last executing test programs: 46.731257693s ago: executing program 4 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000070a010400000000000000000200fffe0c00034000feffe0ffffff010900020073797a32000000000900010073797a30"], 0x38}}, 0x0) 46.613034708s ago: executing program 4 (id=1396): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0) 45.589095455s ago: executing program 4 (id=1413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000100)={0x80, 0x0, 0x48}) 45.344985979s ago: executing program 4 (id=1417): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) setresuid(0x0, 0x0, 0x0) 45.230897064s ago: executing program 4 (id=1418): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 45.107143859s ago: executing program 4 (id=1420): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7aa, &(0x7f0000000080)={{@any, 0xffffffff}}) 29.994551529s ago: executing program 32 (id=1420): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7aa, &(0x7f0000000080)={{@any, 0xffffffff}}) 5.785269698s ago: executing program 2 (id=1894): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a01000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="002205000000b3"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 4.431254055s ago: executing program 3 (id=1919): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.38554974s ago: executing program 0 (id=1920): r0 = syz_io_uring_setup(0x1748, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000100), &(0x7f0000001000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ppoll(&(0x7f0000000240)=[{r0, 0x24a0}], 0x1, 0x0, 0x0, 0x0) 3.942766043s ago: executing program 2 (id=1924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r2, 0x1, 0x100000000, 0x80000000) 3.441265446s ago: executing program 3 (id=1927): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd6000/0x18000)=nil, 0x0, 0x0, 0x63, 0x0, 0x0) 3.432418464s ago: executing program 0 (id=1928): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x3}, 0x3, 0x2, 0xff, 0x5, 0x6, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.21463036s ago: executing program 0 (id=1931): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 3.110779394s ago: executing program 3 (id=1932): unshare(0x6020400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 2.924889103s ago: executing program 3 (id=1933): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000800004a1010018003780060001"], 0x38}}, 0x40000) 2.774438606s ago: executing program 0 (id=1934): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x800) 2.663909883s ago: executing program 3 (id=1935): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000380)=0x8, 0x5, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 2.522237545s ago: executing program 0 (id=1936): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120101000d0067204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.905845803s ago: executing program 2 (id=1937): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_pgetevents(0x0, 0xe9, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.569685007s ago: executing program 3 (id=1939): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0xffffffffffffff26}}, 0x1006) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 1.139711192s ago: executing program 1 (id=1942): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x0, 0x0}) 1.065860452s ago: executing program 5 (id=1943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) 876.056305ms ago: executing program 1 (id=1944): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x7d) 874.852159ms ago: executing program 5 (id=1945): iopl(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) fadvise64(r0, 0xfffffffffffffff7, 0x7f, 0x3) 837.335786ms ago: executing program 2 (id=1946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001f40)={0x38, r1, 0x211, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8001]}}]}]}]}, 0x38}}, 0x0) 706.293668ms ago: executing program 2 (id=1947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xffffffffffffffff, 0xee00) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x90}}, 0x0) 684.790576ms ago: executing program 5 (id=1948): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0f000000300007800800010005000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) 675.758871ms ago: executing program 1 (id=1949): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 508.148657ms ago: executing program 5 (id=1950): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8040, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 486.216605ms ago: executing program 0 (id=1951): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigaction(0x1, 0x0, 0x0, 0x0, 0x0) 480.892909ms ago: executing program 1 (id=1952): sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000000c0)=""/63, &(0x7f0000000100)=0x3f) 435.008303ms ago: executing program 2 (id=1953): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x28200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) 350.138382ms ago: executing program 5 (id=1954): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 283.110074ms ago: executing program 1 (id=1955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00#\x00\x00@']) 44.347126ms ago: executing program 1 (id=1956): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 5 (id=1957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) kernel console output (not intermixed with test programs): 113017][ T5881] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 103.113600][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.165503][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.195493][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.240615][ T5840] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.258784][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.272158][ T5840] usb 1-1: config 0 descriptor?? [ 103.333677][ T5881] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 103.352353][ T5881] visor 2-1:0.0: probe with driver visor failed with error -5 [ 103.551037][ T5881] usb 2-1: USB disconnect, device number 3 [ 103.712498][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.731308][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.751494][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.773294][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.791821][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.814904][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.852601][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.874196][ T5840] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 103.900786][ T5840] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 104.021328][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.041070][ T5840] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 104.126668][ T5840] usb 1-1: USB disconnect, device number 2 [ 104.424103][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.626432][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 104.652667][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.687421][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.705433][ T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 104.734219][ T6224] overlayfs: missing 'workdir' [ 104.735469][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.793985][ T9] usb 4-1: config 0 descriptor?? [ 104.864173][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.141'. [ 104.906144][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.947842][ T6226] netlink: 'syz.1.141': attribute type 5 has an invalid length. [ 105.065777][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.224510][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.308160][ T9] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x0 [ 105.335398][ T9] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x0 [ 105.363578][ T9] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x0 [ 105.372466][ T9] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x0 [ 105.384996][ T9] zeroplus 0003:0C12:0030.0003: unknown main item tag 0x0 [ 105.403209][ T9] zeroplus 0003:0C12:0030.0003: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 105.416137][ T9] zeroplus 0003:0C12:0030.0003: no inputs found [ 105.447071][ T59] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.547683][ T9] usb 4-1: USB disconnect, device number 2 [ 105.619140][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 105.657307][ T59] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.674376][ T59] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.704414][ T59] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.721590][ T59] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.735632][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.750399][ T59] usb 1-1: config 0 descriptor?? [ 106.098682][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.172229][ T59] hid (null): invalid report_count 40908 [ 106.214156][ T59] hid (null): global environment stack underflow [ 106.258250][ T59] hid (null): report_id 0 is invalid [ 106.297092][ T59] hid (null): unknown global tag 0xc [ 106.303008][ T59] hid (null): unknown global tag 0xcf [ 106.368632][ T59] hid (null): invalid report_size 10288 [ 106.445738][ T59] hid (null): unknown global tag 0xc [ 106.573003][ T59] usb 1-1: USB disconnect, device number 3 [ 106.919422][ T5840] kernel read not supported for file /dsp (pid: 5840 comm: kworker/0:3) [ 107.120597][ T6291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.158713][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.166891][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.351089][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.174'. [ 107.373757][ T6301] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 107.454571][ T5879] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 107.637120][ T5879] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.659488][ T5879] usb 5-1: config 0 has no interface number 0 [ 107.684809][ T5879] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 107.717906][ T5879] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 107.751872][ T5879] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.761917][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.785779][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.805210][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.816163][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.850324][ T5879] usb 5-1: config 0 descriptor?? [ 107.866867][ T6295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.901639][ T5879] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 107.977180][ T9] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 107.991625][ T9] usb 3-1: config 0 has no interface number 0 [ 108.033347][ T9] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 108.054113][ T6325] pim6reg: tun_chr_ioctl cmd 1074025677 [ 108.059911][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.075141][ T6325] pim6reg: linktype set to 6 [ 108.083535][ T9] usb 3-1: Product: syz [ 108.103262][ T9] usb 3-1: Manufacturer: syz [ 108.125490][ T9] usb 3-1: SerialNumber: syz [ 108.126070][ T6329] process 'syz.0.189' launched '/dev/fd/3' with NULL argv: empty string added [ 108.147053][ T9] usb 3-1: config 0 descriptor?? [ 108.156567][ T5879] usb 5-1: USB disconnect, device number 3 [ 108.156649][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 108.175906][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.846466][ T6352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.200'. [ 109.011164][ T9] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.042019][ T9] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 109.055669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.079924][ T9] asix 3-1:0.239: probe with driver asix failed with error -71 [ 109.136957][ T9] usb 3-1: USB disconnect, device number 2 [ 109.171049][ T6360] unknown channel width for channel at 909000KHz? [ 110.255841][ T5880] net_ratelimit: 1 callbacks suppressed [ 110.255862][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.403452][ T6403] overlayfs: missing 'lowerdir' [ 110.550686][ T6406] netlink: 232 bytes leftover after parsing attributes in process `syz.0.224'. [ 110.580985][ T30] audit: type=1326 audit(1744584183.824:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 110.606120][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 110.635321][ T30] audit: type=1326 audit(1744584183.824:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 110.667613][ T30] audit: type=1326 audit(1744584183.834:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 110.689535][ T6408] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 110.742558][ T30] audit: type=1326 audit(1744584183.834:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f463638d1a3 code=0x7ffc0000 [ 110.814843][ T30] audit: type=1326 audit(1744584183.834:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f463638d1a3 code=0x7ffc0000 [ 110.896309][ T30] audit: type=1326 audit(1744584183.834:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 110.934509][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.957875][ T6417] netlink: 280 bytes leftover after parsing attributes in process `syz.1.229'. [ 110.967145][ T30] audit: type=1326 audit(1744584183.834:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 110.998578][ T30] audit: type=1326 audit(1744584183.884:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 111.028902][ T30] audit: type=1326 audit(1744584183.884:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 111.050756][ T6420] vxcan1: tx address claim with dest, not broadcast [ 111.065995][ T30] audit: type=1326 audit(1744584183.884:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6409 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463638d169 code=0x7ffc0000 [ 111.115628][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.285540][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 111.296346][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.308622][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.331706][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.370415][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.419385][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 111.462719][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.494362][ T9] usb 4-1: config 0 descriptor?? [ 111.499711][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 111.757776][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.775872][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.009233][ T9] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x2 [ 112.045303][ T9] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 112.071622][ T9] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 112.121452][ T9] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 112.165233][ T9] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 112.191192][ T6452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.200458][ T9] hid-multitouch 0003:045E:9994.0005: unknown main item tag 0x0 [ 112.228504][ T9] hid-multitouch 0003:045E:9994.0005: unbalanced collection at end of report description [ 112.263133][ T9] hid-multitouch 0003:045E:9994.0005: probe with driver hid-multitouch failed with error -22 [ 112.311693][ T9] usb 4-1: USB disconnect, device number 3 [ 112.350311][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.050752][ T6483] tun0: tun_chr_ioctl cmd 1074025678 [ 113.075469][ T6483] tun0: group set to 0 [ 113.386869][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.614328][ T6506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 113.946025][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.217487][ T6521] capability: warning: `syz.1.274' uses deprecated v2 capabilities in a way that may be insecure [ 114.335773][ T6528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.379692][ T6528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.407575][ T6528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.634703][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 115.462865][ T5881] net_ratelimit: 3 callbacks suppressed [ 115.462885][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.217556][ T6586] Bluetooth: MGMT ver 1.23 [ 116.248750][ T6588] netlink: 788 bytes leftover after parsing attributes in process `syz.1.303'. [ 116.498915][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.596614][ T6601] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 116.615262][ T6600] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 116.628216][ T6602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.309'. [ 116.988289][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.392829][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.466570][ T6627] ======================================================= [ 117.466570][ T6627] WARNING: The mand mount option has been deprecated and [ 117.466570][ T6627] and is ignored by this kernel. Remove the mand [ 117.466570][ T6627] option from the mount to silence this warning. [ 117.466570][ T6627] ======================================================= [ 117.518767][ T6627] bpf: Bad value for 'uid' [ 117.535739][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.666487][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 117.701251][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 117.853808][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 118.025507][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.033667][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.575773][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.819832][ T6657] --map-set only usable from mangle table [ 118.875664][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.280227][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.321653][ T5881] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 119.331891][ T5881] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 119.377552][ T5881] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 119.396876][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.475961][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.477589][ T5881] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 119.517274][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.575424][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.604898][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.620915][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.645033][ T5840] usb 3-1: config 0 descriptor?? [ 119.669317][ T5881] gspca_sn9c2028: read1 error -32 [ 119.696890][ T5881] gspca_sn9c2028: read1 error -32 [ 119.811532][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'. [ 119.988492][ T5880] usb 2-1: USB disconnect, device number 4 [ 120.093518][ T5840] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 120.142990][ T5840] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 120.380784][ T24] usb 3-1: USB disconnect, device number 3 [ 120.450489][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.620926][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 120.657714][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.673488][ T5881] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.702461][ T5881] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.724159][ T5881] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 120.735790][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.798237][ T5881] hub 5-1:4.0: USB hub found [ 120.994948][ T5881] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 121.060426][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.359631][ T5881] usb 5-1: USB disconnect, device number 4 [ 121.723030][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.911001][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 121.968875][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.068113][ T6715] team0: Device ipvlan2 failed to register rx_handler [ 122.194656][ T6715] syz.4.361 (6715) used greatest stack depth: 19576 bytes left [ 122.250979][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.277748][ T6717] mmap: syz.0.355 (6717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.388192][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.649925][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.746898][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'. [ 122.793351][ T6730] netlink: 'syz.1.366': attribute type 12 has an invalid length. [ 122.812337][ T6730] netlink: 'syz.1.366': attribute type 29 has an invalid length. [ 122.840964][ T6730] netlink: 'syz.1.366': attribute type 2 has an invalid length. [ 122.863625][ T6730] netlink: 128 bytes leftover after parsing attributes in process `syz.1.366'. [ 123.192760][ T1147] bridge_slave_1: left allmulticast mode [ 123.209392][ T1147] bridge_slave_1: left promiscuous mode [ 123.227053][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.321833][ T1147] bridge_slave_0: left allmulticast mode [ 123.331756][ T1147] bridge_slave_0: left promiscuous mode [ 123.349062][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.392076][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.400730][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.408892][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.428130][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.453878][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.820429][ T6758] serio: Serial port ptm0 [ 124.053092][ T6766] sctp: [Deprecated]: syz.4.373 (pid 6766) Use of int in maxseg socket option. [ 124.053092][ T6766] Use struct sctp_assoc_value instead [ 124.505122][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.545024][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.569020][ T1147] bond0 (unregistering): Released all slaves [ 125.018615][ T6778] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 125.113800][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 125.535823][ T5835] Bluetooth: hci4: command tx timeout [ 125.981818][ T1147] hsr_slave_0: left promiscuous mode [ 126.010633][ T1147] hsr_slave_1: left promiscuous mode [ 126.025113][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.060893][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.112661][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.143452][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.328654][ T1147] veth1_macvtap: left promiscuous mode [ 126.363635][ T1147] veth0_macvtap: left promiscuous mode [ 126.372595][ T1147] veth1_vlan: left promiscuous mode [ 126.391266][ T1147] veth0_vlan: left promiscuous mode [ 127.066214][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 127.114331][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 127.390997][ T6824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.625929][ T5835] Bluetooth: hci4: command tx timeout [ 127.844014][ T6742] chnl_net:caif_netlink_parms(): no params data found [ 128.514313][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.580273][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.629998][ T6742] bridge_slave_0: entered allmulticast mode [ 128.630827][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 128.638174][ T6742] bridge_slave_0: entered promiscuous mode [ 128.707428][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.714710][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.729410][ T6742] bridge_slave_1: entered allmulticast mode [ 128.738676][ T6742] bridge_slave_1: entered promiscuous mode [ 128.973681][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.029975][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.081880][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 129.303409][ T6742] team0: Port device team_slave_0 added [ 129.354576][ T6742] team0: Port device team_slave_1 added [ 129.430455][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 129.537631][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 129.579557][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 129.619147][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.645600][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.710201][ T5835] Bluetooth: hci4: command tx timeout [ 129.721405][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.764566][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.799605][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.827799][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.100855][ T6742] hsr_slave_0: entered promiscuous mode [ 130.133179][ T6742] hsr_slave_1: entered promiscuous mode [ 130.154399][ T6742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.186979][ T6742] Cannot create hsr debugfs directory [ 130.885075][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 131.070562][ T6954] bond1 (unregistering): Released all slaves [ 131.498997][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 131.499014][ T30] audit: type=1326 audit(1744584204.754:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 131.573958][ T30] audit: type=1326 audit(1744584204.754:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 131.607393][ T30] audit: type=1326 audit(1744584204.784:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 131.731340][ T30] audit: type=1326 audit(1744584204.814:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 131.778693][ T5835] Bluetooth: hci4: command tx timeout [ 131.797565][ T30] audit: type=1326 audit(1744584204.814:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 131.874714][ T30] audit: type=1326 audit(1744584204.854:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 131.913986][ T30] audit: type=1326 audit(1744584204.854:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 131.982228][ T30] audit: type=1326 audit(1744584204.854:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 132.040879][ T30] audit: type=1326 audit(1744584204.854:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 132.091588][ T30] audit: type=1326 audit(1744584204.854:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x7ffc0000 [ 132.432843][ T6742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.467218][ T7015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 132.489829][ T6742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.601266][ T6742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.631029][ T6742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.745385][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.752027][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.979139][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.081001][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.157993][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.165162][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.259246][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.266454][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.445276][ T6742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.109726][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.351730][ T6742] veth0_vlan: entered promiscuous mode [ 134.416785][ T6742] veth1_vlan: entered promiscuous mode [ 134.587982][ T6742] veth0_macvtap: entered promiscuous mode [ 134.631531][ T6742] veth1_macvtap: entered promiscuous mode [ 134.733105][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.775379][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.805835][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.842548][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.856221][ T7087] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 134.925374][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.984118][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.037935][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.079910][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.117109][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.198184][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.219230][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.243543][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.276306][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.308526][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.325548][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.342285][ T6742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.352911][ T6742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.364866][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.400989][ T6742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.447287][ T6742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.477306][ T6742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.498586][ T6742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.692553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.717711][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.806126][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.835793][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.895600][ T5835] Bluetooth: hci1: command 0x080f tx timeout [ 138.275526][ T59] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 138.461557][ T59] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 138.484026][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.538939][ T59] usb 4-1: config 0 descriptor?? [ 138.566690][ T59] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 138.786215][ T59] gp8psk: usb in 128 operation failed. [ 138.995358][ T59] gp8psk: FW Version = 48.28.159 (0x301c9f) Build 2206/163/118 [ 139.196621][ T59] gp8psk: usb in 149 operation failed. [ 139.212352][ T59] gp8psk: failed to get FPGA version [ 139.238354][ T59] gp8psk: usb in 138 operation failed. [ 139.254145][ T59] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 139.271988][ T59] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 139.283389][ T59] usb 4-1: USB disconnect, device number 4 [ 139.606615][ T7275] sch_fq: defrate 13850 ignored. [ 140.325868][ T59] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.502330][ T59] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.515649][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.535385][ T59] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.569155][ T59] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.603061][ T59] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 140.633518][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.658893][ T7309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.695481][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 140.715896][ T5881] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.739726][ T5881] usb 1-1: config 0 has no interface number 0 [ 140.774791][ T5881] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.794306][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.817163][ T5881] usb 1-1: Product: syz [ 140.821395][ T5881] usb 1-1: Manufacturer: syz [ 140.840671][ T5881] usb 1-1: SerialNumber: syz [ 140.862638][ T5881] usb 1-1: config 0 descriptor?? [ 140.897840][ T5881] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.110559][ T5881] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.157356][ T5881] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.325860][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 48 [ 141.537277][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.549633][ T5880] usb 1-1: USB disconnect, device number 4 [ 141.571892][ T5880] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.616895][ T5880] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.650702][ T5880] quatech2 1-1:0.51: device disconnected [ 141.698148][ T59] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 141.707932][ T59] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 141.775851][ T59] usb 3-1: USB disconnect, device number 4 [ 141.781769][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 142.413234][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 142.413253][ T30] audit: type=1326 audit(1744584215.664:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8b1584127 code=0x7ffc0000 [ 142.440657][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.463631][ T30] audit: type=1326 audit(1744584215.704:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8b1529359 code=0x7ffc0000 [ 142.485449][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.486034][ T7377] macvtap1: entered allmulticast mode [ 142.512964][ T30] audit: type=1326 audit(1744584215.704:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8b1584127 code=0x7ffc0000 [ 142.513637][ T7377] veth0_macvtap: entered allmulticast mode [ 142.543888][ T30] audit: type=1326 audit(1744584215.704:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8b1529359 code=0x7ffc0000 [ 142.572002][ T30] audit: type=1326 audit(1744584215.704:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8b1584127 code=0x7ffc0000 [ 142.674407][ T30] audit: type=1326 audit(1744584215.704:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8b1529359 code=0x7ffc0000 [ 142.706030][ T30] audit: type=1326 audit(1744584215.704:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8b1584127 code=0x7ffc0000 [ 142.785458][ T30] audit: type=1326 audit(1744584215.704:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8b1529359 code=0x7ffc0000 [ 142.806678][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.832443][ T30] audit: type=1326 audit(1744584215.704:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa8b1584127 code=0x7ffc0000 [ 142.869100][ T7394] netlink: 96 bytes leftover after parsing attributes in process `syz.2.588'. [ 142.902633][ T30] audit: type=1326 audit(1744584215.704:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7375 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa8b1529359 code=0x7ffc0000 [ 142.923860][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.727671][ T5879] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 143.869593][ T7450] syz.3.614: attempt to access beyond end of device [ 143.869593][ T7450] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 143.887938][ T7450] syz.3.614: attempt to access beyond end of device [ 143.887938][ T7450] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 143.901925][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 143.905707][ T5880] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.914465][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.936000][ T7450] syz.3.614: attempt to access beyond end of device [ 143.936000][ T7450] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 143.949064][ T5879] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.960338][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 143.973423][ T5879] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.986694][ T7450] syz.3.614: attempt to access beyond end of device [ 143.986694][ T7450] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 143.990302][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.013670][ T5879] usb 3-1: Product: syz [ 144.017992][ T5879] usb 3-1: Manufacturer: syz [ 144.022614][ T5879] usb 3-1: SerialNumber: syz [ 144.036671][ T7450] syz.3.614: attempt to access beyond end of device [ 144.036671][ T7450] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 144.049921][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 144.059987][ T7450] syz.3.614: attempt to access beyond end of device [ 144.059987][ T7450] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 144.074053][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 144.084974][ T7450] syz.3.614: attempt to access beyond end of device [ 144.084974][ T7450] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 144.098495][ T7450] syz.3.614: attempt to access beyond end of device [ 144.098495][ T7450] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 144.112020][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 144.122140][ T7450] syz.3.614: attempt to access beyond end of device [ 144.122140][ T7450] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 144.136907][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 144.147523][ T7450] syz.3.614: attempt to access beyond end of device [ 144.147523][ T7450] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 144.160945][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 144.171035][ T7450] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 144.181331][ T7450] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 144.397224][ T5880] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 144.405456][ T5880] usb 5-1: config 0 has no interface number 0 [ 144.411596][ T5880] usb 5-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 144.421251][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.445727][ T5880] usb 5-1: config 0 descriptor?? [ 144.463469][ T5880] usb-storage 5-1:0.33: USB Mass Storage device detected [ 144.698279][ T5880] usb 5-1: USB disconnect, device number 5 [ 144.899222][ T5879] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 144.916922][ T5879] cdc_ncm 3-1:1.0: bind() failure [ 144.944437][ T5879] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 144.961683][ T5879] cdc_ncm 3-1:1.1: bind() failure [ 144.989356][ T5879] usb 3-1: USB disconnect, device number 5 [ 145.565447][ T5879] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.730553][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 145.742877][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.753951][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.766456][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.783448][ T5879] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 145.793572][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.814262][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.824640][ T5879] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.834024][ T5879] usb 2-1: Manufacturer: syz [ 145.841678][ T5879] usb 2-1: config 0 descriptor?? [ 145.846989][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 145.861486][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 145.870428][ T7501] nbd: socks must be embedded in a SOCK_ITEM attr [ 146.165849][ T5879] rc_core: IR keymap rc-hauppauge not found [ 146.171802][ T5879] Registered IR keymap rc-empty [ 146.212437][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.245863][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.287596][ T5879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 146.318016][ T5879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 146.383391][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.425933][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.468229][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.495774][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.536643][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.565540][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.603323][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.645746][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.695468][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.725954][ T5879] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 146.755958][ T5879] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 146.784395][ T5879] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.815149][ T5879] usb 2-1: USB disconnect, device number 6 [ 147.561520][ T7542] netlink: 'syz.3.653': attribute type 4 has an invalid length. [ 147.609864][ T7542] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.653'. [ 148.463048][ T7563] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 148.536827][ T7563] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 148.565062][ T7563] macvtap2: entered promiscuous mode [ 148.586257][ T7563] macvtap2: entered allmulticast mode [ 148.596323][ T7563] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 148.793605][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 148.835436][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 148.915622][ T59] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.086894][ T59] usb 2-1: Using ep0 maxpacket: 32 [ 149.095062][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.136367][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.175417][ T59] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 149.184507][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.237770][ T59] usb 2-1: config 0 descriptor?? [ 149.671062][ T59] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 149.692048][ T59] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 149.719923][ T59] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 149.732301][ T7614] loop6: detected capacity change from 0 to 524287999 [ 149.734148][ T7612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.767826][ T59] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 149.774997][ T59] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 149.807292][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.816612][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.825788][ T59] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 149.829140][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.846287][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.854750][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.863943][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.872401][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.881596][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.891339][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.900561][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.910266][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.919448][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.940523][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.949742][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.964846][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.974112][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.982049][ T7614] ldm_validate_partition_table(): Disk read failed. [ 149.993561][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.002737][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.016373][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.025563][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 150.042844][ T7614] Dev loop6: unable to read RDB block 0 [ 150.050155][ T7614] loop6: unable to read partition table [ 150.056225][ T7614] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 150.168651][ T3500] usb 2-1: USB disconnect, device number 7 [ 150.362277][ T7636] netlink: 10 bytes leftover after parsing attributes in process `syz.0.695'. [ 150.900357][ T7661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.575210][ T7680] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 151.632418][ T7680] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.650894][ T7680] macvtap1: entered promiscuous mode [ 151.665729][ T7680] macvtap1: entered allmulticast mode [ 151.691632][ T7680] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 151.925658][ T59] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.079604][ T59] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 152.097646][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.108662][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 152.130328][ T59] usb 4-1: config 0 descriptor?? [ 152.737950][ T5880] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 152.884710][ T7731] team0: Device ipvlan2 failed to register rx_handler [ 152.923432][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.934256][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 152.954168][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.964673][ T59] usb 4-1: Cannot set autoneg [ 152.971507][ T59] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 152.993430][ T59] usb 4-1: USB disconnect, device number 5 [ 153.001068][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 153.028496][ T5880] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.043306][ T5880] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.061264][ T5880] usb 5-1: Manufacturer: syz [ 153.070710][ T5880] usb 5-1: config 0 descriptor?? [ 153.252955][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 153.252975][ T30] audit: type=1326 audit(1744584226.504:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58df8d169 code=0x7fc00000 [ 153.344624][ T7739] block device autoloading is deprecated and will be removed. [ 153.370279][ T7739] bio_check_eod: 2 callbacks suppressed [ 153.370298][ T7739] syz.2.743: attempt to access beyond end of device [ 153.370298][ T7739] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.415439][ T5880] rc_core: IR keymap rc-hauppauge not found [ 153.421539][ T5880] Registered IR keymap rc-empty [ 153.431797][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.466324][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.496931][ T5880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 