last executing test programs: 4.546866466s ago: executing program 1 (id=2743): modify_ldt$write(0x1, &(0x7f0000000240)={0x0, 0x0, 0x1000}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x24000000}, 0x18) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) 4.29209934s ago: executing program 1 (id=2758): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x5, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.058934116s ago: executing program 1 (id=2750): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.5634133s ago: executing program 1 (id=2756): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x3f42, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b8e010203010902"], 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000240)={0x1000, 0x7, 0x5, 0xda, 0x2, "3616137f90fe3c7988dbe232eabb881acadc17", 0x9, 0x1}) 2.994302035s ago: executing program 3 (id=2764): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x2, 0x0, 0x0) shutdown(r0, 0x0) 2.868743244s ago: executing program 2 (id=2765): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000003c0007010000000000400000015c00001000fc800c00050008000000000000000c00018006000600800a000008000280c4139b781400070000000000000000000000000000000000e650497af40486456f5623ed630d1b453b84a2f7fc37d2884036fda4f0bcaf53158cffaa"], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 2.866097907s ago: executing program 0 (id=2766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xe6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 2.836513279s ago: executing program 4 (id=2767): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000ac0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x00\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83d\x10\x10\xd7\x01M\x7fML\x18\'\x1a\xc1\xf1\x9e\"\x93\x19\x01\x80\x00\x00y\xd2~%\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x00\x00\x00\x00\x00\x00,\xb1|\x0f\"\x1dL\x10\x8e\x17D\xca\x8b\xe5\xca\xc1\xcf\xb2\xdc\xfc\x14+@\xdc\x9fXo\xd7\xc3\x1a\xfeA\xc2\x9a\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb{\xf5\xdby\x9d;;30\xa7\x94\xfdh)\xa0\"r\xa4\xf4\n\xf7\xb4\xder\xc8\xf2\xa5\xc0\x15\xc5E\xf6\x1dTB\xa2\xa6\xfbN\xb7\xed\xad\x9e\xb6\x87.\xf7=\xd3U\xf0\x1dH\x99\xe6\x97\x92g\xdf\ra\x82\xc7\x00\x92\xdfB\xb2\xac\xf3V\ve\xdd(\x85u\x04\xfcD[\xa4\b\xc8Bt_\x19\xb4\xd9\x97\tD\x8a\xa6\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xf) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x801b013, r0, 0x0) pread64(r0, &(0x7f0000040180)=""/102385, 0x18ff1, 0x1135) 2.705243181s ago: executing program 4 (id=2768): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @string={0x4, 0x3, "1e01"}}, 0x0, 0x0, 0x0}, 0x0) 2.523533603s ago: executing program 0 (id=2769): r0 = syz_io_uring_setup(0x19b2, &(0x7f0000000240)={0x0, 0xdb9d, 0x800, 0x10000000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x41, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x20, 0x0, 0x0) 2.506504859s ago: executing program 0 (id=2770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x4}, 0x1c) 1.964839078s ago: executing program 3 (id=2771): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.963192155s ago: executing program 1 (id=2781): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='vxcan1\x00', 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @broadcast}, 0x10) 1.555454305s ago: executing program 0 (id=2772): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) 1.427980293s ago: executing program 0 (id=2773): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x715, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.092080325s ago: executing program 2 (id=2774): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x2, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x82, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0xc) 980.320948ms ago: executing program 2 (id=2775): symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 979.820594ms ago: executing program 1 (id=2776): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 827.046821ms ago: executing program 2 (id=2777): r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r2, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) 513.336101ms ago: executing program 0 (id=2778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 512.947856ms ago: executing program 4 (id=2779): syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x2aa41) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 482.968437ms ago: executing program 3 (id=2780): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0xadd}, {{0x0, 0x0, 0xfffffffffffffffd}, 0x264c}], 0x2, 0x10042, 0x0) 403.129155ms ago: executing program 3 (id=2782): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x548], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 396.491619ms ago: executing program 2 (id=2783): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 297.085344ms ago: executing program 3 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 209.176967ms ago: executing program 4 (id=2785): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 160.969405ms ago: executing program 3 (id=2786): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) writev(r0, &(0x7f0000004740)=[{&(0x7f0000002740)="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", 0x8aa}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 122.370272ms ago: executing program 4 (id=2787): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) 5.850699ms ago: executing program 4 (id=2788): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) 0s ago: executing program 2 (id=2789): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x20000000000004}}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 19': attribute type 1 has an invalid length. [ 202.976888][ T8691] netlink: 'syz.0.1219': attribute type 1 has an invalid length. [ 202.976901][ T8691] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1219'. [ 203.064776][ T990] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.088272][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.088305][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.088342][ T5927] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 203.088364][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.094453][ T5927] usb 4-1: config 0 descriptor?? [ 203.222622][ T990] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 203.222651][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.222665][ T990] usb 5-1: Product: syz [ 203.222673][ T990] usb 5-1: Manufacturer: syz [ 203.222680][ T990] usb 5-1: SerialNumber: syz [ 203.240550][ T990] usb 5-1: config 0 descriptor?? [ 203.471362][ T990] usb 5-1: ignoring: probably an ADSL modem [ 203.569887][ T5927] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 203.569925][ T5927] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 203.569952][ T5927] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 203.569978][ T5927] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 203.570003][ T5927] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 203.570028][ T5927] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 203.570053][ T5927] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 203.634216][ T5927] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 203.737582][ T8704] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1225'. [ 203.821373][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 203.875350][ T990] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 203.980054][ T5927] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 203.980106][ T5927] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 203.982658][ T5927] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -71 [ 204.025390][ T5927] usb 4-1: USB disconnect, device number 11 [ 204.082888][ T5913] usb 5-1: USB disconnect, device number 9 [ 205.476173][ T37] audit: type=1326 audit(1759029034.059:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f676fafaf79 code=0x7ffc0000 [ 205.476226][ T37] audit: type=1326 audit(1759029034.059:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 205.476264][ T37] audit: type=1326 audit(1759029034.059:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 205.476489][ T37] audit: type=1326 audit(1759029034.059:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 205.477742][ T37] audit: type=1326 audit(1759029034.059:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f676fafaf79 code=0x7ffc0000 [ 205.604984][ T37] audit: type=1326 audit(1759029034.059:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 205.615450][ T37] audit: type=1326 audit(1759029034.199:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f676fafaf79 code=0x7ffc0000 [ 205.615500][ T37] audit: type=1326 audit(1759029034.199:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f676fafaf79 code=0x7ffc0000 [ 205.615538][ T37] audit: type=1326 audit(1759029034.199:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8741 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 205.812750][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 206.885140][ T8778] tap0: tun_chr_ioctl cmd 1074025677 [ 206.887659][ T8778] tap0: linktype set to 773 [ 206.988851][ T31] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 207.031101][ T31] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 207.230768][ T8796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.643956][ T8808] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1272'. [ 208.539136][ T8846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1290'. [ 210.075858][ T993] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 210.224873][ T993] usb 1-1: Using ep0 maxpacket: 32 [ 210.227713][ T993] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.227742][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 210.227768][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.227810][ T993] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.227831][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.233041][ T993] usb 1-1: config 0 descriptor?? [ 210.234128][ T8892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.307022][ T993] hub 1-1:0.0: USB hub found [ 210.374974][ T8910] netlink: 344 bytes leftover after parsing attributes in process `syz.3.1320'. [ 210.444212][ T993] hub 1-1:0.0: 2 ports detected [ 211.081427][ T993] usb 1-1: USB disconnect, device number 14 [ 211.132793][ T8928] veth0_macvtap: left promiscuous mode [ 211.764812][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 211.764836][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 211.764860][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.764948][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 212.821060][ T8982] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 212.821087][ T8982] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.871417][ T8982] vhci_hcd vhci_hcd.0: Device attached [ 213.080020][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 213.124842][ T993] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.125498][ T5913] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 213.294926][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 213.297842][ T993] usb 5-1: config 0 has no interfaces? [ 213.297877][ T993] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 213.297899][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.305775][ T993] usb 5-1: config 0 descriptor?? [ 213.511669][ T56] usb 5-1: USB disconnect, device number 10 [ 213.536333][ T8984] vhci_hcd: connection closed [ 213.554348][ T1159] vhci_hcd: stop threads [ 213.560186][ T1159] vhci_hcd: release socket [ 213.569125][ T1159] vhci_hcd: disconnect device [ 213.584898][ T5913] vhci_hcd: vhci_device speed not set [ 213.860392][ T9017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1367'. [ 214.068111][ T9022] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 214.187205][ T9026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1372'. [ 214.187236][ T9026] netlink: 'syz.4.1372': attribute type 10 has an invalid length. [ 214.643437][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 214.834838][ T5927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.997228][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.997259][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.997297][ T5927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 214.997319][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.004428][ T5927] usb 3-1: config 0 descriptor?? [ 215.442111][ T5927] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 215.442152][ T5927] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 215.457817][ T5927] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 215.847265][ T993] usb 3-1: USB disconnect, device number 9 [ 216.524919][ T5927] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.674843][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 216.679278][ T5927] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 216.679304][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.719438][ T5927] pvrusb2: Hardware description: Terratec Grabster AV400 [ 216.719455][ T5927] pvrusb2: ********** [ 216.719462][ T5927] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 216.719473][ T5927] pvrusb2: Important functionality might not be entirely working. [ 216.719481][ T5927] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 216.719491][ T5927] pvrusb2: ********** [ 216.909515][ T2368] pvrusb2: Invalid write control endpoint [ 217.008640][ T2368] pvrusb2: Invalid write control endpoint [ 217.008655][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 217.008663][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 217.008671][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 217.008680][ T2368] pvrusb2: Device being rendered inoperable [ 217.011721][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 217.012207][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 217.023720][ T2368] pvrusb2: Attached sub-driver cx25840 [ 217.023733][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 217.023742][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 217.111590][ T9096] pvrusb2: Attempted to execute control transfer when device not ok [ 217.113150][ T5927] usb 4-1: USB disconnect, device number 12 [ 218.430555][ T9141] Invalid ELF header magic: != ELF [ 219.864810][ T6001] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.034942][ T6001] usb 2-1: Using ep0 maxpacket: 32 [ 220.037881][ T6001] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.037910][ T6001] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.040876][ T5927] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 220.041560][ T6001] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 220.041640][ T6001] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 220.041661][ T6001] usb 2-1: Product: syz [ 220.041810][ T6001] usb 2-1: Manufacturer: syz [ 220.068194][ T6001] hub 2-1:4.0: USB hub found [ 220.205445][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 220.205479][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 220.205580][ T5927] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 220.205603][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.244225][ T5927] usb 5-1: config 0 descriptor?? [ 220.248014][ T9184] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 220.320970][ T6001] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 220.662006][ T6001] usb 2-1: USB disconnect, device number 7 [ 220.665176][ T5927] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 220.665310][ T5927] cm6533_jd 0003:0D8C:0022.0012: item fetching failed at offset 4/5 [ 220.670084][ T5927] cm6533_jd 0003:0D8C:0022.0012: parse failed [ 220.670184][ T5927] cm6533_jd 0003:0D8C:0022.0012: probe with driver cm6533_jd failed with error -22 [ 220.888924][ T6001] usb 5-1: USB disconnect, device number 11 [ 222.604884][ T5927] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 222.632113][ T37] kauditd_printk_skb: 271 callbacks suppressed [ 222.632130][ T37] audit: type=1326 audit(1759029051.209:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9201 comm="syz.0.