last executing test programs: 1m8.924560255s ago: executing program 2 (id=8189): r0 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x8, 0x200000) 1m8.708460854s ago: executing program 2 (id=8195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000110000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) 1m8.569382505s ago: executing program 2 (id=8198): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x70, 0x6, &(0x7f0000000140)={0x1d, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1m6.760270375s ago: executing program 2 (id=8223): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1m6.507885448s ago: executing program 2 (id=8226): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010100}, 0xc, 0x0}, 0x24000000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 1m6.353865106s ago: executing program 2 (id=8227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x6}]}) 50.196824091s ago: executing program 32 (id=8227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x6}]}) 4.149254417s ago: executing program 4 (id=9052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 3.892179923s ago: executing program 4 (id=9055): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfc}, 0x2) 3.746562068s ago: executing program 4 (id=9058): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000840)={&(0x7f0000000280)=[{0x9, 0x1, 0xb4, &(0x7f0000000300)="793542eb60ab984c232fdfd8a65b10e0edef45701429fcd4f5f3da8268f1795c5226b14da326a5bf30182ea726cb1e5d36b6b2d40f3f695962db11631e1f150973c59c84be8ef44357aba28444b7885b08e7a6c5de05bd7ba2ae59ff96e6ad75382effc4d1cc4a3db5fd26e2f4df774843ae5cfd1e26c5adb2e6e4f4ec38b169d3308e171255cad0d9f98159e9d68bb7e5aa1315db798826ab0a0c556b59c96e13599e0fb15b4f6b28394fec64004344821777a3"}], 0x1}) 2.5534492s ago: executing program 0 (id=9071): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0xfd, 0x3, 0x200}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x401, 0xb, 0xfb, 0x3}}) 2.397205782s ago: executing program 0 (id=9075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x1c) 2.296567261s ago: executing program 4 (id=9076): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x7, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x88, 0xf, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x668d27d463f61c3b, 0xc, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x31, 0x0}) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 2.267827273s ago: executing program 0 (id=9077): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x1000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) lseek(r1, 0x7fff, 0x1) 2.153585297s ago: executing program 0 (id=9079): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 1.930531641s ago: executing program 0 (id=9083): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.851624986s ago: executing program 5 (id=9084): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local}, @local, 0x8, 0x6, 0x343, 0xffffffff7fffffe1, 0x7, 0x100, 0x9}) 1.790932058s ago: executing program 0 (id=9086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.713828003s ago: executing program 5 (id=9087): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0) 1.512589763s ago: executing program 3 (id=9090): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write(r0, &(0x7f0000001c80)="b1", 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 1.38269364s ago: executing program 1 (id=9091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000006180)=ANY=[@ANYBLOB="010000000000000023000040"]) 1.239804339s ago: executing program 3 (id=9092): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2040400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x602080, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 1.152052789s ago: executing program 1 (id=9093): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@routing={0x5c, 0x0, 0x0, 0x40}, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000005540)) 1.150823687s ago: executing program 3 (id=9094): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 1.00382826s ago: executing program 1 (id=9095): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x48403) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xfffffdba, 0x3, 0x8}) 1.003068423s ago: executing program 3 (id=9096): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) 907.967781ms ago: executing program 1 (id=9097): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x1000, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x9, 0x101}}) 827.132378ms ago: executing program 3 (id=9098): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$1(0x1, &(0x7f0000001840)='mqueue\x00') 705.488175ms ago: executing program 1 (id=9099): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 705.338235ms ago: executing program 5 (id=9100): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000002c0)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40) read$dsp(r0, &(0x7f0000000340)=""/100, 0x64) 493.442708ms ago: executing program 4 (id=9101): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x30}], 0x400000000000172, 0x4001c00) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2e, 0x20004840) 485.553085ms ago: executing program 5 (id=9102): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 327.988805ms ago: executing program 1 (id=9103): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_get$pid(0x3, 0x0) 187.481316ms ago: executing program 5 (id=9104): mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 142.812328ms ago: executing program 4 (id=9105): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/145, 0x91}], 0x1) 69.274199ms ago: executing program 5 (id=9106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) 0s ago: executing program 3 (id=9107): r0 = epoll_create1(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): bmit urb error = -90 [ 610.005568][T20627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 610.057493][T20627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 610.077965][T20627] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 610.124808][T20627] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 610.143964][T20627] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 610.167083][T20627] usb 2-1: USB disconnect, device number 61 [ 614.296412][T21682] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 614.326345][T21682] FAT-fs (loop0): unable to read boot sector [ 615.230122][T21705] unknown channel width for channel at 909000KHz? [ 615.665575][T21719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7200'. [ 616.908009][T20629] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 617.111691][T20629] usb 1-1: Using ep0 maxpacket: 32 [ 617.130289][T20629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.167480][T20629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.189224][T20629] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 617.225482][T21740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.248244][T20629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.279141][T20629] usb 1-1: config 0 descriptor?? [ 617.315858][T20629] hub 1-1:0.0: USB hub found [ 617.546721][T20629] hub 1-1:0.0: 1 port detected [ 617.771795][T20629] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 617.794759][T20629] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 617.845666][T20629] usbhid 1-1:0.0: can't add hid device: -71 [ 617.862143][T20629] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 617.936913][T20629] usb 1-1: USB disconnect, device number 12 [ 619.203491][T21757] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.241992][T21757] FAT-fs (loop0): unable to read boot sector [ 619.872936][T21771] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.902942][T21771] FAT-fs (loop0): unable to read boot sector [ 622.123092][T20629] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 622.315178][T20629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.341079][T20629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.371289][T20629] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 622.402123][T20629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.450835][T20629] usb 5-1: config 0 descriptor?? [ 622.812781][T21800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.932499][T20629] hid-thrustmaster 0003:044F:B65D.005D: unknown main item tag 0x0 [ 622.979222][T20629] hid-thrustmaster 0003:044F:B65D.005D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 623.013120][T20629] hid-thrustmaster 0003:044F:B65D.005D: Wrong number of endpoints? [ 623.188375][ C0] hid-thrustmaster 0003:044F:B65D.005D: Unknown packet type 0x0, unable to proceed further with wheel init [ 623.418060][T20629] usb 5-1: USB disconnect, device number 41 [ 624.170228][T21819] misc userio: Invalid payload size [ 624.430508][T21823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7243'. [ 626.985431][T21864] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.024967][T21864] I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.056950][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 627.086063][T21864] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.112053][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 627.137767][T21864] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 627.159673][T21864] UDF-fs: Scanning with blocksize 512 failed [ 627.178059][T21864] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.212798][T21864] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.244961][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 627.266482][T21864] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.291215][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 627.325481][T21864] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 627.334050][T21864] UDF-fs: Scanning with blocksize 1024 failed [ 627.341149][T21864] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.351384][T21864] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.365133][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 627.376796][T21864] I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.386853][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 627.399013][T21864] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 627.407715][T21864] UDF-fs: Scanning with blocksize 2048 failed [ 627.419019][T21864] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.430268][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 627.448588][T21864] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 627.465489][T21864] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 627.473805][T21864] UDF-fs: Scanning with blocksize 4096 failed [ 627.480213][T21864] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 631.807222][T21935] EXT4-fs (loop3): unable to read superblock [ 631.870785][T21935] tmpfs: Unknown parameter 'noblock_validity' [ 632.003679][T20630] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 632.088786][T20629] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 632.209514][T20630] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.259078][T20630] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.294427][T20629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.327695][T20630] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.356113][T20629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.388141][T20630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.396458][T20630] usb 2-1: Product: syz [ 632.424944][T20629] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 632.454863][T20630] usb 2-1: Manufacturer: syz [ 632.459792][T20630] usb 2-1: SerialNumber: syz [ 632.476557][T20629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.526587][T20629] usb 3-1: config 0 descriptor?? [ 632.542061][T21948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.550015][T21948] IPv6: NLM_F_CREATE should be set when creating new route [ 632.557447][T21948] IPv6: NLM_F_CREATE should be set when creating new route [ 632.564750][T21948] IPv6: NLM_F_CREATE should be set when creating new route [ 632.739267][T20630] usb 2-1: 0:2 : does not exist [ 632.760782][T20630] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 632.860818][T20630] usb 2-1: USB disconnect, device number 62 [ 633.043479][T20629] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 633.305043][T21957] netlink: 'syz.4.7302': attribute type 1 has an invalid length. [ 633.520595][T20629] cp2112 0003:10C4:EA90.005E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 633.686762][T20629] cp2112 0003:10C4:EA90.005E: error requesting version [ 633.716136][T20629] cp2112 0003:10C4:EA90.005E: probe with driver cp2112 failed with error -71 [ 633.817405][T20629] usb 3-1: USB disconnect, device number 45 [ 633.957677][T21967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7307'. [ 634.019514][T21967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7307'. [ 634.068263][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7307'. [ 635.025286][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.032592][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.044163][T20600] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 636.162758][T20629] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 636.206866][T20600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.238530][T20600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.278380][T20600] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 636.307678][T20600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.339949][T20600] usb 1-1: config 0 descriptor?? [ 636.417320][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7332'. [ 636.762622][T20629] usb 4-1: Using ep0 maxpacket: 32 [ 636.835537][T20600] logitech 0003:046D:C294.005F: unknown main item tag 0x0 [ 636.872596][T20600] logitech 0003:046D:C294.005F: unknown main item tag 0x0 [ 636.899932][T20629] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 636.909047][T20629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.920773][T20600] logitech 0003:046D:C294.005F: unknown main item tag 0x0 [ 636.920814][T20600] logitech 0003:046D:C294.005F: unknown main item tag 0x0 [ 636.920844][T20600] logitech 0003:046D:C294.005F: unknown main item tag 0x0 [ 636.920873][T20600] logitech 0003:046D:C294.005F: unknown main item tag 0x0 [ 636.920902][T20600] logitech 0003:046D:C294.005F: unknown main item tag 0x0 [ 636.986217][T20600] logitech 0003:046D:C294.005F: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.0-1/input0 [ 637.063916][T20600] logitech 0003:046D:C294.005F: no inputs found [ 637.105655][T20629] usb 4-1: config 0 descriptor?? [ 637.116570][T20600] usb 1-1: USB disconnect, device number 13 [ 637.372651][T20629] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 637.405983][T22040] block nbd0: Unsupported socket: should be TCP or UNIX. [ 637.415483][T20629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 637.523693][T20629] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 637.558986][T20629] usb 4-1: media controller created [ 637.821124][T20629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 638.036271][T20629] az6027: usb out operation failed. (-71) [ 638.043443][T20629] az6027: usb out operation failed. (-71) [ 638.049209][T20629] stb0899_attach: Driver disabled by Kconfig [ 638.075478][T20629] az6027: no front-end attached [ 638.075478][T20629] [ 638.177024][T20629] az6027: usb out operation failed. (-71) [ 638.186829][T20629] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 638.198488][T20629] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 638.266006][T20629] dvb-usb: schedule remote query interval to 400 msecs. [ 638.314070][T20629] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 