153.551376][ T5880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 153.606627][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.639016][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.695727][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.725771][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.745453][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.776736][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.815621][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.835621][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.867483][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.885450][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.905828][ T5880] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 153.927301][ T5880] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 153.936802][ T5880] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 153.948472][ T5880] usb 5-1: USB disconnect, device number 6 [ 154.055516][ T3500] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 154.208386][ T3500] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 154.217558][ T3500] usb 3-1: config 0 has no interface number 0 [ 154.226123][ T3500] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 154.235569][ T3500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.243577][ T3500] usb 3-1: Product: syz [ 154.247992][ T3500] usb 3-1: Manufacturer: syz [ 154.252608][ T3500] usb 3-1: SerialNumber: syz [ 154.261650][ T3500] usb 3-1: config 0 descriptor?? [ 154.268965][ T3500] usb-storage 3-1:0.20: USB Mass Storage device detected [ 154.290720][ T3500] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 154.499692][ T5879] usb 3-1: USB disconnect, device number 6 [ 154.611021][ T7773] input: syz1 as /devices/virtual/input/input12 [ 154.732424][ T7777] Invalid/unusable pipe [ 155.207422][ T7805] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 155.431399][ T7814] Zero length message leads to an empty skb [ 155.842595][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'. [ 156.504173][ T7856] capability: warning: `syz.3.791' uses 32-bit capabilities (legacy support in use) [ 156.788265][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.253392][ T7891] input: syz1 as /devices/virtual/input/input13 [ 157.399087][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.566412][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 157.593522][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.612892][ T24] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 157.643508][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.679117][ T24] usb 3-1: config 0 descriptor?? [ 158.097643][ T24] holtek 0003:1241:5015.0008: unknown main item tag 0x0 [ 158.119190][ T24] holtek 0003:1241:5015.0008: item fetching failed at offset 3/5 [ 158.136319][ T24] holtek 0003:1241:5015.0008: parse failed [ 158.155451][ T24] holtek 0003:1241:5015.0008: probe with driver holtek failed with error -22 [ 158.322880][ T24] usb 3-1: USB disconnect, device number 7 [ 158.884037][ T7941] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 159.031253][ T7948] xt_hashlimit: max too large, truncated to 1048576 [ 159.058685][ T7948] Cannot find set identified by id 0 to match [ 159.297424][ T7964] Failed to get privilege flags for destination (handle=0x2:0x9) [ 160.067739][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.095522][ T59] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.235623][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 160.247802][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.265777][ T24] usb 4-1: config 0 has no interface number 0 [ 160.278369][ T59] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 160.295607][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.305236][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 160.325292][ T59] usb 5-1: Product: syz [ 160.332279][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.344170][ T59] usb 5-1: Manufacturer: syz [ 160.351881][ T24] usb 4-1: Product: syz [ 160.357341][ T59] usb 5-1: SerialNumber: syz [ 160.362256][ T24] usb 4-1: Manufacturer: syz [ 160.373381][ T59] usb 5-1: config 0 descriptor?? [ 160.379593][ T24] usb 4-1: SerialNumber: syz [ 160.390723][ T24] usb 4-1: config 0 descriptor?? [ 160.399257][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 160.623885][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 160.657941][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 160.775486][ T3500] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.793047][ T59] usb 5-1: Firmware: major: 108, minor: 98, hardware type: RZUSB (3) [ 160.934068][ T3500] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.945965][ T3500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.957028][ T3500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.957057][ T3500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.957103][ T3500] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.957126][ T3500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.970404][ T3500] usb 1-1: config 0 descriptor?? [ 161.007841][ T59] usb 5-1: failed to fetch extended address, random address set [ 161.019534][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 41 [ 161.087872][ T59] usb 5-1: USB disconnect, device number 7 [ 161.163193][ T8029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.870'. [ 161.220374][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.221642][ T5879] usb 4-1: USB disconnect, device number 6 [ 161.241731][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.266092][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.283097][ T5879] quatech2 4-1:0.51: device disconnected [ 161.406085][ T3500] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 161.415685][ T3500] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 161.432236][ T3500] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 161.629951][ T3500] usb 1-1: USB disconnect, device number 6 [ 161.686762][ T59] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.845618][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 161.853600][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.870892][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.889013][ T59] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.910047][ T59] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.919667][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.931525][ T59] usb 2-1: config 0 descriptor?? [ 162.074517][ T24] kernel write not supported for file /sequencer (pid: 24 comm: kworker/1:0) [ 162.365215][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x2 [ 162.373218][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.405458][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.412723][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.430340][ T8072] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.439788][ T8072] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.448812][ T8072] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.455380][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.457733][ T8072] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.488250][ T8072] vxlan0: entered promiscuous mode [ 162.493490][ T8072] vxlan0: entered allmulticast mode [ 162.494170][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.530405][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.555849][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.574281][ T59] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 162.615095][ T59] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input14 [ 162.646632][ T59] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 162.681646][ T59] usb 2-1: USB disconnect, device number 8 [ 162.930881][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 163.125043][ T30] audit: type=1400 audit(1744584236.374:88): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8098 comm="syz.3.903" dest=20002 netif=wpan0 [ 163.564459][ T8123] netlink: 'syz.1.913': attribute type 10 has an invalid length. [ 163.590825][ T8123] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 163.683601][ T8127] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 163.730906][ T8133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.737798][ T8127] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.754426][ T8127] macvtap1: entered promiscuous mode [ 163.760911][ T8127] macvtap1: entered allmulticast mode [ 163.771243][ T8127] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 164.186068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 164.491245][ T8165] program syz.1.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.905757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.914675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.946279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 165.022712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 165.055949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 165.085728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 165.153571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 165.960080][ T8209] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 165.978208][ T8209] netlink: 'syz.3.953': attribute type 3 has an invalid length. [ 166.016669][ T8209] netlink: 216 bytes leftover after parsing attributes in process `syz.3.953'. [ 166.059779][ T8209] NCSI netlink: No device for ifindex 813332851 [ 166.522930][ T8235] dummy0: entered allmulticast mode [ 166.543920][ T8234] dummy0: left allmulticast mode [ 167.489705][ T8288] netlink: 'syz.1.989': attribute type 11 has an invalid length. [ 167.760777][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 167.828836][ T8304] netlink: 104 bytes leftover after parsing attributes in process `syz.1.994'. [ 167.950864][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 167.960832][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 169.307383][ T8355] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.355479][ T8355] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 169.364020][ T8355] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.405018][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 169.417645][ T8361] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.445668][ T8355] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 169.459986][ T8361] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 169.503117][ T8361] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.532251][ T8361] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 170.504586][ T8421] program syz.0.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.584388][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.592239][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.335393][ T59] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.505543][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 171.524118][ T59] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 171.546608][ T59] usb 5-1: config 8 has no interface number 0 [ 171.563652][ T59] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 171.611257][ T59] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 171.641320][ T59] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 171.662730][ T59] usb 5-1: config 8 interface 39 has no altsetting 0 [ 171.679808][ T59] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 171.690410][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.700838][ T59] usb 5-1: Product: syz [ 171.705097][ T59] usb 5-1: Manufacturer: syz [ 171.713409][ T59] usb 5-1: SerialNumber: syz [ 172.336130][ T59] ipheth 5-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 172.376570][ T59] ipheth 5-1:8.39: Apple iPhone USB Ethernet device attached [ 172.496076][ T5879] kernel read not supported for file /dsp (pid: 5879 comm: kworker/0:5) [ 172.571750][ T24] usb 5-1: USB disconnect, device number 8 [ 172.654123][ T8524] input: syz1 as /devices/virtual/input/input15 [ 172.736392][ T24] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 172.885495][ T30] audit: type=1326 audit(1744584246.134:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8533 comm="syz.0.1102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc58df8d169 code=0x0 [ 172.906450][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.504869][ T8558] @: renamed from vlan0 (while UP) [ 174.913144][ T8612] ptrace attach of ""[8613] was attempted by "./syz-executor exec"[8612] [ 174.940327][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 175.208035][ T8625] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.332176][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.700289][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.808398][ T8641] dvmrp0: entered allmulticast mode [ 175.831540][ T8641] dvmrp0: left allmulticast mode [ 176.154089][ T30] audit: type=1326 audit(1744584249.404:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d49d8d169 code=0x0 [ 176.192979][ T8658] syz.2.1160 uses obsolete (PF_INET,SOCK_PACKET) [ 176.382781][ T8666] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 176.404193][ T8666] syzkaller1: linktype set to 825 [ 176.659721][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 176.712649][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 176.883131][ T8687] serio: Serial port ttyS3 [ 177.188223][ T8702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.780373][ T66] wlan1: Trigger new scan to find an IBSS to join [ 178.855876][ T8764] sp0: Synchronizing with TNC [ 178.938259][ T59] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.119883][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 179.139594][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.161436][ T59] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.172399][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.188338][ T59] usb 1-1: config 0 descriptor?? [ 179.243408][ T8783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1214'. [ 179.619131][ T59] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 179.675826][ T8801] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.770368][ T8803] batadv0: entered promiscuous mode [ 179.789695][ T8803] macvtap1: entered allmulticast mode [ 179.795201][ T8803] batadv0: entered allmulticast mode [ 179.807101][ T8803] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 179.840781][ T8807] IPv6: Can't replace route, no match found [ 180.016331][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 180.037477][ T59] usb 1-1: USB disconnect, device number 7 [ 180.329745][ T8834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.003041][ T8869] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1257'. [ 181.199401][ T8875] openvswitch: netlink: IP tunnel dst address not specified [ 181.468965][ T8886] blkio.reset_stats is deprecated [ 181.493556][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 181.786359][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 