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb25eec9 code=0x7ffc0000 [ 222.778031][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 222.780386][ T5927] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 222.780409][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.780426][ T5927] usb 5-1: config 0 has no interface number 0 [ 222.783499][ T5927] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 222.783525][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.783544][ T5927] usb 5-1: Product: syz [ 222.783556][ T5927] usb 5-1: Manufacturer: syz [ 222.783569][ T5927] usb 5-1: SerialNumber: syz [ 222.797627][ T5927] usb 5-1: config 0 descriptor?? [ 222.817289][ T5927] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 222.817328][ T5927] usb 5-1: No valid video chain found. [ 223.009847][ T6001] usb 5-1: USB disconnect, device number 12 [ 223.685935][ T6001] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.858136][ T6001] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.858193][ T6001] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.858216][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.878309][ T6001] usb 1-1: config 0 descriptor?? [ 223.899996][ T6001] pwc: Askey VC010 type 2 USB webcam detected. [ 224.308110][ T6001] pwc: recv_control_msg error -32 req 02 val 2b00 [ 224.510437][ T6001] pwc: recv_control_msg error -71 req 02 val 2c00 [ 224.510950][ T6001] pwc: recv_control_msg error -71 req 04 val 1000 [ 224.513824][ T6001] pwc: recv_control_msg error -71 req 04 val 1300 [ 224.514313][ T6001] pwc: recv_control_msg error -71 req 04 val 1400 [ 224.514956][ T6001] pwc: recv_control_msg error -71 req 02 val 2000 [ 224.515418][ T6001] pwc: recv_control_msg error -71 req 02 val 2100 [ 224.516213][ T6001] pwc: recv_control_msg error -71 req 04 val 1500 [ 224.517624][ T6001] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.520581][ T6001] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.521080][ T6001] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.522216][ T6001] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.522704][ T6001] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.524762][ T6001] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.525265][ T6001] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.552661][ T6001] pwc: Registered as video103. [ 224.566476][ T6001] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 224.590149][ T6001] usb 1-1: USB disconnect, device number 15 [ 225.739788][ T9266] netlink: 'syz.0.1481': attribute type 9 has an invalid length. [ 225.739808][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 226.052882][ T9266] hsr0: entered promiscuous mode [ 226.053381][ T9266] macvlan2: entered promiscuous mode [ 226.053653][ T9266] macvlan2: entered allmulticast mode [ 226.053667][ T9266] hsr0: entered allmulticast mode [ 226.053679][ T9266] hsr_slave_0: entered allmulticast mode [ 226.053700][ T9266] hsr_slave_1: entered allmulticast mode [ 226.072729][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 226.225709][ T9270] block device autoloading is deprecated and will be removed. [ 226.343035][ T9276] block nbd1: NBD_DISCONNECT [ 226.385982][ T9280] misc userio: Invalid payload size [ 226.766868][ T9299] batman_adv: batadv0: Adding interface: ipvlan2 [ 226.766888][ T9299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.766904][ T9299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.766916][ T9299] batman_adv: batadv0: Interface activated: ipvlan2 [ 226.801421][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 227.009548][ T9313] block nbd3: NBD_DISCONNECT [ 227.124387][ T9318] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 227.294839][ T6001] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.444801][ T6001] usb 2-1: Using ep0 maxpacket: 8 [ 227.447181][ T6001] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 227.447207][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.466943][ T6001] pvrusb2: Hardware description: Terratec Grabster AV400 [ 227.466959][ T6001] pvrusb2: ********** [ 227.466965][ T6001] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 227.466976][ T6001] pvrusb2: Important functionality might not be entirely working. [ 227.466984][ T6001] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 227.466994][ T6001] pvrusb2: ********** [ 227.673632][ T2368] pvrusb2: Invalid write control endpoint [ 227.829711][ T2368] pvrusb2: Invalid write control endpoint [ 227.829726][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 227.829749][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 227.829756][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 227.829764][ T2368] pvrusb2: Device being rendered inoperable [ 227.831769][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 227.831825][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 227.833892][ T2368] pvrusb2: Attached sub-driver cx25840 [ 227.833903][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 227.833911][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 227.917534][ T9314] pvrusb2: Attempted to execute control transfer when device not ok [ 227.921245][ T31] usb 2-1: USB disconnect, device number 8 [ 228.027425][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1518'. [ 228.504819][ T56] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 228.539346][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 228.539640][ T9355] team_slave_0: entered promiscuous mode [ 228.539692][ T9355] team_slave_1: entered promiscuous mode [ 228.654901][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 228.658295][ T56] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 228.658319][ T56] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 228.658339][ T56] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 228.658356][ T56] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 228.658376][ T56] usb 4-1: config 250 has no interface number 0 [ 228.658426][ T56] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 228.658452][ T56] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 228.658475][ T56] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 228.658501][ T56] usb 4-1: config 250 interface 228 has no altsetting 0 [ 228.661891][ T56] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 228.662030][ T56] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 228.662051][ T56] usb 4-1: Product: syz [ 228.662065][ T56] usb 4-1: SerialNumber: syz [ 228.818023][ T56] hub 4-1:250.228: bad descriptor, ignoring hub [ 228.818062][ T56] hub 4-1:250.228: probe with driver hub failed with error -5 [ 228.986453][ T9368] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 229.073067][ T9372] pimreg: tun_chr_ioctl cmd 1074025677 [ 229.073158][ T9372] pimreg: linktype set to 6 [ 229.368903][ T5927] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 229.562981][ T5927] usb 4-1: device firmware changed [ 229.574542][ T5927] usb 4-1: USB disconnect, device number 13 [ 229.887797][ T5927] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.045129][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 230.055546][ T5927] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 230.055578][ T5927] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 230.055596][ T5927] usb 4-1: config 250 has no interfaces? [ 230.082161][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 230.082188][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 230.082206][ T5927] usb 4-1: Product: syz [ 230.082220][ T5927] usb 4-1: SerialNumber: syz [ 230.141680][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 230.184792][ T6001] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 230.234888][ T56] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 230.309669][ T5927] usb 4-1: USB disconnect, device number 14 [ 230.344980][ T6001] usb 3-1: Using ep0 maxpacket: 8 [ 230.349805][ T6001] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 230.349833][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.385147][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 230.387540][ T6001] pvrusb2: Hardware description: Terratec Grabster AV400 [ 230.387553][ T6001] pvrusb2: ********** [ 230.387559][ T6001] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 230.387570][ T6001] pvrusb2: Important functionality might not be entirely working. [ 230.387578][ T6001] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 230.387588][ T6001] pvrusb2: ********** [ 230.387774][ T56] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 230.387861][ T56] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.387882][ T56] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.387961][ T56] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.387983][ T56] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.388024][ T56] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.388044][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.586577][ T2368] pvrusb2: Invalid write control endpoint [ 230.634895][ T56] usb 2-1: GET_CAPABILITIES returned 0 [ 230.634944][ T56] usbtmc 2-1:16.0: can't read capabilities [ 230.738961][ T2368] pvrusb2: Invalid write control endpoint [ 230.738976][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 230.738985][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 230.738992][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 230.739000][ T2368] pvrusb2: Device being rendered inoperable [ 230.746175][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 230.746230][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 230.747471][ T2368] pvrusb2: Attached sub-driver cx25840 [ 230.747490][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 230.747499][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 230.815995][ T9383] pvrusb2: Attempted to execute control transfer when device not ok [ 230.818319][ T56] usb 3-1: USB disconnect, device number 10 [ 230.910456][ T31] usb 2-1: USB disconnect, device number 9 [ 231.801407][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 231.801431][ T9387] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1534'. [ 231.802956][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 231.802975][ T9387] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1534'. [ 232.126833][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 232.184812][ T6001] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 232.279030][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.279054][ T5927] usb 2-1: config 0 has no interfaces? [ 232.279083][ T5927] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.279105][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.319553][ T5927] usb 2-1: config 0 descriptor?? [ 232.337088][ T6001] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.340179][ T6001] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 232.340204][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.340222][ T6001] usb 3-1: Product: syz [ 232.340235][ T6001] usb 3-1: Manufacturer: syz [ 232.340248][ T6001] usb 3-1: SerialNumber: syz [ 232.386153][ T6001] usb 3-1: config 0 descriptor?? [ 232.459178][ T6001] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 232.551553][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.553197][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.585180][ T6001] usb 2-1: USB disconnect, device number 10 [ 232.681387][ T9425] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1550'. [ 232.909497][ T31] kernel write not supported for file /dsp (pid: 31 comm: kworker/1:0) [ 233.066260][ T6001] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 233.237218][ T6001] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 233.237247][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.247084][ T6001] usb 5-1: config 0 descriptor?? [ 233.452984][ T6001] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 233.654481][ T6001] [drm:udl_init] *ERROR* Selecting channel failed [ 233.728968][ T6001] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 233.728992][ T6001] [drm] Initialized udl on minor 2 [ 233.761991][ T6001] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 233.770021][ T6001] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 233.796957][ T6001] usb 5-1: USB disconnect, device number 13 [ 233.804827][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 233.816263][ T5927] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 233.827266][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 233.977621][ T5927] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 233.977649][ T5927] usb 2-1: config 0 has no interface number 0 [ 233.977681][ T5927] usb 2-1: config 0 interface 106 has no altsetting 0 [ 233.990048][ T5927] usb 2-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 233.990077][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.990095][ T5927] usb 2-1: Product: syz [ 233.990108][ T5927] usb 2-1: Manufacturer: syz [ 233.990121][ T5927] usb 2-1: SerialNumber: syz [ 234.021839][ T5927] usb 2-1: config 0 descriptor?? [ 234.295294][ T5927] usb 2-1: USB disconnect, device number 11 [ 234.635044][ T6001] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 234.784973][ T6001] usb 