638.365712][T20629] usb 4-1: USB disconnect, device number 40 [ 638.463898][T20600] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 638.594967][T20629] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 638.984695][T20629] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 639.114191][T20600] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 639.149937][T20600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.169645][T20629] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 639.169711][T20629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.182017][T20629] usb 4-1: config 0 descriptor?? [ 639.189274][T20629] cp210x 4-1:0.0: cp210x converter detected [ 639.230436][T20630] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 639.396978][T22079] IPVS: dh: FWM 3 0x00000003 - no destination available [ 639.405145][T20600] usb 3-1: Product: syz [ 639.409372][T20600] usb 3-1: Manufacturer: syz [ 639.412136][T20630] usb 2-1: Using ep0 maxpacket: 32 [ 639.429425][T20630] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 639.438626][T20600] usb 3-1: SerialNumber: syz [ 639.451403][T20600] usb 3-1: config 0 descriptor?? [ 639.458046][T20630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.478078][T20630] usb 2-1: config 0 descriptor?? [ 639.504942][T20630] gspca_main: sunplus-2.14.0 probing 041e:400b [ 639.858166][T20629] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 639.893419][T20629] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 639.933325][T20629] usb 4-1: cp210x converter now attached to ttyUSB0 [ 639.969290][T20627] usb 3-1: USB disconnect, device number 46 [ 639.998686][T20629] usb 4-1: USB disconnect, device number 41 [ 640.034421][T20629] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 640.048405][T20629] cp210x 4-1:0.0: device disconnected [ 640.395702][T20630] gspca_sunplus: reg_w_riv err -71 [ 640.401331][T20630] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 640.430488][T20630] usb 2-1: USB disconnect, device number 63 [ 642.146639][T22119] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 644.885452][T20600] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 645.062573][T20600] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 645.074264][T20600] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 645.088214][T20600] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 645.098409][T20600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.120140][T22151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 645.137904][T20600] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 645.311546][T22153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.415649][T20600] usb 4-1: USB disconnect, device number 42 [ 646.916541][T20600] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 647.077738][T20600] usb 2-1: Using ep0 maxpacket: 32 [ 647.101244][T20600] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 647.133327][T20600] usb 2-1: config 0 has no interface number 0 [ 647.160139][T20600] usb 2-1: config 0 interface 184 has no altsetting 0 [ 647.192199][T20600] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 647.219987][T20600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.265590][T20600] usb 2-1: Product: syz [ 647.295052][T20600] usb 2-1: Manufacturer: syz [ 647.299766][T20600] usb 2-1: SerialNumber: syz [ 647.346726][T20600] usb 2-1: config 0 descriptor?? [ 647.374196][T20600] smsc75xx v1.0.0 [ 647.697112][T20633] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 647.872370][T20633] usb 1-1: Using ep0 maxpacket: 32 [ 647.888563][T20633] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 647.909156][T20633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.940305][T20633] usb 1-1: config 0 descriptor?? [ 648.196534][T20633] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 648.209423][T20633] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 648.227927][T20633] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 648.246990][T20633] usb 1-1: media controller created [ 648.256878][T20600] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 648.295983][T20600] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 648.328204][T20600] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 648.341366][T20633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.360587][T20600] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 648.387079][T20600] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 648.434779][T20600] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 648.464610][T20633] az6027: usb out operation failed. (-71) [ 648.482617][T20633] az6027: usb out operation failed. (-71) [ 648.489944][T20600] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 648.520684][T20633] stb0899_attach: Driver disabled by Kconfig [ 648.526749][T20633] az6027: no front-end attached [ 648.526749][T20633] [ 648.547089][T20600] usb 2-1: USB disconnect, device number 64 [ 648.571468][T20633] az6027: usb out operation failed. (-71) [ 648.605767][T20633] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 648.637874][T20633] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 648.694866][T20633] dvb-usb: schedule remote query interval to 400 msecs. [ 648.729229][T20633] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 648.788662][T20633] usb 1-1: USB disconnect, device number 14 [ 649.097953][T20633] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 653.507578][T22265] input: syz1 as /devices/virtual/input/input46 [ 654.547407][T22281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.573214][T22281] bond1: entered promiscuous mode [ 654.591024][T22281] bond0: (slave bond1): Enslaving as an active interface with an up link [ 654.613801][T20633] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 654.796717][T20633] usb 1-1: Using ep0 maxpacket: 16 [ 654.811768][T20633] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.820012][T20633] usb 1-1: config 0 has no interface number 0 [ 654.837403][T20633] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.863555][T20633] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.899561][T20633] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 654.937562][T20633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.953652][T20633] usb 1-1: config 0 descriptor?? [ 655.634720][T20633] uclogic 0003:28BD:0071.0060: pen parameters not found [ 655.663466][T20633] uclogic 0003:28BD:0071.0060: interface is invalid, ignoring [ 655.676913][T20633] usb 1-1: USB disconnect, device number 15 [ 656.701796][T20633] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 656.936940][T20633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.948614][T20633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.976664][T20633] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.016224][T20633] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.049326][T20633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.072078][T20633] usb 1-1: config 0 descriptor?? [ 657.101510][T20633] hub 1-1:0.0: USB hub found [ 657.341242][T20633] hub 1-1:0.0: 14 ports detected [ 657.350571][T20633] hub 1-1:0.0: insufficient power available to use all downstream ports [ 657.794458][T20633] usb 1-1: USB disconnect, device number 16 [ 657.798018][T22317] blk_print_req_error: 3 callbacks suppressed [ 657.798043][T22317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 657.947587][T22351] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7470'. [ 658.153729][T22359] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 658.221864][T22359] SQUASHFS error: Failed to read block 0x0: -5 [ 658.264882][T22359] unable to read squashfs_super_block [ 658.521380][ T5865] block device autoloading is deprecated and will be removed. [ 658.558736][T20627] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 658.629740][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 658.751011][T20627] usb 2-1: Using ep0 maxpacket: 16 [ 658.753141][T20627] usb 2-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 658.778562][T20627] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 658.841786][T20627] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.872334][T20627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 658.884335][T20627] usb 2-1: SerialNumber: syz [ 658.896879][T20627] cdc_acm 2-1:1.0: skipping garbage [ 659.143776][T20627] usb 2-1: USB disconnect, device number 65 [ 659.242937][T20629] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 659.280585][T22412] program syz.4.7499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.417906][T22417] block nbd4: NBD_DISCONNECT [ 659.424802][T20629] usb 3-1: Using ep0 maxpacket: 8 [ 659.432308][T20629] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 659.443746][T20629] usb 3-1: config 0 has no interface number 0 [ 659.465365][T20629] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.487062][T20629] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 659.498943][T20629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.518824][T20629] usb 3-1: config 0 descriptor?? [ 659.542733][T20629] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 659.693096][T22426] kvm: kvm [22424]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xa7 [ 659.726342][T22429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.771402][T20629] usb 3-1: USB disconnect, device number 47 [ 660.525938][T20633] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 660.576308][T22471] program syz.3.7527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.718573][T20633] usb 5-1: Using ep0 maxpacket: 16 [ 660.730171][T20633] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.757462][T20633] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.771288][T20633] usb 5-1: config 0 interface 0 has no altsetting 0 [ 660.778217][T20633] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 660.788087][T20633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.799590][T20633] usb 5-1: config 0 descriptor?? [ 660.889667][T20629] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 661.062420][T20629] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 661.079115][T20629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.120754][T20629] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 661.140179][T20629] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 661.159738][T20629] usb 4-1: Manufacturer: syz [ 661.176214][T20629] usb 4-1: config 0 descriptor?? [ 661.208190][T22490] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 661.291636][T20633] cougar 0003:060B:500A.0061: unexpected long global item [ 661.322364][T20633] cougar 0003:060B:500A.0061: parse failed [ 661.329430][T20633] cougar 0003:060B:500A.0061: probe with driver cougar failed with error -22 [ 661.370647][T20629] rc_core: IR keymap rc-hauppauge not found [ 661.376877][T20629] Registered IR keymap rc-empty [ 661.399560][T20629] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 661.428588][T20629] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 661.487635][T20633] usb 5-1: USB disconnect, device number 42 [ 661.708507][ C0] igorplugusb 4-1:0.0: receive overflow, at least 1 lost [ 661.715670][T22497] rc rc0: two consecutive events of type space [ 661.940585][T20629] usb 4-1: USB disconnect, device number 43 [ 661.948873][T22519] sctp: [Deprecated]: syz.2.7548 (pid 22519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 661.948873][T22519] Use struct sctp_sack_info instead [ 663.313045][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.336409][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.356032][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.377480][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.395390][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.408926][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.417864][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.430822][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.438483][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.447256][T20629] hid-generic 0006:0004:0009.0062: unknown main item tag 0x0 [ 663.460350][T20629] hid-generic 0006:0004:0009.0062: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 663.542339][ T30] audit: type=1326 audit(2000000219.263:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 663.548299][T22554] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 663.613519][T22554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 663.631554][ T30] audit: type=1326 audit(2000000219.263:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 663.637810][T22554] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 663.704533][T22554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 663.725032][ T30] audit: type=1326 audit(2000000219.291:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 663.802432][ T30] audit: type=1326 audit(2000000219.291:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 663.856007][ T30] audit: type=1326 audit(2000000219.291:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22585 comm="syz.0.7579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 664.106380][T22605] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7589'. [ 664.327166][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7593'. [ 664.599597][T20629] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 664.759850][T20629] usb 2-1: Using ep0 maxpacket: 16 [ 664.770133][T20629] usb 2-1: config 0 interface 0 has no altsetting 0 [ 664.777128][T20629] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 664.794759][T20629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.823087][T20629] usb 2-1: config 0 descriptor?? [ 664.889086][T22635] NILFS (loop0): device size too small [ 665.005068][T20630] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 665.028429][T22644] input: syz1 as /devices/virtual/input/input49 [ 665.165748][T20630] usb 3-1: Using ep0 maxpacket: 16 [ 665.178592][T20630] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.189282][T20630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.218934][T20630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 665.239653][T20630] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 665.261604][T20630] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.292190][T20629] hid (null): global environment stack underflow [ 665.299175][T20629] hid (null): report_id 0 is invalid [ 665.305901][T20630] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.315302][T20630] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.325254][T20629] hid (null): global environment stack underflow [ 665.333019][T20630] usb 3-1: Manufacturer: syz [ 665.342839][T20629] hid (null): unknown global tag 0xc [ 665.349395][T20630] usb 3-1: config 0 descriptor?? [ 665.368975][T20629] hid (null): report_id 25068 is invalid [ 665.375146][T20629] hid (null): report_id 0 is invalid [ 665.390498][T20629] hid (null): global environment stack overflow [ 665.406698][T20629] hid (null): unknown global tag 0xc [ 665.424132][T20629] hid (null): unknown global tag 0x58 [ 665.522144][T22651] nbd0: detected capacity change from 0 to 127 [ 665.537808][ T5869] block nbd0: Receive control failed (result -32) [ 665.547467][T20629] usb 2-1: USB disconnect, device number 66 [ 665.721274][T20630] rc_core: IR keymap rc-hauppauge not found [ 665.728288][T20630] Registered IR keymap rc-empty [ 665.742117][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.786886][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 665.819170][T20630] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 665.841013][T22642] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 