ 220.722102][ T10] usb 5-1: config 0 descriptor?? [ 220.756749][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.866821][ T8398] Illegal XDP return value 4294967282 on prog (id 86) dev N/A, expect packet loss! [ 220.999807][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 221.045449][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.157604][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 221.310979][ T8407] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 221.367248][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 221.379850][ T5911] usb 5-1: USB disconnect, device number 14 [ 221.431016][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.464471][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.465251][ T5911] quatech2 5-1:0.51: device disconnected [ 221.964163][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1125'. [ 222.884330][ T8456] tap0: tun_chr_ioctl cmd 1074025675 [ 222.884353][ T8456] tap0: persist disabled [ 223.149982][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 223.383039][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 223.383069][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.383089][ T10] usb 3-1: Product: syz [ 223.383104][ T10] usb 3-1: Manufacturer: syz [ 223.383118][ T10] usb 3-1: SerialNumber: syz [ 223.393730][ T10] usb 3-1: config 0 descriptor?? [ 223.412374][ T10] ch341 3-1:0.0: ch341-uart converter detected [ 223.729816][ T5911] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 223.879802][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 223.886872][ T5911] usb 2-1: config 0 has an invalid interface number: 203 but max is 0 [ 223.886901][ T5911] usb 2-1: config 0 has no interface number 0 [ 223.886952][ T5911] usb 2-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 223.919818][ T5911] usb 2-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 223.919851][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.919873][ T5911] usb 2-1: Product: syz [ 223.919889][ T5911] usb 2-1: Manufacturer: syz [ 223.919904][ T5911] usb 2-1: SerialNumber: syz [ 223.964166][ T5911] usb 2-1: config 0 descriptor?? [ 223.968265][ T8463] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 224.000713][ T5911] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.224774][ T10] usb 3-1: failed to send control message: -71 [ 224.224836][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 224.245989][ T10] usb 3-1: USB disconnect, device number 9 [ 224.248462][ T10] ch341 3-1:0.0: device disconnected [ 224.974436][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 225.182661][ T6804] usb 2-1: USB disconnect, device number 12 [ 225.409754][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 225.568304][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 225.574413][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.574446][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.574470][ T10] usb 5-1: Product: syz [ 225.574487][ T10] usb 5-1: Manufacturer: syz [ 225.574502][ T10] usb 5-1: SerialNumber: syz [ 225.606605][ T10] usb 5-1: config 0 descriptor?? [ 226.077471][ T5912] usb 5-1: USB disconnect, device number 15 [ 226.213193][ T8518] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1167'. [ 227.140300][ T8551] support for cryptoloop has been removed. Use dm-crypt instead. [ 227.267204][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 227.466661][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1188'. [ 227.879778][ T6804] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 228.029845][ T6804] usb 5-1: Using ep0 maxpacket: 16 [ 228.045994][ T6804] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 228.046024][ T6804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.046043][ T6804] usb 5-1: Product: syz [ 228.046056][ T6804] usb 5-1: Manufacturer: syz [ 228.046070][ T6804] usb 5-1: SerialNumber: syz [ 228.085481][ T6804] usb 5-1: config 0 descriptor?? [ 228.110799][ T6804] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 228.307911][ T6804] gp8psk: usb in 128 operation failed. [ 228.311635][ T6804] gp8psk: usb in 137 operation failed. [ 228.311656][ T6804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.319176][ T6804] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 228.319245][ T6804] usb 5-1: media controller created [ 228.443856][ T6804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.527992][ T6804] gp8psk_fe: Frontend revision 1 attached [ 228.528052][ T6804] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 228.528322][ T6804] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 228.988412][ T6804] gp8psk: usb in 137 operation failed. [ 228.988434][ T6804] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 228.988447][ T6804] gp8psk: found Genpix USB device pID = 201 (hex) [ 228.993367][ T6804] usb 5-1: USB disconnect, device number 16 [ 229.283360][ T6804] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 229.699799][ T5911] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 229.862571][ T5911] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 229.862602][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.889217][ T5911] usb 1-1: config 0 descriptor?? [ 230.089806][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 230.120644][ T5911] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 230.199912][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 230.269818][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 230.274239][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.274334][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.274375][ T31] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 230.274399][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.290723][ T31] usb 5-1: config 0 descriptor?? [ 230.328993][ T5911] [drm:udl_init] *ERROR* Selecting channel failed [ 230.352641][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.352668][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 230.352720][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 230.352743][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.406150][ T10] usb 3-1: config 0 descriptor?? [ 230.431331][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 230.431398][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 230.434311][ T5911] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 230.434335][ T5911] [drm] Initialized udl on minor 2 [ 230.436665][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 230.438256][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 230.438306][ T10] usb 3-1: media controller created [ 230.446453][ T5911] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 230.449721][ T5911] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 230.478306][ T5911] usb 1-1: USB disconnect, device number 10 [ 230.481676][ T5988] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 230.503754][ T5988] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 230.528396][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.557459][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 230.557582][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 230.583919][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 230.607879][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 230.607899][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 230.763302][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 230.763376][ T10] dvb-usb: error while querying for an remote control event. [ 230.808992][ T31] hid (null): unknown global tag 0x83 [ 230.809041][ T31] hid (null): unknown global tag 0xc [ 230.809080][ T31] hid (null): global environment stack underflow [ 230.919904][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 230.919943][ T10] dvb-usb: error while querying for an remote control event. [ 230.954480][ T5911] usb 3-1: USB disconnect, device number 10 [ 231.000563][ T31] usb 5-1: string descriptor 0 read error: -71 [ 231.035648][ T31] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 231.035742][ T31] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -32 [ 231.056545][ T31] usb 5-1: USB disconnect, device number 17 [ 231.125486][ T5911] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 231.549823][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 231.712488][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 231.714977][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 231.715006][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.728185][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 231.728208][ T31] pvrusb2: ********** [ 231.728215][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 