last executing test programs: 7m18.648541254s ago: executing program 4 (id=6385): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) 7m18.581997778s ago: executing program 4 (id=6387): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m18.331609165s ago: executing program 4 (id=6390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000440)) 7m18.157426356s ago: executing program 4 (id=6392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 7m17.351468965s ago: executing program 4 (id=6397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) 7m17.050445791s ago: executing program 4 (id=6402): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket(0x840000000002, 0x3, 0x9) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 7m1.826494093s ago: executing program 32 (id=6402): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket(0x840000000002, 0x3, 0x9) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 2.773252684s ago: executing program 1 (id=11137): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaafbac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.580942148s ago: executing program 1 (id=11142): syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 2.420119269s ago: executing program 2 (id=11145): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) 2.210875298s ago: executing program 2 (id=11148): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7368, 0x0, 0x0, 0x0, 0x0) 2.103907698s ago: executing program 1 (id=11150): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 1.981024176s ago: executing program 2 (id=11152): r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000c30000/0x1000)=nil) setrlimit(0x40000000000008, &(0x7f0000000000)) capset(&(0x7f0000000b00)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) shmctl$SHM_LOCK(r0, 0xb) 1.862196808s ago: executing program 1 (id=11155): bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bd"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1.857088229s ago: executing program 2 (id=11156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000080)) 1.727067578s ago: executing program 5 (id=11157): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.478423163s ago: executing program 2 (id=11159): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) 1.313020297s ago: executing program 0 (id=11160): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002b80)={0x2020}, 0x2020) pread64(r0, &(0x7f0000006c40)=""/79, 0x4f, 0x1) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 1.300457745s ago: executing program 2 (id=11161): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.141233101s ago: executing program 0 (id=11163): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x40}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) 1.015711568s ago: executing program 0 (id=11165): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 917.5938ms ago: executing program 5 (id=11166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x6c010102, @in=@loopback, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e20, @in=@multicast2}}]}, 0xbc}}, 0x0) 886.413025ms ago: executing program 0 (id=11167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xd90, 0x0, 0x2}]}) 776.066397ms ago: executing program 3 (id=11168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)={0x3, 0x0, [{0xc0000001, 0x101, 0x1, 0x7, 0xed8}, {0x80000000, 0x7fffffff, 0x5, 0x800, 0x1}, {0x7, 0x710a, 0xfffffff3, 0x2, 0x4}]}) 691.434649ms ago: executing program 5 (id=11169): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x4, "01"}], 0x18}}], 0x1, 0x4000000) 555.718486ms ago: executing program 5 (id=11170): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) unshare(0x6020480) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 498.767002ms ago: executing program 0 (id=11171): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x286f7, 0x10100, 0x0, 0x40000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 495.090055ms ago: executing program 5 (id=11172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010419de00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) 493.837468ms ago: executing program 3 (id=11173): mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x8495) r0 = landlock_create_ruleset(&(0x7f0000000000)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) 385.704897ms ago: executing program 3 (id=11174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x7}]}}}]}, 0x3c}}, 0x8000) 274.999126ms ago: executing program 1 (id=11175): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r1, 0xfffa, 0x5, 0xf335, 0x8, 0xa}, 0x14) 244.780283ms ago: executing program 5 (id=11176): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xc7, 0x0, 0x2}) 223.282373ms ago: executing program 3 (id=11177): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000020c0)={0x0, &(0x7f0000001f40)=[{}], 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r2}) 135.830172ms ago: executing program 0 (id=11178): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r2 = eventfd2(0x1, 0x80800) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000a00)="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", 0x200, 0x200, 0x0, 0x1, r2}]) 82.977758ms ago: executing program 3 (id=11179): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) close_range(r0, 0xffffffffffffffff, 0x0) 47.651188ms ago: executing program 1 (id=11180): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) 0s ago: executing program 3 (id=11181): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r0, 0x4, 0x2000) fcntl$setown(r0, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.893067][T26555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9245'. [ 802.902028][ T24] usb 6-1: config 125 interface 27 has no altsetting 0 [ 802.922812][ T5161] Bluetooth: hci3: command tx timeout [ 802.940297][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 802.952736][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.971533][ T24] usb 6-1: Product: syz [ 802.981156][ T24] usb 6-1: Manufacturer: syz [ 802.991302][ T24] usb 6-1: SerialNumber: syz [ 803.013780][T26539] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 803.144908][T26373] hsr_slave_0: entered promiscuous mode [ 803.164499][T26373] hsr_slave_1: entered promiscuous mode [ 803.260389][ T24] hub 6-1:125.27: bad descriptor, ignoring hub [ 803.292583][ T24] hub 6-1:125.27: probe with driver hub failed with error -5 [ 803.302219][ T24] sierra 6-1:125.27: Sierra USB modem converter detected [ 803.343052][ T24] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 803.437501][ T24] usb 6-1: USB disconnect, device number 27 [ 803.490443][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 803.544983][ T24] sierra 6-1:125.27: device disconnected [ 804.354779][T26595] loop6: detected capacity change from 0 to 524287999 [ 805.052717][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 805.242588][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 805.253653][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.290810][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.341170][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 805.366703][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.403823][ T24] usb 3-1: config 0 descriptor?? [ 805.769569][ T30] audit: type=1326 audit(1753964841.098:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 805.852034][ T24] hid-rmi 0003:06CB:81A7.00A4: unknown main item tag 0x4 [ 805.878076][ T30] audit: type=1326 audit(1753964841.128:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 805.900794][ T24] hid-rmi 0003:06CB:81A7.00A4: unknown main item tag 0x4 [ 805.922784][ T24] hid-rmi 0003:06CB:81A7.00A4: unknown main item tag 0x4 [ 805.930465][ T24] hid-rmi 0003:06CB:81A7.00A4: unknown main item tag 0x0 [ 805.982688][ T30] audit: type=1326 audit(1753964841.128:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.008088][ T24] hid-rmi 0003:06CB:81A7.00A4: unbalanced collection at end of report description [ 806.029716][ T24] hid-rmi 0003:06CB:81A7.00A4: parse failed [ 806.056797][ T24] hid-rmi 0003:06CB:81A7.00A4: probe with driver hid-rmi failed with error -22 [ 806.082266][ T30] audit: type=1326 audit(1753964841.128:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.116901][ T24] usb 3-1: USB disconnect, device number 86 [ 806.122171][T26373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 806.136131][ T30] audit: type=1326 audit(1753964841.128:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.158370][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.186660][ T30] audit: type=1326 audit(1753964841.128:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.208804][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.215931][ T30] audit: type=1326 audit(1753964841.128:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.264759][ T30] audit: type=1326 audit(1753964841.128:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.268184][ T1211] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 806.299970][T26373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 806.317409][ T30] audit: type=1326 audit(1753964841.128:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.318999][T26373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 806.374006][ T30] audit: type=1326 audit(1753964841.128:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26633 comm="syz.5.9272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 806.419889][T26373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 806.520263][ T1211] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 806.542520][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.550894][ T1211] usb 2-1: Product: syz [ 806.555206][ T1211] usb 2-1: Manufacturer: syz [ 806.559838][ T1211] usb 2-1: SerialNumber: syz [ 806.580429][ T1211] usb 2-1: config 0 descriptor?? [ 806.940110][T26373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.038594][T26373] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.082585][T18907] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.089828][T18907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.165307][ T10] usb 2-1: USB disconnect, device number 89 [ 807.168331][T18907] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.178613][T18907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.538048][T26373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.718124][T26373] veth0_vlan: entered promiscuous mode [ 807.750145][T26691] netlink: 'syz.5.9287': attribute type 14 has an invalid length. [ 807.822811][T26373] veth1_vlan: entered promiscuous mode [ 807.966129][T26373] veth0_macvtap: entered promiscuous mode [ 808.015769][T26373] veth1_macvtap: entered promiscuous mode [ 808.150688][T26373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.198241][T26704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9293'. [ 808.268547][T26373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.325476][ T3469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.430688][ T3469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.478144][ T3469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.510083][ T3469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.593375][T26716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9299'. [ 808.792611][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.800489][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.851047][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.877853][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.981846][T18907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.027033][T18907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.453423][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 809.628783][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 809.654628][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 809.682631][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.709476][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 809.752817][ T10] pvrusb2: ********** [ 809.756937][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 809.792893][ T10] pvrusb2: Important functionality might not be entirely working. [ 809.812805][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 809.847180][ T10] pvrusb2: ********** [ 809.962601][ T2345] pvrusb2: Invalid write control endpoint [ 810.127784][ T2345] pvrusb2: Invalid write control endpoint [ 810.161431][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 810.187960][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 810.216379][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 810.236812][ T2345] pvrusb2: Device being rendered inoperable [ 810.245310][T26735] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=62 limit=60) [ 810.263801][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 810.274937][ T5906] usb 3-1: USB disconnect, device number 87 [ 810.294857][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 810.323616][ T2345] pvrusb2: Attached sub-driver cx25840 [ 810.353190][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 810.382557][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 810.456165][T26771] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 810.506107][T26773] netlink: 'syz.5.9316': attribute type 10 has an invalid length. [ 810.526574][T26773] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9316'. [ 810.537937][T26773] bond0: option arp_all_targets: invalid value (196616) [ 811.208889][T26801] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9325'. [ 811.228101][T26801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9325'. [ 813.282876][ T1211] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 813.414608][T26874] ip6gretap0: entered promiscuous mode [ 813.444801][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 813.456222][ T1211] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 813.476300][ T1211] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 813.497032][ T1211] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 813.516828][T26874] ip6gretap0: left promiscuous mode [ 813.546745][ T1211] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.573676][ T1211] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 813.632851][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.873071][ T1211] usb 2-1: GET_CAPABILITIES returned 0 [ 813.892846][ T1211] usbtmc 2-1:16.0: can't read capabilities [ 814.062859][T26892] ALSA: mixer_oss: invalid OSS volume '' [ 814.140103][T17620] usb 2-1: USB disconnect, device number 90 [ 814.935821][T26922] ip6gretap0: entered promiscuous mode [ 814.998337][T26922] ip6gretap0: left promiscuous mode [ 815.235335][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 815.235356][ T30] audit: type=1326 audit(1753964850.558:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 815.367463][ T30] audit: type=1326 audit(1753964850.568:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 815.434375][ T30] audit: type=1326 audit(1753964850.578:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 815.480977][T26942] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 815.548813][ T30] audit: type=1326 audit(1753964850.588:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 815.618703][ T30] audit: type=1326 audit(1753964850.588:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 815.696744][ T30] audit: type=1326 audit(1753964850.588:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 815.792593][ T30] audit: type=1326 audit(1753964850.588:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 815.901962][ T30] audit: type=1326 audit(1753964850.588:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 816.015092][ T30] audit: type=1326 audit(1753964850.588:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 816.078365][ T30] audit: type=1326 audit(1753964850.588:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26933 comm="syz.2.9373" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 819.553241][T27057] sctp: [Deprecated]: syz.1.9412 (pid 27057) Use of int in maxseg socket option. [ 819.553241][T27057] Use struct sctp_assoc_value instead [ 820.271374][T27074] tap0: tun_chr_ioctl cmd 1074025677 [ 820.280710][T27074] tap0: linktype set to 0 [ 822.152709][ T1211] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 822.312554][ T1211] usb 3-1: Using ep0 maxpacket: 32 [ 822.325540][ T1211] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 822.342597][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.372661][ T1211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.400232][ T1211] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 822.423159][ T1211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.466561][ T1211] usb 3-1: config 0 descriptor?? [ 822.739009][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9448'. [ 822.762618][T27144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9448'. [ 822.792914][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9448'. [ 822.809224][T27145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9448'. [ 822.907464][ T1211] logitech 0003:046D:C29C.00A5: reserved main item tag 0xe [ 822.915269][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 822.946876][ T1211] logitech 0003:046D:C29C.00A5: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 823.083380][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 823.091509][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 823.122816][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.149512][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 823.182735][ T24] pvrusb2: ********** [ 823.191350][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 823.207378][ T24] pvrusb2: Important functionality might not be entirely working. [ 823.215947][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 823.229093][ T24] pvrusb2: ********** [ 823.307616][ T1211] logitech 0003:046D:C29C.00A5: no inputs found [ 823.332285][ T1211] usb 3-1: USB disconnect, device number 88 [ 823.365894][ T2345] pvrusb2: Invalid write control endpoint [ 823.529583][ T2345] pvrusb2: Invalid write control endpoint [ 823.545327][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 823.557161][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 823.565238][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 823.575528][ T2345] pvrusb2: Device being rendered inoperable [ 823.581650][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 823.599538][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 823.613696][T27141] pvrusb2: Attempted to execute control transfer when device not ok [ 823.635252][ T1211] usb 2-1: USB disconnect, device number 91 [ 823.650418][ T2345] pvrusb2: Attached sub-driver cx25840 [ 823.666561][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 823.698052][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 824.955808][T27187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9466'. [ 826.489723][T27250] loop8: detected capacity change from 0 to 7 [ 826.518621][T27250] Dev loop8: unable to read RDB block 7 [ 826.528623][T27250] loop8: unable to read partition table [ 826.551787][T27250] loop8: partition table beyond EOD, truncated [ 826.576334][T27250] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 826.583986][T27253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 826.595635][T27253] bond0: (slave bond2): Enslaving as an active interface with an up link [ 826.782558][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 826.816254][T27264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9500'. [ 826.831761][T27264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9500'. [ 826.867812][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9502'. [ 826.877347][T27267] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 826.884935][T27267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.964142][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.978299][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 826.995774][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 827.010896][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 827.039990][ T24] usb 3-1: SerialNumber: syz [ 827.299867][ T24] usb 3-1: 0:2 : does not exist [ 827.342030][ T24] usb 3-1: USB disconnect, device number 89 [ 827.439269][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.697814][T27319] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 829.247193][T27337] netlink: 'syz.1.9533': attribute type 5 has an invalid length. [ 829.573247][T27348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9536'. [ 829.601762][T27348] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 829.752605][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 829.912884][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 829.937683][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.961086][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.987420][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 830.002492][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 830.032077][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.069786][ T10] usb 4-1: config 0 descriptor?? [ 830.517238][ T10] hid (null): unknown global tag 0xd [ 830.540812][ T10] hid (null): bogus close delimiter [ 830.570968][ T10] hid (null): unknown global tag 0xe [ 830.603046][ T10] hid (null): report_id 5587 is invalid [ 830.608858][ T10] hid (null): unknown global tag 0xd [ 830.652541][ T10] hid (null): invalid report_size 770 [ 830.735356][ T10] usb 4-1: USB disconnect, device number 98 [ 831.123052][ T5906] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 831.312033][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 831.360383][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.401256][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.448620][ T5906] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 831.476008][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.548019][ T5906] usb 6-1: config 0 descriptor?? [ 832.025340][ T5906] ntrig 0003:1B96:0008.00A7: unknown main item tag 0x0 [ 832.046197][ T5906] ntrig 0003:1B96:0008.00A7: unknown main item tag 0x0 [ 832.076198][ T5906] ntrig 0003:1B96:0008.00A7: unknown main item tag 0x0 [ 832.092812][ T5906] ntrig 0003:1B96:0008.00A7: unknown main item tag 0x0 [ 832.113062][ T5906] ntrig 0003:1B96:0008.00A7: unknown main item tag 0x0 [ 832.138860][ T5906] ntrig 0003:1B96:0008.00A7: unknown main item tag 0x0 [ 832.167612][ T5906] ntrig 0003:1B96:0008.00A7: unknown main item tag 0x0 [ 832.206107][ T5906] ntrig 0003:1B96:0008.00A7: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.5-1/input0 [ 832.255066][ T5906] ntrig 0003:1B96:0008.00A7: Firmware version: 0.0.0.0.0 (0000 0000) [ 832.561493][ T1211] usb 6-1: USB disconnect, device number 28 [ 833.026747][T27436] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9576'. [ 833.112546][ T5906] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 833.201730][T27438] tmpfs: Unknown parameter 'EiZP' [ 833.285388][ T5906] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 833.305183][ T5906] usb 3-1: config 7 has no interface number 0 [ 833.354842][ T5906] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 833.364807][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.390319][ T5906] usb 3-1: Product: syz [ 833.400443][ T5906] usb 3-1: Manufacturer: syz [ 833.412494][ T5906] usb 3-1: SerialNumber: syz [ 833.806919][T27450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9583'. [ 833.866664][T27450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9583'. [ 834.234596][ T5906] as10x_usb: device has been detected [ 834.241492][ T5906] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 834.298405][ T5906] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 834.623829][ T5906] as10x_usb: error during firmware upload part1 [ 834.630975][ T5906] Registered device Elgato EyeTV DTT Deluxe [ 834.655568][ T5906] usb 3-1: USB disconnect, device number 90 [ 834.780213][ T5906] Unregistered device Elgato EyeTV DTT Deluxe [ 834.790489][ T5906] as10x_usb: device has been disconnected [ 835.406817][T27473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9591'. [ 835.479422][T27478] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9593'. [ 836.704937][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 836.704956][ T30] audit: type=1326 audit(1753964872.038:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 836.815636][ T30] audit: type=1326 audit(1753964872.078:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 836.901827][ T30] audit: type=1326 audit(1753964872.078:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 836.986123][ T30] audit: type=1326 audit(1753964872.078:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 837.052564][ T30] audit: type=1326 audit(1753964872.078:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 837.076828][ T30] audit: type=1326 audit(1753964872.078:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 837.099574][ T30] audit: type=1326 audit(1753964872.078:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 837.122878][ T30] audit: type=1326 audit(1753964872.088:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 837.209213][ T30] audit: type=1326 audit(1753964872.088:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 837.280839][ T30] audit: type=1326 audit(1753964872.088:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.0.9614" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70fe567 code=0x7ffc0000 [ 838.912570][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 839.093592][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.103643][T27620] macvlan3: entered promiscuous mode [ 839.139843][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.161700][ T24] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 839.177069][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.191006][ T24] usb 3-1: config 0 descriptor?? [ 839.194151][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 839.373443][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 839.385237][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 839.395375][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 839.418872][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 839.429242][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.447856][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 839.457134][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.685790][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 839.691648][ T10] usbtmc 4-1:16.0: can't read capabilities [ 839.918029][ T1211] usb 4-1: USB disconnect, device number 99 [ 840.037444][ T24] hid-led 0003:0FC5:B080.00A8: probe with driver hid-led failed with error -71 [ 840.064863][ T24] usb 3-1: USB disconnect, device number 91 [ 840.248166][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9668'. [ 840.258216][T27641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9668'. [ 840.268899][T27641] netlink: 'syz.5.9668': attribute type 13 has an invalid length. [ 841.615377][T27684] sctp: [Deprecated]: syz.1.9688 (pid 27684) Use of int in max_burst socket option deprecated. [ 841.615377][T27684] Use struct sctp_assoc_value instead [ 843.217581][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 843.217600][ T30] audit: type=1326 audit(1753964878.548:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.246818][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.275125][ T30] audit: type=1326 audit(1753964878.588:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.297427][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.310696][ T30] audit: type=1326 audit(1753964878.588:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.332991][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.346830][ T30] audit: type=1326 audit(1753964878.588:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.386897][ T30] audit: type=1326 audit(1753964878.588:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.411708][ T30] audit: type=1326 audit(1753964878.588:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.435102][ T30] audit: type=1326 audit(1753964878.588:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.459159][ T30] audit: type=1326 audit(1753964878.588:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.9718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 843.481274][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.742891][ T5920] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 843.898616][ T5920] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 843.911689][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.928869][ T5920] usb 6-1: Product: syz [ 843.955095][ T5920] usb 6-1: Manufacturer: syz [ 843.959857][ T5920] usb 6-1: SerialNumber: syz [ 843.990784][ T5920] usb 6-1: config 0 descriptor?? [ 844.019126][ T5920] ch341 6-1:0.0: ch341-uart converter detected [ 844.182938][ T1211] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 844.335822][ T1211] usb 3-1: Using ep0 maxpacket: 8 [ 844.344106][ T1211] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 844.354119][ T1211] usb 3-1: config 0 has no interface number 0 [ 844.372568][ T1211] usb 3-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice=cd.ea [ 