181.806523][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 182.080319][ T8917] program syz.3.1278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.815507][ T13] wlan1: Trigger new scan to find an IBSS to join [ 182.940574][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 183.051013][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.058677][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.413498][ T8979] misc userio: Can't change port type on an already running userio instance [ 183.460986][ T8981] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1308'. [ 183.671596][ T8996] netlink: 'syz.3.1316': attribute type 4 has an invalid length. [ 183.691886][ T8997] misc userio: No port type given on /dev/userio [ 183.730586][ T64] wlan1: Creating new IBSS network, BSSID 7e:d9:47:33:4f:dc [ 183.805641][ T59] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.955446][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 183.969449][ T59] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 183.991634][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.029091][ T59] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 184.048554][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.063904][ T59] usb 3-1: Product: syz [ 184.076396][ T59] usb 3-1: Manufacturer: syz [ 184.085460][ T59] usb 3-1: SerialNumber: syz [ 184.103008][ T59] usb 3-1: config 0 descriptor?? [ 184.129616][ T59] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 184.155376][ T59] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 184.732855][ T59] em28xx 3-1:0.0: chip ID is em2874 [ 184.865611][ T5880] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.939063][ T59] usb 3-1: USB disconnect, device number 8 [ 184.950844][ T59] em28xx 3-1:0.0: Disconnecting em28xx [ 184.971129][ T59] em28xx 3-1:0.0: Freeing device [ 185.019810][ T9067] cifs: Unknown parameter 'mode' [ 185.037241][ T5880] usb 4-1: config 1 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 185.075578][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.097629][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.119418][ T5880] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 185.139266][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.175005][ T5880] usb-storage 4-1:1.0: USB Mass Storage device detected [ 185.200483][ T5880] usb-storage 4-1:1.0: Quirks match for vid 1908 pid 1315: 20000 [ 185.409060][ T5840] usb 4-1: USB disconnect, device number 7 [ 185.486745][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1359'. [ 185.500804][ T9091] bond0: option ad_select: unable to set because the bond device is up [ 185.905594][ T59] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.088225][ T59] usb 2-1: Using ep0 maxpacket: 32 [ 186.105668][ T5835] Bluetooth: hci4: command tx timeout [ 186.113497][ T59] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 186.123656][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.149510][ T59] usb 2-1: config 0 descriptor?? [ 186.158234][ T59] gspca_main: sq930x-2.14.0 probing 041e:403c [ 186.171688][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 186.239063][ T9135] dvmrp0: entered allmulticast mode [ 186.273976][ T9135] dvmrp0: left allmulticast mode [ 186.805384][ T59] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 186.812467][ T59] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 186.855848][ T59] usb 2-1: USB disconnect, device number 9 [ 187.199942][ T9172] netlink: 'syz.0.1397': attribute type 10 has an invalid length. [ 187.230415][ T9172] syz_tun: entered promiscuous mode [ 187.263142][ T9172] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.793001][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1406'. [ 187.904705][ T9194] netlink: 'syz.0.1407': attribute type 25 has an invalid length. [ 188.110181][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 189.400731][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 189.630007][ T9237] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 190.685702][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.857164][ T5879] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 190.885741][ T5879] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 190.894639][ T5879] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 190.954439][ T5879] usb 1-1: config 220 has no interface number 2 [ 190.961023][ T5879] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 190.993957][ T5879] usb 1-1: config 220 interface 0 has no altsetting 0 [ 191.004440][ T5879] usb 1-1: config 220 interface 76 has no altsetting 0 [ 191.012308][ T5879] usb 1-1: config 220 interface 1 has no altsetting 0 [ 191.031044][ T5879] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 191.045681][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.053720][ T5879] usb 1-1: Product: syz [ 191.079257][ T5879] usb 1-1: Manufacturer: syz [ 191.083890][ T5879] usb 1-1: SerialNumber: syz [ 191.323914][ T5879] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 191.338618][ T5879] usb 1-1: No valid video chain found. [ 191.355994][ T5879] usb 1-1: selecting invalid altsetting 0 [ 191.382014][ T5879] usb 1-1: selecting invalid altsetting 0 [ 191.397457][ T5879] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 191.420495][ T5879] usb 1-1: USB disconnect, device number 8 [ 191.951680][ T9271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1442'. [ 193.145993][ T59] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 193.302564][ T9315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.318815][ T59] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 193.328148][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.347266][ T59] usb 2-1: Product: syz [ 193.352421][ T59] usb 2-1: Manufacturer: syz [ 193.365483][ T59] usb 2-1: SerialNumber: syz [ 193.401490][ T59] usb 2-1: config 0 descriptor?? [ 193.622712][ T59] usb 2-1: ignoring: probably an ADSL modem [ 194.024786][ T59] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 194.099626][ T5880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.186390][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193173][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.235173][ T3500] usb 2-1: USB disconnect, device number 10 [ 194.275454][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 194.287768][ T5880] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 194.315413][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.344669][ T5880] usb 1-1: Product: syz [ 194.364983][ T5880] usb 1-1: Manufacturer: syz [ 194.375129][ T5880] usb 1-1: SerialNumber: syz [ 194.389293][ T5880] usb 1-1: config 0 descriptor?? [ 194.414313][ T5880] gspca_main: se401-2.14.0 probing 047d:5003 [ 195.037050][ T5880] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 195.259647][ T5880] usb 1-1: USB disconnect, device number 9 [ 195.350518][ T9350] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1479'. [ 196.107009][ T9373] loop6: detected capacity change from 0 to 524287999 [ 196.118690][ C1] blk_print_req_error: 7 callbacks suppressed [ 196.118708][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.129726][ T9370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.134853][ C1] buffer_io_error: 7 callbacks suppressed [ 196.134883][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.143675][ T9370] bond0: (slave bond1): Enslaving as an active interface with an up link [ 196.177956][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.187170][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.196030][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.205215][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.214018][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.223241][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.256322][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.266097][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.286003][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.295832][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.305552][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.314759][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.323811][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.333038][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.345423][ T9373] ldm_validate_partition_table(): Disk read failed. [ 196.354611][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.363887][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.375527][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.385417][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 196.394944][ T9373] Dev loop6: unable to read RDB block 0 [ 196.433036][ T9373] loop6: unable to read partition table [ 196.447675][ T9373] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 197.856576][ T59] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.052195][ T59] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.074315][ T59] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.108856][ T59] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.115486][ T3500] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 198.134212][ T59] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.186290][ T9419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.210762][ T59] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.310039][ T3500] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 198.350076][ T3500] usb 4-1: config 7 has no interface number 0 [ 198.370822][ T3500] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 198.395448][ T3500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.431270][ T3500] usb 4-1: Product: syz [ 198.445606][ T3500] usb 4-1: Manufacturer: syz [ 198.454413][ T3500] usb 4-1: SerialNumber: syz [ 198.521263][ T5840] usb 2-1: USB disconnect, device number 11 [ 199.302706][ T3500] as10x_usb: device has been detected [ 199.325270][ T3500] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 199.394690][ T3500] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 199.470967][ T3500] as10x_usb: error during firmware upload part1 [ 199.489580][ T3500] Registered device Elgato EyeTV DTT Deluxe [ 199.545625][ T3500] usb 4-1: USB disconnect, device number 8 [ 199.629814][ T3500] Unregistered device Elgato EyeTV DTT Deluxe [ 199.632041][ T3500] as10x_usb: device has been disconnected [ 199.761533][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 200.295102][ T9479] vim2m vim2m.0: vidioc_s_fmt queue busy [ 200.470110][ T9484] netlink: 'syz.2.1538': attribute type 6 has an invalid length. [ 200.738354][ T5844] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.917504][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.957658][ T5844] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.999085][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.029748][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.078368][ T9487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 201.101715][ T5844] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.406301][ T3500] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.548003][ T5840] usb 2-1: USB disconnect, device number 12 [ 201.568430][ T3500] usb 4-1: Using ep0 maxpacket: 16 [ 201.602090][ T3500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 201.665928][ T3500] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 201.674999][ T3500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.702139][ T3500] usb 4-1: Product: syz [ 201.707337][ T3500] usb 4-1: Manufacturer: syz [ 201.711966][ T3500] usb 4-1: SerialNumber: syz [ 201.737718][ T3500] usb 4-1: config 0 descriptor?? [ 201.756738][ T3500] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 201.783249][ T3500] usb 4-1: Detected FT232R [ 201.965206][ T3500] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 202.200291][ T9513] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1552'. [ 202.221042][ T3500] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 202.413649][ T59] usb 4-1: USB disconnect, device number 9 [ 202.434592][ T59] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.466631][ T59] ftdi_sio 4-1:0.0: device disconnected [ 202.582595][ T30] audit: type=1326 audit(1744584275.834:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.618421][ T30] audit: type=1326 audit(1744584275.834:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.662578][ T30] audit: type=1326 audit(1744584275.834:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.695886][ T3500] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 202.725508][ T30] audit: type=1326 audit(1744584275.834:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.764178][ T9530] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1559'. [ 202.771254][ T30] audit: type=1326 audit(1744584275.834:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.811781][ T30] audit: type=1326 audit(1744584275.834:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.840699][ T30] audit: type=1326 audit(1744584275.834:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.889945][ T30] audit: type=1326 audit(1744584275.834:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.923348][ T3500] usb 2-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 202.940600][ T3500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.962873][ T30] audit: type=1326 audit(1744584275.844:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 202.985527][ T3500] usb 2-1: config 0 descriptor?? [ 203.000427][ T30] audit: type=1326 audit(1744584275.844:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9524 comm="syz.2.