5-1: Using ep0 maxpacket: 16 [ 234.790106][ T6001] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 234.790130][ T6001] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 234.790150][ T6001] usb 5-1: config 166 has no interface number 0 [ 234.790166][ T6001] usb 5-1: config 166 has no interface number 1 [ 234.790244][ T6001] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 234.790265][ T6001] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 234.790301][ T6001] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 234.790325][ T6001] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 234.790355][ T6001] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 234.790380][ T6001] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 234.791912][ T6001] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 234.791943][ T6001] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 234.791965][ T6001] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 234.791991][ T6001] usb 5-1: config 166 interface 177 has no altsetting 0 [ 234.792009][ T6001] usb 5-1: config 166 interface 34 has no altsetting 0 [ 234.799735][ T6001] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 234.799762][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.799780][ T6001] usb 5-1: Product: syz [ 234.799793][ T6001] usb 5-1: Manufacturer: syz [ 234.799806][ T6001] usb 5-1: SerialNumber: syz [ 235.071344][ T6001] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 235.093282][ T9] usb 3-1: USB disconnect, device number 11 [ 235.271453][ T6001] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 235.552749][ T6001] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 235.676105][ T6001] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 235.676139][ T6001] usb 5-1: No valid video chain found. [ 235.694458][ T6001] usb 5-1: USB disconnect, device number 14 [ 236.165701][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 236.511272][ T9494] kvm: kvm [9493]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000015) = 0x0 [ 236.775633][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 237.114933][ T6001] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 237.264776][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 237.267313][ T6001] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.267342][ T6001] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.267379][ T6001] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.267401][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.290543][ T6001] hub 5-1:4.0: USB hub found [ 237.511787][ T6001] hub 5-1:4.0: config failed, can't read hub descriptor (err -90) [ 237.750490][ T9528] Falling back ldisc for ttyS3. [ 237.955115][ T6001] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 238.226780][ T9548] loop9: detected capacity change from 0 to 8 [ 238.227815][ T9548] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 238.227844][ T9548] loop9: partition table partially beyond EOD, truncated [ 238.227950][ T9548] loop9: p1 size 81768186 extends beyond EOD, truncated [ 238.293960][ T6001] usb 5-1: USB disconnect, device number 15 [ 239.074856][ T990] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 239.224852][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 239.227438][ T990] usb 3-1: config 0 interface 0 has no altsetting 0 [ 239.227478][ T990] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 239.227500][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.276607][ T990] usb 3-1: config 0 descriptor?? [ 239.409897][ T9577] team0: No ports can be present during mode change [ 239.779080][ T990] hid (null): nested delimiters [ 239.925344][ T6001] usb 3-1: USB disconnect, device number 12 [ 239.973512][ T9583] loop9: detected capacity change from 0 to 8 [ 239.985062][ T9583] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 239.985099][ T9583] loop9: partition table partially beyond EOD, truncated [ 239.985202][ T9583] loop9: p1 size 81768186 extends beyond EOD, truncated [ 240.384762][ T56] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 240.542324][ T56] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.542355][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.548635][ T56] usb 5-1: config 0 descriptor?? [ 240.570025][ T56] cp210x 5-1:0.0: cp210x converter detected [ 240.614899][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 240.654911][ T990] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 240.765792][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 240.768643][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.768687][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.768702][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.768752][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.768764][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.770739][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.771160][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.771470][ T31] usb 4-1: Manufacturer: syz [ 240.806047][ T31] usb 4-1: config 0 descriptor?? [ 240.834385][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 240.875074][ T990] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.875207][ T990] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.880762][ T990] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.880779][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.880841][ T990] usb 1-1: Product: syz [ 240.880855][ T990] usb 1-1: Manufacturer: syz [ 240.880869][ T990] usb 1-1: SerialNumber: syz [ 241.151726][ T990] usb 1-1: 0:2 : does not exist [ 241.177329][ T990] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 241.195891][ T31] rc_core: IR keymap rc-hauppauge not found [ 241.195910][ T31] Registered IR keymap rc-empty [ 241.198497][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.236787][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.252086][ T56] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 241.252141][ T56] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 241.277338][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 241.280337][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 241.313880][ T56] usb 5-1: cp210x converter now attached to ttyUSB0 [ 241.323898][ T56] usb 5-1: USB disconnect, device number 16 [ 241.341297][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.354899][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.360438][ T56] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 241.361683][ T56] cp210x 5-1:0.0: device disconnected [ 241.384919][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.405016][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.428312][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.453876][ T990] usb 1-1: USB disconnect, device number 16 [ 241.454934][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.474817][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.495677][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.516341][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.535793][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.569619][ T31] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.569646][ T31] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.621675][ T31] usb 4-1: USB disconnect, device number 15 [ 243.157704][ T31] kernel read not supported for file /dsp1 (pid: 31 comm: kworker/1:0) [ 243.323524][ T9648] [U]  [ 244.457253][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1658'. [ 245.106580][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 245.854878][ T6001] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 246.236747][ T6001] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 246.236801][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.238124][ T6001] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.238152][ T6001] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.238171][ T6001] usb 1-1: Manufacturer: syz [ 246.243353][ T6001] usb 1-1: config 0 descriptor?? [ 246.454763][ T6001] rc_core: IR keymap rc-hauppauge not found [ 246.454783][ T6001] Registered IR keymap rc-empty [ 246.456297][ T6001] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 246.461156][ T6001] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 246.500387][ T6001] usb 1-1: USB disconnect, device number 17 [ 247.134381][ T9775] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1705'. [ 247.230821][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 248.222099][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 251.636848][ T9915] ./file0: Can't lookup blockdev [ 251.852209][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1775'. [ 252.048068][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'. [ 252.084390][ T9929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.974832][ T990] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 253.024792][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 253.080166][ T5852] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 253.124886][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 253.127197][ T990] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.127222][ T990] usb 1-1: config 0 has no interface number 0 [ 253.127270][ T990] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.127296][ T990] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.127333][ T990] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 253.127355][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.134537][ T990] usb 1-1: config 0 descriptor?? [ 253.184740][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 253.187038][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.187062][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.224277][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.224305][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.224325][ T31] usb 2-1: Product: syz [ 253.224339][ T31] usb 2-1: Manufacturer: syz [ 253.224353][ T31] usb 2-1: SerialNumber: syz [ 253.414850][ T6001] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 253.583236][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.583268][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.583307][ T6001] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 253.583330][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.599603][ T6001] usb 3-1: config 0 descriptor?? [ 253.687697][ T31] usb 2-1: 0:2 : does not exist [ 253.878232][ T990] uclogic 0003:28BD:0094.0015: pen parameters not found [ 253.878256][ T990] uclogic 0003:28BD:0094.0015: interface is invalid, ignoring [ 253.917972][ T990] usb 1-1: USB disconnect, device number 18 [ 254.059805][ T6001] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 254.059840][ T6001] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 254.059866][ T6001] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 254.059892][ T6001] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 254.059916][ T6001] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 254.059942][ T6001] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 254.059968][ T6001] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 254.075353][ T6001] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 254.125357][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 254.154055][ T31] usb 2-1: USB disconnect, device number 12 [ 254.473402][ T6001] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 254.473456][ T6001] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 254.478923][ T6001] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -71 [ 254.489638][ T6001] usb 3-1: USB disconnect, device number 13 [ 254.582265][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1796'. [ 254.582299][ T9970] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1796'. [ 255.265969][ T9995] netlink: 'syz.0.1809': attribute type 25 has an invalid length. [ 255.265988][ T9995] netlink: 'syz.0.1809': attribute type 8 has an invalid length. [ 255.394893][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 255.548455][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.548487][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.548525][ T31] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 255.548548][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.554159][ T37] audit: type=1326 audit(1759029084.129:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.554219][ T37] audit: type=1326 audit(1759029084.129:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952eddeec9 code=0x7ffc0000 [ 255.554262][ T37] audit: type=1326 audit(1759029084.129:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952eddeec9 code=0x7ffc0000 [ 255.555135][ T37] audit: type=1326 audit(1759029084.129:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.588964][ T37] audit: type=1326 audit(1759029084.169:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.591428][ T37] audit: type=1326 audit(1759029084.169:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.593445][ T37] audit: type=1326 audit(1759029084.169:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.596340][ T37] audit: type=1326 audit(1759029084.169:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.597812][ T37] audit: type=1326 audit(1759029084.179:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.598976][ T37] audit: type=1326 audit(1759029084.179:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9991 comm="syz.1.