665.851256][T22642] XFS (loop0): SB validate failed with error -5. [ 666.539587][T20630] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 666.615245][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.640899][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.676848][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.737378][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.782026][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.833370][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.878131][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.919270][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.940103][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.962645][T20630] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 666.987162][T20630] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 667.032351][T20630] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 667.085006][T20630] usb 3-1: USB disconnect, device number 48 [ 669.126178][T22679] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 669.174679][T22679] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 669.255345][T22679] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 669.342365][T22679] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 669.511906][T22716] ntfs3(loop1): try to read out of volume at offset 0x0 [ 671.654800][T20600] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 671.670688][T22718] F2FS-fs: heap/no_heap options were deprecated [ 671.697973][T22718] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 671.708399][T22718] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 671.730482][T22718] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 671.738290][T22718] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 671.806582][T22743] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 671.806582][T22743] The task syz.1.7642 (22743) triggered the difference, watch for misbehavior. [ 671.863309][T20600] usb 4-1: Using ep0 maxpacket: 8 [ 671.882813][T20600] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 671.905411][T20600] usb 4-1: config 0 has no interface number 0 [ 671.942551][T20600] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 671.975300][T20600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.015384][T20600] usb 4-1: Product: syz [ 672.036086][T20600] usb 4-1: Manufacturer: syz [ 672.048125][T20600] usb 4-1: SerialNumber: syz [ 672.091777][T20600] usb 4-1: config 0 descriptor?? [ 672.129703][T20600] radio-usb-si4713 4-1:0.128: Si4713 development board discovered: (10C4:8244) [ 673.163178][T20600] radio-usb-si4713 4-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 673.201728][T20600] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 673.244979][T20600] usb 4-1: USB disconnect, device number 44 [ 675.479689][T22789] erofs (device loop2): cannot find valid erofs superblock [ 675.979206][T22796] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.048538][T22796] MINIX-fs: unable to read superblock [ 676.794304][T22812] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7674'. [ 676.853452][T22812] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7674'. [ 677.089128][T22814] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7675'. [ 677.171525][T22817] netlink: 'syz.4.7675': attribute type 12 has an invalid length. [ 677.179445][T22817] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7675'. [ 680.212729][ T30] audit: type=1326 audit(2000000490.835:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 680.404081][ T30] audit: type=1326 audit(2000000490.845:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 680.501073][ T30] audit: type=1326 audit(2000000490.845:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 680.648285][ T30] audit: type=1326 audit(2000000490.845:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 680.752550][ T30] audit: type=1326 audit(2000000490.845:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 680.865071][ T30] audit: type=1326 audit(2000000490.845:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 681.002031][ T30] audit: type=1326 audit(2000000490.845:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 681.031058][ T30] audit: type=1326 audit(2000000490.854:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 681.126512][ T30] audit: type=1326 audit(2000000490.854:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 681.249002][ T30] audit: type=1326 audit(2000000490.854:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.2.7702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa44af8eba9 code=0x7ffc0000 [ 681.645001][T22913] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.683485][T22913] FAT-fs (loop0): unable to read boot sector [ 682.368470][T22919] macvtap2: entered allmulticast mode [ 682.390378][T22919] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 682.579736][T22919] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 683.104285][T20630] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 683.179050][T20627] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 683.300578][T20630] usb 5-1: Using ep0 maxpacket: 8 [ 683.328035][T20630] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.360943][T20627] usb 4-1: Using ep0 maxpacket: 16 [ 683.376499][T20630] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 683.390697][T20627] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.422657][T20630] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 683.444476][T20627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.468149][T20630] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 683.489137][T20627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 683.509007][T20630] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 683.522255][T20627] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 683.537414][T20630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.546691][T20627] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.594469][T20627] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 683.611216][T20630] hub 5-1:1.0: bad descriptor, ignoring hub [ 683.624928][T20627] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 683.639687][T20630] hub 5-1:1.0: probe with driver hub failed with error -5 [ 683.660655][T20627] usb 4-1: Manufacturer: syz [ 683.668921][T20630] cdc_wdm 5-1:1.0: skipping garbage [ 683.685232][T20627] usb 4-1: config 0 descriptor?? [ 683.690616][T20630] cdc_wdm 5-1:1.0: skipping garbage [ 683.722174][T20630] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 683.742238][T20630] cdc_wdm 5-1:1.0: Unknown control protocol [ 683.757205][T20629] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 683.851652][T22944] netlink: 'syz.0.7733': attribute type 2 has an invalid length. [ 683.952511][T20629] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 683.975312][T20629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.987748][ T979] usb 5-1: USB disconnect, device number 43 [ 684.002241][T20629] usb 2-1: Product: syz [ 684.017754][T20629] usb 2-1: Manufacturer: syz [ 684.039064][T20629] usb 2-1: SerialNumber: syz [ 684.073408][T20629] usb 2-1: config 0 descriptor?? [ 684.230086][T22949] batadv_slave_1: entered promiscuous mode [ 684.323306][T20627] rc_core: IR keymap rc-hauppauge not found [ 684.338818][T20627] Registered IR keymap rc-empty [ 684.358773][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.401431][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.431562][T20627] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 684.531050][T20627] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 [ 684.658387][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.738480][T22960] tipc: Bearer : already 2 bearers with priority 10 [ 684.764405][T22960] tipc: Bearer : trying with adjusted priority [ 684.798454][T22960] tipc: Enabling of bearer rejected, failed to enable media [ 684.799803][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 684.919418][T20629] usb 2-1: Firmware version (0.0) predates our first public release. [ 684.956535][T20629] usb 2-1: Please update to version 0.2 or newer [ 685.019471][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 685.414407][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 685.656945][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 685.712874][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 685.804794][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 686.064722][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 686.151706][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 686.250460][T20627] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 686.280420][T20629] usb 2-1: USB disconnect, device number 67 [ 686.327526][T20627] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 686.607559][T20627] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 686.755363][T20627] usb 4-1: USB disconnect, device number 45 [ 686.779218][T22989] ntfs3(loop4): try to read out of volume at offset 0x0 [ 688.169919][T23014] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 688.240548][T23014] EXT4-fs (loop1): unable to read superblock [ 688.249639][T23017] XFS (nullb0): Invalid superblock magic number [ 688.890840][T23029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7769'. [ 691.224752][T23065] tap0: tun_chr_ioctl cmd 1074025673 [ 691.795885][T20633] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 691.956070][T20633] usb 4-1: Using ep0 maxpacket: 32 [ 691.974105][T20633] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.004242][T20633] usb 4-1: config 0 has no interfaces? [ 692.042667][T20633] usb 4-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 692.073650][T20633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.098319][T20633] usb 4-1: Product: syz [ 692.123544][T20633] usb 4-1: Manufacturer: syz [ 692.134027][T20633] usb 4-1: SerialNumber: syz [ 692.144224][T20633] usb 4-1: config 0 descriptor?? [ 692.408648][T20633] usb 4-1: USB disconnect, device number 46 [ 693.307265][T23105] netlink: 'syz.1.7801': attribute type 15 has an invalid length. [ 693.393850][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7803'. [ 695.726990][T23152] nvme_fabrics: missing parameter 'transport=%s' [ 695.774594][T23152] nvme_fabrics: missing parameter 'nqn=%s' [ 695.910035][T20629] kernel write not supported for file /snd/seq (pid: 20629 comm: kworker/0:7) [ 696.052424][T23164] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7828'. [ 696.854726][T20629] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 697.068730][T20629] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 697.103644][T20629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.187464][T20629] usb 5-1: config 0 descriptor?? [ 697.208369][T20629] cp210x 5-1:0.0: cp210x converter detected [ 697.440586][T20627] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 697.613854][T20627] usb 3-1: Using ep0 maxpacket: 32 [ 697.637709][T20627] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 697.672804][T20627] usb 3-1: config 0 has no interface number 0 [ 697.682793][T20629] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 697.712207][T20627] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.746646][T20629] usb 5-1: cp210x converter now attached to ttyUSB0 [ 697.762133][T20627] usb 3-1: config 0 interface 85 has no altsetting 0 [ 697.785947][T20627] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 697.817797][T20627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.852022][T20627] usb 3-1: Product: syz [ 697.868930][T20627] usb 3-1: Manufacturer: syz [ 697.877686][T20627] usb 3-1: SerialNumber: syz [ 697.903405][T20627] usb 3-1: config 0 descriptor?? [ 698.011488][T20629] usb 5-1: USB disconnect, device number 44 [ 698.058392][T20629] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 698.165799][T20629] cp210x 5-1:0.0: device disconnected [ 698.264006][T23215] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7850'. [ 698.629705][T20627] appletouch 3-1:0.85: Geyser mode initialized. [ 698.662824][T20627] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input52 [ 698.855559][T20633] usb 3-1: USB disconnect, device number 49 [ 698.911454][T20633] appletouch 3-1:0.85: input: appletouch disconnected [ 699.930877][T23245] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 699.995634][T23245] EXT4-fs (loop4): unable to read superblock [ 700.181283][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 700.181311][ T30] audit: type=1326 audit(2000000509.543:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23221 comm="syz.1.7855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cae58eba9 code=0x0 [ 700.708312][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.714923][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.843264][T23255] sctp: [Deprecated]: syz.3.7868 (pid 23255) Use of int in max_burst socket option deprecated. [ 700.843264][T23255] Use struct sctp_assoc_value instead [ 702.559704][T23296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7889'. [ 702.597266][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7889'. [ 702.701326][T23303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7887'. [ 704.230652][T23353] input: syz0 as /devices/virtual/input/input53 [ 704.359649][T23359] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7918'. [ 704.399947][T23359] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7918'. [ 704.632486][T23373] cifs: Unknown parameter 'mode' [ 705.328135][T23410] tap0: tun_chr_ioctl cmd 1074025677 [ 705.339859][T23410] tap0: linktype set to 804 [ 705.349716][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7940'. [ 705.796583][T23431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7949'. [ 705.821133][T23431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7949'. [ 706.176290][T23450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7958'. [ 706.196181][T23450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7958'. [ 706.210720][T23449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.556955][T23473] exfat: Deprecated parameter 'utf8' [ 706.568838][T23473] exFAT-fs (loop0): mounting with "discard" option, but the device does not support discard [ 706.584674][T23473] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 706.594517][T23473] exFAT-fs (loop0): unable to read boot sector [ 706.600727][T23473] exFAT-fs (loop0): failed to read boot sector [ 706.618165][T23473] exFAT-fs (loop0): failed to recognize exfat type [ 706.830480][T23487] program syz.0.7976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.902063][T20627] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 706.912941][T20633] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 706.929908][T23492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.064440][T20627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 707.083680][T20633] usb 5-1: Using ep0 maxpacket: 32 [ 707.091729][T20627] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 707.099898][T20633] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 707.112963][T20627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.118916][T20633] usb 5-1: config 0 has no interface number 0 [ 707.140997][T20627] usb 3-1: config 0 descriptor?? [ 707.141817][T20633] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 707.163451][T23477] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 707.179886][T20633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.188642][T20633] usb 5-1: Product: syz [ 707.199349][T20633] usb 5-1: Manufacturer: syz [ 707.208312][T20633] usb 5-1: SerialNumber: syz [ 707.216662][T20633] usb 5-1: config 0 descriptor?? [ 