844.381857][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.390302][ T1211] usb 3-1: Product: syz [ 844.394950][ T1211] usb 3-1: Manufacturer: syz [ 844.399573][ T1211] usb 3-1: SerialNumber: syz [ 844.408148][ T1211] usb 3-1: config 0 descriptor?? [ 844.432606][ T1211] appletouch 3-1:0.24: Could not find int-in endpoint [ 844.439739][ T1211] appletouch 3-1:0.24: probe with driver appletouch failed with error -5 [ 844.452003][ T1211] usbhid 3-1:0.24: couldn't find an input interrupt endpoint [ 844.470487][T27779] cifs: Unknown parameter 'fd' [ 844.698676][ T10] usb 3-1: USB disconnect, device number 92 [ 844.861524][ T5920] usb 6-1: failed to send control message: -71 [ 844.871018][ T5920] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 844.892042][ T5920] usb 6-1: USB disconnect, device number 29 [ 844.900773][ T5920] ch341 6-1:0.0: device disconnected [ 844.998481][T27791] usb usb8: usbfs: process 27791 (syz.3.9737) did not claim interface 0 before use [ 845.438962][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9744'. [ 845.724802][ T5920] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 845.890188][ T5920] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 845.906462][ T5920] usb 6-1: config 7 has no interface number 0 [ 845.922988][ T5920] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 846.014764][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.031955][ T5920] usb 6-1: Product: syz [ 846.038952][ T5920] usb 6-1: Manufacturer: syz [ 846.046749][ T5920] usb 6-1: SerialNumber: syz [ 846.637693][T27851] netlink: 428 bytes leftover after parsing attributes in process `syz.1.9764'. [ 846.649454][T27851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9764'. [ 846.732818][ T5906] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 846.849565][ T5920] as10x_usb: device has been detected [ 846.856592][ T10] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 846.865835][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 846.898752][ T5906] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 846.908019][ T5920] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 846.917925][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.933483][ T5906] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 846.947787][ T5906] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 846.956564][ T5906] usb 3-1: Manufacturer: syz [ 846.977887][ T5906] usb 3-1: config 0 descriptor?? [ 847.025728][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 847.033078][ T10] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 847.042211][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.085905][ T10] usb 4-1: config 0 descriptor?? [ 847.142799][ T5906] rc_core: IR keymap rc-hauppauge not found [ 847.149276][ T5906] Registered IR keymap rc-empty [ 847.159383][ T5920] as10x_usb: error during firmware upload part1 [ 847.184367][ T5906] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 847.207141][ T5920] Registered device Elgato EyeTV DTT Deluxe [ 847.218420][ T5920] usb 6-1: USB disconnect, device number 30 [ 847.269716][ T5906] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input76 [ 847.376220][ T5920] Unregistered device Elgato EyeTV DTT Deluxe [ 847.397678][ T5920] as10x_usb: device has been disconnected [ 847.534325][T27857] rc rc0: two consecutive events of type space [ 847.555786][ T10] sony 0003:1345:3008.00A9: hiddev0,hidraw0: USB HID v90.00 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 847.574253][ T10] sony 0003:1345:3008.00A9: failed to claim input [ 847.738232][T17620] usb 3-1: USB disconnect, device number 93 [ 847.789239][ T1211] usb 4-1: USB disconnect, device number 100 [ 847.908867][T27864] fido_id[27864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 848.493122][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9779'. [ 848.536912][T27885] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9779'. [ 848.972606][ T1211] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 849.146870][ T1211] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.161896][ T1211] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.198300][ T1211] usb 6-1: config 0 interface 0 has no altsetting 0 [ 849.222564][ T1211] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 849.235214][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.255963][ T1211] usb 6-1: config 0 descriptor?? [ 849.263084][T17620] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 849.441387][T17620] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 849.468306][T17620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.499013][T17620] usb 4-1: config 0 descriptor?? [ 849.521498][T17620] cp210x 4-1:0.0: cp210x converter detected [ 849.779495][ T1211] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.00AA/input/input77 [ 849.908771][ T1211] sony 0003:054C:03D5.00AA: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 849.954250][T27927] program syz.2.9798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 850.021792][ T1211] usb 6-1: USB disconnect, device number 31 [ 850.164842][T17620] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 850.168099][T27929] fido_id[27929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 850.191478][T17620] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 850.219724][T17620] usb 4-1: cp210x converter now attached to ttyUSB0 [ 850.251296][T17620] usb 4-1: USB disconnect, device number 101 [ 850.292955][T17620] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 850.301439][T17620] cp210x 4-1:0.0: device disconnected [ 850.681581][T27949] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 851.809471][T27991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9829'. [ 852.072930][ T1211] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 852.246925][ T1211] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 852.265313][ T1211] usb 4-1: config 7 has no interface number 0 [ 852.293196][ T1211] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 852.321037][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.339689][ T1211] usb 4-1: Product: syz [ 852.349835][ T1211] usb 4-1: Manufacturer: syz [ 852.363076][ T1211] usb 4-1: SerialNumber: syz [ 853.179638][ T1211] as10x_usb: device has been detected [ 853.198269][ T1211] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 853.237247][ T1211] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 853.460075][ T1211] as10x_usb: error during firmware upload part1 [ 853.484558][ T1211] Registered device Elgato EyeTV DTT Deluxe [ 853.491224][ T1211] usb 4-1: USB disconnect, device number 102 [ 853.605364][ T1211] Unregistered device Elgato EyeTV DTT Deluxe [ 853.610720][ T1211] as10x_usb: device has been disconnected [ 854.772784][T26104] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 854.933065][T26104] usb 4-1: Using ep0 maxpacket: 16 [ 854.950274][T26104] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 854.975299][T26104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.992930][T26104] usb 4-1: Product: syz [ 855.003365][T26104] usb 4-1: Manufacturer: syz [ 855.013197][T26104] usb 4-1: SerialNumber: syz [ 855.027378][T26104] usb 4-1: config 0 descriptor?? [ 855.046488][T26104] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 855.182496][ T10] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 855.327540][T28101] netlink: 'syz.2.9878': attribute type 6 has an invalid length. [ 855.340971][T28101] netlink: 'syz.2.9878': attribute type 6 has an invalid length. [ 855.344237][ T10] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 855.369791][ T10] usb 2-1: config 7 has no interface number 0 [ 855.379053][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 855.389938][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.398566][ T10] usb 2-1: Product: syz [ 855.403036][ T10] usb 2-1: Manufacturer: syz [ 855.407657][ T10] usb 2-1: SerialNumber: syz [ 855.473946][ T1211] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 855.635088][ T1211] usb 6-1: config 0 has no interfaces? [ 855.650659][ T1211] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 855.661929][ T1211] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 855.678300][ T1211] usb 6-1: Manufacturer: syz [ 855.689920][ T1211] usb 6-1: config 0 descriptor?? [ 855.901978][T26104] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 855.923100][T26104] usb 4-1: USB disconnect, device number 103 [ 855.974644][T28095] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9876'. [ 855.989129][T17620] usb 6-1: USB disconnect, device number 32 [ 856.062647][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9886'. [ 856.124402][T28120] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9887'. [ 856.199803][ T10] as10x_usb: device has been detected [ 856.208030][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 856.229419][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 856.396759][T28126] netem: incorrect gi model size [ 856.406413][T28126] netem: change failed [ 856.448367][ T10] as10x_usb: error during firmware upload part1 [ 856.462259][ T10] Registered device Elgato EyeTV DTT Deluxe [ 856.476463][ T10] usb 2-1: USB disconnect, device number 92 [ 856.588770][ T10] Unregistered device Elgato EyeTV DTT Deluxe [ 856.620492][ T10] as10x_usb: device has been disconnected [ 857.680411][T28180] bridge1: entered promiscuous mode [ 857.720119][T28180] bridge1: entered allmulticast mode [ 858.128495][T28194] netlink: 2124 bytes leftover after parsing attributes in process `syz.1.9924'. [ 858.197274][T28200] netlink: 'syz.5.9926': attribute type 32 has an invalid length. [ 858.209941][T28201] loop9: detected capacity change from 0 to 7 [ 858.222636][T28200] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 858.235590][T28201] buffer_io_error: 23 callbacks suppressed [ 858.235612][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.272701][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.280737][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.320562][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.352778][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.372696][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.402693][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.421397][T28201] ldm_validate_partition_table(): Disk read failed. [ 858.442651][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.460970][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.482732][T28201] Buffer I/O error on dev loop9, logical block 0, async page read [ 858.502967][T28201] Dev loop9: unable to read RDB block 0 [ 858.519252][T28201] loop9: unable to read partition table [ 858.539396][T28201] loop9: partition table beyond EOD, truncated [ 858.554821][T28201] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 858.554821][T28201] ) failed (rc=-5) [ 859.207479][T28238] openvswitch: netlink: IPv4 tunnel dst address is zero [ 859.438665][T28250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9947'. [ 859.615608][ T30] audit: type=1326 audit(1753964894.948:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 859.679317][ T30] audit: type=1326 audit(1753964894.948:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 859.742673][ T30] audit: type=1326 audit(1753964895.008:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 859.801013][ T30] audit: type=1326 audit(1753964895.008:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 859.851555][ T30] audit: type=1326 audit(1753964895.008:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 859.908219][ T30] audit: type=1326 audit(1753964895.008:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 859.965963][ T30] audit: type=1326 audit(1753964895.008:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 860.012622][T26104] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 860.021666][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9954'. [ 860.060242][ T30] audit: type=1326 audit(1753964895.008:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 860.093269][ T30] audit: type=1326 audit(1753964895.038:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 860.118064][ T30] audit: type=1326 audit(1753964895.038:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28255 comm="syz.2.9950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 860.192545][T26104] usb 2-1: Using ep0 maxpacket: 8 [ 860.200521][T26104] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 860.210271][T26104] usb 2-1: config 0 has no interface number 0 [ 860.217883][T26104] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 860.248011][T26104] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 860.272058][T26104] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 860.283785][T26104] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 860.321004][T26104] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 860.346145][T26104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.385190][T26104] usb 2-1: config 0 descriptor?? [ 860.410772][T26104] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 861.209531][T17620] usb 2-1: USB disconnect, device number 93 [ 861.230285][T17620] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 861.349518][T28294] pimreg: tun_chr_ioctl cmd 1074025681 [ 861.505993][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9971'. [ 861.534868][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9971'. [ 861.572534][ T5906] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 861.678917][T28317] IPv6: NLM_F_CREATE should be specified when creating new route [ 861.719872][T28321] bridge_slave_0: invalid flags given to default FDB implementation [ 861.742558][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 861.757623][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.785605][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.813674][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 861.828433][ T5906] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 861.861427][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.897912][ T5906] usb 4-1: config 0 descriptor?? [ 862.216936][T28345] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9986'. [ 862.475352][T28358] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9991'. [ 862.613981][T26104] usb 4-1: USB disconnect, device number 104 [ 862.788089][T28368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.805309][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 862.828293][T28373] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 862.828293][T28373] program syz.0.9997 not setting count and/or reply_len properly [ 862.873142][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 