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f952ed7af79 code=0x7ffc0000 [ 255.684797][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 255.765977][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.766050][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.796745][ T31] usb 3-1: config 0 descriptor?? [ 255.854749][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 255.857475][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 255.857499][ T9] usb 1-1: config 0 has no interface number 0 [ 255.857551][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 255.860770][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 255.860794][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.860813][ T9] usb 1-1: Product: syz [ 255.860827][ T9] usb 1-1: Manufacturer: syz [ 255.860840][ T9] usb 1-1: SerialNumber: syz [ 255.881716][ T9] usb 1-1: config 0 descriptor?? [ 256.299603][ T31] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 256.323031][ T31] hid-thrustmaster 0003:044F:B65D.0017: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 256.323394][ T31] hid-thrustmaster 0003:044F:B65D.0017: Wrong number of endpoints? [ 256.530242][ C1] hid-thrustmaster 0003:044F:B65D.0017: Unknown packet type 0x0, unable to proceed further with wheel init [ 256.726501][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 256.726560][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 256.726577][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 256.726674][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 256.738943][ T9] usb 1-1: USB disconnect, device number 19 [ 256.759218][ T5927] usb 3-1: USB disconnect, device number 14 [ 256.830813][T10017] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 257.117206][ T5852] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 257.117316][ T5852] Bluetooth: hci3: Injecting HCI hardware error event [ 257.120529][ T5846] Bluetooth: hci3: hardware error 0x00 [ 257.444800][ T990] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 257.530170][T10039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.530187][T10039] IPv6: NLM_F_CREATE should be set when creating new route [ 257.730915][ T990] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 257.730944][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.730963][ T990] usb 2-1: Product: syz [ 257.730976][ T990] usb 2-1: Manufacturer: syz [ 257.730990][ T990] usb 2-1: SerialNumber: syz [ 257.746714][ T990] usb 2-1: config 0 descriptor?? [ 257.967515][ T990] usb 2-1: USB disconnect, device number 13 [ 259.195867][ T5846] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 259.675036][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 259.842638][ T31] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 259.842669][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.842689][ T31] usb 3-1: Product: syz [ 259.842702][ T31] usb 3-1: Manufacturer: syz [ 259.842715][ T31] usb 3-1: SerialNumber: syz [ 259.884143][ T31] usb 3-1: config 0 descriptor?? [ 260.130841][ T993] usb 3-1: USB disconnect, device number 15 [ 260.765007][ T993] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 260.824899][ T6005] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 260.921354][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 260.921387][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.921423][ T993] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 260.921445][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.926228][ T993] usb 1-1: config 0 descriptor?? [ 260.988262][ T6005] usb 4-1: unable to get BOS descriptor or descriptor too short [ 260.989572][ T6005] usb 4-1: not running at top speed; connect to a high speed hub [ 260.991625][ T6005] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.991647][ T6005] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.033111][ T6005] usb 4-1: string descriptor 0 read error: -22 [ 261.033262][ T6005] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.033286][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.074566][ T6005] usb 4-1: 0:2 : does not exist [ 261.355337][ T993] elo 0003:04E7:0030.0018: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 261.562657][ T5927] usb 1-1: USB disconnect, device number 20 [ 261.684917][ T993] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 261.838672][ T993] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 261.838701][ T993] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 261.838719][ T993] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 261.838747][ T993] usb 5-1: config 220 has no interface number 2 [ 261.838827][ T993] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 261.838851][ T993] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 261.838874][ T993] usb 5-1: config 220 interface 0 has no altsetting 0 [ 261.838890][ T993] usb 5-1: config 220 interface 76 has no altsetting 0 [ 261.838908][ T993] usb 5-1: config 220 interface 1 has no altsetting 0 [ 261.842157][ T993] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 261.842185][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.842204][ T993] usb 5-1: Product: syz [ 261.842218][ T993] usb 5-1: Manufacturer: syz [ 261.842231][ T993] usb 5-1: SerialNumber: syz [ 261.970392][ T6005] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 261.986335][ T6005] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 262.039897][ T6005] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 262.055355][ T6005] usb 4-1: USB disconnect, device number 16 [ 262.166243][ T993] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 262.166278][ T993] usb 5-1: No valid video chain found. [ 262.166382][ T993] usb 5-1: selecting invalid altsetting 0 [ 262.217119][ T993] usb 5-1: selecting invalid altsetting 0 [ 262.217159][ T993] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 262.256969][ T993] usb 5-1: USB disconnect, device number 17 [ 262.564798][ T5927] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 262.717710][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 262.720274][ T5927] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.720299][ T5927] usb 2-1: config 0 has no interface number 0 [ 262.720345][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.720371][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.720408][ T5927] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 262.720430][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.731682][ T5927] usb 2-1: config 0 descriptor?? [ 263.390340][ T5927] uclogic 0003:28BD:0094.0019: pen parameters not found [ 263.390364][ T5927] uclogic 0003:28BD:0094.0019: interface is invalid, ignoring [ 263.414390][ T5927] usb 2-1: USB disconnect, device number 14 [ 263.744271][T10177] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 263.750169][T10177] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 264.636237][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 264.636267][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 264.636282][T10214] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1907'. [ 264.636917][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 264.636935][T10214] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1907'. [ 265.004838][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 265.114013][ T37] kauditd_printk_skb: 355 callbacks suppressed [ 265.114031][ T37] audit: type=1326 audit(1759029093.689:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb25eec9 code=0x7ffc0000 [ 265.114078][ T37] audit: type=1326 audit(1759029093.689:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb25eec9 code=0x7ffc0000 [ 265.114118][ T37] audit: type=1326 audit(1759029093.689:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb25eec9 code=0x7ffc0000 [ 265.114894][ T37] audit: type=1326 audit(1759029093.689:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb25eec9 code=0x7ffc0000 [ 265.114939][ T37] audit: type=1326 audit(1759029093.689:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb25eec9 code=0x7ffc0000 [ 265.115173][ T37] audit: type=1326 audit(1759029093.689:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cb25eec9 code=0x7ffc0000 [ 265.121397][ T37] audit: type=1326 audit(1759029093.699:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51cb1faf79 code=0x7ffc0000 [ 265.121448][ T37] audit: type=1326 audit(1759029093.699:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51cb1faf79 code=0x7ffc0000 [ 265.121488][ T37] audit: type=1326 audit(1759029093.699:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51cb1faf79 code=0x7ffc0000 [ 265.121527][ T37] audit: type=1326 audit(1759029093.699:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51cb1faf79 code=0x7ffc0000 [ 265.159124][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 265.159157][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.159194][ T9] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 265.159216][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.194157][ T9] usb 3-1: config 0 descriptor?? [ 265.663301][ T9] elo 0003:04E7:0030.001A: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 265.895653][ T6001] usb 3-1: USB disconnect, device number 16 [ 265.957040][T10259] pimreg: tun_chr_ioctl cmd 1074025677 [ 265.957168][T10259] pimreg: linktype set to 6 [ 266.056172][T10262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.626298][ T31] kernel write not supported for file /dsp (pid: 31 comm: kworker/1:0) [ 267.114851][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 267.156880][T10297] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1945'. [ 267.269535][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.269562][ T31] usb 4-1: config 0 has no interfaces? [ 267.269591][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 267.269614][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.304757][ T993] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 267.321572][ T31] usb 4-1: config 0 descriptor?? [ 267.461104][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.461137][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.461171][ T993] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 267.461186][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.466703][ T993] usb 1-1: config 0 descriptor?? [ 267.546510][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.546929][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.551280][ T31] usb 4-1: USB disconnect, device number 17 [ 267.693214][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'. [ 267.784866][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 267.902793][ T993] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 267.902831][ T993] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 267.937035][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 267.937068][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.937105][ T9] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 267.937128][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.939288][ T993] isku 0003:1E7D:319C.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 267.949177][ T9] usb 5-1: config 0 descriptor?? [ 268.347658][ T5927] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 268.430791][ T6001] usb 1-1: USB disconnect, device number 21 [ 268.437217][ T5927] hid-generic 0000:0000:0000.001C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 268.522177][ T9] elo 0003:04E7:0030.001D: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 268.696892][ T990] usb 5-1: USB disconnect, device number 18 [ 268.993516][T10329] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1960'. [ 269.203748][T10333] kvm: kvm [10332]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000015) = 0x0 [ 269.734058][ T1361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.324154][ T1361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.416643][ T6001] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 270.456116][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.467679][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.469054][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.472242][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.482416][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.490784][ T6001] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 270.983638][ T1361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.214945][ T990] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 271.366343][ T1361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.387568][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.387600][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.387637][ T990] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 271.387659][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.435494][ T990] usb 2-1: config 0 descriptor?? [ 271.868512][ T990] isku 0003:1E7D:319C.001F: unknown main item tag 0x0 [ 271.868547][ T990] isku 0003:1E7D:319C.001F: unknown main item tag 0x0 [ 271.892881][ T990] isku 0003:1E7D:319C.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 272.307684][ T6001] usb 2-1: USB disconnect, device number 15 [ 272.507441][ T1361] bridge_slave_1: left allmulticast mode [ 272.507619][ T1361] bridge_slave_1: left promiscuous mode [ 272.511312][ T1361] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.554863][ T5852] Bluetooth: hci4: command tx timeout [ 272.666569][ T1361] bridge_slave_0: left allmulticast mode [ 272.666603][ T1361] bridge_slave_0: left promiscuous mode [ 272.670711][ T1361] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.368727][T10407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1992'. [ 274.584860][ T6001] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 274.639395][ T5852] Bluetooth: hci4: command tx timeout [ 274.738001][ T6001] usb 5-1: unable to get BOS descriptor or descriptor too short [ 274.738918][ T6001] usb 5-1: not running at top speed; connect to a high speed hub [ 274.743387][ T6001] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.743410][ T6001] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.747684][ T6001] usb 5-1: string descriptor 0 read error: -22 [ 274.747839][ T6001] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.747862][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.763813][ T6001] usb 5-1: 0:2 : does not exist [ 275.613425][ T6001] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 275.618615][ T6001] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 275.653835][ T6001] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 275.664201][ T6001] usb 5-1: USB disconnect, device number 19 [ 276.365629][ T1361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.414804][ T6005] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 276.433158][ T1361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.460864][ T1361] bond0 (unregistering): Released all slaves [ 276.501403][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2004'. [ 276.564799][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 276.605320][ T6005] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 276.605349][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 276.605368][ T6005] usb 5-1: SerialNumber: syz [ 276.611098][ T6005] usb 5-1: config 0 descriptor?? [ 276.612613][T10352] chnl_net:caif_netlink_parms(): no params data found [ 276.653460][ T6005] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 276.662985][ T6005] usb 5-1: Detected FT232A [ 276.669545][ T6005] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.720252][ T5852] Bluetooth: hci4: command tx timeout [ 276.834822][ T993] usb 5-1: USB disconnect, device number 20 [ 276.856628][ T993] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 276.857030][ T993] ftdi_sio 5-1:0.0: device disconnected [ 277.807265][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.807479][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.807711][T10352] bridge_slave_0: entered allmulticast mode [ 277.855691][T10352] bridge_slave_0: entered promiscuous mode [ 277.865000][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.865137][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.865349][T10352] bridge_slave_1: entered allmulticast mode [ 277.891834][T10352] bridge_slave_1: entered promiscuous mode [ 277.971526][T10452] CIFS: VFS: Malformed UNC in devname [ 278.200611][T10460] program syz.0.2017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.256532][T10462] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2018'. [ 278.305856][ T990] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 278.455004][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 278.457293][ T990] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 278.457317][ T990] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 278.457338][ T990] usb 4-1: config 166 has no interface number 0 [ 278.457354][ T990] usb 4-1: config 166 has no interface number 1 [ 278.457418][ T990] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 278.457439][ T990] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 278.457476][ T990] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 278.457500][ T990] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 278.457526][ T990] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 278.457552][ T990] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 278.457576][ T990] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 278.457601][ T990] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 278.457623][ T990] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 278.457648][ T990] usb 4-1: config 166 interface 177 has no altsetting 0 [ 278.457666][ T990] usb 4-1: config 166 interface 34 has no altsetting 0 [ 278.460510][ T990] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 278.460536][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.460555][ T990] usb 4-1: Product: syz [ 278.460568][ T990] usb 4-1: Manufacturer: syz [ 278.460582][ T990] usb 4-1: SerialNumber: syz [ 278.748882][ T990] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 278.794847][ T5852] Bluetooth: hci4: command tx timeout [ 278.865938][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.917905][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.952517][ T990] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 279.237857][ T990] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 279.358869][ T990] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 279.358902][ T990] usb 4-1: No valid video chain found. [ 279.364573][ T1361] hsr_slave_0: left promiscuous mode [ 279.377517][ T990] usb 4-1: USB disconnect, device number 18 [ 279.427255][ T1361] hsr_slave_1: left promiscuous mode [ 279.438049][ T1361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.438130][ T1361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.501975][ T1361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.502007][ T1361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.512208][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2031'. [ 279.562660][ T1361] batman_adv: batadv0: Interface deactivated: vlan2 [ 279.562693][ T1361] batman_adv: batadv0: Removing interface: vlan2 [ 279.764201][ T1361] veth1_macvtap: left promiscuous mode [ 279.764422][ T1361] veth0_macvtap: left promiscuous mode [ 279.766041][ T1361] veth1_vlan: left promiscuous mode [ 279.766750][ T1361] veth0_vlan: left promiscuous mode [ 281.014769][ T990] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 281.164879][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 281.171159][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.171199][ T990] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 281.171223][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.177539][ T990] usb 4-1: config 0 descriptor?? [ 281.612377][ T990] hid (null): nested delimiters [ 281.814595][ T6001] usb 4-1: USB disconnect, device number 19 [ 289.945728][ T1361] team0 (unregistering): Port device team_slave_1 removed [ 290.166946][ T1361] team0 (unregistering): Port device team_slave_0 removed [ 292.495449][T10519] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 292.546915][T10352] team0: Port device team_slave_0 added [ 292.583220][T10352] team0: Port device team_slave_1 added [ 292.844850][ T6005] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 292.965962][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.965980][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.966004][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.971579][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.971593][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.971619][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.995109][ T6005] usb 1-1: Using ep0 maxpacket: 16 [ 292.997662][ T6005] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 292.997688][ T6005] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 292.997707][ T6005] usb 1-1: config 166 has no interface number 0 [ 292.997722][ T6005] usb 1-1: config 166 has no interface number 1 [ 292.997857][ T6005] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 292.997879][ T6005] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 292.997915][ T6005] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 292.997939][ T6005] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 292.997963][ T6005] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 292.997989][ T6005] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 292.998012][ T6005] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 292.998042][ T6005] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 292.998064][ T6005] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 292.998088][ T6005] usb 1-1: config 166 interface 177 has no altsetting 0 [ 292.998105][ T6005] usb 1-1: config 166 interface 34 has no altsetting 0 [ 293.001576][ T6005] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 293.001600][ T6005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.001619][ T6005] usb 1-1: Product: syz [ 293.001632][ T6005] usb 1-1: Manufacturer: syz [ 293.001722][ T6005] usb 1-1: SerialNumber: syz [ 293.278737][ T6005] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 293.427310][ T990] kernel read not supported for file /dsp (pid: 990 comm: kworker/1:2) [ 293.467537][T10352] hsr_slave_0: entered promiscuous mode [ 293.470258][T10352] hsr_slave_1: entered promiscuous mode [ 293.471155][T10352] debugfs: 'hsr0' already exists in 'hsr' [ 293.471179][T10352] Cannot create hsr debugfs directory [ 293.481328][ T6005] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 293.575025][ T993] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 293.749877][ T6005] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 293.754737][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 293.757040][ T993] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 293.757065][ T993] usb 4-1: config 0 has no interface number 0 [ 293.757130][ T993] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 293.757154][ T993] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 293.760402][ T993] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 293.760429][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.760449][ T993] usb 4-1: Product: syz [ 293.760464][ T993] usb 4-1: Manufacturer: syz [ 293.760479][ T993] usb 4-1: SerialNumber: syz [ 293.849944][ T993] usb 4-1: config 0 descriptor?? [ 293.851136][T10550] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 293.851320][T10550] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 293.882192][ T6005] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 293.882219][ T6005] usb 1-1: No valid video chain found. [ 293.915458][ T6005] usb 1-1: USB disconnect, device number 22 [ 294.062217][T10550] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 294.062330][T10550] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 294.146707][ T1361] IPVS: stop unused estimator thread 0... [ 294.634965][ T6005] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 294.653135][T10571] autofs4:pid:10571:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189374) [ 294.653163][T10571] autofs4:pid:10571:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 294.675117][ T993] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.675147][ T993] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 294.675446][ T993] asix 4-1:0.251: probe with driver asix failed with error -71 [ 294.713770][ T993] usb 4-1: USB disconnect, device number 20 [ 294.788981][ T6005] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.789007][ T6005] usb 5-1: config 0 has no interface number 0 [ 294.792078][ T6005] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 294.792105][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.792123][ T6005] usb 5-1: Product: syz [ 294.792136][ T6005] usb 5-1: Manufacturer: syz [ 294.792149][ T6005] usb 5-1: SerialNumber: syz [ 294.827221][ T6005] usb 5-1: config 0 descriptor?? [ 295.073860][ T6005] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 295.108467][ T6005] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.109228][ T6005] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 295.109307][ T6005] usb 5-1: media controller created [ 295.203775][ T6005] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.374946][ T6005] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 295.530558][ T6005] usb 5-1: USB disconnect, device number 21 [ 295.795043][T10597] block nbd0: server does not support multiple connections per device. [ 295.797452][T10597] block nbd0: shutting down sockets [ 296.010155][T10352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.054167][T10352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.102068][T10352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 296.176531][T10352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.642235][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.730154][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.765952][ T1544] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.773272][ T1544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.803649][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.804871][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.974790][ T993] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 297.104798][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 297.144780][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 297.147214][ T993] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 297.147239][ T993] usb 4-1: config 0 has no interface number 0 [ 297.150905][ T993] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 297.150933][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.150952][ T993] usb 4-1: Product: syz [ 297.150966][ T993] usb 4-1: Manufacturer: syz [ 297.150979][ T993] usb 4-1: SerialNumber: syz [ 297.206741][ T993] usb 4-1: config 0 descriptor?? [ 297.293717][ T31] usb 1-1: config 0 has no interfaces? [ 297.293757][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 297.293779][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.298979][ T31] usb 1-1: config 0 descriptor?? [ 297.327328][T10631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.416338][ T993] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 297.419153][ T993] usb 4-1: USB disconnect, device number 21 [ 297.561990][T10633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.562413][T10633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.586611][ T6005] usb 1-1: USB disconnect, device number 23 [ 297.849769][T10631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.024946][ T6005] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 298.174850][ T6005] usb 1-1: Using ep0 maxpacket: 8 [ 298.178365][ T6005] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.178389][ T6005] usb 1-1: config 0 has no interface number 0 [ 298.178435][ T6005] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 298.178456][ T6005] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 298.178478][ T6005] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.178500][ T6005] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 298.178524][ T6005] usb 1-1: config 0 interface 1 has no altsetting 0 [ 298.178558][ T6005] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 298.178580][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.186590][ T6005] usb 1-1: config 0 descriptor?? [ 298.408214][T10631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.443652][ T6005] usb 1-1: USB disconnect, device number 24 [ 298.543845][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.712572][T10631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.883228][T10352] veth0_vlan: entered promiscuous mode [ 298.911405][T10352] veth1_vlan: entered promiscuous mode [ 299.014843][ T6005] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 299.098912][ T1159] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.161863][ T1159] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.164964][ T6005] usb 4-1: Using ep0 maxpacket: 16 [ 299.167296][ T6005] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 299.167327][ T6005] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 299.167350][ T6005] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.168803][ T6005] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.168827][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 299.168846][ T6005] usb 4-1: SerialNumber: syz [ 299.189813][T10654] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.309584][ T1361] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.334411][T10352] veth0_macvtap: entered promiscuous mode [ 299.369297][ T1498] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.373713][T10352] veth1_macvtap: entered promiscuous mode [ 299.438238][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.456887][ T6005] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 299.493502][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.500116][ T6005] usb 4-1: USB disconnect, device number 22 [ 299.553350][ T162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.554519][ T162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.572548][ T162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.573912][ T162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.734746][ T993] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 299.874876][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.874895][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.899983][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 