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651df8d169 code=0x7ffc0000 [ 203.203162][ T3500] usbhid 2-1:0.0: can't add hid device: -71 [ 203.224782][ T3500] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 203.268043][ T3500] usb 2-1: USB disconnect, device number 13 [ 203.475446][ T59] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.649249][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 203.667930][ T59] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.698084][ T59] usb 3-1: config 6 has an invalid interface number: 216 but max is 0 [ 203.725462][ T59] usb 3-1: config 6 has no interface number 0 [ 203.774443][ T59] usb 3-1: config 6 interface 216 has no altsetting 0 [ 203.827348][ T59] usb 3-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=c2.2a [ 203.846201][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.866093][ T59] usb 3-1: Product: syz [ 203.870623][ T59] usb 3-1: Manufacturer: syz [ 203.925354][ T59] usb 3-1: SerialNumber: syz [ 204.190843][ T59] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.216/input/input18 [ 204.230612][ T5186] bcm5974 3-1:6.216: could not read from device [ 204.239537][ T9567] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 204.246287][ T9567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 204.269240][ T5186] bcm5974 3-1:6.216: could not read from device [ 204.285060][ T59] usb 3-1: USB disconnect, device number 9 [ 204.290060][ T9567] vhci_hcd vhci_hcd.0: Device attached [ 204.312556][ T9568] vhci_hcd: connection closed [ 204.317110][ T53] vhci_hcd: stop threads [ 204.337524][ T53] vhci_hcd: release socket [ 204.352265][ T53] vhci_hcd: disconnect device [ 204.631914][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.643885][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.656199][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.665245][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.681749][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.007541][ T9589] zonefs (nullb0) ERROR: Not a zoned block device [ 205.112363][ T9591] batadv1: entered allmulticast mode [ 205.135786][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 205.145780][ T9591] bridge0: port 3(batadv1) entered blocking state [ 205.153649][ T9591] bridge0: port 3(batadv1) entered disabled state [ 205.166631][ T9591] batadv1: entered promiscuous mode [ 205.181503][ T9591] bridge0: port 3(batadv1) entered blocking state [ 205.188508][ T9591] bridge0: port 3(batadv1) entered forwarding state [ 205.229179][ T9576] chnl_net:caif_netlink_parms(): no params data found [ 205.610389][ T9576] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.623750][ T53] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 205.633151][ T53] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 205.657050][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.681784][ T9576] bridge_slave_0: entered allmulticast mode [ 205.695071][ T9576] bridge_slave_0: entered promiscuous mode [ 205.723358][ T9576] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.762901][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.784918][ T9576] bridge_slave_1: entered allmulticast mode [ 205.803409][ T9576] bridge_slave_1: entered promiscuous mode [ 205.919572][ T9576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.939867][ T5881] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.950127][ T9576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.045108][ T9576] team0: Port device team_slave_0 added [ 206.165827][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 206.173817][ T5881] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 206.183995][ T5881] usb 3-1: config 0 has no interface number 0 [ 206.195666][ T5881] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.250163][ T5881] usb 3-1: config 0 interface 85 has no altsetting 0 [ 206.275561][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.288648][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.313927][ T5881] usb 3-1: Product: syz [ 206.337331][ T5881] usb 3-1: Manufacturer: syz [ 206.355686][ T5881] usb 3-1: SerialNumber: syz [ 206.383752][ T5881] usb 3-1: config 0 descriptor?? [ 206.592196][ T9576] team0: Port device team_slave_1 added [ 206.689067][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.705370][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.736394][ T5141] Bluetooth: hci3: command tx timeout [ 206.809556][ T9576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.882880][ T9576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.911476][ T9576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.976065][ T9576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.157393][ T9576] hsr_slave_0: entered promiscuous mode [ 207.164180][ T9576] hsr_slave_1: entered promiscuous mode [ 207.187082][ T5881] appletouch 3-1:0.85: Geyser mode initialized. [ 207.209755][ T5881] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input19 [ 207.216584][ T9576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.246813][ C1] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 207.247052][ T9576] Cannot create hsr debugfs directory [ 207.459974][ T5880] usb 3-1: USB disconnect, device number 10 [ 207.551809][ T5880] appletouch 3-1:0.85: input: appletouch disconnected [ 207.809193][ T9576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.822786][ T9576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.844971][ T9576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.867168][ T9576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.905996][ T5881] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 207.954611][ T9668] netlink: 'syz.3.1615': attribute type 15 has an invalid length. [ 208.092057][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.129740][ T5881] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 208.161643][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.184479][ T9576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.210549][ T5881] usb 2-1: config 0 descriptor?? [ 208.285065][ T9576] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.347227][ T9678] openvswitch: netlink: Message has 744 unknown bytes. [ 208.356330][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.363516][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.414066][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.421312][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.594968][ T59] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 208.675197][ T5881] aquacomputer_d5next 0003:0C70:F00B.000C: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 208.765443][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 208.771221][ C1] hrtimer: interrupt took 609291 ns [ 208.810808][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.824979][ T5141] Bluetooth: hci3: command tx timeout [ 208.855550][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.885916][ T59] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 208.901061][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.914194][ T59] usb 1-1: config 0 descriptor?? [ 208.938601][ T24] usb 2-1: USB disconnect, device number 14 [ 209.208149][ T9694] IPVS: starting estimator thread 0... [ 209.255001][ T9576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.309602][ T9709] IPVS: using max 26 ests per chain, 62400 per kthread [ 209.314984][ T9712] bond0: entered promiscuous mode [ 209.321729][ T9693] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 209.325583][ T9712] bond_slave_0: entered promiscuous mode [ 209.342503][ T59] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 209.351328][ T59] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 209.359913][ T9712] bond_slave_1: entered promiscuous mode [ 209.367534][ T59] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x0 [ 209.379048][ T9712] batadv0: entered promiscuous mode [ 209.388230][ T9712] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 209.399229][ T59] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 209.416938][ T9712] bond0: left promiscuous mode [ 209.425052][ T9712] bond_slave_0: left promiscuous mode [ 209.434999][ T9712] bond_slave_1: left promiscuous mode [ 209.453562][ T9712] batadv0: left promiscuous mode [ 209.495534][ T9693] usb 3-1: Using ep0 maxpacket: 16 [ 209.516340][ T9693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.529423][ T9693] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.586100][ T9693] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.611529][ T5908] usb 1-1: USB disconnect, device number 10 [ 209.670687][ T9693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.715535][ T9693] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 209.756863][ T9693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.776377][ T9693] usb 3-1: config 0 descriptor?? [ 209.986159][ T9576] veth0_vlan: entered promiscuous mode [ 210.020341][ T9576] veth1_vlan: entered promiscuous mode [ 210.132959][ T9576] veth0_macvtap: entered promiscuous mode [ 210.176468][ T9576] veth1_macvtap: entered promiscuous mode [ 210.218661][ T9693] kye 0003:0458:0153.000E: unexpected long global item [ 210.248129][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.259870][ T9693] kye 0003:0458:0153.000E: parse failed [ 210.284715][ T9693] kye 0003:0458:0153.000E: probe with driver kye failed with error -22 [ 210.305401][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.315248][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.365397][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.400752][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.431720][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.452152][ T59] usb 3-1: USB disconnect, device number 11 [ 210.462141][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.482915][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.524187][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.573586][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.603205][ T9576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.694260][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.737029][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.772761][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.804548][ T9739] loop2: detected capacity change from 0 to 7 [ 210.813472][ T9739] Dev loop2: unable to read RDB block 7 [ 210.815805][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.820052][ T9739] loop2: AHDI p1 p2 p3 [ 210.850047][ T9739] loop2: partition table partially beyond EOD, truncated [ 210.850146][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.882730][ T9739] loop2: p1 start 1601398130 is beyond EOD, truncated [ 210.894850][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.903663][ T9739] loop2: p2 start 1702059890 is beyond EOD, truncated [ 210.907089][ T5834] Bluetooth: hci3: command tx timeout [ 210.935356][ T9576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.955352][ T9576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.969177][ T9576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.028773][ T9576] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.038631][ T9576] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.048212][ T9576] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.058508][ T9576] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.428495][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.471409][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.512711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.536605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.617932][ T5834] Bluetooth: hci1: command 0x080f tx timeout [ 211.635606][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 211.789071][ T9763] veth1_macvtap: left promiscuous mode [ 212.645525][ T9694] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 212.816324][ T9694] usb 2-1: Using ep0 maxpacket: 32 [ 212.833601][ T9694] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.852096][ T9694] usb 2-1: config 0 has no interface number 0 [ 212.867430][ T9694] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.896065][ T9694] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.935554][ T9694] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 212.944635][ T9694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.978053][ T9694] usb 2-1: config 0 descriptor?? [ 212.988967][ T5835] Bluetooth: hci3: command tx timeout [ 213.045462][ T5880] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 213.216240][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 213.250593][ T5880] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 213.265365][ T59] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.290586][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.306422][ T5880] usb 4-1: Product: syz [ 213.329445][ T5880] usb 4-1: Manufacturer: syz [ 213.340248][ T5880] usb 4-1: SerialNumber: syz [ 213.360431][ T5880] usb 4-1: config 0 descriptor?? [ 213.391185][ T5880] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 213.421665][ T5880] usb 4-1: setting power ON [ 213.434705][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 213.459783][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.468045][ T9811] netlink: 'syz.5.1672': attribute type 5 has an invalid length. [ 213.471321][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 213.499107][ T5880] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 213.515880][ T59] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.523282][ T59] usb 3-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 213.533587][ T5880] usb 4-1: media controller created [ 213.553758][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.575196][ T59] usb 3-1: config 0 descriptor?? [ 213.587532][ T9797] dvb-usb: bulk message failed: -22 (3/0) [ 213.594078][ T9797] usb 4-1: gpio_write failed. [ 213.607227][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.618433][ T9797] dvb-usb: bulk message failed: -22 (4/0) [ 213.619194][ T9694] uclogic 0003:28BD:0094.000F: pen parameters not found [ 213.629579][ T9797] dvb-usb: bulk message failed: -22 (4/0) [ 213.645516][ T9797] cxusb: i2c read failed [ 213.672891][ T5880] usb 4-1: selecting invalid altsetting 6 [ 213.675566][ T9694] uclogic 0003:28BD:0094.000F: interface is invalid, ignoring [ 213.679800][ T5880] usb 4-1: digital interface selection failed (-22) [ 213.706393][ T5880] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 213.715170][ T9694] usb 2-1: USB disconnect, device number 15 [ 213.734664][ T5880] usb 4-1: setting power OFF [ 213.747173][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 213.753582][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 213.773605][ T5880] (NULL device *): no alternate interface [ 213.825834][ T5908] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.849598][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 213.864813][ T5880] usb 4-1: USB disconnect, device number 10 [ 213.995447][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 214.010109][ T5908] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 214.019862][ T59] wacom 0003:056A:033C.0010: unknown main item tag 0x6 [ 214.029015][ T59] wacom 0003:056A:033C.0010: item fetching failed at offset 6/7 [ 214.033812][ T5908] usb 1-1: config 0 has no interface number 0 [ 214.042994][ T5908] usb 1-1: config 0 interface 12 has no altsetting 0 [ 214.046401][ T59] wacom 0003:056A:033C.0010: parse failed [ 214.057015][ T59] wacom 0003:056A:033C.0010: probe with driver wacom failed with error -22 [ 214.068447][ T5908] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 214.085507][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.093644][ T5908] usb 1-1: Product: syz [ 214.102770][ T5908] usb 1-1: Manufacturer: syz [ 214.110787][ T5908] usb 1-1: SerialNumber: syz [ 214.124974][ T5908] usb 1-1: config 0 descriptor?? [ 214.282215][ T5880] usb 3-1: USB disconnect, device number 12 [ 214.880035][ T9834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.964679][ T5908] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 214.992252][ T5908] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 215.032435][ T5908] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 215.054105][ T5908] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 215.081111][ T5908] usb 1-1: USB disconnect, device number 11 [ 215.084318][ T9834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.275546][ T9693] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.298836][ T9834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.436596][ T9693] usb 4-1: Using ep0 maxpacket: 8 [ 215.496783][ T9693] usb 4-1: config 1 interface 0 has no altsetting 0 [ 215.496957][ T9834] bond0: (slave netdevsim0): Releasing backup interface [ 215.533666][ T9693] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 215.553340][ T9693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.576256][ T9693] usb 4-1: Product: syz [ 215.580453][ T9693] usb 4-1: Manufacturer: syz [ 215.584730][ T9834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.635519][ T9693] usb 4-1: SerialNumber: syz [ 215.896084][ T9693] usbhid 4-1:1.0: can't add hid device: -71 [ 215.916531][ T9693] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 215.921649][ T9834] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.936159][ T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.953961][ T9693] usb 4-1: USB disconnect, device number 11 [ 215.979393][ T9834] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.014089][ T9834] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.041483][ T9834] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.086523][ T9859] nr0: tun_chr_ioctl cmd 1074025676 [ 216.091784][ T9859] nr0: owner set to 774 [ 216.375606][ T9693] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 216.426441][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 216.477236][ T5908] kernel write not supported for file /binder/transactions (pid: 5908 comm: kworker/0:6) [ 216.535564][ T9693] usb 2-1: Using ep0 maxpacket: 32 [ 216.554822][ T9693] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 216.580149][ T9693] usb 2-1: config 0 has no interface number 0 [ 216.595435][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 216.602764][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 216.613738][ T9693] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 216.634138][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 216.642377][ T9693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.655884][ T10] usb 1-1: config 0 has no interface number 0 [ 216.663963][ T9693] usb 2-1: Product: syz [ 216.670692][ T10] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.693377][ T9693] usb 2-1: Manufacturer: syz [ 216.698222][ T9693] usb 2-1: SerialNumber: syz [ 216.702902][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 216.722818][ T9693] usb 2-1: config 0 descriptor?? [ 216.728760][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.744576][ T9693] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 216.756268][ T9869] netlink: 'syz.5.1700': attribute type 1 has an invalid length. [ 216.764656][ T9869] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1700'. [ 216.793241][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 216.822944][ T10] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 216.856434][ T10] usb 1-1: Product: syz [ 216.876231][ T10] usb 1-1: config 0 descriptor?? [ 216.882107][ T9863] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 216.961836][ T9693] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 217.006315][ T9693] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 217.293726][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1708'. [ 217.404856][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 217.407873][ T59] usb 2-1: USB disconnect, device number 16 [ 217.453070][ T59] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 217.488328][ T59] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 217.503774][ T59] quatech2 2-1:0.51: device disconnected [ 217.547527][ T10] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input20 [ 217.679488][ T9898] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 217.767838][ T59] usb 1-1: USB disconnect, device number 12 [ 217.767901][ C0] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 218.104114][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1723'. [ 218.854820][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1736'. [ 219.353380][ T9970] 9pnet_fd: p9_fd_create_unix (9970): problem connecting socket: ./file0: -111 [ 219.575528][ T5908] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 219.736099][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 219.756115][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.798071][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.839546][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.894220][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.926991][ T5908] usb 3-1: config 0 descriptor?? [ 219.945062][ T5908] hub 3-1:0.0: USB hub found [ 220.193799][ T5908] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 220.358248][T10000] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 220.403111][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 220.428003][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 220.435905][T10000] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1759'. [ 220.476625][ T5908] usb 3-1: USB disconnect, device number 13 [ 220.946484][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 220.988606][ T5880] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 221.185579][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 221.203928][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.232673][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.292460][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.307410][ T5880] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 221.318547][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.339901][ T5880] usb 2-1: config 0 descriptor?? [ 221.459186][T10045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.792697][ T5880] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 221.825389][ T5880] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 221.847651][ T5880] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 221.869568][ T5880] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 221.879213][ T5880] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 221.898973][ T5880] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 221.975083][T10018] random: crng reseeded on system resumption [ 222.011203][ T5880] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 222.029611][ T5880] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 222.444678][ T10] usb 2-1: USB disconnect, device number 17 [ 222.474181][ T5880] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 222.505523][ T5880] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 222.558027][ T5880] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 222.595487][ T5880] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 223.689931][T10126] bond0: option miimon: invalid value (18446744073709551615) [ 223.698853][T10126] bond0: option miimon: allowed values 0 - 2147483647 [ 223.748983][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 223.917835][T10132] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 224.021742][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.048345][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.091941][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.117981][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.139792][ T10] usb 2-1: Product: syz [ 224.144001][ T10] usb 2-1: Manufacturer: syz [ 224.171336][ T10] usb 2-1: SerialNumber: syz [ 224.261368][T10139] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1826'. [ 224.301547][T10140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1825'. [ 224.392826][ T10] usb 2-1: 0:2 : does not exist [ 224.418198][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 224.504900][ T10] usb 2-1: USB disconnect, device number 18 [ 224.771166][T10157] sp0: Synchronizing with TNC [ 225.459759][T10182] netlink: set zone limit has 4 unknown bytes [ 225.501526][T10179] bridge0: port 4(vlan2) entered blocking state [ 225.522943][T10179] bridge0: port 4(vlan2) entered disabled state [ 225.543060][T10179] vlan2: entered allmulticast mode [ 225.554022][T10179] bridge0: entered allmulticast mode [ 225.599566][T10179] vlan2: left allmulticast mode [ 225.604596][T10179] bridge0: left allmulticast mode [ 226.042329][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 226.042350][ T30] audit: type=1326 audit(1744584299.284:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10202 comm="syz.1.1857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f463638d169 code=0x0 [ 226.507721][T10222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.465844][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1883'. [ 227.495456][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1883'. [ 227.545744][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 227.736401][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 227.747638][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 227.762948][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 227.774599][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 227.791031][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 227.803776][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.812905][ T10] usb 1-1: Product: syz [ 227.822918][ T10] usb 1-1: Manufacturer: syz [ 227.832931][ T10] usb 1-1: SerialNumber: syz [ 227.856806][ T10] usb 1-1: config 0 descriptor?? [ 227.873235][T10256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.888877][T10256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.914441][ T10] usb 1-1: ucan: probing device on interface #0 [ 228.065994][T10290] vxcan1: entered allmulticast mode [ 228.072896][T10290] vxcan1: left allmulticast mode [ 228.306125][ T5880] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 228.478412][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.514603][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.527559][ T10] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 228.538560][ T5880] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 228.548345][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.560845][ T5880] usb 3-1: config 0 descriptor?? [ 228.614142][ T59] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 228.757624][ T10] usb 1-1: USB disconnect, device number 13 [ 228.786510][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 228.810139][ T59] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 228.831755][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.852470][ T59] usb 6-1: config 0 descriptor?? [ 229.003072][ T5880] hid-steam 0003:28DE:1142.0012: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 229.091908][ T59] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 229.103094][ T5880] hid-steam 0003:28DE:1142.0012: Steam wireless receiver connected [ 229.154537][ T5880] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 229.228669][ T5880] usb 3-1: USB disconnect, device number 14 [ 229.251414][ T5880] hid-steam 0003:28DE:1142.0012: Steam wireless receiver disconnected [ 229.691099][ T59] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 229.705524][ T59] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 229.736229][ T59] asix 6-1:0.0: probe with driver asix failed with error -71 [ 229.762719][ T59] usb 6-1: USB disconnect, device number 2 [ 230.585498][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 230.771597][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.788315][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.832732][ T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 230.855372][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.893453][ T10] usb 6-1: config 0 descriptor?? [ 230.903192][T10371] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 231.361539][ T10] hid-thrustmaster 0003:044F:B65D.0014: unknown main item tag 0x0 [ 231.390079][ T10] hid-thrustmaster 0003:044F:B65D.0014: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 231.416603][ T10] hid-thrustmaster 0003:044F:B65D.0014: Wrong number of endpoints? [ 231.545442][ T9693] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 231.614804][ C0] hid-thrustmaster 0003:044F:B65D.0014: Unknown packet type 0x0, unable to proceed further with wheel init [ 231.745477][ T9693] usb 1-1: Using ep0 maxpacket: 32 [ 231.772877][ T9693] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 231.782536][ T9693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.801804][ T9693] usb 1-1: Product: syz [ 231.811948][ T9693] usb 1-1: Manufacturer: syz [ 231.817826][ T9693] usb 1-1: SerialNumber: syz [ 231.825618][ T9693] usb 1-1: config 0 descriptor?? [ 231.833726][ T59] usb 6-1: USB disconnect, device number 3 [ 231.834833][ T9693] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 231.996059][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 232.525850][ T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 232.642213][ T9693] gspca_stk1135: reg_w 0x5 err -71 [ 232.648804][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.655169][ T9693] gspca_stk1135: Sensor write failed [ 232.675432][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.693774][ T10] usb 4-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 232.714786][ T9693] gspca_stk1135: Sensor write failed [ 232.723400][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 232.736597][T10396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.743564][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.750393][ T9693] gspca_stk1135: Sensor read failed [ 232.759751][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 27955, setting to 64 [ 232.772073][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.786109][ T9693] gspca_stk1135: Sensor read failed [ 232.795409][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 232.808659][ T9693] gspca_stk1135: Detected sensor type unknown (0x0) [ 232.829036][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.843308][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.855814][ T9693] gspca_stk1135: Sensor read failed [ 232.862921][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.883144][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.904531][ T9693] gspca_stk1135: Sensor read failed [ 232.911288][ T10] usb 4-1: Manufacturer: syz [ 232.917402][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.923791][ T9693] gspca_stk1135: Sensor write failed [ 232.933183][ T10] usb 4-1: config 0 descriptor?? [ 232.946054][ T9693] gspca_stk1135: serial bus timeout: status=0x00 [ 232.960811][ T9693] gspca_stk1135: Sensor write failed [ 232.982999][ T9693] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 233.011851][ T9693] usb 1-1: USB disconnect, device number 14 [ 233.152253][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1948'. [ 233.164471][T10407] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1947'. [ 233.385741][ T10] rc_core: IR keymap rc-hauppauge not found [ 233.412062][ T10] Registered IR keymap rc-empty [ 233.437039][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.466816][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.496262][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 233.511565][T10421] vlan2: entered allmulticast mode [ 233.517147][T10421] batadv0: entered allmulticast mode [ 233.524728][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 233.555854][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.576025][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.606740][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.627365][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.661790][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.699929][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.738341][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.775941][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.795632][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 233.827311][T10427] sp0: Synchronizing with TNC [ 233.834773][ T13] [ 233.837123][ T13] ===================================================== [ 233.844041][ T13] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 233.851484][ T13] 6.15.0-rc2-syzkaller #0 Not tainted [ 233.856839][ T13] ----------------------------------------------------- [ 233.863765][ T13] kworker/u8:1/13 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 233.871391][ T13] ffffffff8f8cc838 (disc_data_lock#3){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x440 [ 233.881067][ T13] [ 233.881067][ T13] and this task is already holding: [ 233.888416][ T13] ffffffff9aa4e458 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 233.897105][ T13] which would create a new lock dependency: [ 233.902979][ T13] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3} [ 233.910816][ T13] [ 233.910816][ T13] but this new dependency connects a HARDIRQ-irq-safe lock: [ 233.920338][ T13] (&port_lock_key){-.