231.728229][ T31] pvrusb2: Important functionality might not be entirely working. [ 231.728239][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 231.728251][ T31] pvrusb2: ********** [ 231.952771][ T2369] pvrusb2: Invalid write control endpoint [ 232.192897][ T2369] pvrusb2: Invalid write control endpoint [ 232.192914][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 232.192925][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 232.192934][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 232.192944][ T2369] pvrusb2: Device being rendered inoperable [ 232.229969][ T1903] usb 1-1: USB disconnect, device number 11 [ 232.270327][ T2369] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 232.270407][ T2369] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 232.274601][ T2369] pvrusb2: Attached sub-driver cx25840 [ 232.274626][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 232.274640][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 232.782390][ T8642] kvm: kvm [8639]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 232.850004][ T1903] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 232.999732][ T1903] usb 2-1: Using ep0 maxpacket: 16 [ 233.003500][ T1903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.003535][ T1903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.003559][ T1903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.003603][ T1903] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 233.003629][ T1903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.068436][ T1903] usb 2-1: config 0 descriptor?? [ 233.289929][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 233.495873][ T1903] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 233.495913][ T1903] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 233.708692][ T1903] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 233.708728][ T1903] microsoft 0003:045E:07DA.0013: no inputs found [ 233.708742][ T1903] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 233.774825][ T8668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.775408][ T8671] binder: 8669:8671 ioctl c0306201 200000000640 returned -22 [ 233.904525][ T5911] usb 2-1: USB disconnect, device number 13 [ 234.083909][ T8682] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 234.135099][ T8682] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 234.442920][ T8690] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 234.442944][ T8690] netlink: 'syz.4.1244': attribute type 2 has an invalid length. [ 235.725137][ T8720] Process accounting resumed [ 236.980169][ T1903] IPVS: starting estimator thread 0... [ 237.061786][ T8746] block device autoloading is deprecated and will be removed. [ 237.070249][ T8751] IPVS: using max 7 ests per chain, 16800 per kthread [ 237.378467][ T5988] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 237.441800][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 237.532799][ T5988] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 237.532831][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.562065][ T5988] usb 5-1: config 0 descriptor?? [ 237.587230][ T5988] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 237.612968][ T5911] kernel write not supported for file /amidi2 (pid: 5911 comm: kworker/1:3) [ 238.241717][ T5988] gspca_stv06xx: vv6410 sensor detected [ 238.279822][ T6804] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 238.433133][ T6804] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.433161][ T6804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.435707][ T6804] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.435732][ T6804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.435746][ T6804] usb 3-1: Product: syz [ 238.435803][ T6804] usb 3-1: Manufacturer: syz [ 238.435814][ T6804] usb 3-1: SerialNumber: syz [ 238.460118][ T1903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 238.514321][ T5988] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 238.518498][ T5988] usb 5-1: USB disconnect, device number 18 [ 238.659793][ T1903] usb 1-1: Using ep0 maxpacket: 16 [ 238.664332][ T1903] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 238.664359][ T1903] usb 1-1: config 0 has no interface number 0 [ 238.664476][ T1903] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 238.664502][ T1903] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 238.718223][ T1903] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 238.718316][ T1903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.718339][ T1903] usb 1-1: Product: syz [ 238.718353][ T1903] usb 1-1: Manufacturer: syz [ 238.718369][ T1903] usb 1-1: SerialNumber: syz [ 238.789725][ T6804] usb 3-1: 0:2 : does not exist [ 238.793748][ T1903] usb 1-1: config 0 descriptor?? [ 238.798259][ T8788] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 238.799060][ T8788] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 238.825952][ T6804] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 238.928607][ T6804] usb 3-1: USB disconnect, device number 11 [ 239.031357][ T8800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1294'. [ 239.039302][ T8788] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 239.039434][ T8788] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 239.645558][ T1903] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 239.645589][ T1903] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 239.646201][ T1903] asix 1-1:0.251: probe with driver asix failed with error -71 [ 239.690730][ T1903] usb 1-1: USB disconnect, device number 12 [ 239.702376][ T8816] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 239.890204][ T1903] IPVS: starting estimator thread 0... [ 239.896908][ T8826] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 239.998604][ T8827] IPVS: using max 7 ests per chain, 16800 per kthread [ 240.331563][ T1903] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 240.378784][ T8846] netlink: 'syz.0.1315': attribute type 14 has an invalid length. [ 240.479799][ T1903] usb 2-1: Using ep0 maxpacket: 8 [ 240.482475][ T1903] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 240.482508][ T1903] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 240.482588][ T1903] usb 2-1: config 3 has no interface number 0 [ 240.482642][ T1903] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.482670][ T1903] usb 2-1: config 3 interface 45 has no altsetting 0 [ 240.485968][ T1903] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 240.485994][ T1903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.486015][ T1903] usb 2-1: Product: syz [ 240.486029][ T1903] usb 2-1: Manufacturer: syz [ 240.486044][ T1903] usb 2-1: SerialNumber: syz [ 240.892371][ T1903] usb 2-1: USB disconnect, device number 14 [ 241.050902][ T8861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.222300][ T8865] netlink: 'syz.3.1325': attribute type 11 has an invalid length. [ 241.340227][ T8869] netlink: 'syz.3.1326': attribute type 83 has an invalid length. [ 241.346154][ T8868] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 242.429897][ T6804] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.430098][ T1903] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.579712][ T6804] usb 1-1: Using ep0 maxpacket: 16 [ 242.579873][ T1903] usb 2-1: Using ep0 maxpacket: 8 [ 242.587969][ T6804] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 242.587998][ T6804] usb 1-1: config 0 has no interface number 0 [ 242.616253][ T1903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 242.616288][ T1903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.640825][ T6804] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 242.640858][ T6804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.640879][ T6804] usb 1-1: Product: syz [ 242.640894][ T6804] usb 1-1: Manufacturer: syz [ 242.640909][ T6804] usb 1-1: SerialNumber: syz [ 242.648240][ T6804] usb 1-1: config 0 descriptor?? [ 242.698874][ T1903] pvrusb2: Hardware description: Terratec Grabster AV400 [ 242.698893][ T1903] pvrusb2: ********** [ 242.698900][ T1903] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 242.698913][ T1903] pvrusb2: Important functionality might not be entirely working. [ 242.698923][ T1903] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 242.698934][ T1903] pvrusb2: ********** [ 242.751002][ T6804] hub 1-1:0.132: bad descriptor, ignoring hub [ 242.751043][ T6804] hub 1-1:0.132: probe with driver hub failed with error -5 [ 242.778241][ T6804] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input13 [ 242.928909][ T2369] pvrusb2: Invalid