299.903377][ T993] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 299.903404][ T993] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 299.903425][ T993] usb 2-1: config 166 has no interface number 0 [ 299.903448][ T993] usb 2-1: config 166 has no interface number 1 [ 299.903506][ T993] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 299.903528][ T993] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 299.903565][ T993] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 299.903589][ T993] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 299.903616][ T993] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 299.903642][ T993] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 299.903666][ T993] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 299.903692][ T993] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 299.903714][ T993] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 299.903740][ T993] usb 2-1: config 166 interface 177 has no altsetting 0 [ 299.903759][ T993] usb 2-1: config 166 interface 34 has no altsetting 0 [ 299.954884][ T993] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 299.954914][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.954932][ T993] usb 2-1: Product: syz [ 299.954945][ T993] usb 2-1: Manufacturer: syz [ 299.954957][ T993] usb 2-1: SerialNumber: syz [ 300.147656][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.147675][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.308621][ T993] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 300.526033][ T993] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 300.802099][ T993] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 300.920923][ T993] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 300.920956][ T993] usb 2-1: No valid video chain found. [ 300.967112][ T993] usb 2-1: USB disconnect, device number 16 [ 301.108536][T10704] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2118'. [ 301.108584][T10704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2118'. [ 302.376946][T10735] program syz.1.2132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.559939][ T37] kauditd_printk_skb: 366 callbacks suppressed [ 302.559957][ T37] audit: type=1326 audit(1759029131.139:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.1.2137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f952eddeec9 code=0x0 [ 302.871437][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2142'. [ 302.871460][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2142'. [ 303.359977][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 303.467487][T10777] ./file0: Can't lookup blockdev [ 303.832823][T10793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.160812][T10806] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2167'. [ 304.160837][T10806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2167'. [ 305.664280][T10846] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 305.802464][T10852] Invalid ELF header magic: != ELF [ 306.094851][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 306.165192][ T5849] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 306.244799][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 306.248661][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.251309][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 306.251333][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.251351][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.258137][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.258166][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.258184][ T31] usb 5-1: Product: syz [ 306.258197][ T31] usb 5-1: Manufacturer: syz [ 306.258211][ T31] usb 5-1: SerialNumber: syz [ 306.338623][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.338648][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.338672][ T5849] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 306.338683][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.343117][ T5849] usb 1-1: config 0 descriptor?? [ 306.503717][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.510132][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.579039][ T31] usb 5-1: 0:2 : does not exist [ 306.700913][ T31] usb 5-1: USB disconnect, device number 22 [ 306.802443][ T5849] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 306.802482][ T5849] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 306.802510][ T5849] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 306.802535][ T5849] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 306.802561][ T5849] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 306.802586][ T5849] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 306.802612][ T5849] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 306.853501][ T5849] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 307.144885][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 307.188705][ T5849] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 307.188765][ T5849] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 307.195831][ T5849] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -71 [ 307.203798][ T5849] usb 1-1: USB disconnect, device number 25 [ 307.298770][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 307.298798][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.298816][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.304499][ T31] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 307.304526][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.304544][ T31] usb 5-1: Product: syz [ 307.304557][ T31] usb 5-1: Manufacturer: syz [ 307.304570][ T31] usb 5-1: SerialNumber: syz [ 307.594116][ T31] usb 5-1: 0:2 : does not exist [ 307.767349][ T31] usb 5-1: USB disconnect, device number 23 [ 308.146255][ T1498] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.148754][ T1498] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.150848][ T76] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.150893][ T76] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.372422][T10915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2218'. [ 308.372448][T10915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2218'. [ 308.372677][T10915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2218'. [ 308.372693][T10915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2218'. [ 308.484371][T10923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2220'. [ 308.705111][T10934] syz_tun: entered allmulticast mode [ 308.714190][T10930] syz_tun: left allmulticast mode [ 309.138056][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2235'. [ 309.919037][ T6001] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 310.065432][ T6001] usb 4-1: Using ep0 maxpacket: 8 [ 310.067903][ T6001] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.067929][ T6001] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 310.067953][ T6001] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.067977][ T6001] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.068019][ T6001] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.068041][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.350735][ T6001] usb 4-1: GET_CAPABILITIES returned 0 [ 310.350782][ T6001] usbtmc 4-1:16.0: can't read capabilities [ 310.567178][ T6001] usb 4-1: USB disconnect, device number 23 [ 311.810133][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 311.874773][ T990] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 312.003672][T11034] bridge0: entered promiscuous mode [ 312.024707][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 312.027069][ T990] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 312.027100][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.030190][ T990] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.030216][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.030235][ T990] usb 1-1: Product: syz [ 312.030249][ T990] usb 1-1: Manufacturer: syz [ 312.030263][ T990] usb 1-1: SerialNumber: syz [ 312.099622][ T990] usb 1-1: config 0 descriptor?? [ 312.113708][ T990] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.113743][ T990] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 312.718651][ T990] em28xx 1-1:0.0: chip ID is em2874 [ 312.925493][ T6001] usb 1-1: USB disconnect, device number 26 [ 312.927802][ T6001] em28xx 1-1:0.0: Disconnecting em28xx [ 312.962950][ T6001] em28xx 1-1:0.0: Freeing device [ 314.434881][ T5849] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 314.587905][ T5849] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 314.587937][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.592331][ T5849] usb 4-1: config 0 descriptor?? [ 314.617256][ T5849] cp210x 4-1:0.0: cp210x converter detected [ 314.879565][T11117] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2309'. [ 314.879590][T11117] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 315.018571][ T5849] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 315.053300][ T5849] usb 4-1: cp210x converter now attached to ttyUSB0 [ 315.234331][ T993] usb 4-1: USB disconnect, device number 24 [ 315.260719][ T993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.375397][ T993] cp210x 4-1:0.0: device disconnected [ 315.935230][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2330'. [ 316.594841][ T5849] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 316.630382][T11183] netlink: 'syz.2.2341': attribute type 3 has an invalid length. [ 316.630403][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 316.630423][T11183] netlink: 'syz.2.2341': attribute type 3 has an invalid length. [ 316.630436][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 316.747281][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.747341][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 316.747370][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 316.747401][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 316.748987][ T5849] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 316.749011][ T5849] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 316.749031][ T5849] usb 4-1: Manufacturer: syz [ 316.824403][ T5849] usb 4-1: config 0 descriptor?? [ 317.209715][ T6001] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 317.214315][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.214386][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.214950][ T5849] rc_core: IR keymap rc-hauppauge not found [ 317.214966][ T5849] Registered IR keymap rc-empty [ 317.216752][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.260882][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.277125][ T5849] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 317.302225][ T5849] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 317.332409][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.348031][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.365292][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.369794][ T6001] usb 5-1: config 0 has no interfaces? [ 317.373252][ T6001] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 317.373278][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.373296][ T6001] usb 5-1: Product: syz [ 317.373310][ T6001] usb 5-1: Manufacturer: syz [ 317.373324][ T6001] usb 5-1: SerialNumber: syz [ 317.389054][ T6001] usb 5-1: config 0 descriptor?? [ 317.423552][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.437084][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.455155][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.475112][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.496037][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.518145][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.535109][ T5849] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 317.559118][ T5849] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 317.559141][ T5849] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 317.592933][ T5849] usb 4-1: USB disconnect, device number 25 [ 317.629503][ T993] usb 5-1: USB disconnect, device number 24 [ 317.735513][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 317.735547][T11209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2351'. [ 317.832923][T11213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2353'. [ 318.009584][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.174851][ T990] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 318.230519][T11227] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 318.336679][ T990] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 318.336710][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.336731][ T990] usb 3-1: Product: syz [ 318.336745][ T990] usb 3-1: Manufacturer: syz [ 318.336758][ T990] usb 3-1: SerialNumber: syz [ 318.551286][ T990] r8152-cfgselector 3-1: Unknown version 0x0000 [ 318.551311][ T990] r8152-cfgselector 3-1: config 0 descriptor?? [ 318.694677][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.713832][T11227] bridge0: entered allmulticast mode [ 319.018342][ T990] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 319.182299][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2368'. [ 321.264780][ T993] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 321.294024][ T37] audit: type=1326 audit(1759029149.869:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11304 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cbcaeec9 code=0x7ffc0000 [ 321.294583][ T37] audit: type=1326 audit(1759029149.869:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11304 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cbcaeec9 code=0x7ffc0000 [ 321.342063][ T37] audit: type=1326 audit(1759029149.919:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11304 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb8cbcaeec9 code=0x7ffc0000 [ 321.342119][ T37] audit: type=1326 audit(1759029149.919:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11304 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cbcaeec9 code=0x7ffc0000 [ 321.342377][ T37] audit: type=1326 audit(1759029149.919:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11304 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8cbcaeec9 code=0x7ffc0000 [ 321.436188][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 321.455363][ T993] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.455423][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.455450][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 321.455471][ T993] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 