862.901933][T28368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.924165][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 863.093209][ T5920] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 863.337610][T28394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.430488][T26104] IPVS: starting estimator thread 0... [ 863.532538][T28401] IPVS: using max 23 ests per chain, 55200 per kthread [ 863.963077][ T5906] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 864.122689][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 864.147720][ T5906] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 864.175052][ T5906] usb 6-1: config 0 has no interface number 0 [ 864.194015][ T5906] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 864.229837][ T5906] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 864.242659][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.252544][ T5906] usb 6-1: Product: syz [ 864.256794][ T5906] usb 6-1: Manufacturer: syz [ 864.262847][ T5906] usb 6-1: SerialNumber: syz [ 864.279663][ T5906] usb 6-1: config 0 descriptor?? [ 864.918358][ T5906] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input78 [ 864.993309][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 865.152189][ T5906] usb 6-1: USB disconnect, device number 33 [ 865.159616][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 865.174997][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 865.194615][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 865.216675][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.233521][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 865.248617][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 865.264043][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 865.273000][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 865.290245][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.303138][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 865.315410][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 865.329116][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 865.337437][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 865.355048][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 865.369902][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 865.388887][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 865.414570][ T10] usb 3-1: string descriptor 0 read error: -22 [ 865.431980][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 865.455677][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.491153][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 865.534788][T28452] netlink: 'syz.1.10033': attribute type 44 has an invalid length. [ 865.810984][ T10] usb 3-1: USB disconnect, device number 94 [ 866.025563][T28447] adutux: No device or device unplugged -19 [ 867.491460][T28528] netlink: 'syz.1.10066': attribute type 3 has an invalid length. [ 867.499676][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10066'. [ 868.540651][T28563] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 868.552710][T28563] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 868.600643][T28563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 868.614086][T28563] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 868.638585][T28563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 868.645068][T28563] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 868.656860][T28563] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 868.663451][T28563] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 868.678199][T28563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 868.684705][T28563] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 868.697708][T28563] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 868.852318][T28577] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 868.868968][T28577] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 869.097055][T28582] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 869.337485][T28591] lo: Caught tx_queue_len zero misconfig [ 870.287482][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.296484][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.602547][T28573] Bluetooth: hci1: command 0x0406 tx timeout [ 870.608676][T28573] Bluetooth: hci0: command 0x0406 tx timeout [ 870.683453][T28573] Bluetooth: hci3: command 0x0405 tx timeout [ 870.689678][ T5161] Bluetooth: hci5: command 0x0406 tx timeout [ 870.695886][ T5161] Bluetooth: hci2: command 0x0406 tx timeout [ 872.044899][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10130'. [ 872.081397][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10130'. [ 872.114570][T28672] netlink: 58 bytes leftover after parsing attributes in process `syz.0.10130'. [ 872.683120][T28626] Bluetooth: hci0: command 0x0406 tx timeout [ 872.689925][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 872.762877][T28626] Bluetooth: hci3: command 0x0405 tx timeout [ 872.769392][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 872.775787][T28573] Bluetooth: hci5: command 0x0406 tx timeout [ 872.872922][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 873.052852][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 873.069061][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 873.101245][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 873.135051][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 873.152572][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.163569][ T10] usb 4-1: Product: syz [ 873.168154][ T10] usb 4-1: Manufacturer: syz [ 873.176430][ T10] usb 4-1: SerialNumber: syz [ 873.204285][ T10] usb 4-1: config 0 descriptor?? [ 873.215468][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 873.242911][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 873.632744][ T5920] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 873.777040][T28720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10151'. [ 873.810271][ T5920] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 873.830177][ T5920] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 873.842287][ T10] em28xx 4-1:0.0: chip ID is em2870 [ 873.861512][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 873.880123][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 873.911578][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 873.932920][ T5920] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 873.942304][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 873.957804][ T5920] usb 6-1: Product: syz [ 873.962050][ T5920] usb 6-1: Manufacturer: syz [ 874.006238][ T5920] cdc_wdm 6-1:1.0: skipping garbage [ 874.011705][ T5920] cdc_wdm 6-1:1.0: skipping garbage [ 874.068752][ T5920] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 874.092495][ T5920] cdc_wdm 6-1:1.0: Unknown control protocol [ 874.130101][ T5920] usb 4-1: USB disconnect, device number 105 [ 874.165761][ T5920] em28xx 4-1:0.0: Disconnecting em28xx [ 874.197595][ T5920] em28xx 4-1:0.0: Freeing device [ 874.261945][ T10] usb 6-1: USB disconnect, device number 34 [ 874.334033][T28737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.338087][T28731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.380556][T28731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.402928][T28731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.414749][T28738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.431466][T28731] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.443081][T28731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 874.855984][T28748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.872872][T28748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.881614][T28748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.893593][T28748] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.901158][T28748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 875.060275][T28760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10167'. [ 875.164020][T26104] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 875.333197][T26104] usb 4-1: Using ep0 maxpacket: 32 [ 875.346544][T26104] usb 4-1: config 0 interface 0 has no altsetting 0 [ 875.357506][T26104] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 875.380324][T26104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.398395][T26104] usb 4-1: Product: syz [ 875.410151][T26104] usb 4-1: Manufacturer: syz [ 875.419758][T26104] usb 4-1: SerialNumber: syz [ 875.420657][T28768] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10170'. [ 875.445382][T26104] usb 4-1: config 0 descriptor?? [ 875.467415][T28768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10170'. [ 875.901296][T26104] gs_usb 4-1:0.0: Configuring for 3 interfaces [ 876.111508][T26104] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 876.180295][T26104] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 876.232825][T28786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.367884][ T10] usb 4-1: USB disconnect, device number 106 [ 876.542726][T26104] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 876.722094][T26104] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.733117][T26104] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 876.745372][T26104] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 876.754849][T26104] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.764706][T26104] usb 6-1: Product: syz [ 876.768935][T26104] usb 6-1: Manufacturer: syz [ 876.773740][T26104] usb 6-1: SerialNumber: syz [ 876.842867][T28626] Bluetooth: hci0: command 0x0406 tx timeout [ 876.923142][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 876.929598][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 876.935731][T28573] Bluetooth: hci1: command 0x0406 tx timeout [ 876.941866][T28626] Bluetooth: hci3: command 0x0405 tx timeout [ 877.259359][T26104] usb 6-1: 0:2 : does not exist [ 877.691734][T26104] usb 6-1: USB disconnect, device number 35 [ 878.036320][T28837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10200'. [ 878.383161][T26104] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 878.559194][T26104] usb 3-1: Using ep0 maxpacket: 16 [ 878.583325][T26104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.603839][T26104] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 878.669790][T26104] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 878.699977][T26104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.728296][T26104] usb 3-1: config 0 descriptor?? [ 879.012482][T28626] Bluetooth: hci3: command 0x0405 tx timeout [ 879.178495][T28856] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.10209'. [ 879.254705][T26104] nintendo 0003:057E:2019.00AC: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 879.589799][T26104] nintendo 0003:057E:2019.00AC: Failed to get joycon info; ret=-71 [ 879.610266][T26104] nintendo 0003:057E:2019.00AC: Failed to retrieve controller info; ret=-71 [ 879.651019][T26104] nintendo 0003:057E:2019.00AC: Failed to initialize controller; ret=-71 [ 879.697562][T26104] nintendo 0003:057E:2019.00AC: probe - fail = -71 [ 879.738666][T26104] nintendo 0003:057E:2019.00AC: probe with driver nintendo failed with error -71 [ 879.820339][T26104] usb 3-1: USB disconnect, device number 95 [ 880.369890][T28894] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 880.544925][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10229'. [ 881.087891][T28626] Bluetooth: hci3: command 0x0405 tx timeout [ 881.165098][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.404715][T28925] macvlan5: entered promiscuous mode [ 881.429565][T28925] macvlan5: entered allmulticast mode [ 881.435881][T28925] gretap0: entered allmulticast mode [ 881.814325][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.018989][T28946] netlink: 'syz.3.10249': attribute type 1 has an invalid length. [ 882.057745][T28946] netlink: 'syz.3.10249': attribute type 2 has an invalid length. [ 882.316817][T28954] tipc: Enabling of bearer rejected, already enabled [ 882.356765][T28954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10251'. [ 882.387021][T28954] tipc: Disabling bearer [ 883.121775][T28969] loop6: detected capacity change from 0 to 524287487 [ 883.173386][T28969] buffer_io_error: 9 callbacks suppressed [ 883.173407][T28969] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.202750][T28969] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.237808][T28969] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.266819][T28976] netlink: 'syz.3.10260': attribute type 10 has an invalid length. [ 883.285324][T28976] vlan0: entered allmulticast mode [ 883.290904][T28976] veth0_vlan: entered allmulticast mode [ 883.322907][T28974] loop6: detected capacity change from 524287487 to 0 [ 883.322926][T28969] Buffer I/O error on dev loop6, logical block 0, async page read [ 883.360650][T28969] ldm_validate_partition_table(): Disk read failed. [ 883.432480][T28969] Dev loop6: unable to read RDB block 0 [ 883.438123][T28969] loop6: unable to read partition table [ 883.514030][T28969] loop6: partition table beyond EOD, truncated [ 883.541525][T28969] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 883.847671][T28987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10265'. [ 884.487804][T29018] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 884.777507][T29029] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10285'. [ 886.154344][T29055] netlink: 'syz.3.10296': attribute type 12 has an invalid length. [ 886.221521][T29055] netlink: 'syz.3.10296': attribute type 29 has an invalid length. [ 886.263436][T29055] netlink: 'syz.3.10296': attribute type 2 has an invalid length. [ 886.309383][T29055] netlink: 'syz.3.10296': attribute type 2 has an invalid length. [ 886.346910][T29055] netlink: 'syz.3.10296': attribute type 1 has an invalid length. [ 886.424532][T29055] netlink: 'syz.3.10296': attribute type 37 has an invalid length. [ 886.933151][T18907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.944596][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.002695][T29072] input: syz0 as /devices/virtual/input/input79 [ 888.163051][T26104] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 888.333159][T26104] usb 2-1: Using ep0 maxpacket: 16 [ 888.351056][T26104] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.377070][T26104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.403600][T26104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 888.414107][T26104] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 888.425163][T26104] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.447396][T26104] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 