write control endpoint [ 243.046566][ T2369] pvrusb2: Invalid write control endpoint [ 243.046582][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 243.046593][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 243.046601][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 243.046612][ T2369] pvrusb2: Device being rendered inoperable [ 243.055046][ T2369] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 243.055101][ T2369] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 243.066283][ T2369] pvrusb2: Attached sub-driver cx25840 [ 243.066303][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 243.066314][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 243.148631][ T31] usb 2-1: USB disconnect, device number 15 [ 243.381691][ T5988] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 243.531546][ T5988] usb 5-1: Using ep0 maxpacket: 16 [ 243.534321][ T5988] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 243.534465][ T5988] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.534486][ T5988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.535087][ T8924] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 243.535298][ T8924] syzkaller1: linktype set to 1 [ 243.537693][ T5988] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.537720][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.537739][ T5988] usb 5-1: Product: syz [ 243.537753][ T5988] usb 5-1: Manufacturer: syz [ 243.537768][ T5988] usb 5-1: SerialNumber: syz [ 243.972452][ T5988] usb 5-1: 0:2 : does not exist [ 244.349814][ T6804] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 244.383325][ T5988] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 244.444619][ T5988] usb 5-1: USB disconnect, device number 19 [ 244.503685][ T6804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.504464][ T6804] usb 3-1: not running at top speed; connect to a high speed hub [ 244.506125][ T6804] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 244.506150][ T6804] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 244.506171][ T6804] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.553819][ T6804] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.553851][ T6804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.553872][ T6804] usb 3-1: Product: syz [ 244.553888][ T6804] usb 3-1: Manufacturer: syz [ 244.553902][ T6804] usb 3-1: SerialNumber: syz [ 244.584994][ T8943] Process accounting resumed [ 244.949927][ T5919] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 245.109877][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 245.113421][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.113462][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.113486][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.113508][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.113546][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.113568][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.244144][ T6804] usb 3-1: 0:2 : does not exist [ 245.279830][ T1903] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 245.329947][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 245.353099][ T5919] usb 2-1: GET_CAPABILITIES returned 0 [ 245.353165][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 245.438604][ T8966] netlink: 'syz.0.1369': attribute type 2 has an invalid length. [ 245.438621][ T8966] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 245.485305][ T1903] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.485341][ T1903] usb 5-1: config 0 has no interface number 0 [ 245.485953][ T6804] usb 3-1: USB disconnect, device number 12 [ 245.517560][ T1903] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 245.517593][ T1903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.517615][ T1903] usb 5-1: Product: syz [ 245.517630][ T1903] usb 5-1: Manufacturer: syz [ 245.517645][ T1903] usb 5-1: SerialNumber: syz [ 245.589361][ T5919] usb 2-1: USB disconnect, device number 16 [ 245.616166][ T1903] usb 5-1: config 0 descriptor?? [ 245.860418][ T1903] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 245.864952][ T1903] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 245.865527][ T1903] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 245.865597][ T1903] usb 5-1: media controller created [ 245.937387][ T1903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.066746][ T1903] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 246.199252][ T1903] usb 5-1: USB disconnect, device number 20 [ 246.306916][ T8981] netlink: 'syz.2.1376': attribute type 6 has an invalid length. [ 246.479843][ T1241] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 246.642343][ T1241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.642375][ T1241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.642413][ T1241] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 246.642434][ T1241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.647461][ T1241] usb 4-1: config 0 descriptor?? [ 246.779044][ T10] usb 1-1: USB disconnect, device number 13 [ 247.075573][ T1241] elecom 0003:056E:010C.0014: hidraw0: USB HID v77.96 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 247.262725][ T10] usb 4-1: USB disconnect, device number 11 [ 248.542086][ T9032] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1396'. [ 248.542126][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1396'. [ 249.701112][ T9063] vxcan3: entered allmulticast mode [ 250.398996][ T9085] ipvlan2: entered promiscuous mode [ 250.399033][ T9085] ipvlan2: entered allmulticast mode [ 250.399046][ T9085] macvlan1: entered allmulticast mode [ 251.099859][ T1241] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 251.181074][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.281786][ T1241] usb 2-1: Using ep0 maxpacket: 8 [ 251.287632][ T1241] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.287659][ T1241] usb 2-1: config 0 has no interfaces? [ 251.311411][ T1241] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 251.311442][ T1241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.311462][ T1241] usb 2-1: Product: syz [ 251.311477][ T1241] usb 2-1: Manufacturer: syz [ 251.311491][ T1241] usb 2-1: SerialNumber: syz [ 251.317423][ T1241] usb 2-1: config 0 descriptor?? [ 251.344710][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.344738][ T10] usb 3-1: config 0 has no interface number 0 [ 251.387231][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 251.387262][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.387283][ T10] usb 3-1: Product: syz [ 251.387298][ T10] usb 3-1: Manufacturer: syz [ 251.387312][ T10] usb 3-1: SerialNumber: syz [ 251.427271][ T10] usb 3-1: config 0 descriptor?? [ 251.573223][ T31] usb 2-1: USB disconnect, device number 17 [ 251.656648][ T10] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 251.669382][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.680164][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 251.680225][ T10] usb 3-1: media controller created [ 251.724631][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.860169][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 251.969036][ T10] usb 3-1: USB disconnect, device number 13 [ 252.310618][ T9127] tap0: tun_chr_ioctl cmd 1074025677 [ 252.310838][ T9127] tap0: linktype set to 0 [ 252.859904][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 253.022684][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 253.025805][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.025837][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.025859][ T10] usb 3-1: Product: syz [ 253.025873][ T10] usb 3-1: Manufacturer: syz [ 253.025888][ T10] usb 3-1: SerialNumber: syz [ 253.082404][ T10] usb 3-1: config 0 descriptor?? [ 253.349893][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 253.503522][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.503547][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.503576][ T31] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 253.503592][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.512432][ T31] usb 4-1: config 0 descriptor?? [ 253.636384][ T5919] usb 3-1: USB disconnect, device number 14 [ 253.720102][ T9160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1470'. [ 254.048997][ T31] ntrig 0003:1B96:000F.0015: unknown main item tag 0x0 [ 254.059541][ T31] ntrig 0003:1B96:000F.0015: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.3-1/input0 [ 254.104902][ T9168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1462'. [ 254.247025][ T31] ntrig 0003:1B96:000F.0015: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 