321.455493][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.457319][ T993] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 321.457345][ T993] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 321.457364][ T993] usb 1-1: Manufacturer: syz [ 321.470444][ T993] usb 1-1: config 0 descriptor?? [ 321.776270][ T6001] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 321.824728][ T993] rc_core: IR keymap rc-hauppauge not found [ 321.824747][ T993] Registered IR keymap rc-empty [ 321.824900][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.855362][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.876202][ T993] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 321.879262][ T993] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 321.909871][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.928033][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.944844][ T6001] usb 4-1: Using ep0 maxpacket: 16 [ 321.945536][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 321.969029][ T6001] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 321.969060][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 321.998790][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.001122][ T6001] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.001206][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.001226][ T6001] usb 4-1: Product: syz [ 322.001241][ T6001] usb 4-1: Manufacturer: syz [ 322.001256][ T6001] usb 4-1: SerialNumber: syz [ 322.017055][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.034847][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.058487][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.082268][ T6001] usb 4-1: config 0 descriptor?? [ 322.084773][ T56] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 322.105404][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.124486][ T6001] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 322.124517][ T6001] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 322.143663][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.164969][ T993] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 322.201301][ T993] mceusb 1-1:0.0: Registered 袇 with mce emulator interface version 1 [ 322.201327][ T993] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 322.226746][ T993] usb 1-1: USB disconnect, device number 27 [ 322.237555][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.237587][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.237624][ T56] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 322.237647][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.245358][ T56] usb 5-1: config 0 descriptor?? [ 322.688627][ T56] hid-steam 0003:28DE:1142.0022: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 322.718988][ T6001] em28xx 4-1:0.0: chip ID is em2882/3 [ 322.859652][ T56] usb 5-1: USB disconnect, device number 25 [ 322.921019][ T6001] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 322.921587][ T6001] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 322.921604][ T6001] em28xx 4-1:0.0: No AC97 audio processor [ 322.954091][ T6001] usb 4-1: USB disconnect, device number 26 [ 322.956661][ T6001] em28xx 4-1:0.0: Disconnecting em28xx [ 322.962859][ T6001] em28xx 4-1:0.0: Freeing device [ 323.538377][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2414'. [ 323.625459][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.717663][T11359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2416'. [ 323.862163][T11367] Bluetooth: MGMT ver 1.23 [ 323.971612][T11374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.408730][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'. [ 324.893775][ T37] audit: type=1800 audit(1759029153.459:1211): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2443" name="nullb0" dev="devtmpfs" ino=2876 res=0 errno=0 [ 325.240025][T11433] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 325.240047][T11433] syzkaller1: owner set to 778 [ 326.364821][ T5849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 326.534824][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 326.541943][ T5849] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.541971][ T5849] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 326.541994][ T5849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 326.546827][ T5849] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 326.546856][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.546875][ T5849] usb 3-1: Product: syz [ 326.546888][ T5849] usb 3-1: Manufacturer: syz [ 326.546901][ T5849] usb 3-1: SerialNumber: syz [ 326.552281][ T5849] usb 3-1: config 0 descriptor?? [ 326.966147][ T5849] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 327.258441][T11509] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 327.368619][ T5849] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 327.369107][ T5849] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 327.371070][ T5849] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 327.390299][ T5849] usb 3-1: USB disconnect, device number 18 [ 327.637805][T11516] autofs4:pid:11516:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189374) [ 327.637836][T11516] autofs4:pid:11516:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 328.565697][ T993] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 328.728607][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 328.728643][ T993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 328.728685][ T993] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 328.728708][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.778778][ T993] usb 1-1: config 0 descriptor?? [ 328.779934][T11544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 329.209857][ T993] apple 0003:05AC:0219.0023: unknown main item tag 0x0 [ 329.209895][ T993] apple 0003:05AC:0219.0023: unknown main item tag 0x0 [ 329.209922][ T993] apple 0003:05AC:0219.0023: unknown main item tag 0x0 [ 329.209948][ T993] apple 0003:05AC:0219.0023: unknown main item tag 0x0 [ 329.209973][ T993] apple 0003:05AC:0219.0023: unknown main item tag 0x0 [ 329.209998][ T993] apple 0003:05AC:0219.0023: unknown main item tag 0x0 [ 329.210024][ T993] apple 0003:05AC:0219.0023: unknown main item tag 0x0 [ 329.219603][ T993] apple 0003:05AC:0219.0023: hidraw0: USB HID vff.fa Device [HID 05ac:0219] on usb-dummy_hcd.0-1/input0 [ 329.312823][T11565] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.467339][ T993] usb 1-1: USB disconnect, device number 28 [ 329.509783][T11565] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.746860][T11565] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.933847][T11565] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.334857][ T5849] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 330.391752][T11585] program syz.0.2521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.410694][ T1544] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.419974][ T1544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.462091][ T1498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.484726][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 330.487235][ T5849] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 330.487267][ T5849] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 330.487291][ T5849] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 330.491297][ T5849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.491325][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 330.491345][ T5849] usb 5-1: SerialNumber: syz [ 330.559237][T11574] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.568211][ T162] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.775847][ T5849] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 330.794002][ T5849] usb 5-1: USB disconnect, device number 26 [ 331.094842][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 331.254185][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 331.254211][ T9] usb 2-1: config 1 has an invalid interface number: 4 but max is 0 [ 331.254230][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 331.254250][ T9] usb 2-1: config 1 has no interface number 0 [ 331.254263][ T9] usb 2-1: config 1 has no interface number 1 [ 331.254418][ T9] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 331.254460][ T9] usb 2-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.254482][ T9] usb 2-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 331.254508][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 331.254525][ T9] usb 2-1: config 1 interface 4 has no altsetting 0 [ 331.261793][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 331.261820][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.261840][ T9] usb 2-1: Product: syz [ 331.261853][ T9] usb 2-1: Manufacturer: syz [ 331.261867][ T9] usb 2-1: SerialNumber: syz [ 331.500313][ T9] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 331.717937][ T9] usb 2-1: USB disconnect, device number 17 [ 332.104057][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 332.352749][T11638] kvm: user requested TSC rate below hardware speed [ 332.558623][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.749732][T11654] input: syz1 as /devices/virtual/input/input16 [ 332.816252][ T5849] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 332.927520][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 332.968486][ T5849] usb 4-1: config 0 has no interfaces? [ 332.971714][ T5849] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.971742][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.971761][ T5849] usb 4-1: Product: syz [ 332.971776][ T5849] usb 4-1: Manufacturer: syz [ 332.971790][ T5849] usb 4-1: SerialNumber: syz [ 333.012475][ T5849] usb 4-1: config 0 descriptor?? [ 333.228765][ T5927] usb 4-1: USB disconnect, device number 27 [ 333.294304][T11673] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2552'. [ 333.294329][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2552'. [ 333.483344][T11677] block nbd0: shutting down sockets [ 333.637104][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2559'. [ 333.770485][T11689] program syz.4.2561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.324765][ T5849] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 335.477512][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.477543][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.477581][ T5849] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 335.477602][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.484241][ T5849] usb 5-1: config 0 descriptor?? [ 335.945262][ T5849] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 335.945301][ T5849] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 335.945327][ T5849] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 335.945353][ T5849] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 335.945378][ T5849] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 335.945403][ T5849] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 335.945428][ T5849] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0 [ 336.019443][ T5849] pyra 0003:1E7D:2CF6.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 336.333578][ T5849] pyra 0003:1E7D:2CF6.0024: couldn't init struct pyra_device [ 336.333632][ T5849] pyra 0003:1E7D:2CF6.0024: couldn't install mouse [ 336.355604][ T5849] pyra 0003:1E7D:2CF6.0024: probe with driver pyra failed with error -71 [ 336.376285][ T5849] usb 5-1: USB disconnect, device number 27 [ 336.662542][T11778] syz_tun: entered allmulticast mode [ 336.663749][T11775] syz_tun: left allmulticast mode [ 337.951095][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 337.951123][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 338.974796][ T5849] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 341.343805][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2692'. [ 342.154984][ T5927] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 342.310356][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 342.322888][ T5927] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 342.322918][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.322938][ T5927] usb 1-1: Product: syz [ 342.322951][ T5927] usb 1-1: Manufacturer: syz [ 342.322965][ T5927] usb 1-1: SerialNumber: syz [ 342.368858][ T5927] usb 1-1: config 0 descriptor?? [ 342.373990][ T5927] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 342.587298][ T5927] gspca_sn9c2028: read1 error -32 [ 342.592729][ T5927] gspca_sn9c2028: read1 error -32 [ 342.712357][T11999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2703'. [ 342.802462][ T56] usb 1-1: USB disconnect, device number 30 [ 343.535015][ T56] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 343.694859][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 343.698792][ T56] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 343.698819][ T56] usb 5-1: config 0 has no interface number 0 [ 343.704473][ T56] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 343.704500][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.704519][ T56] usb 5-1: Product: syz [ 343.704533][ T56] usb 5-1: Manufacturer: syz [ 343.704547][ T56] usb 5-1: SerialNumber: syz [ 343.715335][ T56] usb 5-1: config 0 descriptor?? [ 343.947630][ T56] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 343.955606][ T56] usb 5-1: USB disconnect, device number 28 [ 344.203509][T12026] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 344.330260][T12030] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 344.330289][T12030] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 344.369242][T12032] tipc: Started in network mode [ 344.369260][T12032] tipc: Node identity , cluster identity 4711 [ 344.369275][T12032] tipc: Failed to set node id, please configure manually [ 344.369320][T12032] tipc: Enabling of bearer rejected, failed to enable media [ 344.534171][ T37] audit: type=1326 audit(1759029173.109:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f676fb55d67 code=0x7ffc0000 [ 344.534441][ T37] audit: type=1326 audit(1759029173.109:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f676fafaf79 code=0x7ffc0000 [ 344.554837][ T37] audit: type=1326 audit(1759029173.109:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 344.555323][ T37] audit: type=1326 audit(1759029173.129:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 344.555367][ T37] audit: type=1326 audit(1759029173.139:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 344.555408][ T37] audit: type=1326 audit(1759029173.139:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 344.566573][ T37] audit: type=1326 audit(1759029173.149:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f676fb55d67 code=0x7ffc0000 [ 344.566620][ T37] audit: type=1326 audit(1759029173.149:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f676fafaf79 code=0x7ffc0000 [ 344.566659][ T37] audit: type=1326 audit(1759029173.149:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12039 comm="syz.3.