888.460839][T29122] loop4: detected capacity change from 0 to 524255232 [ 888.472796][ T1211] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 888.481701][T26104] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 888.495400][T26104] usb 2-1: Manufacturer: syz [ 888.511847][T26104] usb 2-1: config 0 descriptor?? [ 888.543239][T29122] loop4: detected capacity change from 524255232 to 524287935 [ 888.652868][ T1211] usb 4-1: Using ep0 maxpacket: 32 [ 888.675421][ T1211] usb 4-1: config 0 interface 0 has no altsetting 0 [ 888.703797][ T1211] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 888.723495][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.765197][ T1211] usb 4-1: Product: syz [ 888.769440][ T1211] usb 4-1: Manufacturer: syz [ 888.779470][ T1211] usb 4-1: SerialNumber: syz [ 888.801456][ T1211] usb 4-1: config 0 descriptor?? [ 888.943151][T26104] rc_core: IR keymap rc-hauppauge not found [ 888.949226][T26104] Registered IR keymap rc-empty [ 888.966984][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.013115][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.052677][T29135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10332'. [ 889.054306][T26104] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 889.149000][T26104] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input80 [ 889.222661][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.274471][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.290809][ T1211] gs_usb 4-1:0.0: Configuring for 3 interfaces [ 889.323112][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.372687][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.412665][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.444053][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.474284][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.522692][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.560736][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.592664][T26104] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 889.625692][T26104] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 889.652705][T26104] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 889.704615][ T1211] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 889.718608][T26104] usb 2-1: USB disconnect, device number 94 [ 889.893337][ T1211] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 889.940659][ T1211] usb 4-1: USB disconnect, device number 107 [ 890.763780][T18907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.773212][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.776585][ T1211] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 890.802447][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.818457][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.972799][ T1211] usb 2-1: Using ep0 maxpacket: 32 [ 890.996143][ T1211] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 891.013760][ T1211] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 891.023527][ T1211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 891.036740][ T1211] usb 2-1: config 1 has no interface number 0 [ 891.056675][ T1211] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 891.083047][ T1211] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 891.120343][ T1211] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 891.139124][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.175681][ T1211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 891.378277][ T1211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 891.563202][T29200] lo: Caught tx_queue_len zero misconfig [ 891.904787][ T1211] usb 2-1: USB disconnect, device number 95 [ 891.942158][ T1211] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 892.598817][T29240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.657145][T29240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.676122][T29240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.693172][ T1339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.701798][ T1339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.892106][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.982661][ T5906] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 894.152520][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 894.164741][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.181277][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.218311][ T5906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 894.235572][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.264159][ T5906] usb 2-1: Product: syz [ 894.272972][ T5906] usb 2-1: Manufacturer: syz [ 894.282733][ T5906] usb 2-1: SerialNumber: syz [ 894.716177][ T5906] usb 2-1: 0:2 : does not exist [ 895.039137][T29324] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10418'. [ 895.140204][ T5906] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 895.186654][ T5906] usb 2-1: USB disconnect, device number 96 [ 895.240950][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.598170][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10427'. [ 895.637109][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10427'. [ 896.037447][T29368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.052338][T29368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.667977][T29385] ip6tnl0: Caught tx_queue_len zero misconfig [ 896.939407][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.070503][T29396] ptrace attach of "./syz-executor exec"[29399] was attempted by "./syz-executor exec"[29396] [ 897.332826][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 897.482517][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 897.496823][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 897.510716][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.522882][ T10] usb 2-1: Product: syz [ 897.527253][ T10] usb 2-1: Manufacturer: syz [ 897.532020][ T10] usb 2-1: SerialNumber: syz [ 897.553113][ T10] usb 2-1: config 0 descriptor?? [ 897.570098][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 897.673699][T29428] erspan0: entered promiscuous mode [ 897.787586][T29431] macvlan4: entered allmulticast mode [ 897.793252][T29431] hsr0: entered allmulticast mode [ 897.803784][T18907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.819919][T29431] hsr_slave_0: entered allmulticast mode [ 897.826079][T29431] hsr_slave_1: entered allmulticast mode [ 897.855193][T29431] hsr0: left allmulticast mode [ 897.866277][T29431] hsr_slave_0: left allmulticast mode [ 897.881516][T29431] hsr_slave_1: left allmulticast mode [ 898.226402][T29446] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 898.386426][T29452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10476'. [ 898.407681][T29452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10476'. [ 898.432749][ T10] gspca_stk1135: reg_w 0x5 err -71 [ 898.443791][ T1339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.448758][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.582696][ T10] gspca_stk1135: Sensor write failed [ 898.588077][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.595651][ T10] gspca_stk1135: Sensor write failed [ 898.601002][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.621497][ T10] gspca_stk1135: Sensor read failed [ 898.626969][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.642642][ T10] gspca_stk1135: Sensor read failed [ 898.647986][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 898.692334][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.710489][ T10] gspca_stk1135: Sensor read failed [ 898.731138][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.761311][ T10] gspca_stk1135: Sensor read failed [ 898.782645][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.789175][ T10] gspca_stk1135: Sensor write failed [ 898.820615][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 898.839064][ T10] gspca_stk1135: Sensor write failed [ 898.862653][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 898.895690][ T10] usb 2-1: USB disconnect, device number 97 [ 899.080507][T18907] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.135522][T29466] hsr0: entered promiscuous mode [ 899.177264][T29466] macvlan4: entered allmulticast mode [ 899.207146][T29466] hsr0: entered allmulticast mode [ 899.231935][T29466] hsr_slave_0: entered allmulticast mode [ 899.260888][T29466] hsr_slave_1: entered allmulticast mode [ 899.309100][T29466] hsr0: left allmulticast mode [ 899.345059][T29466] hsr_slave_0: left allmulticast mode [ 899.376322][T29466] hsr_slave_1: left allmulticast mode [ 899.550455][T18907] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.625909][T18907] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.662753][T18907] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.962970][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.061539][T29487] loop9: detected capacity change from 0 to 8 [ 900.103822][T29487] Dev loop9: unable to read RDB block 8 [ 900.109479][T29487] loop9: unable to read partition table [ 900.122705][T29487] loop9: partition table beyond EOD, truncated [ 900.129136][T29487] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 900.442730][ T5920] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 900.625021][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 900.656293][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 900.676382][ T5920] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 900.717035][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.734990][ T5920] usb 2-1: Product: syz [ 900.751355][ T5920] usb 2-1: Manufacturer: syz [ 900.769823][ T5920] usb 2-1: SerialNumber: syz [ 900.802189][ T5920] usb 2-1: config 0 descriptor?? [ 901.112484][ T5906] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 901.245127][ T5920] gs_usb 2-1:0.0: Configuring for 3 interfaces [ 901.295490][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.326721][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 901.336434][ T5906] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 901.348663][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.386046][ T5906] usb 3-1: config 0 descriptor?? [ 901.673488][ T5920] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 901.720197][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10508'. [ 901.798231][ T5920] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 901.838966][ T5920] usb 2-1: USB disconnect, device number 98 [ 902.046983][ T5906] Bluetooth: Can't get version to change to load ram patch err [ 902.071740][ T5906] Bluetooth: Loading sysconfig file failed [ 902.099308][ T5906] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 902.143499][ T5906] usb 3-1: USB disconnect, device number 96 [ 902.793237][T17620] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 902.972967][T17620] usb 2-1: Using ep0 maxpacket: 16 [ 902.997262][T17620] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 903.002875][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.017659][T17620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 903.057922][T17620] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 903.075997][T17620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.093205][T17620] usb 2-1: Product: syz [ 903.101254][T17620] usb 2-1: Manufacturer: syz [ 903.112470][T17620] usb 2-1: SerialNumber: syz [ 903.125379][T17620] usb 2-1: config 0 descriptor?? [ 903.148315][T17620] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 903.161802][T17620] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 903.567651][ T3469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.763389][T17620] em28xx 2-1:0.0: chip ID is em2874 [ 903.983920][ T5906] usb 2-1: USB disconnect, device number 99 [ 903.993890][ T5906] em28xx 2-1:0.0: Disconnecting em28xx [ 904.004995][ T5906] em28xx 2-1:0.0: Freeing device [ 904.203147][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.512033][T29631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10550'. [ 905.584602][T26104] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 905.744901][T26104] usb 4-1: Using ep0 maxpacket: 8 [ 905.761756][T26104] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 905.797547][T26104] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 905.806913][T26104] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 905.817611][T26104] usb 4-1: Product: syz [ 905.822162][T26104] usb 4-1: Manufacturer: syz [ 905.840851][T26104] usb 4-1: SerialNumber: syz [ 906.047625][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.072038][T26104] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 906.091124][T26104] usb 4-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 906.102326][T26104] usb 4-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 906.107105][T29649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.110464][T26104] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 906.282161][T26104] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 906.312987][T26104] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 906.326850][T26104] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 906.340644][T26104] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 906.359642][T26104] usb 4-1: USB disconnect, device number 108 [ 906.381223][T26104] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 906.401773][T26104] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 906.415582][T26104] visor 4-1:1.0: device disconnected [ 907.117856][T29696] io-wq is not configured for unbound workers [ 907.392733][T26104] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 907.570156][T26104] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.587117][T26104] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 907.631407][T26104] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.655951][T26104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.675250][T26104] usb 3-1: Product: syz [ 907.681395][T26104] usb 3-1: Manufacturer: syz [ 907.709253][T26104] usb 3-1: SerialNumber: syz [ 907.961883][T29698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.982703][T29698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.991550][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10586'. [ 908.002677][ T5837] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 908.033175][T29709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10586'. [ 908.042338][T26104] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 908.082942][T26104] usb 3-1: USB disconnect, device number 97 [ 908.197955][ T5837] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.215876][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 908.256100][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 908.287827][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 908.312834][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 908.345945][ T5837] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 908.355871][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 908.382538][ T5837] usb 6-1: Product: syz [ 908.387009][ T5837] usb 6-1: Manufacturer: syz [ 908.391645][ T5837] usb 6-1: SerialNumber: syz [ 908.402718][T29713] sctp: [Deprecated]: syz.0.10588 (pid 29713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 908.402718][T29713] Use struct sctp_sack_info instead [ 908.432151][ T5837] usb 6-1: config 0 descriptor?? [ 908.553240][T26104] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 908.651490][ T5837] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 908.664247][ T5837] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 908.683185][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.722751][T26104] usb 3-1: Using ep0 maxpacket: 8 [ 908.751347][T26104] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 908.777894][T26104] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 908.790574][T26104] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.805042][T26104] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 908.821306][T26104] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 908.834293][T26104] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.865218][ T5837] radio-si470x 6-1:0.0: software version 239, hardware version 199 [ 908.866583][T26104] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.903477][T26104] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 908.907040][ T5837] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 908.944343][T26104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.996641][T26104] usbtmc 3-1:16.0: bulk endpoints not found [ 909.066160][ T5837] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 909.083496][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.206891][T29732] tun0: tun_chr_ioctl cmd 1074025677 [ 909.227873][T29732] tun0: linktype set to 1 [ 909.258019][T26104] usb 3-1: USB disconnect, device number 98 [ 909.281892][ T5837] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 909.319799][ T5837] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 909.351312][ T5837] usb 6-1: USB disconnect, device number 36 [ 909.968540][T18907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.131071][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.406842][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 912.406862][ T30] audit: type=1326 audit(1753964947.738:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.5.10639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 912.476058][ T30] audit: type=1326 audit(1753964947.738:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.5.10639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 912.505177][ T30] audit: type=1326 audit(1753964947.738:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.5.10639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 912.566291][ T30] audit: type=1326 audit(1753964947.778:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.5.10639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 912.588505][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.604618][ T30] audit: type=1326 audit(1753964947.778:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.5.10639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 912.677523][ T30] audit: type=1326 audit(1753964947.778:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.5.10639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 912.960396][T29848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10646'. [ 913.092550][ T5837] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 913.258446][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 913.280365][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.308321][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.352793][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 913.392193][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 913.427092][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.486007][ T5837] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 913.515537][ T5837] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 913.543473][ T5837] usb 4-1: Manufacturer: syz [ 913.578245][ T5837] usb 4-1: config 0 descriptor?? [ 913.805767][T18907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.952744][ T5837] rc_core: IR keymap rc-hauppauge not found [ 913.961046][ T5837] Registered IR keymap rc-empty [ 913.966862][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 913.992623][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.025846][ T5837] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 914.044632][ T5837] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input81 [ 914.068055][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.112899][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.142557][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.172723][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.203140][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.232669][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.263638][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.292739][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.329098][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.362607][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.411583][ T5837] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 914.460126][ T5837] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 914.488707][ T5837] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 914.509426][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10664'. [ 914.544342][ T5837] usb 4-1: USB disconnect, device number 109 [ 914.565274][T29891] netlink: 190 bytes leftover after parsing attributes in process `syz.0.10664'. [ 915.022558][T17620] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 915.163003][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.183011][T17620] usb 6-1: Using ep0 maxpacket: 8 [ 915.202232][T17620] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.229122][T17620] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 915.252654][T17620] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 915.279372][T17620] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.292509][T17620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.311422][T17620] usb 6-1: Product: syz [ 915.321573][T17620] usb 6-1: Manufacturer: syz [ 915.326500][T17620] usb 6-1: SerialNumber: syz [ 915.581659][T17620] cdc_ncm 6-1:1.0: bind() failure [ 915.608465][T17620] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 915.636157][T17620] cdc_ncm 6-1:1.1: bind() failure [ 915.660507][T17620] usb 6-1: USB disconnect, device number 37 [ 915.723763][T20408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.428235][T29956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.438089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.385813][T29979] bond_slave_0: entered promiscuous mode [ 917.391780][T29979] bond_slave_1: entered promiscuous mode [ 917.397750][T29979] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 917.444595][T29979] macsec2: entered allmulticast mode [ 917.477786][T29979] bond0: entered allmulticast mode [ 917.487867][T29979] bond_slave_0: entered allmulticast mode [ 917.496653][T29979] bond_slave_1: entered allmulticast mode [ 917.509979][T29979] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 917.545062][T29979] bond0: left allmulticast mode [ 917.549987][T29979] bond_slave_0: left allmulticast mode [ 917.572554][T29979] bond_slave_1: left allmulticast mode [ 917.585932][T29979] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 917.612578][T29979] bond_slave_0: left promiscuous mode [ 917.618199][T29979] bond_slave_1: left promiscuous mode [ 917.623847][T29979] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 918.204502][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.563208][T17620] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 919.602822][ T5920] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 919.734671][T17620] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 919.752509][T17620] usb 6-1: config 0 has no interface number 0 [ 919.767678][T17620] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 919.779001][T17620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.792265][T30047] team0: Caught tx_queue_len zero misconfig [ 919.798188][ T5920] usb 4-1: config 0 has no interfaces? [ 919.798565][T17620] usb 6-1: Product: syz [ 919.812703][T17620] usb 6-1: Manufacturer: syz [ 919.832954][ T5920] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 919.838184][T17620] usb 6-1: SerialNumber: syz [ 919.853571][ T5920] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 919.862088][ T5920] usb 4-1: Manufacturer: syz [ 919.875719][T17620] usb 6-1: config 0 descriptor?? [ 919.894371][ T5920] usb 4-1: config 0 descriptor?? [ 919.906008][T17620] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 920.249539][ T5920] usb 4-1: USB disconnect, device number 110 [ 920.763062][ T1339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.776600][T17620] gspca_spca1528: reg_w err -71 [ 920.802963][T17620] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 920.867475][T17620] usb 6-1: USB disconnect, device number 38 [ 921.242875][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.582976][ T5920] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 921.750799][ T5920] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.767994][ T5920] usb 4-1: config 0 has no interface number 0 [ 921.793558][ T5920] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 921.807952][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.818063][ T5920] usb 4-1: Product: syz [ 921.833576][ T5920] usb 4-1: Manufacturer: syz [ 921.839143][ T5920] usb 4-1: SerialNumber: syz [ 921.857963][ T5920] usb 4-1: config 0 descriptor?? [ 922.112755][ T5920] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 922.127445][ T5920] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 922.162880][ T5920] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 922.171104][ T5920] usb 4-1: media controller created [ 922.244016][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 923.403116][ T5920] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 923.524855][ T5920] usb 4-1: USB disconnect, device number 111 [ 924.283090][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.885304][T30184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10797'. [ 924.962602][ T5920] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 925.165756][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 925.174792][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.195673][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 925.222588][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 925.252441][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 925.272843][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.308010][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 925.331833][T29959] syz.5.10695 (29959) used greatest stack depth: 18520 bytes left [ 925.340064][ T5920] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 925.352442][ T5920] usb 4-1: Manufacturer: syz [ 925.374501][ T5920] usb 4-1: config 0 descriptor?? [ 925.707549][ T5920] rc_core: IR keymap rc-hauppauge not found [ 925.731562][ T5920] Registered IR keymap rc-empty [ 925.741811][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 925.790364][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 925.823988][ T5920] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 925.863574][ T5920] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 925.903649][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 925.942245][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 925.972724][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.000478][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.032674][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.082811][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.087655][T30211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10807'. [ 926.102631][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.123146][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.162638][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.185459][ T5920] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 926.231907][ T5920] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 926.253549][ T5920] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 926.270659][ T5920] usb 4-1: USB disconnect, device number 112 [ 926.956837][T30232] batadv_slave_1: entered promiscuous mode [ 927.025218][T30231] batadv_slave_1: left promiscuous mode [ 927.322966][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.746713][ T30] audit: type=1326 audit(1753964963.078:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30248 comm="syz.5.10824" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0 [ 927.883428][T20408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.892030][ T3469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.258389][T30262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 928.265059][T30262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 928.286007][T30262] vhci_hcd vhci_hcd.0: Device attached [ 928.311020][T30263] vhci_hcd: connection closed [ 928.315061][ T1005] vhci_hcd: stop threads [ 928.336164][ T1005] vhci_hcd: release socket [ 928.346374][ T1005] vhci_hcd: disconnect device [ 928.517863][T30275] vxcan3: entered promiscuous mode [ 928.893141][ T5837] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 928.894097][ T1211] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 929.055582][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 929.079670][ T5837] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 929.095120][ T1211] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.096224][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.115648][ T5920] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 929.116397][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 929.136612][ T5837] usb 2-1: config 0 descriptor?? [ 929.138800][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 929.154525][ T1211] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 