707.225364][T20633] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 707.455843][T20633] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 707.506074][T20633] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 707.641763][T20627] hid_parser_main: 7 callbacks suppressed [ 707.641789][T20627] hkems 0003:2006:0118.0064: unknown main item tag 0x0 [ 707.658774][T20627] hkems 0003:2006:0118.0064: item fetching failed at offset 3/5 [ 707.667823][T20627] hkems 0003:2006:0118.0064: parse failed [ 707.676810][T20627] hkems 0003:2006:0118.0064: probe with driver hkems failed with error -22 [ 707.834103][T20633] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 707.872160][T20606] usb 3-1: USB disconnect, device number 50 [ 707.918992][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 707.920125][T20627] usb 5-1: USB disconnect, device number 45 [ 707.954027][T20627] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 707.996435][T20627] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 708.017346][T20627] quatech2 5-1:0.51: device disconnected [ 708.036872][T20633] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.056077][T20633] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.074842][T20633] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 708.088094][T20633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 708.108383][T20633] usb 2-1: SerialNumber: syz [ 708.170196][T23530] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 708.360581][T20633] usb 2-1: 0:2 : does not exist [ 708.404893][T20633] usb 2-1: USB disconnect, device number 68 [ 708.722937][T23556] misc userio: Can't change port type on an already running userio instance [ 709.994375][T23603] __nla_validate_parse: 2 callbacks suppressed [ 709.994398][T23603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8029'. [ 710.207076][T20600] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 710.343084][T23624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8040'. [ 710.390490][T20600] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.409851][T20600] usb 1-1: config 0 has no interface number 0 [ 710.416073][T20600] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 710.442891][T20600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.475125][T20600] usb 1-1: config 0 descriptor?? [ 710.486328][T20600] usb 1-1: selecting invalid altsetting 1 [ 710.492790][T20600] dvb_ttusb_budget: ttusb_init_controller: error [ 710.501071][T20600] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 710.596664][T23636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8046'. [ 710.596717][T20600] DVB: Unable to find symbol cx22700_attach() [ 710.609551][T23636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8046'. [ 710.707899][T20600] DVB: Unable to find symbol tda10046_attach() [ 710.714169][T20600] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 710.750621][T20600] usb 1-1: USB disconnect, device number 17 [ 711.831240][T20627] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 711.864335][T23700] netlink: 'syz.2.8073': attribute type 4 has an invalid length. [ 712.003304][T20627] usb 4-1: Using ep0 maxpacket: 16 [ 712.021454][T20627] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.045624][T20627] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.073068][T20627] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 712.089370][T20627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.102072][T20627] usb 4-1: Product: syz [ 712.106318][T20627] usb 4-1: Manufacturer: syz [ 712.145406][T20627] usb 4-1: SerialNumber: syz [ 712.262873][T23712] tipc: Enabling of bearer rejected, already enabled [ 712.290871][T23712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8079'. [ 712.391469][T20627] usb 4-1: 0:2 : does not exist [ 712.413496][T20627] usb 4-1: USB disconnect, device number 47 [ 712.739555][T20629] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 712.791388][T23732] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 712.801220][T23732] FAT-fs (loop0): unable to read boot sector [ 712.911390][T20629] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 712.920993][T20629] usb 3-1: config 0 has no interface number 0 [ 712.927115][T20629] usb 3-1: config 0 interface 41 has no altsetting 0 [ 712.960565][T20629] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 712.984538][T20629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.992641][T20629] usb 3-1: Product: syz [ 713.006085][T20629] usb 3-1: Manufacturer: syz [ 713.011034][T20629] usb 3-1: SerialNumber: syz [ 713.032827][T20629] usb 3-1: config 0 descriptor?? [ 713.696552][T20629] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 713.728374][T20629] usb 3-1: USB disconnect, device number 51 [ 714.180553][T23776] program syz.4.8109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 714.234334][T23780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.677446][T20627] Process accounting resumed [ 715.708980][T23813] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.720435][T23813] I/O error, dev loop3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.730368][T23813] Mount JFS Failure: -5 [ 715.735514][T23813] jfs_mount failed w/return code = -5 [ 715.796058][T20629] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 715.958472][T20600] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 715.967244][T20629] usb 5-1: Using ep0 maxpacket: 32 [ 715.981328][T20629] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 715.993213][T20629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.023744][T20629] usb 5-1: config 0 descriptor?? [ 716.131027][T20600] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 716.159599][T20600] usb 1-1: config 0 has no interface number 0 [ 716.165927][T20600] usb 1-1: config 0 interface 41 has no altsetting 0 [ 716.192007][T20600] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 716.208438][T20600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.228339][T20600] usb 1-1: Product: syz [ 716.232580][T20600] usb 1-1: Manufacturer: syz [ 716.250639][T20600] usb 1-1: SerialNumber: syz [ 716.261356][T20600] usb 1-1: config 0 descriptor?? [ 716.267763][T20629] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 717.216150][T20600] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 717.261382][T20629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 717.276105][T20600] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 717.282915][T20629] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 717.291704][T20629] usb 5-1: media controller created [ 717.349688][T20600] usb 1-1: USB disconnect, device number 18 [ 717.902327][T20629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.989497][T20629] az6027: usb out operation failed. (-71) [ 718.013331][T20629] az6027: usb out operation failed. (-71) [ 718.019194][T20629] stb0899_attach: Driver disabled by Kconfig [ 718.041150][T20629] az6027: no front-end attached [ 718.041150][T20629] [ 718.094642][T20629] az6027: usb out operation failed. (-71) [ 718.115925][T20629] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 718.147252][T20629] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 718.191077][T20629] dvb-usb: schedule remote query interval to 400 msecs. [ 718.233952][T20629] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 718.298366][T20629] usb 5-1: USB disconnect, device number 46 [ 718.503633][T23887] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8158'. [ 718.605426][T20629] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 719.038913][T23912] ip6gre1: entered allmulticast mode [ 719.451289][T23932] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 719.670081][T20629] kernel read not supported for file /dsp (pid: 20629 comm: kworker/0:7) [ 719.703616][T23949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8185'. [ 719.738134][T23949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8185'. [ 720.056216][T23969] netlink: 'syz.1.8194': attribute type 14 has an invalid length. [ 720.066888][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8192'. [ 720.092810][T23970] netlink: 'syz.0.8192': attribute type 30 has an invalid length. [ 720.103408][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8192'. [ 720.485727][ T30] audit: type=1326 audit(2000000528.532:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 720.510638][T20629] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 720.553469][ T30] audit: type=1326 audit(2000000528.532:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 720.604910][ T30] audit: type=1326 audit(2000000528.560:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 720.670778][ T30] audit: type=1326 audit(2000000528.560:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 720.697367][T20629] usb 3-1: Using ep0 maxpacket: 32 [ 720.729916][T20629] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 720.758153][T20629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.776571][ T30] audit: type=1326 audit(2000000528.560:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 720.813861][T20629] usb 3-1: config 0 descriptor?? [ 720.851382][ T30] audit: type=1326 audit(2000000528.569:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 721.244486][T20629] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 721.250845][ T30] audit: type=1326 audit(2000000528.569:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 721.275199][T20629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.298240][T20629] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 721.305571][ T30] audit: type=1326 audit(2000000528.569:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 721.328287][T20629] usb 3-1: media controller created [ 721.356037][T20629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.386507][ T30] audit: type=1326 audit(2000000528.569:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 721.408842][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.429568][T20629] az6027: usb out operation failed. (-71) [ 721.441792][ T30] audit: type=1326 audit(2000000528.569:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.4.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951ed8eba9 code=0x7ffc0000 [ 721.459927][T20629] az6027: usb out operation failed. (-71) [ 721.464173][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.529292][T20629] stb0899_attach: Driver disabled by Kconfig [ 721.535395][T20629] az6027: no front-end attached [ 721.535395][T20629] [ 721.559765][T20629] az6027: usb out operation failed. (-71) [ 721.568157][T20629] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 721.584704][T20629] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 721.603477][T20629] dvb-usb: schedule remote query interval to 400 msecs. [ 721.610606][T20629] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 721.624762][T20629] usb 3-1: USB disconnect, device number 52 [ 721.691270][T20629] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 721.810587][T24025] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.8219'. [ 721.820162][ T979] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 721.838983][T24025] openvswitch: netlink: Key 10 has unexpected len 12 expected 4 [ 721.847059][T20627] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 721.998583][ T979] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 722.020449][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.046554][T20627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.061753][ T979] usb 5-1: config 0 descriptor?? [ 722.071550][T20627] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 722.088699][ T979] cp210x 5-1:0.0: cp210x converter detected [ 722.114469][T20627] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.137900][T20627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.148942][T20627] usb 1-1: Product: syz [ 722.153325][T20627] usb 1-1: Manufacturer: syz [ 722.158309][T20627] usb 1-1: SerialNumber: syz [ 722.421326][T24019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.470901][T24019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.503999][T20627] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 722.524660][ T979] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 722.550183][T20627] usb 1-1: USB disconnect, device number 19 [ 722.557277][ T979] usb 5-1: cp210x converter now attached to ttyUSB0 [ 722.595455][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 722.783975][T20633] usb 5-1: USB disconnect, device number 47 [ 722.802246][T20633] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 722.864754][T20633] cp210x 5-1:0.0: device disconnected [ 722.949785][T20600] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 723.024162][T20606] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 723.124984][T20600] usb 2-1: Using ep0 maxpacket: 32 [ 723.138321][T20600] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.149583][T20600] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.161734][T20600] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 723.171313][T20600] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 723.179917][T20600] usb 2-1: Product: syz [ 723.184633][T20600] usb 2-1: Manufacturer: syz [ 723.194668][T20599] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 723.206353][T20600] hub 2-1:4.0: USB hub found [ 723.215757][T20606] usb 1-1: Using ep0 maxpacket: 8 [ 723.223043][T20606] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 723.232030][T20606] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 723.242465][T20606] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.252699][T20606] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.262668][T20606] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 723.273774][T20606] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.285451][T20606] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 723.294633][T20606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.355732][T20599] usb 4-1: Using ep0 maxpacket: 32 [ 723.378482][T20599] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 723.397299][T20599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.420660][T20599] usb 4-1: config 0 descriptor?? [ 723.432502][T20600] hub 2-1:4.0: 6 ports detected [ 723.453510][T20600] hub 2-1:4.0: insufficient power available to use all downstream ports [ 723.535020][T20606] usb 1-1: usb_control_msg returned -71 [ 723.557634][T20606] usbtmc 1-1:16.0: can't read capabilities [ 723.579546][T20606] usb 1-1: USB disconnect, device number 20 [ 723.658206][T20599] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 723.674132][T20599] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 723.698081][T20599] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 723.705364][T20599] usb 4-1: media controller created [ 723.764367][T20599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.872159][T20599] az6027: usb out operation failed. (-71) [ 723.890765][T20599] az6027: usb out operation failed. (-71) [ 723.896699][T20599] stb0899_attach: Driver disabled by Kconfig [ 723.904479][T20599] az6027: no front-end attached [ 723.904479][T20599] [ 723.913016][T20599] az6027: usb out operation failed. (-71) [ 723.918850][T20599] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 723.931220][T20599] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 723.948999][T20599] dvb-usb: schedule remote query interval to 400 msecs. [ 723.956262][T20599] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 723.972173][T20599] usb 4-1: USB disconnect, device number 48 [ 724.033606][T20599] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 724.074105][T20600] usb 2-1: USB disconnect, device number 69 [ 