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676fb5eec9 code=0x7ffc0000 [ 344.713129][ T5849] IPVS: starting estimator thread 0... [ 344.804856][T12046] IPVS: using max 8 ests per chain, 19200 per kthread [ 344.860814][T12051] netlink: 'syz.1.2729': attribute type 3 has an invalid length. [ 344.860837][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 344.860857][T12051] netlink: 'syz.1.2729': attribute type 3 has an invalid length. [ 344.860870][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 345.072257][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 345.072285][T12060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2734'. [ 345.516166][T12079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.547519][T12081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2740'. [ 345.764887][ T993] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 345.931040][ T993] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 345.931072][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.931092][ T993] usb 5-1: Product: syz [ 345.931106][ T993] usb 5-1: Manufacturer: syz [ 345.931120][ T993] usb 5-1: SerialNumber: syz [ 345.946259][ T993] r8152-cfgselector 5-1: Unknown version 0x0000 [ 345.946281][ T993] r8152-cfgselector 5-1: config 0 descriptor?? [ 346.043088][T12091] netlink: 360 bytes leftover after parsing attributes in process `syz.3.2746'. [ 346.384879][ T5849] r8152-cfgselector 5-1: USB disconnect, device number 29 [ 346.944920][ T5849] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 347.107372][ T5849] usb 2-1: config 0 has no interfaces? [ 347.110239][ T5849] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 347.110266][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.110284][ T5849] usb 2-1: Product: syz [ 347.110297][ T5849] usb 2-1: Manufacturer: syz [ 347.110310][ T5849] usb 2-1: SerialNumber: syz [ 347.152966][ T5849] usb 2-1: config 0 descriptor?? [ 347.164362][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 347.311159][T12122] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 347.388753][ T993] usb 2-1: USB disconnect, device number 18 [ 347.654766][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 347.744830][ T5849] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 347.807248][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.807366][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 347.807397][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 347.807422][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 347.808986][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.809011][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.809030][ T9] usb 3-1: Manufacturer: syz [ 347.814952][ T9] usb 3-1: config 0 descriptor?? [ 347.948452][ T5849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.948477][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.952516][ T5849] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.952542][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.952562][ T5849] usb 5-1: Product: syz [ 347.952571][ T5849] usb 5-1: Manufacturer: syz [ 347.952579][ T5849] usb 5-1: SerialNumber: syz [ 348.110789][ T9] rc_core: IR keymap rc-hauppauge not found [ 348.110812][ T9] Registered IR keymap rc-empty [ 348.111262][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.125257][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.147224][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 348.150256][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 348.166191][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.187639][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.205201][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.225214][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.246310][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.265399][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.285112][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.307869][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.325166][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.346848][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 348.374942][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 348.374966][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 348.440148][ T5849] usb 5-1: 0:2 : does not exist [ 348.546510][ T9] usb 3-1: USB disconnect, device number 19 [ 348.849800][ T5849] usb 5-1: USB disconnect, device number 30 [ 349.608320][T12158] block nbd0: server does not support multiple connections per device. [ 349.608598][T12158] block nbd0: shutting down sockets [ 350.173696][T12156] [ 350.173710][T12156] ====================================================== [ 350.173718][T12156] WARNING: possible circular locking dependency detected [ 350.173735][T12156] syzkaller #0 Not tainted [ 350.173745][T12156] ------------------------------------------------------ [ 350.173753][T12156] syz.1.2776/12156 is trying to acquire lock: [ 350.173764][T12156] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 350.173817][T12156] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.173817][T12156] but task is already holding lock: [ 350.173824][T12156] ffff88814d393950 (&group->lock#2){+.+.}-{3:3}, at: snd_pcm_drop+0x10d/0x270 [ 350.173881][T12156] [ 350.173881][T12156] which lock already depends on the new lock. [ 350.173881][T12156] [ 350.173889][T12156] [ 350.173889][T12156] the existing dependency chain (in reverse order) is: [ 350.173896][T12156] [ 350.173896][T12156] -> #2 (&group->lock#2){+.+.}-{3:3}: [ 350.173927][T12156] lock_acquire+0x120/0x360 [ 350.173950][T12156] rt_spin_lock+0x88/0x2c0 [ 350.173972][T12156] _snd_pcm_stream_lock_irqsave+0x7c/0xa0 [ 350.173990][T12156] snd_pcm_period_elapsed+0x1e/0x80 [ 350.174013][T12156] dummy_hrtimer_callback+0x80/0x180 [ 350.174037][T12156] __hrtimer_run_queues+0x54f/0xd40 [ 350.174064][T12156] hrtimer_run_softirq+0x1a3/0x2e0 [ 350.174079][T12156] handle_softirqs+0x22c/0x710 [ 350.174100][T12156] run_ktimerd+0xcf/0x190 [ 350.174124][T12156] smpboot_thread_fn+0x542/0xa60 [ 350.174145][T12156] kthread+0x711/0x8a0 [ 350.174170][T12156] ret_from_fork+0x436/0x7d0 [ 350.174192][T12156] ret_from_fork_asm+0x1a/0x30 [ 350.174209][T12156] [ 350.174209][T12156] -> #1 (&base->softirq_expiry_lock){+...}-{3:3}: [ 350.174236][T12156] lock_acquire+0x120/0x360 [ 350.174259][T12156] rt_spin_lock+0x88/0x2c0 [ 350.174280][T12156] hrtimer_run_softirq+0x7c/0x2e0 [ 350.174299][T12156] handle_softirqs+0x22c/0x710 [ 350.174321][T12156] run_ktimerd+0xcf/0x190 [ 350.174343][T12156] smpboot_thread_fn+0x542/0xa60 [ 350.174363][T12156] kthread+0x711/0x8a0 [ 350.174388][T12156] ret_from_fork+0x436/0x7d0 [ 350.174408][T12156] ret_from_fork_asm+0x1a/0x30 [ 350.174425][T12156] [ 350.174425][T12156] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 350.174457][T12156] validate_chain+0xb9b/0x2140 [ 350.174483][T12156] __lock_acquire+0xab9/0xd20 [ 350.174505][T12156] reacquire_held_locks+0x127/0x1d0 [ 350.174531][T12156] lock_release+0x1b4/0x3e0 [ 350.174553][T12156] __local_bh_enable_ip+0x10c/0x270 [ 350.174574][T12156] hrtimer_cancel+0x39/0x60 [ 350.174595][T12156] dummy_hrtimer_stop+0xcf/0x100 [ 350.174617][T12156] snd_pcm_do_stop+0x12a/0x1c0 [ 350.174637][T12156] snd_pcm_action+0xe7/0x240 [ 350.174653][T12156] snd_pcm_drop+0x160/0x270 [ 350.174670][T12156] snd_pcm_release_substream+0x6d/0x480 [ 350.174690][T12156] snd_pcm_oss_release+0x147/0x250 [ 350.174712][T12156] __fput+0x45b/0xa80 [ 350.174727][T12156] task_work_run+0x1d1/0x260 [ 350.174744][T12156] get_signal+0x11c5/0x1310 [ 350.174765][T12156] arch_do_signal_or_restart+0x9a/0x750 [ 350.174786][T12156] exit_to_user_mode_loop+0x75/0x110 [ 350.174809][T12156] do_syscall_64+0x2bd/0x3b0 [ 350.174826][T12156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.174851][T12156] [ 350.174851][T12156] other info that might help us debug this: [ 350.174851][T12156] [ 350.174858][T12156] Chain exists of: [ 350.174858][T12156] (softirq_ctrl.lock) --> &base->softirq_expiry_lock --> &group->lock#2 [ 350.174858][T12156] [ 350.174897][T12156] Possible unsafe locking scenario: [ 350.174897][T12156] [ 350.174904][T12156] CPU0 CPU1 [ 350.174910][T12156] ---- ---- [ 350.174916][T12156] lock(&group->lock#2); [ 350.174934][T12156] lock(&base->softirq_expiry_lock); [ 350.174949][T12156] lock(&group->lock#2); [ 350.174968][T12156] lock((softirq_ctrl.lock)); [ 350.174981][T12156] [ 350.174981][T12156] *** DEADLOCK *** [ 350.174981][T12156] [ 350.174987][T12156] 3 locks held by syz.1.2776/12156: [ 350.174999][T12156] #0: ffff88814d3932b0 (&pcm->open_mutex){+.+.}-{4:4}, at: snd_pcm_oss_release+0x113/0x250 [ 350.175052][T12156] #1: ffff88814d393950 (&group->lock#2){+.+.}-{3:3}, at: snd_pcm_drop+0x10d/0x270 [ 350.175103][T12156] #2: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 350.175153][T12156] [ 350.175153][T12156] stack backtrace: [ 350.175174][T12156] CPU: 1 UID: 0 PID: 12156 Comm: syz.1.2776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.175198][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.175216][T12156] Call Trace: [ 350.175224][T12156] [ 350.175232][T12156] dump_stack_lvl+0x189/0x250 [ 350.175261][T12156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.175288][T12156] ? __pfx__printk+0x10/0x10 [ 350.175310][T12156] ? print_lock_name+0xde/0x100 [ 350.175332][T12156] print_circular_bug+0x2ee/0x310 [ 350.175352][T12156] check_noncircular+0x134/0x160 [ 350.175383][T12156] validate_chain+0xb9b/0x2140 [ 350.175415][T12156] ? do_raw_spin_lock+0x121/0x290 [ 350.175440][T12156] __lock_acquire+0xab9/0xd20 [ 350.175464][T12156] reacquire_held_locks+0x127/0x1d0 [ 350.175490][T12156] ? __local_bh_disable_ip+0x264/0x400 [ 350.175515][T12156] lock_release+0x1b4/0x3e0 [ 350.175538][T12156] ? __local_bh_enable_ip+0x100/0x270 [ 350.175563][T12156] __local_bh_enable_ip+0x10c/0x270 [ 350.175586][T12156] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 350.175614][T12156] ? hrtimer_cancel_wait_running+0x142/0x180 [ 350.175643][T12156] hrtimer_cancel+0x39/0x60 [ 350.175669][T12156] dummy_hrtimer_stop+0xcf/0x100 [ 350.175696][T12156] snd_pcm_do_stop+0x12a/0x1c0 [ 350.175721][T12156] snd_pcm_action+0xe7/0x240 [ 350.175742][T12156] snd_pcm_drop+0x160/0x270 [ 350.175763][T12156] snd_pcm_release_substream+0x6d/0x480 [ 350.175787][T12156] snd_pcm_oss_release+0x147/0x250 [ 350.175812][T12156] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 350.175842][T12156] __fput+0x45b/0xa80 [ 350.175866][T12156] task_work_run+0x1d1/0x260 [ 350.175886][T12156] ? __pfx_task_work_run+0x10/0x10 [ 350.175910][T12156] get_signal+0x11c5/0x1310 [ 350.175933][T12156] ? task_work_add+0x281/0x420 [ 350.175953][T12156] ? __pfx_task_work_add+0x10/0x10 [ 350.175972][T12156] ? __pfx_vfs_write+0x10/0x10 [ 350.175998][T12156] arch_do_signal_or_restart+0x9a/0x750 [ 350.176019][T12156] ? __pfx___fput_deferred+0x10/0x10 [ 350.176037][T12156] ? __fget_files+0x2a/0x420 [ 350.176064][T12156] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 350.176092][T12156] ? exit_to_user_mode_loop+0x40/0x110 [ 350.176119][T12156] exit_to_user_mode_loop+0x75/0x110 [ 350.176144][T12156] do_syscall_64+0x2bd/0x3b0 [ 350.176163][T12156] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.176191][T12156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.176210][T12156] ? clear_bhb_loop+0x60/0xb0 [ 350.176233][T12156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.176252][T12156] RIP: 0033:0x7f952eddeec9 [ 350.176275][T12156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.176291][T12156] RSP: 002b:00007f952d046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.176312][T12156] RAX: 0000000000009b5a RBX: 00007f952f035fa0 RCX: 00007f952eddeec9 [ 350.176326][T12156] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003 [ 350.176340][T12156] RBP: 00007f952ee61f91 R08: 0000000000000000 R09: 0000000000000000 [ 350.176352][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.176365][T12156] R13: 00007f952f036038 R14: 00007f952f035fa0 R15: 00007fff4f024bf8 [ 350.176387][T12156] [ 350.188312][T12179] ALSA: mixer_oss: invalid OSS volume 'A141=w敐腣e]' [ 350.188338][T12179] ALSA: mixer_oss: invalid OSS volume '室盉寺;T`緻$櫩綞黧cXMYd,' [ 350.188370][T12179] ALSA: mixer_oss: invalid OSS volume 'b珟@h#' [ 350.188396][T12179] ALSA: mixer_oss: invalid OSS volume '晳h4繓蠿瑒S4v=0漘>&湎' [ 350.188413][T12179] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 350.188424][T12179] ALSA: mixer_oss: invalid OSS volume '-z5矈c^鱆6$' [ 350.188451][T12179] ALSA: mixer_oss: invalid OSS volume '0审T劗皔蒌瞵髩椽嚄俲朠&喅a飔' [ 350.188464][T12179] ALSA: mixer_oss: invalid OSS volume '|幞髜俓' [ 350.188501][T12179] ALSA: mixer_oss: invalid OSS volume '@鬪3b蓽憓樤G$#\("/鴒鶯' [ 350.188512][T12179] ALSA: mixer_oss: invalid OSS volume '' [ 352.416603][ T1544] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.525832][ T1544] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.626028][ T1544] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.737082][ T1544] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.924934][ T1544] bridge_slave_1: left allmulticast mode [ 352.924960][ T1544] bridge_slave_1: left promiscuous mode [ 352.925119][ T1544] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.005349][ T1544] bridge_slave_0: left allmulticast mode [ 353.005372][ T1544] bridge_slave_0: left promiscuous mode [ 353.005519][ T1544] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.415052][ T1544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.475288][ T1544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.515840][ T1544] bond0 (unregistering): Released all slaves [ 355.385328][ T1544] hsr_slave_0: left promiscuous mode [ 355.424826][ T1544] hsr_slave_1: left promiscuous mode [ 355.425363][ T1544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.425391][ T1544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.454955][ T1544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.454976][ T1544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.505343][ T1544] veth1_macvtap: left promiscuous mode [ 355.505521][ T1544] veth0_macvtap: left promiscuous mode [ 355.505656][ T1544] veth1_vlan: left promiscuous mode [ 357.225192][ T1544] team0 (unregistering): Port device team_slave_1 removed [ 357.414947][ T1544] team0 (unregistering): Port device team_slave_0 removed