254.359997][ T9171] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1463'. [ 254.489942][ T31] usb 4-1: USB disconnect, device number 12 [ 255.102053][ T9191] netlink: 'syz.2.1483': attribute type 10 has an invalid length. [ 255.131287][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'. [ 255.162148][ T9191] bond0: (slave bond_slave_0): Releasing backup interface [ 256.910426][ T1241] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 257.064365][ T1241] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 257.064394][ T1241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.092310][ T1241] usb 1-1: config 0 descriptor?? [ 257.116814][ T1241] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 257.259147][ T38] audit: type=1326 audit(1756932046.548:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9246 comm="syz.2.1499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe05240ebe9 code=0x0 [ 257.326716][ T1241] gp8psk: usb in 128 operation failed. [ 257.460370][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1504'. [ 257.530945][ T1241] gp8psk: FW Version = 244.249.196 (0xf4f9c4) Build 2015/223/09 [ 257.733800][ T1241] gp8psk: usb in 149 operation failed. [ 257.733823][ T1241] gp8psk: failed to get FPGA version [ 257.734303][ T1241] gp8psk: usb in 138 operation failed. [ 257.734318][ T1241] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 257.734413][ T1241] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 257.780549][ T1241] usb 1-1: USB disconnect, device number 14 [ 257.895811][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 258.130076][ T9275] bpf: Bad value for 'uid' [ 259.528313][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.616044][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.882992][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.883076][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.921153][ T9356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1550'. [ 261.990012][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 262.109851][ T5911] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 262.139848][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 262.160886][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.160965][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.160995][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.161017][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.161043][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.168846][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.168877][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.168906][ T31] usb 5-1: Manufacturer: syz [ 262.222305][ T31] usb 5-1: config 0 descriptor?? [ 262.259996][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 262.263789][ T5911] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 262.263931][ T5911] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.263960][ T5911] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.263983][ T5911] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.264073][ T5911] usb 2-1: config 7 interface 0 has no altsetting 0 [ 262.264112][ T5911] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 262.264136][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.592947][ T9367] netlink: 'syz.0.1555': attribute type 10 has an invalid length. [ 262.603163][ T31] rc_core: IR keymap rc-hauppauge not found [ 262.603190][ T31] Registered IR keymap rc-empty [ 262.603536][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.620029][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.657927][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 262.673935][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 262.693021][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.694579][ C1] mceusb 5-1:0.0: long-range (0x1) receiver active [ 262.710660][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.730300][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.751729][ T9367] bond0: (slave bond_slave_0): Releasing backup interface [ 262.752677][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.768368][ T5911] hid (null): invalid report_size 812540268 [ 262.770169][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.795829][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.810028][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.830060][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.849996][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.872904][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.917654][ T31] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 262.917680][ T31] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 262.974729][ T5911] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0016/input/input15 [ 263.004598][ T31] usb 5-1: USB disconnect, device number 21 [ 263.140453][ T5911] kye 0003:0458:5010.0016: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 263.165102][ T5911] usb 2-1: USB disconnect, device number 18 [ 264.251718][ T9404] netlink: 'syz.4.1570': attribute type 10 has an invalid length. [ 264.400612][ T9404] bond0: (slave bond_slave_0): Releasing backup interface [ 264.494754][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 264.802912][ T9425] netlink: 'syz.3.1578': attribute type 10 has an invalid length. [ 264.936574][ T9425] geneve0: entered promiscuous mode [ 264.968979][ T9425] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 265.219925][ T1241] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 265.311954][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1587'. [ 265.311992][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1587'. [ 265.378664][ T1241] usb 1-1: Using ep0 maxpacket: 16 [ 265.391443][ T1241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.391479][ T1241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.391520][ T1241] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 265.391544][ T1241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.426863][ T1241] usb 1-1: config 0 descriptor?? [ 265.711675][ T9457] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 265.834657][ T9457] bond0: (slave bond_slave_0): Releasing backup interface [ 265.890350][ T1241] playstation 0003:054C:05C4.0017: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 266.053422][ T1241] playstation 0003:054C:05C4.0017: Invalid byte count transferred, expected 16 got 0 [ 266.053453][ T1241] playstation 0003:054C:05C4.0017: Failed to retrieve DualShock4 pairing info: -22 [ 266.053507][ T1241] playstation 0003:054C:05C4.0017: Failed to get MAC address from DualShock4 [ 266.053529][ T1241] playstation 0003:054C:05C4.0017: Failed to create dualshock4. [ 266.056484][ T1241] playstation 0003:054C:05C4.0017: probe with driver playstation failed with error -22 [ 266.089916][ T38] audit: type=1326 audit(1756932055.368:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.090272][ T38] audit: type=1326 audit(1756932055.388:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.090643][ T38] audit: type=1326 audit(1756932055.388:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.090934][ T38] audit: type=1326 audit(1756932055.388:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.094475][ T38] audit: type=1326 audit(1756932055.388:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.094530][ T38] audit: type=1326 audit(1756932055.388:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.094579][ T38] audit: type=1326 audit(1756932055.388:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.094984][ T38] audit: type=1326 audit(1756932055.388:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.099984][ T38] audit: type=1326 audit(1756932055.388:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 266.100267][ T38] audit: type=1326 audit(1756932055.398:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 266.287005][ T1241] usb 1-1: USB disconnect, device number 15 [ 267.559792][ T6804] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 267.719760][ T6804] usb 4-1: Using ep0 maxpacket: 8 [ 267.723327][ T6804] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 267.728683][ T6804] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 267.728713][ T6804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.728734][ T6804] usb 4-1: Product: syz [ 267.728750][ T6804] usb 4-1: Manufacturer: syz [ 267.728765][ T6804] usb 4-1: SerialNumber: syz [ 267.739233][ T6804] usb 4-1: config 0 descriptor?? [ 267.752354][ T6804] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 267.752425][ T6804] usb 4-1: setting power ON [ 267.752448][ T6804] dvb-usb: bulk message failed: -22 (2/0) [ 267.769044][ T6804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.770114][ T6804] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 267.770263][ T6804] usb 4-1: media controller created [ 267.848682][ T6804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.947094][ T6804] usb 4-1: selecting invalid altsetting 6 [ 267.947119][ T6804] usb 4-1: digital interface selection failed (-22) [ 267.947136][ T6804] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 267.950703][ T6804] usb 4-1: setting power OFF [ 267.950731][ T6804] dvb-usb: bulk message failed: -22 (2/0) [ 267.950752][ T6804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 267.950768][ T6804] (NULL device *): no alternate interface [ 268.086748][ T6804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 268.112831][ T6804] usb 4-1: USB disconnect, device number 13 [ 268.421403][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 268.589788][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 268.594364][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.594399][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.594441][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.594466][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.614270][ T31] usb 2-1: config 0 descriptor?? [ 268.655109][ T31] hub 2-1:0.0: USB hub found [ 268.839802][ T31] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 269.294476][ T31] hid-generic 0003:046D:C31C.0018: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 269.583878][ T31] usb 2-1: USB disconnect, device number 19 [ 270.059724][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 270.209692][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 270.212383][ T5911] usb 3-1: config 1 has an invalid interface number: 220 but max is 1 [ 270.212406][ T5911] usb 3-1: config 1 has an invalid interface number: 76 but max is 1 [ 270.212422][ T5911] usb 3-1: config 1 has no interface number 0 [ 270.212435][ T5911] usb 3-1: config 1 has no interface number 1 [ 270.212490][ T5911] usb 3-1: config 1 interface 220 has no altsetting 0 [ 270.212506][ T5911] usb 3-1: config 1 interface 76 has no altsetting 0 [ 270.216336][ T5911] usb 3-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4 [ 270.216364][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.216385][ T5911] usb 3-1: Product: syz [ 270.216400][ T5911] usb 3-1: Manufacturer: syz [ 270.216415][ T5911] usb 3-1: SerialNumber: syz [ 270.545396][ T5911] usb 3-1: USB disconnect, device number 15 [ 271.072419][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 271.921561][ T9594] IPVS: persistence engine module ip_vs_pe_ not found [ 272.673326][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 272.768906][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 273.918526][ T9651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1682'. [ 274.583501][ T9667] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1689'. [ 276.069905][ T6804] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 276.236405][ T6804] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 276.236439][ T6804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.246876][ T6804] usb 3-1: config 0 descriptor?? [ 276.907790][ T6804] ath6kl: mismatched byte count 0 vs. expected 12 [ 276.928324][ T6804] ath6kl: Failed to init ath6kl core: -22 [ 276.929227][ T6804] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 277.139718][ T6804] usb 3-1: USB disconnect, device number 16 [ 277.249817][ T5919] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 277.327066][ T9728] UHID_CREATE from different security context by process 414 (syz.3.1715), this is not allowed. [ 277.390039][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390079][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390108][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390136][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390164][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390192][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390220][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390248][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390276][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.390303][ T1903] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 277.416929][ T1903] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 277.494461][ T5919] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 277.494493][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.521957][ T5919] usb 5-1: config 0 descriptor?? [ 277.562256][ T5919] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 278.352343][ T5919] gspca_sunplus: reg_w_riv err -71 [ 278.352450][ T5919] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 278.358987][ T5919] usb 5-1: USB disconnect, device number 22 [ 278.607321][ T5919] kernel write not supported for file /uhid (pid: 5919 comm: kworker/1:5) [ 279.639863][ T5919] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 279.799750][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 279.802417][ T5919] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 279.802476][ T5919] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.802505][ T5919] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.802528][ T5919] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 279.802557][ T5919] usb 5-1: config 7 interface 0 has no altsetting 0 [ 279.802592][ T5919] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 279.802625][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.332135][ T5919] hid (null): invalid report_size 812540268 [ 280.380785][ T5919] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.001A/input/input16 [ 280.448871][ T5919] kye 0003:0458:5010.001A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 280.550388][ T6804] usb 5-1: USB disconnect, device number 23 [ 281.479749][ T5919] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 281.629778][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 281.632179][ T5919] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 281.632209][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.632229][ T5919] usb 2-1: config 0 has no interface number 0 [ 281.632277][ T5919] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.635256][ T5919] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 281.635284][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.635323][ T5919] usb 2-1: Product: syz [ 281.635337][ T5919] usb 2-1: Manufacturer: syz [ 281.635352][ T5919] usb 2-1: SerialNumber: syz [ 281.716233][ T5919] usb 2-1: config 0 descriptor?? [ 281.728900][ T5919] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 282.060286][ T9812] CIFS: VFS: Malformed UNC in devname [ 282.423207][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.426724][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.772902][ T9834] comedi comedi0: 8255: I/O port conflict (0xee,4) [ 282.772963][ T9834] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 282.773121][ T9834] comedi comedi0: 8255: I/O port conflict (0xa,4) [ 282.859809][ T1903] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 283.014710][ T1903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 283.017440][ T1903] usb 3-1: config 6 has an invalid interface number: 158 but max is 0 [ 283.017468][ T1903] usb 3-1: config 6 has no interface number 0 [ 283.017547][ T1903] usb 3-1: config 6 interface 158 has no altsetting 0 [ 283.031935][ T1903] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 283.031972][ T1903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.031998][ T1903] usb 3-1: Product: syz [ 283.032013][ T1903] usb 3-1: Manufacturer: syz [ 283.032031][ T1903] usb 3-1: SerialNumber: syz [ 284.063370][ T1903] rtsx_usb 3-1:6.158: probe with driver rtsx_usb failed with error -71 [ 284.087723][ T1903] usb 3-1: USB disconnect, device number 17 [ 284.301988][ T1903] usb 2-1: USB disconnect, device number 20 [ 285.015635][ T9870] input: syz1 as /devices/virtual/input/input17 [ 285.709736][ T5919] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 285.802095][ T38] audit: type=1326 audit(1756932075.088:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0a2ebe9 code=0x7ffc0000 [ 285.805187][ T38] audit: type=1326 audit(1756932075.098:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0a2ebe9 code=0x7ffc0000 [ 285.806906][ T38] audit: type=1326 audit(1756932075.098:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f18a0a2ebe9 code=0x7ffc0000 [ 285.806960][ T38] audit: type=1326 audit(1756932075.098:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0a2ebe9 