-.}-{3:3} [ 233.920360][ T13] [ 233.920360][ T13] ... which became HARDIRQ-irq-safe at: [ 233.932877][ T13] lock_acquire+0x116/0x2f0 [ 233.937467][ T13] _raw_spin_lock_irqsave+0xd8/0x130 [ 233.942822][ T13] serial8250_handle_irq+0x6d/0xb80 [ 233.948122][ T13] serial8250_default_handle_irq+0xd1/0x1f0 [ 233.954094][ T13] serial8250_interrupt+0xa9/0x1f0 [ 233.959284][ T13] __handle_irq_event_percpu+0x29c/0xa60 [ 233.964996][ T13] handle_irq_event+0x89/0x1f0 [ 233.969835][ T13] handle_edge_irq+0x25f/0xc20 [ 233.974673][ T13] __common_interrupt+0x136/0x230 [ 233.979772][ T13] common_interrupt+0xb4/0xd0 [ 233.984529][ T13] asm_common_interrupt+0x26/0x40 [ 233.989629][ T13] _raw_spin_unlock_irqrestore+0xd9/0x140 [ 233.995434][ T13] uart_write+0x3e4/0xa40 [ 233.999832][ T13] n_tty_write+0xd81/0x1270 [ 234.004413][ T13] file_tty_write+0x543/0x9d0 [ 234.009162][ T13] vfs_write+0x70f/0xd10 [ 234.013478][ T13] ksys_write+0x19d/0x2d0 [ 234.017894][ T13] do_syscall_64+0xf3/0x230 [ 234.022483][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.028457][ T13] [ 234.028457][ T13] to a HARDIRQ-irq-unsafe lock: [ 234.035457][ T13] (disc_data_lock#3){.+.+}-{3:3} [ 234.035486][ T13] [ 234.035486][ T13] ... which became HARDIRQ-irq-unsafe at: [ 234.048344][ T13] ... [ 234.048350][ T13] lock_acquire+0x116/0x2f0 [ 234.055494][ T13] _raw_read_lock+0x36/0x50 [ 234.060072][ T13] sixpack_receive_buf+0x57/0x1420 [ 234.065263][ T13] tty_ldisc_receive_buf+0x11f/0x170 [ 234.070626][ T13] tty_port_default_receive_buf+0x6d/0xa0 [ 234.076425][ T13] flush_to_ldisc+0x32b/0x860 [ 234.081195][ T13] process_scheduled_works+0xac3/0x18e0 [ 234.086817][ T13] worker_thread+0x870/0xd50 [ 234.091484][ T13] kthread+0x7b7/0x940 [ 234.095635][ T13] ret_from_fork+0x4b/0x80 [ 234.100127][ T13] ret_from_fork_asm+0x1a/0x30 [ 234.104971][ T13] [ 234.104971][ T13] other info that might help us debug this: [ 234.104971][ T13] [ 234.115183][ T13] Possible interrupt unsafe locking scenario: [ 234.115183][ T13] [ 234.123485][ T13] CPU0 CPU1 [ 234.128847][ T13] ---- ---- [ 234.134197][ T13] lock(disc_data_lock#3); [ 234.138695][ T13] local_irq_disable(); [ 234.145432][ T13] lock(&port_lock_key); [ 234.152274][ T13] lock(disc_data_lock#3); [ 234.159323][ T13] [ 234.162760][ T13] lock(&port_lock_key); [ 234.167252][ T13] [ 234.167252][ T13] *** DEADLOCK *** [ 234.167252][ T13] [ 234.175379][ T13] 6 locks held by kworker/u8:1/13: [ 234.180470][ T13] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 234.192121][ T13] #1: ffffc90000127c60 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 234.203771][ T13] #2: ffff888025470ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x860 [ 234.212817][ T13] #3: ffff88807f3c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 234.222131][ T13] #4: ffffffff9aa4e458 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 234.231397][ T13] #5: ffff88807f3c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 234.240722][ T13] [ 234.240722][ T13] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 234.251131][ T13] -> (&port_lock_key){-.-.}-{3:3} { [ 234.256350][ T13] IN-HARDIRQ-W at: [ 234.260326][ T13] lock_acquire+0x116/0x2f0 [ 234.266481][ T13] _raw_spin_lock_irqsave+0xd8/0x130 [ 234.273420][ T13] serial8250_handle_irq+0x6d/0xb80 [ 234.280281][ T13] serial8250_default_handle_irq+0xd1/0x1f0 [ 234.287995][ T13] serial8250_interrupt+0xa9/0x1f0 [ 234.294754][ T13] __handle_irq_event_percpu+0x29c/0xa60 [ 234.302034][ T13] handle_irq_event+0x89/0x1f0 [ 234.308443][ T13] handle_edge_irq+0x25f/0xc20 [ 234.314853][ T13] __common_interrupt+0x136/0x230 [ 234.321530][ T13] common_interrupt+0xb4/0xd0 [ 234.327857][ T13] asm_common_interrupt+0x26/0x40 [ 234.334536][ T13] _raw_spin_unlock_irqrestore+0xd9/0x140 [ 234.341898][ T13] uart_write+0x3e4/0xa40 [ 234.347884][ T13] n_tty_write+0xd81/0x1270 [ 234.354039][ T13] file_tty_write+0x543/0x9d0 [ 234.360357][ T13] vfs_write+0x70f/0xd10 [ 234.366243][ T13] ksys_write+0x19d/0x2d0 [ 234.372225][ T13] do_syscall_64+0xf3/0x230 [ 234.378372][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.385902][ T13] IN-SOFTIRQ-W at: [ 234.389882][ T13] lock_acquire+0x116/0x2f0 [ 234.396024][ T13] _raw_spin_lock_irqsave+0xd8/0x130 [ 234.402947][ T13] serial8250_console_write+0x1b0/0x1e00 [ 234.410227][ T13] console_flush_all+0x86b/0xec0 [ 234.416810][ T13] console_unlock+0x151/0x3b0 [ 234.423140][ T13] vprintk_emit+0x761/0xa40 [ 234.429288][ T13] _printk+0xd5/0x120 [ 234.434912][ T13] gred_dequeue+0x4a9/0x6b0 [ 234.441052][ T13] __qdisc_run+0x272/0x2180 [ 234.447216][ T13] __dev_queue_xmit+0x10e2/0x3f60 [ 234.453905][ T13] ip_finish_output2+0xcd2/0x12e0 [ 234.460586][ T13] iptunnel_xmit+0x560/0x9c0 [ 234.466814][ T13] udp_tunnel_xmit_skb+0x264/0x3c0 [ 234.473580][ T13] geneve_xmit+0x19e3/0x2e30 [ 234.479819][ T13] dev_hard_start_xmit+0x2d4/0x840 [ 234.486574][ T13] __dev_queue_xmit+0x1b80/0x3f60 [ 234.493242][ T13] ip6_finish_output2+0x125c/0x1750 [ 234.500119][ T13] ip6_finish_output+0x421/0x840 [ 234.506703][ T13] ndisc_send_skb+0xb58/0x1560 [ 234.513109][ T13] addrconf_rs_timer+0x380/0x680 [ 234.519698][ T13] call_timer_fn+0x189/0x650 [ 234.525941][ T13] __run_timer_base+0x66e/0x8e0 [ 234.532441][ T13] run_timer_softirq+0xb7/0x170 [ 234.538942][ T13] handle_softirqs+0x2d6/0x9b0 [ 234.545350][ T13] __irq_exit_rcu+0xfb/0x220 [ 234.551580][ T13] irq_exit_rcu+0x9/0x30 [ 234.557480][ T13] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 234.564776][ T13] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.572413][ T13] kmem_cache_free+0x91/0x410 [ 234.578733][ T13] vfs_fstatat+0xe6/0x150 [ 234.584700][ T13] __x64_sys_newfstatat+0x11f/0x1a0 [ 234.591534][ T13] do_syscall_64+0xf3/0x230 [ 234.597679][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.605208][ T13] INITIAL USE at: [ 234.609093][ T13] lock_acquire+0x116/0x2f0 [ 234.615147][ T13] _raw_spin_lock_irqsave+0xd8/0x130 [ 234.621980][ T13] serial8250_do_set_termios+0x4dc/0x1c70 [ 234.629254][ T13] uart_set_options+0x439/0x780 [ 234.635670][ T13] serial8250_console_setup+0x3dd/0x670 [ 234.642766][ T13] univ8250_console_setup+0x429/0x530 [ 234.649690][ T13] try_enable_preferred_console+0x46b/0x5c0 [ 234.657141][ T13] register_console+0x37d/0x1080 [ 234.663636][ T13] univ8250_console_init+0x52/0x90 [ 234.670318][ T13] console_init+0x1b8/0x6f0 [ 234.676370][ T13] start_kernel+0x2dd/0x510 [ 234.682429][ T13] x86_64_start_reservations+0x2a/0x30 [ 234.689451][ T13] x86_64_start_kernel+0x66/0x70 [ 234.695941][ T13] common_startup_64+0x13e/0x147 [ 234.702431][ T13] } [ 234.704925][ T13] ... key at: [] port_lock_key+0x0/0x20 [ 234.712543][ T13] [ 234.712543][ T13] the dependencies between the lock to be acquired [ 234.712551][ T13] and HARDIRQ-irq-unsafe lock: [ 234.726052][ T13] -> (disc_data_lock#3){.+.+}-{3:3} { [ 234.731441][ T13] HARDIRQ-ON-R at: [ 234.735412][ T13] lock_acquire+0x116/0x2f0 [ 234.741549][ T13] _raw_read_lock+0x36/0x50 [ 234.747689][ T13] sixpack_receive_buf+0x57/0x1420 [ 234.754441][ T13] tty_ldisc_receive_buf+0x11f/0x170 [ 234.761384][ T13] tty_port_default_receive_buf+0x6d/0xa0 [ 234.768750][ T13] flush_to_ldisc+0x32b/0x860 [ 234.775083][ T13] process_scheduled_works+0xac3/0x18e0 [ 234.782267][ T13] worker_thread+0x870/0xd50 [ 234.788509][ T13] kthread+0x7b7/0x940 [ 234.794224][ T13] ret_from_fork+0x4b/0x80 [ 234.800279][ T13] ret_from_fork_asm+0x1a/0x30 [ 234.806701][ T13] SOFTIRQ-ON-R at: [ 234.810671][ T13] lock_acquire+0x116/0x2f0 [ 234.816822][ T13] _raw_read_lock+0x36/0x50 [ 234.822964][ T13] sixpack_receive_buf+0x57/0x1420 [ 234.829732][ T13] tty_ldisc_receive_buf+0x11f/0x170 [ 234.836673][ T13] tty_port_default_receive_buf+0x6d/0xa0 [ 234.844036][ T13] flush_to_ldisc+0x32b/0x860 [ 234.850355][ T13] process_scheduled_works+0xac3/0x18e0 [ 234.857541][ T13] worker_thread+0x870/0xd50 [ 234.863772][ T13] kthread+0x7b7/0x940 [ 234.869495][ T13] ret_from_fork+0x4b/0x80 [ 234.875552][ T13] ret_from_fork_asm+0x1a/0x30 [ 234.881973][ T13] INITIAL USE at: [ 234.885853][ T13] lock_acquire+0x116/0x2f0 [ 234.891903][ T13] _raw_write_lock_irq+0xd3/0x120 [ 234.898476][ T13] sixpack_close+0x2c/0x280 [ 234.904522][ T13] tty_ldisc_kill+0xa3/0x1a0 [ 234.910659][ T13] tty_ldisc_release+0x1a1/0x200 [ 234.917157][ T13] tty_release_struct+0x2b/0xe0 [ 234.923592][ T13] tty_release+0xd07/0x12c0 [ 234.929646][ T13] __fput+0x3e9/0x9f0 [ 234.935177][ T13] task_work_run+0x251/0x310 [ 234.941319][ T13] syscall_exit_to_user_mode+0x13f/0x340 [ 234.948503][ T13] do_syscall_64+0x100/0x230 [ 234.954657][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.962095][ T13] INITIAL READ USE at: [ 234.966407][ T13] lock_acquire+0x116/0x2f0 [ 234.972890][ T13] _raw_read_lock+0x36/0x50 [ 234.979383][ T13] sixpack_receive_buf+0x57/0x1420 [ 234.986490][ T13] tty_ldisc_receive_buf+0x11f/0x170 [ 234.993760][ T13] tty_port_default_receive_buf+0x6d/0xa0 [ 235.001464][ T13] flush_to_ldisc+0x32b/0x860 [ 235.008140][ T13] process_scheduled_works+0xac3/0x18e0 [ 235.015668][ T13] worker_thread+0x870/0xd50 [ 235.022241][ T13] kthread+0x7b7/0x940 [ 235.028309][ T13] ret_from_fork+0x4b/0x80 [ 235.034704][ T13] ret_from_fork_asm+0x1a/0x30 [ 235.041471][ T13] } [ 235.043953][ T13] ... key at: [] disc_data_lock+0x18/0x100 [ 235.051846][ T13] ... acquired at: [ 235.055632][ T13] lock_acquire+0x116/0x2f0 [ 235.060291][ T13] _raw_read_lock+0x36/0x50 [ 235.064948][ T13] sixpack_write_wakeup+0x30/0x440 [ 235.070217][ T13] tty_wakeup+0xbb/0x100 [ 235.074618][ T13] tty_port_default_wakeup+0xa6/0xf0 [ 235.080076][ T13] serial8250_tx_chars+0x6e2/0x930 [ 235.085346][ T13] __start_tx+0x32e/0x470 [ 235.089841][ T13] __uart_start+0x2bc/0x450 [ 235.094509][ T13] uart_write+0x280/0xa40 [ 235.099001][ T13] sixpack_receive_buf+0x447/0x1420 [ 235.104361][ T13] tty_ldisc_receive_buf+0x11f/0x170 [ 235.109813][ T13] tty_port_default_receive_buf+0x6d/0xa0 [ 235.115718][ T13] flush_to_ldisc+0x32b/0x860 [ 235.120557][ T13] process_scheduled_works+0xac3/0x18e0 [ 235.126261][ T13] worker_thread+0x870/0xd50 [ 235.131007][ T13] kthread+0x7b7/0x940 [ 235.135233][ T13] ret_from_fork+0x4b/0x80 [ 235.139802][ T13] ret_from_fork_asm+0x1a/0x30 [ 235.144741][ T13] [ 235.147051][ T13] [ 235.147051][ T13] stack backtrace: [ 235.152939][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(full) [ 235.152958][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.152970][ T13] Workqueue: events_unbound flush_to_ldisc [ 235.152988][ T13] Call Trace: [ 235.152995][ T13] [ 235.153003][ T13] dump_stack_lvl+0x241/0x360 [ 235.153026][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.153045][ T13] ? __pfx__printk+0x10/0x10 [ 235.153067][ T13] validate_chain+0x22bb/0x24e0 [ 235.153093][ T13] __lock_acquire+0xad5/0xd80 [ 235.153121][ T13] lock_acquire+0x116/0x2f0 [ 235.153132][ T13] ? sixpack_write_wakeup+0x30/0x440 [ 235.153150][ T13] _raw_read_lock+0x36/0x50 [ 235.153163][ T13] ? sixpack_write_wakeup+0x30/0x440 [ 235.153177][ T13] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 235.153191][ T13] sixpack_write_wakeup+0x30/0x440 [ 235.153206][ T13] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 235.153222][ T13] tty_wakeup+0xbb/0x100 [ 235.153236][ T13] tty_port_default_wakeup+0xa6/0xf0 [ 235.153255][ T13] serial8250_tx_chars+0x6e2/0x930 [ 235.153275][ T13] __start_tx+0x32e/0x470 [ 235.153292][ T13] __uart_start+0x2bc/0x450 [ 235.153308][ T13] uart_write+0x280/0xa40 [ 235.153325][ T13] sixpack_receive_buf+0x447/0x1420 [ 235.153345][ T13] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 235.153370][ T13] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 235.153386][ T13] tty_ldisc_receive_buf+0x11f/0x170 [ 235.153405][ T13] tty_port_default_receive_buf+0x6d/0xa0 [ 235.153424][ T13] flush_to_ldisc+0x32b/0x860 [ 235.153445][ T13] ? process_scheduled_works+0x9cb/0x18e0 [ 235.153458][ T13] process_scheduled_works+0xac3/0x18e0 [ 235.153481][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.153498][ T13] ? assign_work+0x367/0x3d0 [ 235.153512][ T13] worker_thread+0x870/0xd50 [ 235.153532][ T13] ? __kthread_parkme+0x1a8/0x200 [ 235.153547][ T13] ? __pfx_worker_thread+0x10/0x10 [ 235.153562][ T13] kthread+0x7b7/0x940 [ 235.153579][ T13] ? __pfx_worker_thread+0x10/0x10 [ 235.153593][ T13] ? __pfx_kthread+0x10/0x10 [ 235.153608][ T13] ? __pfx_kthread+0x10/0x10 [ 235.153624][ T13] ? __pfx_kthread+0x10/0x10 [ 235.153640][ T13] ? __pfx_kthread+0x10/0x10 [ 235.153656][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.153669][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 235.153684][ T13] ? __pfx_kthread+0x10/0x10 [ 235.153700][ T13] ret_from_fork+0x4b/0x80 [ 235.153712][ T13] ? __pfx_kthread+0x10/0x10 [ 235.153728][ T13] ret_from_fork_asm+0x1a/0x30 [ 235.153753][ T13] [ 235.161830][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 235.439405][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 235.448572][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 235.459760][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 235.467163][ T5141] Bluetooth: hci5: command 0xfc11 tx timeout [ 235.483523][ T10] usb 4-1: USB disconnect, device number 12