724.156428][T20627] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 724.337936][T20627] usb 5-1: Using ep0 maxpacket: 16 [ 724.354265][T20627] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.380652][T20627] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.390453][T20627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 724.423538][T20627] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 724.432643][T20627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.461212][T20627] usb 5-1: config 0 descriptor?? [ 724.773620][T24078] ip6gre1: entered allmulticast mode [ 724.967772][T20627] cougar 0003:060B:500A.0065: unexpected long global item [ 724.988597][T20627] cougar 0003:060B:500A.0065: parse failed [ 725.003515][T20627] cougar 0003:060B:500A.0065: probe with driver cougar failed with error -22 [ 725.148984][T20627] usb 5-1: USB disconnect, device number 48 [ 725.343472][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8252'. [ 726.931292][T24158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8282'. [ 727.727982][T24187] syz_tun: Device is already in use. [ 728.213414][T24214] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.592886][T20629] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 728.779736][T20629] usb 4-1: Using ep0 maxpacket: 8 [ 728.801405][T20629] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 728.828345][T20629] usb 4-1: config 179 has no interface number 0 [ 728.834734][T20629] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 728.881354][T20629] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 728.913503][T20629] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 728.946836][T20629] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 728.968788][T20629] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 729.010733][T20629] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 729.035866][T20629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.067590][T24219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 729.327637][T20629] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input58 [ 729.413295][T24243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.538397][T20633] usb 4-1: USB disconnect, device number 49 [ 729.538403][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 729.538445][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 729.576098][T24249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8325'. [ 729.654573][T20600] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 729.824714][T20600] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 729.844424][T20600] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 729.853388][T20600] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 729.870305][T20600] usb 2-1: config 220 has no interface number 2 [ 729.878280][T20600] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 729.895215][T20600] usb 2-1: config 220 interface 0 has no altsetting 0 [ 729.903307][T20600] usb 2-1: config 220 interface 76 has no altsetting 0 [ 729.913505][T20600] usb 2-1: config 220 interface 1 has no altsetting 0 [ 729.923898][T20600] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 729.936563][T20600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.955174][T20600] usb 2-1: Product: syz [ 729.965459][T20600] usb 2-1: Manufacturer: syz [ 729.978427][T20600] usb 2-1: SerialNumber: syz [ 730.227297][T20600] usb 2-1: selecting invalid altsetting 0 [ 730.266023][T20600] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 730.279469][T20600] uvcvideo 2-1:220.0: No valid video chain found. [ 730.318977][T20600] usb 2-1: selecting invalid altsetting 0 [ 730.337672][T20600] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 730.344928][T24259] io-wq is not configured for unbound workers [ 730.357748][T20600] usb 2-1: USB disconnect, device number 70 [ 731.208644][T24293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8346'. [ 731.516583][T24296] Falling back ldisc for ttyS3. [ 732.051335][T24317] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8357'. [ 732.266340][T24326] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 734.214196][T24378] nbd: nbd3 already in use [ 734.900315][T20600] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 734.932361][T20633] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 735.071344][T20600] usb 1-1: Using ep0 maxpacket: 16 [ 735.084630][T20600] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 735.103636][T20600] usb 1-1: config 0 has no interface number 0 [ 735.112637][T20600] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 735.123033][T20633] usb 4-1: Using ep0 maxpacket: 16 [ 735.136021][T20600] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 735.158742][T20633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.178423][T20633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.188277][T20633] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 735.214294][T20633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.222822][T20600] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 735.232002][T20600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.240029][T20600] usb 1-1: Product: syz [ 735.265327][T20600] usb 1-1: Manufacturer: syz [ 735.265737][T24410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8399'. [ 735.270148][T20600] usb 1-1: SerialNumber: syz [ 735.273373][T20633] usb 4-1: config 0 descriptor?? [ 735.291837][T20600] usb 1-1: config 0 descriptor?? [ 735.300553][T24410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8399'. [ 735.310377][T24396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 735.323791][T24396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 735.553169][T24398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.553573][T24396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 735.582070][T24396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 735.586680][T24398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.843798][T20633] hid (null): unknown global tag 0xc [ 735.857407][T20633] hid (null): invalid report_count 47589 [ 735.958645][T20627] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 736.068509][T20600] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 736.082292][T20633] usb 4-1: string descriptor 0 read error: -71 [ 736.091052][T20600] asix 1-1:0.251: probe with driver asix failed with error -524 [ 736.119348][T20633] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 736.128935][T20633] letsketch 0003:6161:4D15.0066: probe with driver letsketch failed with error -32 [ 736.144122][T20627] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 736.148747][T20633] usb 4-1: USB disconnect, device number 50 [ 736.173160][T20627] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.184168][T20627] usb 2-1: config 0 has no interface number 0 [ 736.191179][T20627] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 736.202242][T20627] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 736.218547][T20627] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 736.228072][T20627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.236142][T20627] usb 2-1: Product: syz [ 736.240499][T20627] usb 2-1: Manufacturer: syz [ 736.245140][T20627] usb 2-1: SerialNumber: syz [ 736.259049][T20627] usb 2-1: config 0 descriptor?? [ 736.297538][T20600] usb 1-1: USB disconnect, device number 21 [ 736.855287][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8409'. [ 736.900203][T24431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8409'. [ 736.925547][T20627] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input59 [ 737.102513][T24440] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.122971][T24440] hfs: can't find a HFS filesystem on dev loop4 [ 737.152331][T20627] usb 2-1: USB disconnect, device number 71 [ 737.240683][T24443] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 737.304640][T24443] MINIX-fs: unable to read superblock [ 738.898467][T24482] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 739.219604][T24492] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8438'. [ 739.436149][T24500] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.447124][T24500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.461165][T24500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.481135][T24500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.490344][T24500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 739.515712][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.523281][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.533288][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.544588][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.555911][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.040298][T24497] chnl_net:caif_netlink_parms(): no params data found [ 740.401046][T24497] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.417415][T24497] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.434874][T24497] bridge_slave_0: entered allmulticast mode [ 740.476947][T24497] bridge_slave_0: entered promiscuous mode [ 740.499528][T24497] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.525985][T24497] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.541828][T24497] bridge_slave_1: entered allmulticast mode [ 740.564758][T24497] bridge_slave_1: entered promiscuous mode [ 740.696838][T24497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.733588][T24497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.802250][T24540] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8456'. [ 740.812592][T20633] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 740.838063][T24497] team0: Port device team_slave_0 added [ 740.864653][T24497] team0: Port device team_slave_1 added [ 741.000290][T24497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.013589][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.018847][T20633] usb 4-1: Using ep0 maxpacket: 8 [ 741.067601][T24497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.087038][T20633] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 741.107596][T20633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.123294][T24497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.138766][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.184868][T20633] pvrusb2: Hardware description: Terratec Grabster AV400 [ 741.192904][T20633] pvrusb2: ********** [ 741.202708][T20633] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 741.218731][T20633] pvrusb2: Important functionality might not be entirely working. [ 741.226704][T20633] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 741.227923][T24497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.239252][T20633] pvrusb2: ********** [ 741.277228][T24547] tun0: tun_chr_ioctl cmd 2147767507 [ 741.412798][ T2345] pvrusb2: Invalid write control endpoint [ 741.509671][ T2345] pvrusb2: Invalid write control endpoint [ 741.522259][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 741.536756][T19548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 741.559538][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 741.587071][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 741.610188][T24497] hsr_slave_0: entered promiscuous mode [ 741.627726][T20627] usb 4-1: USB disconnect, device number 51 [ 741.635088][ T2345] pvrusb2: Device being rendered inoperable [ 741.642700][T24497] hsr_slave_1: entered promiscuous mode [ 741.659314][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 741.668437][T24497] debugfs: 'hsr0' already exists in 'hsr' [ 741.674422][T24497] Cannot create hsr debugfs directory [ 741.703846][T19548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 741.726786][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 741.750052][ T2345] pvrusb2: Attached sub-driver cx25840 [ 741.754783][T24500] Bluetooth: hci5: command tx timeout [ 741.756472][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 741.781819][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 741.824918][T19548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 741.904064][T19548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 742.101714][T24560] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 742.114198][T24560] EXT4-fs (loop1): unable to read superblock [ 742.134733][T24560] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 742.160073][T19548] bridge_slave_1: left allmulticast mode [ 742.166506][T19548] bridge_slave_1: left promiscuous mode [ 742.174994][T19548] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.193498][T19548] bridge_slave_0: left allmulticast mode [ 742.205911][T19548] bridge_slave_0: left promiscuous mode [ 742.216755][T19548] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.313667][T24566] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 742.342553][T24566] hfs: can't find a HFS filesystem on dev loop3 [ 742.815713][T19548] dvmrp5 (unregistering): left allmulticast mode [ 743.398115][T19548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.408787][T19548] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 743.418387][T19548] bond0 (unregistering): Released all slaves [ 743.635596][T19548] tipc: Disabling bearer [ 743.676271][T19548] tipc: Left network mode [ 743.686913][T24497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 743.750088][T24497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 743.876567][T24497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 743.910809][T24497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 743.979970][T24500] Bluetooth: hci5: command tx timeout [ 744.154679][T19548] hsr_slave_0: left promiscuous mode [ 744.178380][T19548] hsr_slave_1: left promiscuous mode [ 744.540147][T24617] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8484'. [ 745.052045][ T979] hid-generic 0003:0004:0000.0067: unknown main item tag 0x0 [ 745.065951][ T979] hid-generic 0003:0004:0000.0067: unknown main item tag 0x0 [ 745.077060][ T979] hid-generic 0003:0004:0000.0067: unknown main item tag 0x0 [ 745.078356][T19548] team0 (unregistering): Port device team_slave_1 removed [ 745.101591][ T979] hid-generic 0003:0004:0000.0067: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 745.148483][T24631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8491'. [ 745.160074][T24631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8491'. [ 745.232557][T19548] team0 (unregistering): Port device team_slave_0 removed [ 745.304310][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8493'. [ 745.331150][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8493'. [ 745.821499][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8496'. [ 745.831509][T24643] netlink: 'syz.3.8496': attribute type 21 has an invalid length. [ 746.077600][T24651] input: syz1 as /devices/virtual/input/input60 [ 746.200544][T24500] Bluetooth: hci5: command tx timeout [ 746.574128][T24497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.619901][T24661] netlink: 'syz.3.8507': attribute type 1 has an invalid length. [ 746.656462][T24497] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.690959][T19546] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.698271][T19546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.753511][T19546] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.760733][T19546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.140280][T19548] IPVS: stop unused estimator thread 0... [ 747.150528][T24680] netlink: 'syz.0.8514': attribute type 16 has an invalid length. [ 747.162355][T24680] netlink: 'syz.0.8514': attribute type 17 has an invalid length. [ 747.590810][ T979] kernel write not supported for file bpf-prog (pid: 979 comm: kworker/0:2) [ 747.599471][T24497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.424973][T24500] Bluetooth: hci5: command tx timeout [ 748.447330][T24497] veth0_vlan: entered promiscuous mode [ 748.470824][T24497] veth1_vlan: entered promiscuous mode [ 748.558644][T24497] veth0_macvtap: entered promiscuous mode [ 748.590777][T24497] veth1_macvtap: entered promiscuous mode [ 748.647994][T24497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.672223][T24497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.718286][T19548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.747525][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.781428][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.806158][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.926009][T19546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.958485][T19546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.045744][T19548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.056361][T19548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.300786][ T44] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 749.490270][ T44] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 749.517695][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.537532][ T44] usb 5-1: Product: syz [ 749.541799][ T44] usb 5-1: Manufacturer: syz [ 749.560028][ T44] usb 5-1: SerialNumber: syz [ 749.578523][ T44] usb 5-1: config 0 descriptor?? [ 749.697845][T24749] IPVS: Error joining to the multicast group [ 749.985036][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8544'. [ 749.994196][T24760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8544'. [ 750.015703][T24760] netlink: 'syz.3.8544': attribute type 6 has an invalid length. [ 750.038601][ T44] usb 5-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 750.241362][T20600] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 750.262955][ T44] usb 5-1: failed to fetch extended address, random address set [ 750.328902][ T44] usb 5-1: USB disconnect, device number 49 [ 750.436945][T20600] usb 1-1: Using ep0 maxpacket: 32 [ 750.446358][T20600] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 750.476889][T20600] usb 1-1: config 0 has no interface number 0 [ 750.490836][T20600] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 750.519445][T20600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.556241][T20600] usb 1-1: Product: syz [ 750.561117][T20600] usb 1-1: Manufacturer: syz [ 750.577186][T20600] usb 1-1: SerialNumber: syz [ 750.591828][T20600] usb 1-1: config 0 descriptor?? [ 750.623254][T20600] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 750.859603][T20600] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 750.890551][T20600] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 751.636039][T24814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.064334][T24831] siw: device registration error -23 [ 753.183500][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 753.185569][ T979] usb 1-1: USB disconnect, device number 22 [ 753.305237][ T979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 753.375689][ T979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 753.412563][ T979] quatech2 1-1:0.51: device disconnected [ 753.683854][T20633] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 753.716361][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 753.748137][ T979] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 753.878540][T20633] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 753.899594][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 753.906994][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.933071][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 753.937144][T20633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 753.954405][ T979] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 753.975677][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.983570][T20633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 753.993781][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.015994][ T9] usb 5-1: config 0 descriptor?? [ 754.025081][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.031886][T20633] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 754.055078][T20633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.057540][ T979] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 754.084773][T20633] usb 2-1: Product: syz [ 754.108780][T20633] usb 2-1: Manufacturer: syz [ 754.110709][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.132939][T20633] usb 2-1: SerialNumber: syz [ 754.154427][ T979] usb 1-1: config 0 descriptor?? [ 754.168159][T20633] usb 2-1: config 0 descriptor?? [ 754.198065][T24860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 754.265578][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 754.477998][T20629] usb 5-1: USB disconnect, device number 50 [ 754.488817][T20633] powermate: unknown product id 0240 [ 754.527645][T20633] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 754.576821][T20633] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 754.670849][ T979] sony 0003:054C:024B.0068: unexpected long global item [ 754.814459][ T979] sony 0003:054C:024B.0068: parse failed [ 754.823693][ T979] sony 0003:054C:024B.0068: probe with driver sony failed with error -22 [ 754.942725][ C1] powermate: config urb returned -71 [ 754.945640][ T979] usb 2-1: USB disconnect, device number 72 [ 754.948165][ C1] powermate: usb_submit_urb(config) failed [ 754.954221][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 754.987325][T20629] usb 1-1: USB disconnect, device number 23 [ 755.395586][T24899] netlink: 'syz.3.8604': attribute type 16 has an invalid length. [ 755.403597][T24899] netlink: 'syz.3.8604': attribute type 17 has an invalid length. [ 755.501247][T20633] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 755.742785][T24911] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8610'. [ 756.159678][T24927] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8615'. [ 756.648052][T20606] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 756.966315][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8631'. [ 757.022393][T24971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8634'. [ 757.426678][T24986] syzkaller1: tun_chr_ioctl cmd 35111 [ 758.746895][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8659'. [ 758.847691][T20629] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 759.029349][T20629] usb 5-1: Using ep0 maxpacket: 16 [ 759.060756][T20629] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 759.094700][T20629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.119897][T20629] usb 5-1: Product: syz [ 759.124134][T20629] usb 5-1: Manufacturer: syz [ 759.139851][T20629] usb 5-1: SerialNumber: syz [ 759.151410][T20629] usb 5-1: config 0 descriptor?? [ 759.162995][T20629] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 759.188385][T25038] netlink: 'syz.0.8665': attribute type 12 has an invalid length. [ 759.200593][T20633] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 759.211481][T25038] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.8665'. [ 759.274615][T25045] netlink: 'syz.3.8667': attribute type 1 has an invalid length. [ 759.282826][T25045] netlink: 'syz.3.8667': attribute type 2 has an invalid length. [ 759.297165][T25045] netlink: 'syz.3.8667': attribute type 1 has an invalid length. [ 759.305329][T25045] netlink: 'syz.3.8667': attribute type 2 has an invalid length. [ 759.384216][T20633] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.401430][T20600] usb 5-1: USB disconnect, device number 51 [ 759.465739][T20633] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.484813][T20633] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 759.507670][T20633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.530170][T20633] usb 2-1: Product: syz [ 759.535281][T20633] usb 2-1: Manufacturer: syz [ 759.539938][T20633] usb 2-1: SerialNumber: syz [ 759.704552][T25057] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8673'. [ 759.852303][T20633] usb 2-1: 0:2 : does not exist [ 759.864214][T20633] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 759.916608][T20633] usb 2-1: USB disconnect, device number 73 [ 760.077492][T25074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8680'. [ 760.191908][T25080] exfat: Deprecated parameter 'utf8' [ 760.197478][T25080] exfat: Deprecated parameter 'utf8' [ 760.206651][T25080] exfat: Deprecated parameter 'utf8' [ 760.212366][T25080] exFAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 760.231865][T25080] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.241306][T25080] exFAT-fs (loop3): unable to read boot sector [ 760.255544][T25080] exFAT-fs (loop3): failed to read boot sector [ 760.269046][T25080] exFAT-fs (loop3): failed to recognize exfat type [ 760.281792][T25085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8686'. [ 760.301205][T25085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8686'. [ 760.707103][T25101] input: syz1 as /devices/virtual/input/input62 [ 761.667356][T25119] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8703'. [ 762.288655][T25113] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 762.897923][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 762.897941][ T30] audit: type=1326 audit(2000000568.202:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25154 comm="syz.5.8717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f760398eba9 code=0x0 [ 763.471163][T25140] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 763.501715][T25140] XFS (loop1): SB validate failed with error -5. [ 763.654297][T25140] overlayfs: failed to resolve './file1/file0': -2 [ 763.821728][T25190] tipc: New replicast peer: 255.255.255.255 [ 763.840551][T25190] tipc: Enabled bearer , priority 10 [ 763.849194][T25192] netlink: 360 bytes leftover after parsing attributes in process `syz.4.8730'. [ 764.062983][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8734'. [ 764.082231][T25203] netlink: 'syz.3.8734': attribute type 5 has an invalid length. [ 765.037480][T20606] tipc: Node number set to 760734597 [ 765.108614][T25245] netlink: 'syz.0.8753': attribute type 49 has an invalid length. [ 765.675953][T25265] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 765.711008][T20606] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 765.777767][T25265] EXT4-fs (loop0): unable to read superblock [ 765.893002][T20606] usb 4-1: Using ep0 maxpacket: 16 [ 765.906393][T20606] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 765.928175][T20606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.949726][T20606] usb 4-1: Product: syz [ 765.964649][T20606] usb 4-1: Manufacturer: syz [ 765.978314][T20606] usb 4-1: SerialNumber: syz [ 765.989874][T20606] usb 4-1: config 0 descriptor?? [ 766.389169][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 766.398286][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 766.406026][T20629] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 766.437308][T20606] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 766.449329][T20606] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 766.461472][T20606] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 766.471513][T20606] usb 4-1: media controller created [ 766.497692][T20606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 766.506274][T25281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.506399][T25281] IPv6: NLM_F_CREATE should be set when creating new route [ 766.506428][T25281] IPv6: NLM_F_CREATE should be set when creating new route [ 766.507058][T25281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.568358][T20629] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 766.578075][T20629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.587702][T20600] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 766.596812][T20629] usb 1-1: config 0 descriptor?? [ 766.612065][T20629] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 766.656732][T20606] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 766.665917][T20606] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 766.750088][T20600] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 766.763531][T20600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.777508][T25287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.796872][T20600] usb 5-1: config 0 descriptor?? [ 766.814810][T20600] cp210x 5-1:0.0: cp210x converter detected [ 766.899737][T25293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8774'. [ 766.908997][T25293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8774'. [ 766.937941][ T9] usb 4-1: USB disconnect, device number 52 [ 767.062748][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 767.077843][T20629] cpia1 1-1:0.0: unexpected state after lo power cmd: ed [ 767.256401][T20600] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 767.271228][T20600] usb 5-1: cp210x converter now attached to ttyUSB0 [ 767.484382][ T9] usb 5-1: USB disconnect, device number 52 [ 767.494646][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 767.503555][T20629] gspca_cpia1: usb_control_msg 02, error -71 [ 767.511455][ T9] cp210x 5-1:0.0: device disconnected [ 767.517728][T20629] gspca_cpia1: usb_control_msg 05, error -71 [ 767.523770][T20629] cpia1 1-1:0.0: unexpected systemstate: ed [ 767.537115][T20629] usb 1-1: USB disconnect, device number 24 [ 767.715608][T25308] tmpfs: Cannot change global quota limit on remount [ 767.893666][T20629] hid-generic 0005:0C45:1010.0069: collection stack underflow [ 767.930121][T20629] hid-generic 0005:0C45:1010.0069: item 0 4 0 12 parsing failed [ 767.943931][T25317] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 767.959285][T20629] hid-generic 0005:0C45:1010.0069: probe with driver hid-generic failed with error -22 [ 768.150898][T25325] program syz.4.8788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 768.255248][T20629] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 768.431075][T20629] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 768.458420][T20629] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 768.473590][T20629] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 768.500943][T20629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 768.521626][T20629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 768.555332][T20629] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 768.569520][T20629] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 768.587265][T20629] usb 4-1: Product: syz [ 768.598714][T20629] usb 4-1: Manufacturer: syz [ 768.625030][T20629] cdc_wdm 4-1:1.0: skipping garbage [ 768.636575][T20629] cdc_wdm 4-1:1.0: skipping garbage [ 768.654964][T20629] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 768.668097][T20629] cdc_wdm 4-1:1.0: Unknown control protocol [ 768.873784][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8807'. [ 769.072726][T20629] usb 4-1: USB disconnect, device number 53 [ 769.163247][T25376] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 769.174702][T25376] ALSA: mixer_oss: invalid OSS volume '' [ 769.360579][ T30] audit: type=1326 audit(2000000574.254:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.408447][ T30] audit: type=1326 audit(2000000574.273:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.452504][ T30] audit: type=1326 audit(2000000574.273:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.478439][ T30] audit: type=1326 audit(2000000574.273:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.507801][ T30] audit: type=1326 audit(2000000574.282:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.530318][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.546015][ T30] audit: type=1326 audit(2000000574.282:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.568398][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.575805][ T30] audit: type=1326 audit(2000000574.282:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.600557][ T30] audit: type=1326 audit(2000000574.282:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.624660][ T30] audit: type=1326 audit(2000000574.282:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.0.