code=0x7ffc0000 [ 285.807008][ T38] audit: type=1326 audit(1756932075.098:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0a2ebe9 code=0x7ffc0000 [ 285.809146][ T38] audit: type=1326 audit(1756932075.098:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18a0a30b07 code=0x7ffc0000 [ 285.809518][ T38] audit: type=1326 audit(1756932075.098:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f18a0a30a7c code=0x7ffc0000 [ 285.817009][ T38] audit: type=1326 audit(1756932075.108:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f18a0a309b4 code=0x7ffc0000 [ 285.818666][ T38] audit: type=1326 audit(1756932075.108:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f18a0a309b4 code=0x7ffc0000 [ 285.818724][ T38] audit: type=1326 audit(1756932075.108:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9888 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f18a0a2d84a code=0x7ffc0000 [ 285.863248][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.863283][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 285.863467][ T5919] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 285.863499][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.880664][ T5919] usb 3-1: config 0 descriptor?? [ 285.909115][ T5919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 285.909187][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 285.997576][ T5919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 286.018329][ T5919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 286.018402][ T5919] usb 3-1: media controller created [ 286.107293][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.210066][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 286.210155][ T5919] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 286.227839][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 286.254296][ T5919] dvb-usb: schedule remote query interval to 150 msecs. [ 286.254321][ T5919] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 286.298937][ T9894] input: syz0 as /devices/virtual/input/input19 [ 286.409832][ T990] dvb-usb: bulk message failed: -22 (1/0) [ 286.409867][ T990] dvb-usb: error while querying for an remote control event. [ 286.569807][ T990] dvb-usb: bulk message failed: -22 (1/0) [ 286.569842][ T990] dvb-usb: error while querying for an remote control event. [ 286.694571][ T990] usb 3-1: USB disconnect, device number 18 [ 286.848880][ T990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 287.469993][ T6804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 287.630402][ T6804] usb 2-1: Using ep0 maxpacket: 16 [ 287.633399][ T6804] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 287.633427][ T6804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.633448][ T6804] usb 2-1: config 0 has no interface number 0 [ 287.636612][ T6804] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 287.636641][ T6804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.636662][ T6804] usb 2-1: Product: syz [ 287.636677][ T6804] usb 2-1: Manufacturer: syz [ 287.636692][ T6804] usb 2-1: SerialNumber: syz [ 287.711805][ T6804] usb 2-1: config 0 descriptor?? [ 287.717753][ T6804] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 287.717788][ T6804] usb 2-1: No valid video chain found. [ 287.729377][ T9930] netlink: 'syz.2.1807': attribute type 2 has an invalid length. [ 287.729402][ T9930] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1807'. [ 287.939507][ T990] usb 2-1: USB disconnect, device number 21 [ 289.874915][ T9978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1829'. [ 290.215386][ T9991] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1835'. [ 290.809961][ T38] kauditd_printk_skb: 41 callbacks suppressed [ 290.809981][ T38] audit: type=1326 audit(1756932080.108:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.825307][ T38] audit: type=1326 audit(1756932080.118:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.837744][ T38] audit: type=1326 audit(1756932080.128:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.839221][ T38] audit: type=1326 audit(1756932080.128:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.841257][ T38] audit: type=1326 audit(1756932080.138:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.846164][ T38] audit: type=1326 audit(1756932080.138:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.850463][ T38] audit: type=1326 audit(1756932080.148:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.916581][ T38] audit: type=1326 audit(1756932080.208:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 290.916653][ T38] audit: type=1326 audit(1756932080.208:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.3.1845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b5aebe9 code=0x7ffc0000 [ 293.671683][T10101] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 293.859889][ T1903] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 293.912635][ T5919] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 294.019759][ T1903] usb 5-1: Using ep0 maxpacket: 8 [ 294.022177][ T1903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.022222][ T1903] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 294.022245][ T1903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.027579][ T1903] usb 5-1: config 0 descriptor?? [ 294.059758][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 294.254763][ T1903] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 294.275552][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.275636][ T5919] usb 2-1: no configurations [ 294.275648][ T5919] usb 2-1: can't read configurations, error -22 [ 294.466234][ T1903] usb 5-1: USB disconnect, device number 24 [ 295.686943][T10132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 295.704127][T10132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 296.802099][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1901'. [ 297.166741][T10161] block nbd1: server does not support multiple connections per device. [ 297.168538][T10161] block nbd1: shutting down sockets [ 298.440030][ T990] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 298.589808][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 298.592778][ T990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.592842][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.592872][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.592895][ T990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 298.592920][ T990] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.594874][ T990] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.594902][ T990] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.594923][ T990] usb 5-1: Manufacturer: syz [ 298.689014][ T990] usb 5-1: config 0 descriptor?? [ 299.000775][ T990] rc_core: IR keymap rc-hauppauge not found [ 299.000799][ T990] Registered IR keymap rc-empty [ 299.000963][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.029248][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.041211][ T990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 299.046654][ T990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 299.083085][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.107828][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.120417][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.140042][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.159993][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.179827][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.199803][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.215122][ T1241] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 299.227302][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.239801][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.259881][ T990] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 299.284460][ T990] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 0 [ 299.284491][ T990] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 299.360130][ T1241] usb 4-1: Using ep0 maxpacket: 8 [ 299.363307][ T1241] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 299.363337][ T1241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.411773][ T1241] pvrusb2: Hardware description: Terratec Grabster AV400 [ 299.411792][ T1241] pvrusb2: ********** [ 299.411798][ T1241] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 299.411811][ T1241] pvrusb2: Important functionality might not be entirely working. [ 299.411820][ T1241] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 299.411833][ T1241] pvrusb2: ********** [ 299.433575][ T1903] usb 5-1: USB disconnect, device