929.210652][ T1211] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 929.223256][ T1211] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 929.241001][ T1211] usb 6-1: Manufacturer: syz [ 929.267995][ T1211] usb 6-1: config 0 descriptor?? [ 929.272626][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 929.297431][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 929.312722][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 929.337827][T30303] sch_fq: defrate 2048 ignored. [ 929.348284][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.379011][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.390545][ T5837] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 929.400038][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 929.413548][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 929.427541][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 929.435666][ T5837] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 929.447584][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 929.472921][ T5837] usb 2-1: media controller created [ 929.482688][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.520434][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.559715][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 929.568625][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 929.610104][ T5920] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 929.618332][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 929.635413][ T1211] rc_core: IR keymap rc-hauppauge not found [ 929.639329][ T5920] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.654177][ T1211] Registered IR keymap rc-empty [ 929.659445][ T5837] az6027: usb out operation failed. (-71) [ 929.667279][ T5837] az6027: usb out operation failed. (-71) [ 929.673226][ T5837] stb0899_attach: Driver disabled by Kconfig [ 929.673384][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 929.679311][ T5837] az6027: no front-end attached [ 929.679311][ T5837] [ 929.695688][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.712789][ T5920] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 929.732944][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 929.737430][ T5837] az6027: usb out operation failed. (-71) [ 929.752096][ T5837] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 929.763998][ T1211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 929.780235][ T5920] usb 4-1: string descriptor 0 read error: -22 [ 929.789460][ T5920] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 929.790853][ T1211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input84 [ 929.802306][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85 [ 929.842601][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.850134][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 929.873122][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 929.889914][ T5920] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 929.902332][ T5837] dvb-usb: schedule remote query interval to 400 msecs. [ 929.909573][ T5837] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 929.922743][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 929.973239][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 929.982945][ T5837] usb 2-1: USB disconnect, device number 100 [ 930.033042][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 930.052962][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 930.082702][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 930.132632][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 930.164329][ T5837] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 930.166012][T26104] usb 4-1: USB disconnect, device number 113 [ 930.180614][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 930.222584][ T1211] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 930.272685][ T1211] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 930.293905][ T1211] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 930.325927][ T1211] usb 6-1: USB disconnect, device number 39 [ 930.367550][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.628003][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10856'. [ 930.901246][T30329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.961306][T30329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.035907][T30329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.728036][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.734665][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.810892][T30354] lo: entered promiscuous mode [ 931.832148][T30354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 931.848618][ T5837] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 931.850317][T30360] loop7: detected capacity change from 0 to 7 [ 932.012711][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 932.037923][T30365] cifs: Unknown parameter 'fd' [ 932.054009][ T5837] usb 3-1: config 0 has no interfaces? [ 932.075414][ T5837] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.092585][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.100638][ T5837] usb 3-1: Product: syz [ 932.143043][ T5837] usb 3-1: Manufacturer: syz [ 932.147744][ T5837] usb 3-1: SerialNumber: syz [ 932.197442][T30372] netlink: 27 bytes leftover after parsing attributes in process `syz.5.10878'. [ 932.201365][ T5837] usb 3-1: config 0 descriptor?? [ 932.549078][ T5981] Dev loop7: unable to read RDB block 7 [ 932.562838][ T5981] loop7: unable to read partition table [ 932.569128][ T5981] loop7: partition table beyond EOD, truncated [ 932.569373][ T5920] usb 3-1: USB disconnect, device number 99 [ 933.003156][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.169440][T30360] Dev loop7: unable to read RDB block 7 [ 933.182817][T30360] loop7: unable to read partition table [ 933.194326][T30360] loop7: partition table beyond EOD, truncated [ 933.205263][T30360] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 933.352037][T30406] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10893'. [ 933.402899][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.456462][T30409] netlink: 'syz.3.10894': attribute type 11 has an invalid length. [ 933.461965][T30411] ALSA: mixer_oss: invalid OSS volume 'LIN$' [ 933.500218][T30409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10894'. [ 933.644025][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.952860][ T5920] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 935.092620][ T1211] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 935.118977][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 935.140221][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 935.166221][ T5920] usb 3-1: config 4 interface 0 has no altsetting 0 [ 935.217931][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 935.242854][ T5920] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 935.255385][ T1211] usb 4-1: Using ep0 maxpacket: 32 [ 935.258568][ T5920] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 935.274819][ T1211] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 935.300025][ T1211] usb 4-1: config 0 has no interface number 0 [ 935.315729][ T1211] usb 4-1: config 0 interface 219 has no altsetting 0 [ 935.342780][ T1211] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 935.364069][ T5920] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 935.370648][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.401841][ T1211] usb 4-1: config 0 descriptor?? [ 935.421601][ T5920] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 935.439426][ T5920] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 935.450530][ T5920] usb 3-1: media controller created [ 935.540852][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 935.621783][T30475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10924'. [ 935.659688][T30475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10924'. [ 935.756570][ T1211] usb 4-1: string descriptor 0 read error: -71 [ 935.788020][ T1211] usb 4-1: USB disconnect, device number 114 [ 935.796147][ T5920] zl10353_read_register: readreg error (reg=127, ret==0) [ 935.958478][ T5920] usb 3-1: USB disconnect, device number 100 [ 936.450316][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.845137][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 937.164130][T30520] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 937.192542][ T1211] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 937.372678][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 937.397972][ T1211] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 937.432251][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.441081][ T1211] usb 2-1: Product: syz [ 937.452967][ T1211] usb 2-1: Manufacturer: syz [ 937.457624][ T1211] usb 2-1: SerialNumber: syz [ 937.481867][ T1211] usb 2-1: config 0 descriptor?? [ 937.720818][ T1211] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 938.102672][ T5920] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 938.269778][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 938.303611][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 938.320485][ T1211] gspca_sunplus: reg_w_riv err -71 [ 938.325272][ T5920] usb 6-1: config 4 interface 0 has no altsetting 0 [ 938.327586][ T1211] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 938.354939][ T1211] usb 2-1: USB disconnect, device number 101 [ 938.389015][ T5920] usb 6-1: string descriptor 0 read error: -22 [ 938.404256][ T5920] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 938.428920][ T5920] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 938.478871][ T5920] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 938.501774][ T5920] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 938.554950][ T5920] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 938.586120][ T5920] usb 6-1: media controller created [ 938.651471][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 938.763748][T18907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.943960][ T5920] zl10353_read_register: readreg error (reg=127, ret==0) [ 939.073357][ T5920] usb 6-1: USB disconnect, device number 40 [ 939.403032][ T3469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.484262][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.491918][T30561] netlink: 'syz.3.10962': attribute type 25 has an invalid length. [ 939.751422][T30569] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 939.944149][T30581] random: crng reseeded on system resumption [ 939.962743][ T1211] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 940.159631][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.183526][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.199887][ T1211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.241083][ T1211] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 940.261252][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.291102][ T1211] usb 4-1: config 0 descriptor?? [ 940.497201][T30601] @: renamed from vlan0 (while UP) [ 940.674202][T30603] team0: Caught tx_queue_len zero misconfig [ 940.736593][ T1211] belkin 0003:050D:3201.00AD: global environment stack underflow [ 940.760665][ T1211] belkin 0003:050D:3201.00AD: item 0 4 1 11 parsing failed [ 940.779874][ T1211] belkin 0003:050D:3201.00AD: parse failed [ 940.789639][ T1211] belkin 0003:050D:3201.00AD: probe with driver belkin failed with error -22 [ 940.899255][T30610] random: crng reseeded on system resumption [ 940.965413][ T5920] usb 4-1: USB disconnect, device number 115 [ 941.427722][T30632] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 941.603288][ T5920] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 941.634538][T30638] pim6reg: entered allmulticast mode [ 941.666310][T30637] pim6reg: left allmulticast mode [ 941.768437][ T5920] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 941.792492][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.817807][ T5920] usb 2-1: Product: syz [ 941.831392][ T5920] usb 2-1: Manufacturer: syz [ 941.844893][ T5920] usb 2-1: SerialNumber: syz [ 941.869098][ T5920] usb 2-1: config 0 descriptor?? [ 942.196869][T30654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11006'. [ 942.386019][ T30] audit: type=1326 audit(1753964977.718:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30658 comm="syz.2.11008" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x0 [ 942.523045][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.746447][ T5920] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 942.768527][ T5920] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 942.781358][ T5920] asix 2-1:0.0: probe with driver asix failed with error -71 [ 942.794267][ T5920] usb 2-1: USB disconnect, device number 102 [ 943.214114][ T1211] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 943.392786][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 943.410070][ T1211] usb 4-1: config index 0 descriptor too short (expected 24576, got 27) [ 943.439278][ T1211] usb 4-1: config 65 has too many interfaces: 210, using maximum allowed: 32 [ 943.455322][ T1211] usb 4-1: config 65 has an invalid descriptor of length 197, skipping remainder of the config [ 943.466903][ T1211] usb 4-1: config 65 has 0 interfaces, different from the descriptor's value: 210 [ 943.479552][ T1211] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 943.500008][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.522491][ T1211] usb 4-1: Product: syz [ 943.531463][ T1211] usb 4-1: Manufacturer: syz [ 943.536869][ T1211] usb 4-1: SerialNumber: syz [ 943.924058][ T1211] usb 4-1: USB disconnect, device number 116 [ 943.980398][T30699] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 944.140665][T30709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11030'. [ 944.257848][T30713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.525800][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.796376][T30734] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11042'. [ 945.163096][ T1339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.562982][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.092603][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.103304][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.113933][T30774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.265364][ T30] audit: type=1326 audit(1753964981.598:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30778 comm="syz.1.11063" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 946.874881][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11069'. [ 947.322715][T30800] : renamed from bond0 (while UP) [ 