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ecb8eba9 code=0x7ffc0000 [ 769.734515][T25390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8821'. [ 770.164133][ T5865] block device autoloading is deprecated and will be removed. [ 770.203510][T25409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8829'. [ 770.260704][T25410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8830'. [ 770.304469][T25413] exfat: Deprecated parameter 'utf8' [ 770.371229][T25413] exfat: Deprecated parameter 'utf8' [ 770.408876][T25413] exfat: Deprecated parameter 'utf8' [ 770.427915][T25413] exFAT-fs (loop0): mounting with "discard" option, but the device does not support discard [ 770.456199][T25413] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 770.476839][T25413] exFAT-fs (loop0): unable to read boot sector [ 770.490674][T25413] exFAT-fs (loop0): failed to read boot sector [ 770.512370][T25413] exFAT-fs (loop0): failed to recognize exfat type [ 771.103291][T25433] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 771.846722][T25462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8854'. [ 771.872170][T25462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8854'. [ 771.904090][T25462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8854'. [ 771.922326][T25462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8854'. [ 771.937290][T25462] netlink: 'syz.5.8854': attribute type 6 has an invalid length. [ 772.392499][T25477] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.483775][T25451] xfs: Unknown parameter 'ikeep' [ 772.515068][ T30] audit: type=1326 audit(2000000577.201:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25450 comm="syz.1.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cae58eba9 code=0x7ffc0000 [ 772.545262][T25483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8864'. [ 772.793002][T25490] serio: Serial port ptm0 [ 773.706355][T25528] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 773.771993][T25528] EXT4-fs (loop5): unable to read superblock [ 774.215037][T25550] bridge0: port 3(batadv1) entered blocking state [ 774.229138][T25550] bridge0: port 3(batadv1) entered disabled state [ 774.236424][T25550] batadv1: entered allmulticast mode [ 774.249447][T25550] batadv1: entered promiscuous mode [ 774.359318][T20633] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 774.439603][T25556] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 774.455313][T25556] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 774.531447][T20633] usb 1-1: Using ep0 maxpacket: 32 [ 774.544894][T20633] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 774.558722][T20633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.591022][T20633] usb 1-1: config 0 descriptor?? [ 774.744219][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 774.754172][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 774.827094][T20633] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 774.853286][T20633] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 774.883789][T20633] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 774.891028][T20633] usb 1-1: media controller created [ 774.957023][T20633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 775.042631][T20633] az6027: usb out operation failed. (-71) [ 775.048872][T20633] az6027: usb out operation failed. (-71) [ 775.054820][T20633] stb0899_attach: Driver disabled by Kconfig [ 775.060837][T20633] az6027: no front-end attached [ 775.060837][T20633] [ 775.097264][T20633] az6027: usb out operation failed. (-71) [ 775.107852][T20633] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 775.120383][T20633] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63 [ 775.151186][T20633] dvb-usb: schedule remote query interval to 400 msecs. [ 775.158421][T20633] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 775.184901][T20633] usb 1-1: USB disconnect, device number 25 [ 775.523147][T20633] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 776.409329][T25613] ntfs3(loop5): try to read out of volume at offset 0x0 [ 776.739501][T25630] gtp0: entered promiscuous mode [ 776.751492][T25630] gtp0: entered allmulticast mode [ 777.542064][T25658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.818085][T25665] input: syz1 as /devices/virtual/input/input64 [ 779.017233][T25699] netlink: 'syz.3.8964': attribute type 21 has an invalid length. [ 779.172042][T25703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 779.179271][T25703] journal_path: Lookup failure for './file0' [ 779.185521][T25703] EXT4-fs: error: could not find journal device path [ 779.218931][T25703] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 779.229796][T25703] EXT4-fs (loop4): unable to read superblock [ 779.369732][T25699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8964'. [ 779.386109][T25699] netlink: 'syz.3.8964': attribute type 1 has an invalid length. [ 779.570236][T25714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8972'. [ 779.959169][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 779.959190][ T30] audit: type=1326 audit(2000000584.160:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25727 comm="syz.3.8977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07d8d8eba9 code=0x0 [ 779.987406][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.376655][T25755] program syz.1.8990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.411475][T20633] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 780.514180][T25761] team0: No ports can be present during mode change [ 780.549421][T20606] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 780.570986][T20633] usb 1-1: Using ep0 maxpacket: 8 [ 780.579690][T20633] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 780.592277][T20633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.617872][T20633] pvrusb2: Hardware description: Terratec Grabster AV400 [ 780.628661][T20633] pvrusb2: ********** [ 780.632816][T20633] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 780.644535][T20633] pvrusb2: Important functionality might not be entirely working. [ 780.655755][T20633] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 780.674045][T20633] pvrusb2: ********** [ 780.709989][T20606] usb 5-1: Using ep0 maxpacket: 16 [ 780.723815][T20606] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 780.744235][T20606] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 780.759551][T20606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.769859][T20606] usb 5-1: Product: syz [ 780.777916][T20606] usb 5-1: Manufacturer: syz [ 780.786428][T20606] usb 5-1: SerialNumber: syz [ 780.811775][T20606] usb 5-1: config 0 descriptor?? [ 780.841164][ T2345] pvrusb2: Invalid write control endpoint [ 780.887356][T20606] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 780.905777][T20606] usb 5-1: Detected FT232R [ 780.998492][ T2345] pvrusb2: Invalid write control endpoint [ 781.004333][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 781.035712][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 781.050344][T20633] usb 1-1: USB disconnect, device number 26 [ 781.062388][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 781.093289][ T2345] pvrusb2: Device being rendered inoperable [ 781.109680][T20606] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 781.125041][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 781.142228][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 781.153534][ T2345] pvrusb2: Attached sub-driver cx25840 [ 781.164255][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 781.177028][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 781.367288][T20606] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 781.428975][T25791] netlink: 'syz.3.9006': attribute type 1 has an invalid length. [ 781.443123][T25791] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9006'. [ 781.453738][T25791] netlink: 97 bytes leftover after parsing attributes in process `syz.3.9006'. [ 781.482727][T25793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9007'. [ 781.610669][T20633] usb 5-1: USB disconnect, device number 53 [ 781.645041][T20633] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 781.655606][T20633] ftdi_sio 5-1:0.0: device disconnected [ 781.811059][T20606] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 781.992623][T20606] usb 4-1: Using ep0 maxpacket: 32 [ 782.001145][T20606] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 782.023612][T20606] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 782.033139][T20606] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 782.042807][T20606] usb 4-1: Product: syz [ 782.047330][T20606] usb 4-1: Manufacturer: syz [ 782.052070][T20606] usb 4-1: SerialNumber: syz [ 782.061763][T20606] usb 4-1: config 0 descriptor?? [ 782.068145][T25796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 782.078368][T20606] hub 4-1:0.0: bad descriptor, ignoring hub [ 782.084438][T20606] hub 4-1:0.0: probe with driver hub failed with error -5 [ 782.202414][T25821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9019'. [ 782.315573][T25827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9022'. [ 782.452414][T20633] usb 4-1: USB disconnect, device number 54 [ 782.724455][T25841] mkiss: ax0: crc mode is auto. [ 782.774239][T25813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 782.805827][T20633] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 783.018775][T20633] usb 4-1: Using ep0 maxpacket: 32 [ 783.037664][T20633] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 783.067008][T20633] usb 4-1: string descriptor 0 read error: -22 [ 783.096538][T20633] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 783.112092][T20633] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 783.142064][T20633] usb 4-1: config 0 descriptor?? [ 783.156213][T25796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 783.177797][T20633] hub 4-1:0.0: bad descriptor, ignoring hub [ 783.196892][T20633] hub 4-1:0.0: probe with driver hub failed with error -5 [ 783.259318][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.268989][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.278056][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.287114][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.296133][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.305260][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.314312][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.323371][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.332703][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.341780][T25859] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 783.437713][T25861] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 783.451758][T25861] EXT4-fs (loop4): unable to read superblock [ 783.521662][T20633] usb 4-1: USB disconnect, device number 55 [ 784.415620][T25886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.440974][T20629] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 784.601485][T20629] usb 4-1: Using ep0 maxpacket: 16 [ 784.629684][T20629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.654414][T20629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.696844][T20629] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 784.719327][T20629] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 784.728617][T20629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.757228][T20629] usb 4-1: config 0 descriptor?? [ 784.941380][T25905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9056'. [ 785.147246][T25911] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 785.157333][T25911] hfsplus: unable to find HFS+ superblock [ 785.211583][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.229863][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.247495][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.260412][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.273715][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.274821][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.274855][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.274883][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.274911][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.274937][T20629] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 785.276493][T20629] HID 045e:07da: Invalid code 65791 type 1 [ 785.298208][T20629] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.006A/input/input67 [ 785.316127][T20629] microsoft 0003:045E:07DA.006A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 785.331469][T20627] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 785.450978][T20629] usb 4-1: USB disconnect, device number 56 [ 785.490269][T20627] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 785.498940][T20627] usb 5-1: config 0 has no interface number 0 [ 785.509948][T20627] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 785.526139][T20627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.566284][T20627] usb 5-1: config 0 descriptor?? [ 785.576089][T20627] usb 5-1: selecting invalid altsetting 1 [ 785.582062][T20627] dvb_ttusb_budget: ttusb_init_controller: error [ 785.602600][T20627] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 785.728303][T20627] DVB: Unable to find symbol cx22700_attach() [ 785.781270][T20627] DVB: Unable to find symbol tda10046_attach() [ 785.797959][T20627] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 785.814423][T20627] usb 5-1: USB disconnect, device number 54 [ 786.679509][T25954] tipc: Resetting bearer [ 786.963534][T20633] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 787.151565][T20633] usb 5-1: unable to get BOS descriptor or descriptor too short [ 787.163321][T20633] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 1024 [ 787.185221][T20633] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 7227, setting to 1024 [ 787.208830][T20633] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 787.241572][T20633] usb 5-1: config 1 interface 0 has no altsetting 0 [ 787.254555][T25975] block nbd1: Unsupported socket: should be TCP or UNIX. [ 787.264654][T20599] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 787.275438][T20633] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 787.286150][T20633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.294243][T20633] usb 5-1: Product: syz [ 787.306805][T20633] usb 5-1: Manufacturer: syz [ 787.311512][T20633] usb 5-1: SerialNumber: syz [ 787.324533][T25948] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 787.335028][T25948] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 787.460566][T20599] usb 1-1: Using ep0 maxpacket: 16 [ 787.469030][T20599] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.483044][T20599] usb 1-1: config 0 has no interface number 0 [ 787.495926][T20599] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 787.527245][T20599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.546434][T20599] usb 1-1: Product: syz [ 787.550775][T20599] usb 1-1: Manufacturer: syz [ 787.562624][T20599] usb 1-1: SerialNumber: syz [ 787.600080][T20599] usb 