number 25 [ 299.602368][ T2369] pvrusb2: Invalid write control endpoint [ 299.714857][ T2369] pvrusb2: Invalid write control endpoint [ 299.714873][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 299.714884][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 299.714894][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 299.714905][ T2369] pvrusb2: Device being rendered inoperable [ 299.716073][ T2369] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 299.716150][ T2369] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 299.717165][ T2369] pvrusb2: Attached sub-driver cx25840 [ 299.717177][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 299.717189][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 299.807314][ T1241] usb 4-1: USB disconnect, device number 14 [ 300.060723][T10221] cgroup: fork rejected by pids controller in /syz0 [ 300.915871][T10284] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1940'. [ 301.470821][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1949'. [ 302.111925][ T38] audit: type=1326 audit(1756932091.408:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10318 comm="syz.1.1956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7d52ebe9 code=0x0 [ 304.427202][T10386] sp0: Synchronizing with TNC [ 304.427233][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 304.456468][T10386] sp0: Found TNC [ 304.906314][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1989'. [ 304.906352][T10395] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1989'. [ 305.744231][T10405] cgroup: fork rejected by pids controller in /syz3 [ 306.611644][T10461] loop2: detected capacity change from 0 to 524287999 [ 306.968763][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.037694][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.104791][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.959201][T10518] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2029'. [ 309.359896][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 309.519859][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 309.522774][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.522808][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.522849][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 309.522873][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.528620][ T31] usb 3-1: config 0 descriptor?? [ 309.542037][ T31] hub 3-1:0.0: USB hub found [ 309.629759][ T5919] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 309.794042][ T31] hub 3-1:0.0: 1 port detected [ 309.818932][ T5919] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 309.818962][ T5919] usb 2-1: config 0 has no interface number 0 [ 309.819234][ T5919] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 309.819259][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.893076][ T5919] usb 2-1: config 0 descriptor?? [ 310.146729][ T990] usb 2-1: USB disconnect, device number 24 [ 310.231589][ T31] usb 3-1: USB disconnect, device number 19 [ 310.528342][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.558984][T10557] gretap0: entered promiscuous mode [ 310.573814][T10557] gretap0: left promiscuous mode [ 312.353799][T10599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.353818][T10599] IPv6: NLM_F_CREATE should be set when creating new route [ 312.354009][T10599] IPv6: NLM_F_CREATE should be set when creating new route [ 312.354045][T10599] IPv6: NLM_F_CREATE should be set when creating new route [ 312.575187][T10609] netlink: 'syz.4.2072': attribute type 18 has an invalid length. [ 312.760383][ T1903] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 312.873138][T10616] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2075'. [ 312.919750][ T1903] usb 4-1: Using ep0 maxpacket: 32 [ 312.924608][ T1903] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 312.924640][ T1903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.035389][ T1903] usb 4-1: config 0 descriptor?? [ 313.262667][ T1903] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 313.278466][ T1903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.290093][ T1903] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 313.290154][ T1903] usb 4-1: media controller created [ 313.340308][ T1903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.465843][ T1903] az6027: usb out operation failed. (-71) [ 313.475538][ T1903] az6027: usb out operation failed. (-71) [ 313.475558][ T1903] stb0899_attach: Driver disabled by Kconfig [ 313.475570][ T1903] az6027: no front-end attached [ 313.475570][ T1903] [ 313.476000][ T1903] az6027: usb out operation failed. (-71) [ 313.476015][ T1903] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 313.479139][ T1903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 313.538444][ T1903] dvb-usb: schedule remote query interval to 400 msecs. [ 313.538469][ T1903] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 313.557471][ T1903] usb 4-1: USB disconnect, device number 15 [ 313.942365][ T1903] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 314.365776][T10643] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 314.904540][T10654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.970117][T10656] bond0: entered promiscuous mode [ 315.029971][T10656] bond0: left promiscuous mode [ 315.102969][T10664] program syz.4.2097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.439831][T10672] tun0: tun_chr_ioctl cmd 1074812118 [ 315.879070][T10686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2108'. [ 315.879111][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2108'. [ 316.389793][ T1903] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 316.539713][ T1903] usb 1-1: Using ep0 maxpacket: 16 [ 316.546405][ T1903] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 316.546441][ T1903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 316.549779][ T1903] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 316.549808][ T1903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.549830][ T1903] usb 1-1: Product: syz [ 316.549844][ T1903] usb 1-1: Manufacturer: syz [ 316.549860][ T1903] usb 1-1: SerialNumber: syz [ 316.560856][ T1903] usb 1-1: config 0 descriptor?? [ 316.575835][ T1903] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 316.575877][ T1903] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 317.179227][ T1903] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 317.387082][ T1903] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 317.387571][ T1903] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 317.387587][ T1903] em28xx 1-1:0.0: No AC97 audio processor [ 317.437731][ T1903] usb 1-1: USB disconnect, device number 16 [ 317.446357][ T1903] em28xx 1-1:0.0: Disconnecting em28xx [ 317.533718][ T1903] em28xx 1-1:0.0: Freeing device [ 317.643024][T10726] block device autoloading is deprecated and will be removed. [ 317.649694][ T38] audit: type=1400 audit(1756932106.898:97): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=10721 comm="syz.2.2124" name="430" dev="tmpfs" ino=2199 [ 318.782940][T10755] netem: invalid attributes len -3 [ 318.782958][T10755] netem: change failed [ 321.155423][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.214472][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.265178][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.615752][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2167'. [ 321.615789][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 321.859905][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2169'. [ 322.322149][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.322231][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.757483][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'. [ 323.605286][T10858] kvm_intel: kvm [10857]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x5 [ 324.460083][T10880] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 324.460107][T10880] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2196'. [ 324.756205][T10885] sock: sock_timestamping_bind_phc: sock not bind to device [ 325.960125][ T1903] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 326.218280][ T1903] usb 4-1: Using ep0 maxpacket: 16 [ 326.344839][ T1903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.344893][ T1903] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.344917][ T1903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.412479][ T1903] usb 4-1: config 0 descriptor?? [ 326.786867][T10930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.023590][ T1903] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 327.028486][T10934] netlink: 'syz.1.2223': attribute type 2 has an invalid length. [ 327.028507][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 327.216430][ C0] ================================================================== [ 327.216453][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x106a/0x1240 [ 327.216486][ C0] Read of size 1 at addr ffff88804dbfbfff by task ktimers/0/16 [ 327.216507][ C0] [ 327.216540][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.216570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.216594][ C0] Call Trace: [ 327.216603][ C0] [ 327.216613][ C0] dump_stack_lvl+0x189/0x250 [ 327.216651][ C0] ? __kasan_check_byte+0x12/0x40 [ 327.216685][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.216722][ C0] ? lock_release+0x4b/0x3e0 [ 327.216759][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 327.216783][ C0] print_report+0xca/0x240 [ 327.216815][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 327.216838][ C0] kasan_report+0x118/0x150 [ 327.216873][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 327.216902][ C0] mcp2221_raw_event+0x106a/0x1240 [ 327.216927][ C0] ? down_trylock+0x50/0xb0 [ 327.216964][ C0] hid_input_report+0x40f/0x530 [ 327.217001][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 327.217027][ C0] hid_irq_in+0x47e/0x6d0 [ 327.217055][ C0] __usb_hcd_giveback_urb+0x3b4/0x5e0 [ 327.217092][ C0] dummy_timer+0x89c/0x45a0 [ 327.217153][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.217188][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 327.217224][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 327.217259][ C0] __hrtimer_run_queues+0x54f/0xd40 [ 327.217309][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 327.217347][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 327.217386][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 327.217413][ C0] handle_softirqs+0x22f/0x710 [ 327.217450][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 327.217488][ C0] run_ktimerd+0xcf/0x190 [ 327.217522][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 327.217555][ C0] ? schedule+0x91/0x360 [ 327.217588][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 327.217618][ C0] smpboot_thread_fn+0x53f/0xa60 [ 327.217650][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 327.217685][ C0] kthread+0x70e/0x8a0 [ 327.217724][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 327.217755][ C0] ? __pfx_kthread+0x10/0x10 [ 327.217795][ C0] ? __pfx_kthread+0x10/0x10 [ 327.217832][ C0] ret_from_fork+0x3f9/0x770 [ 327.217866][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 327.217902][ C0] ? __switch_to_asm+0x39/0x70 [ 327.217924][ C0] ? __switch_to_asm+0x33/0x70 [ 327.217946][ C0] ? __pfx_kthread+0x10/0x10 [ 327.217984][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.218018][ C0] [ 327.218027][ C0] [ 327.218033][ C0] The buggy address belongs to the physical page: [ 327.218051][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4dbfb [ 327.218079][ C0] flags: 0x80000000000000(node=0|zone=1) [ 327.218112][ C0] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000 [ 327.218133][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 327.218146][ C0] page dumped because: kasan: bad access detected [ 327.218163][ C0] page_owner tracks the page as freed [ 327.218172][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9937, tgid 9936 (syz.2.1810), ts 288207164633, free_ts 308120812718 [ 327.218218][ C0] post_alloc_hook+0x240/0x2a0 [ 327.218257][ C0] get_page_from_freelist+0x2119/0x21b0 [ 327.218281][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 327.218303][ C0] alloc_pages_mpol+0xd1/0x380 [ 327.218334][ C0] allocate_slab+0x8a/0x370 [ 327.218355][ C0] ___slab_alloc+0x8d1/0xdd0 [ 327.218389][ C0] __kmalloc_cache_noprof+0xe6/0x320 [ 327.218420][ C0] __genradix_ptr_alloc+0x352/0x4a0 [ 327.218447][ C0] __genradix_prealloc+0x44/0x90 [ 327.218473][ C0] sctp_stream_init+0x14b/0x440 [ 327.218495][ C0] sctp_association_new+0x10dd/0x25f0 [ 327.218529][ C0] sctp_connect_new_asoc+0x2c5/0x690 [ 327.218563][ C0] __sctp_connect+0x5ba/0xd50 [ 327.218594][ C0] sctp_getsockopt_connectx3+0x2c7/0x450 [ 327.218622][ C0] sctp_getsockopt+0x98a/0xb60 [ 327.218652][ C0] do_sock_getsockopt+0x36f/0x450 [ 327.218685][ C0] page last free pid 10474 tgid 10474 stack trace: [ 327.218699][ C0] __free_frozen_pages+0xb59/0xce0 [ 327.218733][ C0] __put_partials+0x159/0x1a0 [ 327.218752][ C0] __slab_free+0x2b3/0x390 [ 327.218773][ C0] qlist_free_all+0x97/0x140 [ 327.218797][ C0] kasan_quarantine_reduce+0x148/0x160 [ 327.218823][ C0] __kasan_slab_alloc+0x22/0x80 [ 327.218850][ C0] kmem_cache_alloc_noprof+0x143/0x310 [ 327.218880][ C0] jbd2__journal_start+0x146/0x5b0 [ 327.218908][ C0] __ext4_journal_start_sb+0x227/0x5c0 [ 327.218941][ C0] ext4_dirty_inode+0x93/0x110 [ 327.218974][ C0] __mark_inode_dirty+0x2ec/0xe10 [ 327.218994][ C0] file_update_time+0x412/0x490 [ 327.219012][ C0] ext4_page_mkwrite+0x20f/0x1190 [ 327.219045][ C0] do_page_mkwrite+0x150/0x310 [ 327.219067][ C0] handle_mm_fault+0x124b/0x3400 [ 327.219100][ C0] do_user_addr_fault+0xa81/0x1390 [ 327.219127][ C0] [ 327.219133][ C0] Memory state around the buggy address: [ 327.219146][ C0] ffff88804dbfbe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 327.219163][ C0] ffff88804dbfbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 327.219180][ C0] >ffff88804dbfbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 327.219193][ C0] ^ [ 327.219207][ C0] ffff88804dbfc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.219225][ C0] ffff88804dbfc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.219245][ C0] ================================================================== [ 327.219269][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 327.219288][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.219317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.219333][ C0] Call Trace: [ 327.219342][ C0] [ 327.219351][ C0] dump_stack_lvl+0x99/0x250 [ 327.219389][ C0] ? __asan_memcpy+0x40/0x70 [ 327.219414][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.219451][ C0] ? __pfx__printk+0x10/0x10 [ 327.219485][ C0] vpanic+0x281/0x750 [ 327.219520][ C0] ? __pfx_print_hex_dump+0x10/0x10 [ 327.219558][ C0] ? __pfx_vpanic+0x10/0x10 [ 327.219598][ C0] panic+0xb9/0xc0 [ 327.219632][ C0] ? __pfx_panic+0x10/0x10 [ 327.219664][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 327.219701][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 327.219740][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 327.219764][ C0] check_panic_on_warn+0x89/0xb0 [ 327.219789][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 327.219812][ C0] end_report+0x78/0x160 [ 327.219843][ C0] kasan_report+0x129/0x150 [ 327.219877][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 327.219906][ C0] mcp2221_raw_event+0x106a/0x1240 [ 327.219931][ C0] ? down_trylock+0x50/0xb0 [ 327.219967][ C0] hid_input_report+0x40f/0x530 [ 327.220002][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 327.220028][ C0] hid_irq_in+0x47e/0x6d0 [ 327.220056][ C0] __usb_hcd_giveback_urb+0x3b4/0x5e0 [ 327.220092][ C0] dummy_timer+0x89c/0x45a0 [ 327.220154][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.220188][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 327.220223][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 327.220261][ C0] __hrtimer_run_queues+0x54f/0xd40 [ 327.220312][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 327.220349][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 327.220387][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 327.220413][ C0] handle_softirqs+0x22f/0x710 [ 327.220450][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 327.220488][ C0] run_ktimerd+0xcf/0x190 [ 327.220522][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 327.220555][ C0] ? schedule+0x91/0x360 [ 327.220589][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 327.220619][ C0] smpboot_thread_fn+0x53f/0xa60 [ 327.220651][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 327.220686][ C0] kthread+0x70e/0x8a0 [ 327.220725][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 327.220755][ C0] ? __pfx_kthread+0x10/0x10 [ 327.220796][ C0] ? __pfx_kthread+0x10/0x10 [ 327.220833][ C0] ret_from_fork+0x3f9/0x770 [ 327.220866][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 327.220902][ C0] ? __switch_to_asm+0x39/0x70 [ 327.220925][ C0] ? __switch_to_asm+0x33/0x70 [ 327.220948][ C0] ? __pfx_kthread+0x10/0x10 [ 327.220985][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.221019][ C0] [ 327.221366][ C0] Kernel Offset: disabled