1-1: config 0 descriptor?? [ 787.612254][T20599] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 787.620804][T20633] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 787.649836][T20633] usb 5-1: USB disconnect, device number 55 [ 787.669260][T25987] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.9094'. [ 788.346273][T24500] Bluetooth: hci5: link tx timeout [ 788.354111][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.369657][T24500] Bluetooth: hci5: link tx timeout [ 788.374976][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.383077][T24500] Bluetooth: hci5: link tx timeout [ 788.388416][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.404865][T24500] Bluetooth: hci5: link tx timeout [ 788.410505][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.418425][T24500] Bluetooth: hci5: link tx timeout [ 788.423817][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.432055][T24500] Bluetooth: hci5: link tx timeout [ 788.437414][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.445568][T24500] Bluetooth: hci5: link tx timeout [ 788.454346][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.462601][T24500] Bluetooth: hci5: link tx timeout [ 788.467972][T24500] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 788.479891][T20599] gspca_spca1528: reg_w err -71 [ 788.535220][T20599] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 788.561355][T20599] usb 1-1: USB disconnect, device number 27 [ 900.946652][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 900.953671][ C1] rcu: 0-...!: (0 ticks this GP) idle=4d64/1/0x4000000000000000 softirq=114041/114041 fqs=1 [ 900.965202][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24497/1:b..l [ 900.973250][ C1] rcu: (detected by 1, t=10502 jiffies, g=107661, q=458 ncpus=2) [ 900.981090][ C1] Sending NMI from CPU 1 to CPUs 0: [ 900.981125][ C0] NMI backtrace for cpu 0 [ 900.981143][ C0] CPU: 0 UID: 0 PID: 26013 Comm: syz.4.9105 Not tainted syzkaller #0 PREEMPT(full) [ 900.981164][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 900.981176][ C0] RIP: 0010:lock_release+0x44/0x3e0 [ 900.981209][ C0] Code: 8b 05 80 6d 26 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 83 6d 26 11 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 6c b9 26 0e <73> 16 e8 35 e9 08 00 84 c0 75 0d f6 05 05 a5 10 0e 01 0f 84 ad 02 [ 900.981225][ C0] RSP: 0018:ffffc90000007bf8 EFLAGS: 00000093 [ 900.981240][ C0] RAX: 0000000000000000 RBX: ffff88805b2182e8 RCX: 1ffff1100b643065 [ 900.981254][ C0] RDX: 0000000000010000 RSI: ffffffff89a289ef RDI: ffff88805b218300 [ 900.981266][ C0] RBP: ffff88805ac2e150 R08: 0000000000000003 R09: 0000000000000004 [ 900.981278][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: ffff88805b218340 [ 900.981291][ C0] R13: ffffffff89a289ef R14: ffff88805b218300 R15: ffff88805ac2d800 [ 900.981305][ C0] FS: 0000000000000000(0000) GS:ffff8881259e1000(0000) knlGS:0000000000000000 [ 900.981320][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.981332][ C0] CR2: 0000200000001340 CR3: 000000000e138000 CR4: 00000000003526f0 [ 900.981348][ C0] Call Trace: [ 900.981357][ C0] [ 900.981365][ C0] ? taprio_set_budgets+0x37c/0x3b0 [ 900.981391][ C0] _raw_spin_unlock+0x16/0x50 [ 900.981415][ C0] advance_sched+0x99f/0xc90 [ 900.981440][ C0] ? __pfx_advance_sched+0x10/0x10 [ 900.981456][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 900.981494][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 900.981519][ C0] ? read_tsc+0x9/0x20 [ 900.981546][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 900.981588][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 900.981608][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 900.981634][ C0] [ 900.981640][ C0] [ 900.981648][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.981667][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 900.981691][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 7d 26 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 900.981705][ C0] RSP: 0018:ffffc90019fd74f0 EFLAGS: 00000206 [ 900.981720][ C0] RAX: 23e03971e2354700 RBX: 0000000000000000 RCX: 23e03971e2354700 [ 900.981732][ C0] RDX: 0000000000000000 RSI: ffffffff8ddb2001 RDI: ffffffff8c037e00 [ 900.981744][ C0] RBP: ffffffff822f8c47 R08: 0000000000000000 R09: ffffffff822f8c47 [ 900.981757][ C0] R10: dffffc0000000000 R11: fffff94000311a29 R12: 0000000000000002 [ 900.981770][ C0] R13: ffffffff8e33d660 R14: 0000000000000000 R15: 0000000000000246 [ 900.981783][ C0] ? page_table_check_clear+0x187/0x700 [ 900.981811][ C0] ? page_table_check_clear+0x187/0x700 [ 900.981844][ C0] ? pfn_valid+0xba/0x490 [ 900.981871][ C0] ? pfn_valid+0xba/0x490 [ 900.981896][ C0] ? page_table_check_clear+0x187/0x700 [ 900.981921][ C0] page_table_check_clear+0x1a4/0x700 [ 900.981952][ C0] ? page_table_check_clear+0x187/0x700 [ 900.981978][ C0] ? vm_normal_page+0x10d/0x240 [ 900.981999][ C0] unmap_page_range+0x344b/0x4370 [ 900.982045][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 900.982069][ C0] ? mas_find+0xb0e/0xd30 [ 900.982092][ C0] ? unmap_vmas+0x144/0x580 [ 900.982114][ C0] unmap_vmas+0x399/0x580 [ 900.982137][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 900.982170][ C0] exit_mmap+0x240/0xb40 [ 900.982197][ C0] ? uprobe_clear_state+0x20f/0x290 [ 900.982219][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 900.982243][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 900.982266][ C0] ? __pfx_exit_aio+0x10/0x10 [ 900.982290][ C0] ? uprobe_clear_state+0x27c/0x290 [ 900.982312][ C0] __mmput+0x118/0x430 [ 900.982338][ C0] exit_mm+0x1da/0x2c0 [ 900.982360][ C0] ? __pfx_exit_mm+0x10/0x10 [ 900.982382][ C0] ? rcu_is_watching+0x15/0xb0 [ 900.982400][ C0] do_exit+0x648/0x2300 [ 900.982418][ C0] ? preempt_schedule+0xae/0xc0 [ 900.982443][ C0] ? preempt_schedule_common+0x83/0xd0 [ 900.982468][ C0] ? preempt_schedule+0xae/0xc0 [ 900.982492][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 900.982517][ C0] ? __pfx_do_exit+0x10/0x10 [ 900.982539][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 900.982559][ C0] do_group_exit+0x21c/0x2d0 [ 900.982582][ C0] __x64_sys_exit_group+0x3f/0x40 [ 900.982603][ C0] x64_sys_call+0x21f7/0x2200 [ 900.982627][ C0] do_syscall_64+0xfa/0xfa0 [ 900.982653][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 900.982679][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.982696][ C0] ? clear_bhb_loop+0x60/0xb0 [ 900.982717][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.982734][ C0] RIP: 0033:0x7f951ed8eba9 [ 900.982749][ C0] Code: Unable to access opcode bytes at 0x7f951ed8eb7f. [ 900.982759][ C0] RSP: 002b:00007ffcfb8b56e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 900.982776][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f951ed8eba9 [ 900.982788][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 900.982799][ C0] RBP: 00007ffcfb8b574c R08: 00000004fb8b57df R09: 00000000000927c0 [ 900.982811][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000761 [ 900.982822][ C0] R13: 00000000000927c0 R14: 00000000000bb86d R15: 00007ffcfb8b57a0 [ 900.982844][ C0] [ 900.983118][ C1] task:syz-executor state:R running task stack:21704 pid:24497 tgid:24497 ppid:24475 task_flags:0x400140 flags:0x00004000 [ 901.514503][ C1] Call Trace: [ 901.517801][ C1] [ 901.520764][ C1] __schedule+0x1798/0x4cc0 [ 901.525305][ C1] ? do_syscall_64+0xfa/0xfa0 [ 901.530032][ C1] ? __lock_acquire+0xab9/0xd20 [ 901.534915][ C1] ? __pfx___schedule+0x10/0x10 [ 901.539796][ C1] ? do_raw_spin_lock+0x121/0x290 [ 901.544859][ C1] ? preempt_schedule+0xae/0xc0 [ 901.549745][ C1] preempt_schedule_common+0x83/0xd0 [ 901.555064][ C1] preempt_schedule+0xae/0xc0 [ 901.559769][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 901.565180][ C1] ? copy_pmd_range+0x75fa/0x7f00 [ 901.570235][ C1] preempt_schedule_thunk+0x16/0x30 [ 901.575471][ C1] _raw_spin_unlock+0x3f/0x50 [ 901.580178][ C1] copy_pmd_range+0x7630/0x7f00 [ 901.585059][ C1] ? unwind_get_return_address+0x4d/0x90 [ 901.590751][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 901.595986][ C1] ? __lock_acquire+0xab9/0xd20 [ 901.600891][ C1] copy_page_range+0xc14/0x1270 [ 901.605774][ C1] ? __lock_acquire+0xab9/0xd20 [ 901.610680][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 901.615996][ C1] ? up_write+0x1c4/0x420 [ 901.620341][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 901.627133][ C1] dup_mmap+0xf4f/0x1ab0 [ 901.631420][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 901.636136][ C1] ? mm_init+0xd74/0xfa0 [ 901.640415][ C1] copy_mm+0x13c/0x4b0 [ 901.644516][ C1] copy_process+0x1706/0x3c00 [ 901.649244][ C1] ? copy_process+0x97f/0x3c00 [ 901.654047][ C1] ? __pfx_copy_process+0x10/0x10 [ 901.659115][ C1] kernel_clone+0x21e/0x840 [ 901.663641][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 901.668784][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 901.673845][ C1] ? count_memcg_event_mm+0x21/0x260 [ 901.679174][ C1] __x64_sys_clone+0x18b/0x1e0 [ 901.683964][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 901.689289][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 901.694611][ C1] ? do_syscall_64+0xbe/0xfa0 [ 901.699322][ C1] do_syscall_64+0xfa/0xfa0 [ 901.703857][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.709094][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.715189][ C1] ? clear_bhb_loop+0x60/0xb0 [ 901.719896][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.725807][ C1] RIP: 0033:0x7f7603985413 [ 901.730331][ C1] RSP: 002b:00007ffe19469cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 901.738771][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7603985413 [ 901.746845][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 901.754836][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 901.762827][ C1] R10: 0000555580c5a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 901.770816][ C1] R13: 00000000000927c0 R14: 00000000000bb8e1 R15: 00007ffe19469e90 [ 901.778830][ C1] [ 901.781864][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g107661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 901.793165][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 901.803151][ C1] rcu: RCU grace-period kthread stack dump: [ 901.809050][ C1] task:rcu_preempt state:R running task stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 901.822570][ C1] Call Trace: [ 901.825868][ C1] [ 901.828826][ C1] __schedule+0x1798/0x4cc0 [ 901.833393][ C1] ? __lock_acquire+0xab9/0xd20 [ 901.838274][ C1] ? __pfx___schedule+0x10/0x10 [ 901.843170][ C1] ? schedule+0x91/0x360 [ 901.847443][ C1] schedule+0x165/0x360 [ 901.851633][ C1] schedule_timeout+0x12b/0x270 [ 901.856509][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 901.861906][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 901.867825][ C1] ? __pfx_process_timeout+0x10/0x10 [ 901.873153][ C1] ? prepare_to_swait_event+0x341/0x380 [ 901.878736][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 901.883639][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 901.889559][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 901.894870][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 901.900107][ C1] ? finish_swait+0xcd/0x1f0 [ 901.904724][ C1] rcu_gp_kthread+0x99/0x390 [ 901.909345][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.914570][ C1] ? __kthread_parkme+0x7b/0x200 [ 901.919531][ C1] ? __kthread_parkme+0x1a1/0x200 [ 901.924578][ C1] kthread+0x711/0x8a0 [ 901.928675][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.933904][ C1] ? __pfx_kthread+0x10/0x10 [ 901.938521][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 901.943749][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.948974][ C1] ? __pfx_kthread+0x10/0x10 [ 901.953585][ C1] ret_from_fork+0x4bc/0x870 [ 901.958206][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 901.963355][ C1] ? __switch_to_asm+0x39/0x70 [ 901.968146][ C1] ? __switch_to_asm+0x33/0x70 [ 901.972932][ C1] ? __pfx_kthread+0x10/0x10 [ 901.977549][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.982360][ C1] [ 901.985403][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 901.991741][ C1] CPU: 1 UID: 0 PID: 5875 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 902.001215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 902.011341][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 902.018068][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 e6 7f 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 91 7b 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 75 7b [ 902.037695][ C1] RSP: 0018:ffffc900045bf540 EFLAGS: 00000293 [ 902.043832][ C1] RAX: ffffffff81b45a1b RBX: 1ffff110170c8449 RCX: ffff88802d145ac0 [ 902.051833][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 902.059842][ C1] RBP: ffffc900045bf6c0 R08: ffffffff8fc43c37 R09: 1ffffffff1f88786 [ 902.067849][ C1] R10: dffffc0000000000 R11: fffffbfff1f88787 R12: ffff8880b8642248 [ 902.075844][ C1] R13: dffffc0000000000 R14: ffff8880b873b240 R15: 0000000000000000 [ 902.083940][ C1] FS: 000055558aac0500(0000) GS:ffff888125ae1000(0000) knlGS:0000000000000000 [ 902.093000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.099690][ C1] CR2: 00007f07d9b056c0 CR3: 0000000077778000 CR4: 00000000003526f0 [ 902.107773][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.115773][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 902.123765][ C1] Call Trace: [ 902.127067][ C1] [ 902.130023][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 902.135261][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 902.141729][ C1] ? ldt_dup_context+0x336/0x3e0 [ 902.146721][ C1] ? rcu_is_watching+0x15/0xb0 [ 902.151527][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 902.156751][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 902.161894][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 902.167052][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 902.172627][ C1] ? up_write+0x1c4/0x420 [ 902.176987][ C1] dup_mmap+0x1598/0x1ab0 [ 902.181357][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 902.186068][ C1] ? mm_init+0xd74/0xfa0 [ 902.190347][ C1] copy_mm+0x13c/0x4b0 [ 902.194435][ C1] copy_process+0x1706/0x3c00 [ 902.199167][ C1] ? copy_process+0x97f/0x3c00 [ 902.203972][ C1] ? __pfx_copy_process+0x10/0x10 [ 902.209129][ C1] kernel_clone+0x21e/0x840 [ 902.213656][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 902.218797][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 902.223849][ C1] ? count_memcg_event_mm+0x21/0x260 [ 902.229172][ C1] __x64_sys_clone+0x18b/0x1e0 [ 902.233961][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 902.239283][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 902.244600][ C1] ? do_syscall_64+0xbe/0xfa0 [ 902.249308][ C1] do_syscall_64+0xfa/0xfa0 [ 902.253841][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 902.259070][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.265158][ C1] ? clear_bhb_loop+0x60/0xb0 [ 902.269923][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.275856][ C1] RIP: 0033:0x7f07d8d85413 [ 902.280317][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 902.299958][ C1] RSP: 002b:00007ffee4887568 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 902.308409][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07d8d85413 [ 902.316410][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 902.324488][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 902.332514][ C1] R10: 000055558aac07d0 R11: 0000000000000246 R12: 0000000000000000 [ 902.340589][ C1] R13: 00000000000927c0 R14: 00000000000bb8ff R15: 00007ffee4887700 [ 902.348609][ C1] [ 902.352057][ C1] vkms_vblank_simulate: vblank timer overrun