947.975100][T30821] kvm: kvm [30820]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x3 [ 948.202614][ T1211] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 948.372582][ T1211] usb 6-1: Using ep0 maxpacket: 8 [ 948.382001][ T1211] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 948.392232][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.444048][ T1211] usb 6-1: config 0 descriptor?? [ 948.602954][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.660705][ T1211] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 949.263933][ T1211] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 949.287351][ T1211] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 949.315729][ T1211] asix 6-1:0.0: probe with driver asix failed with error -71 [ 949.344764][ T1211] usb 6-1: USB disconnect, device number 41 [ 950.283090][T18907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.411151][T30905] netlink: 'syz.2.11121': attribute type 21 has an invalid length. [ 950.438984][T30905] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11121'. [ 950.483241][T30910] netlink: 'syz.2.11121': attribute type 21 has an invalid length. [ 950.491347][T30910] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11121'. [ 950.684071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.693256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.701626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.923152][ T3469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.647787][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.952049][ T30] audit: type=1326 audit(1753964987.278:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 951.974717][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.022655][ T30] audit: type=1326 audit(1753964987.278:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 952.044852][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.078619][ T30] audit: type=1326 audit(1753964987.318:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 952.109279][ T30] audit: type=1326 audit(1753964987.328:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 952.164979][ T30] audit: type=1326 audit(1753964987.328:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 952.229125][ T30] audit: type=1326 audit(1753964987.328:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 952.279222][ T30] audit: type=1326 audit(1753964987.328:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 952.302665][T26104] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 952.320565][ T30] audit: type=1326 audit(1753964987.328:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30977 comm="syz.5.11154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000 [ 952.342816][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.375231][T30988] netlink: 'syz.2.11159': attribute type 1 has an invalid length. [ 952.383585][T30988] netlink: 'syz.2.11159': attribute type 2 has an invalid length. [ 952.425860][T30988] netlink: 'syz.2.11159': attribute type 1 has an invalid length. [ 952.452481][T30988] netlink: 'syz.2.11159': attribute type 2 has an invalid length. [ 952.466374][T26104] usb 2-1: config 0 has no interfaces? [ 952.476753][T26104] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 952.500341][T26104] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 952.527614][T26104] usb 2-1: Product: syz [ 952.539847][T26104] usb 2-1: Manufacturer: syz [ 952.561807][T26104] usb 2-1: config 0 descriptor?? [ 952.813861][T30983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.823104][ T5920] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 952.851168][T30983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.893198][T28626] Bluetooth: hci0: unknown advertising packet type: 0x40 [ 952.893282][T28626] Bluetooth: hci0: Malformed LE Event: 0x02 [ 952.916713][ T5837] usb 2-1: USB disconnect, device number 103 [ 953.002744][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 953.010669][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 953.024443][T31006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11166'. [ 953.037121][ T5920] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 953.048615][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 953.077613][ T5920] usb 3-1: Product: syz [ 953.081854][ T5920] usb 3-1: Manufacturer: syz [ 953.098942][ T5920] usb 3-1: SerialNumber: syz [ 953.126175][ T5920] usb 3-1: config 0 descriptor?? [ 953.133095][T30992] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 953.408748][ T5920] usb 3-1: USB disconnect, device number 101 [ 953.487603][T31020] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 953.840847][T31034] [ 953.843247][T31034] ===================================================== [ 953.850199][T31034] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 953.857683][T31034] 6.16.0-syzkaller-08685-g260f6f4fda93 #0 Not tainted [ 953.864563][T31034] ----------------------------------------------------- [ 953.871516][T31034] syz.3.11181/31034 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 953.879528][T31034] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 953.888191][T31034] [ 953.888191][T31034] and this task is already holding: [ 953.895562][T31034] ffff88803252f4a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 953.904189][T31034] which would create a new lock dependency: [ 953.910099][T31034] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 953.917682][T31034] [ 953.917682][T31034] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 953.927129][T31034] (&dev->event_lock#2){..-.}-{3:3} [ 953.927160][T31034] [ 953.927160][T31034] ... which became SOFTIRQ-irq-safe at: [ 953.940081][T31034] lock_acquire+0x120/0x360 [ 953.945287][T31034] _raw_spin_lock_irqsave+0xa7/0xf0 [ 953.950592][T31034] input_inject_event+0xab/0x320 [ 953.955671][T31034] led_trigger_event+0x138/0x210 [ 953.960700][T31034] kbd_bh+0x1c6/0x2e0 [ 953.964775][T31034] tasklet_action_common+0x369/0x580 [ 953.970147][T31034] handle_softirqs+0x286/0x870 [ 953.975015][T31034] run_ksoftirqd+0x9b/0x100 [ 953.979600][T31034] smpboot_thread_fn+0x542/0xa60 [ 953.984637][T31034] kthread+0x711/0x8a0 [ 953.988883][T31034] ret_from_fork+0x3f9/0x770 [ 953.993571][T31034] ret_from_fork_asm+0x1a/0x30 [ 953.998517][T31034] [ 953.998517][T31034] to a SOFTIRQ-irq-unsafe lock: [ 954.005535][T31034] (tasklist_lock){.+.+}-{3:3} [ 954.005559][T31034] [ 954.005559][T31034] ... which became SOFTIRQ-irq-unsafe at: [ 954.018209][T31034] ... [ 954.018217][T31034] lock_acquire+0x120/0x360 [ 954.025399][T31034] _raw_read_lock+0x36/0x50 [ 954.029986][T31034] __do_wait+0xde/0x740 [ 954.034226][T31034] do_wait+0x1f8/0x520 [ 954.038378][T31034] kernel_wait+0xab/0x170 [ 954.042916][T31034] call_usermodehelper_exec_work+0xbe/0x230 [ 954.048902][T31034] process_scheduled_works+0xade/0x17b0 [ 954.054549][T31034] worker_thread+0x8a0/0xda0 [ 954.059240][T31034] kthread+0x711/0x8a0 [ 954.063490][T31034] ret_from_fork+0x3f9/0x770 [ 954.068171][T31034] ret_from_fork_asm+0x1a/0x30 [ 954.073019][T31034] [ 954.073019][T31034] other info that might help us debug this: [ 954.073019][T31034] [ 954.083243][T31034] Chain exists of: [ 954.083243][T31034] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 954.083243][T31034] [ 954.096291][T31034] Possible interrupt unsafe locking scenario: [ 954.096291][T31034] [ 954.104684][T31034] CPU0 CPU1 [ 954.110085][T31034] ---- ---- [ 954.115462][T31034] lock(tasklist_lock); [ 954.119719][T31034] local_irq_disable(); [ 954.126475][T31034] lock(&dev->event_lock#2); [ 954.133684][T31034] lock(&f_owner->lock); [ 954.140547][T31034] [ 954.143999][T31034] lock(&dev->event_lock#2); [ 954.148882][T31034] [ 954.148882][T31034] *** DEADLOCK *** [ 954.148882][T31034] [ 954.157105][T31034] 6 locks held by syz.3.11181/31034: [ 954.162482][T31034] #0: ffffffff8f56dbf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 954.170761][T31034] #1: ffffffff8f56da08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 954.179823][T31034] #2: ffffffff8e139de0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xbe/0x550 [ 954.189658][T31034] #3: ffffffff8e139de0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 954.198714][T31034] #4: ffff88807eb64a98 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 954.207853][T31034] #5: ffff88803252f4a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 954.216938][T31034] [ 954.216938][T31034] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 954.227348][T31034] -> (&dev->event_lock#2){..-.}-{3:3} { [ 954.233349][T31034] IN-SOFTIRQ-W at: [ 954.237585][T31034] lock_acquire+0x120/0x360 [ 954.244268][T31034] _raw_spin_lock_irqsave+0xa7/0xf0 [ 954.251721][T31034] input_inject_event+0xab/0x320 [ 954.258829][T31034] led_trigger_event+0x138/0x210 [ 954.265937][T31034] kbd_bh+0x1c6/0x2e0 [ 954.272274][T31034] tasklet_action_common+0x369/0x580 [ 954.279735][T31034] handle_softirqs+0x286/0x870 [ 954.286724][T31034] run_ksoftirqd+0x9b/0x100 [ 954.293590][T31034] smpboot_thread_fn+0x542/0xa60 [ 954.301142][T31034] kthread+0x711/0x8a0 [ 954.307412][T31034] ret_from_fork+0x3f9/0x770 [ 954.314195][T31034] ret_from_fork_asm+0x1a/0x30 [ 954.321321][T31034] INITIAL USE at: [ 954.325500][T31034] lock_acquire+0x120/0x360 [ 954.332273][T31034] _raw_spin_lock_irqsave+0xa7/0xf0 [ 954.339557][T31034] input_inject_event+0xab/0x320 [ 954.346600][T31034] kbd_led_trigger_activate+0xbc/0x100 [ 954.354144][T31034] led_trigger_set+0x52d/0x950 [ 954.361286][T31034] led_trigger_set_default+0x260/0x2a0 [ 954.368853][T31034] led_classdev_register_ext+0x73d/0x930 [ 954.376591][T31034] input_leds_connect+0x517/0x790 [ 954.383713][T31034] input_register_device+0xcee/0x10b0 [ 954.391188][T31034] atkbd_connect+0x70e/0x9c0 [ 954.397956][T31034] serio_driver_probe+0x7f/0xa0 [ 954.404910][T31034] really_probe+0x26a/0x9e0 [ 954.411530][T31034] __driver_probe_device+0x18c/0x2f0 [ 954.418897][T31034] driver_probe_device+0x4f/0x430 [ 954.426004][T31034] __driver_attach+0x452/0x700 [ 954.432851][T31034] bus_for_each_dev+0x230/0x2b0 [ 954.439789][T31034] serio_handle_event+0x1a2/0x860 [ 954.447082][T31034] process_scheduled_works+0xade/0x17b0 [ 954.454892][T31034] worker_thread+0x8a0/0xda0 [ 954.461566][T31034] kthread+0x711/0x8a0 [ 954.467724][T31034] ret_from_fork+0x3f9/0x770 [ 954.474405][T31034] ret_from_fork_asm+0x1a/0x30 [ 954.481251][T31034] } [ 954.484007][T31034] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 954.493484][T31034] -> (&client->buffer_lock){....}-{3:3} { [ 954.499396][T31034] INITIAL USE at: [ 954.503469][T31034] lock_acquire+0x120/0x360 [ 954.509889][T31034] _raw_spin_lock+0x2e/0x40 [ 954.516308][T31034] evdev_pass_values+0xb9/0xbd0 [ 954.523083][T31034] evdev_events+0x1e6/0x340 [ 954.529498][T31034] input_pass_values+0x288/0x890 [ 954.536438][T31034] input_event_dispose+0x330/0x6b0 [ 954.543898][T31034] input_inject_event+0x1fe/0x320 [ 954.550919][T31034] evdev_write+0x2fc/0x480 [ 954.557245][T31034] vfs_write+0x27b/0xa90 [ 954.563397][T31034] ksys_write+0x145/0x250 [ 954.569662][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 954.576879][T31034] do_fast_syscall_32+0x34/0x80 [ 954.583695][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.592033][T31034] } [ 954.594706][T31034] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 954.603036][T31034] ... acquired at: [ 954.607269][T31034] lock_acquire+0x120/0x360 [ 954.611967][T31034] _raw_spin_lock+0x2e/0x40 [ 954.616643][T31034] evdev_pass_values+0xb9/0xbd0 [ 954.621774][T31034] evdev_events+0x1e6/0x340 [ 954.626453][T31034] input_pass_values+0x288/0x890 [ 954.631735][T31034] input_event_dispose+0x330/0x6b0 [ 954.637015][T31034] input_inject_event+0x1fe/0x320 [ 954.642213][T31034] evdev_write+0x2fc/0x480 [ 954.646803][T31034] vfs_write+0x27b/0xa90 [ 954.651243][T31034] ksys_write+0x145/0x250 [ 954.655751][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 954.661039][T31034] do_fast_syscall_32+0x34/0x80 [ 954.666060][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.672773][T31034] [ 954.675194][T31034] -> (&new->fa_lock){...-}-{3:3} { [ 954.680438][T31034] IN-SOFTIRQ-R at: [ 954.684504][T31034] lock_acquire+0x120/0x360 [ 954.690848][T31034] _raw_read_lock_irqsave+0xaf/0x100 [ 954.697953][T31034] kill_fasync+0x199/0x4d0 [ 954.704365][T31034] sock_wake_async+0x137/0x160 [ 954.711038][T31034] sock_def_readable+0x3bb/0x550 [ 954.717849][T31034] __sock_queue_rcv_skb+0x6a2/0x9c0 [ 954.724959][T31034] sock_queue_rcv_skb_reason+0xc0/0x190 [ 954.732426][T31034] raw_rcv+0x74b/0x9d0 [ 954.738334][T31034] raw_local_deliver+0x9ee/0xe90 [ 954.745096][T31034] ip_protocol_deliver_rcu+0x46/0x440 [ 954.752303][T31034] ip_local_deliver_finish+0x3bb/0x6f0 [ 954.759592][T31034] NF_HOOK+0x309/0x3a0 [ 954.765486][T31034] NF_HOOK+0x309/0x3a0 [ 954.771378][T31034] __netif_receive_skb+0x143/0x380 [ 954.778309][T31034] process_backlog+0x60e/0x14f0 [ 954.784990][T31034] __napi_poll+0xc4/0x360 [ 954.791142][T31034] net_rx_action+0x707/0xe30 [ 954.797562][T31034] handle_softirqs+0x286/0x870 [ 954.804349][T31034] do_softirq+0xec/0x180 [ 954.810432][T31034] __local_bh_enable_ip+0x17d/0x1c0 [ 954.817459][T31034] __dev_queue_xmit+0x1d79/0x3b50 [ 954.824401][T31034] ip_finish_output2+0xd03/0x1160 [ 954.831337][T31034] ip_push_pending_frames+0xbe/0x150 [ 954.839007][T31034] raw_sendmsg+0x1440/0x18b0 [ 954.845606][T31034] __sock_sendmsg+0x19c/0x270 [ 954.852222][T31034] __sys_sendto+0x3bd/0x520 [ 954.858573][T31034] __ia32_sys_sendto+0xdd/0x100 [ 954.865256][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 954.872205][T31034] do_fast_syscall_32+0x34/0x80 [ 954.878971][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.887213][T31034] INITIAL USE at: [ 954.891194][T31034] lock_acquire+0x120/0x360 [ 954.897610][T31034] _raw_write_lock_irq+0xa2/0xf0 [ 954.904377][T31034] fasync_remove_entry+0xf1/0x1c0 [ 954.911135][T31034] sock_fasync+0x85/0xf0 [ 954.917200][T31034] __fput+0x8a2/0xa70 [ 954.922940][T31034] task_work_run+0x1d1/0x260 [ 954.929268][T31034] exit_to_user_mode_loop+0xec/0x110 [ 954.936289][T31034] __do_fast_syscall_32+0x1f4/0x2b0 [ 954.943231][T31034] do_fast_syscall_32+0x34/0x80 [ 954.949835][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.957986][T31034] INITIAL READ USE at: [ 954.962400][T31034] lock_acquire+0x120/0x360 [ 954.969073][T31034] _raw_read_lock_irqsave+0xaf/0x100 [ 954.976546][T31034] kill_fasync+0x199/0x4d0 [ 954.983143][T31034] sock_wake_async+0x137/0x160 [ 954.990088][T31034] sock_def_readable+0x3bb/0x550 [ 954.997260][T31034] __sock_queue_rcv_skb+0x6a2/0x9c0 [ 955.004682][T31034] sock_queue_rcv_skb_reason+0xc0/0x190 [ 955.012411][T31034] raw_rcv+0x74b/0x9d0 [ 955.018668][T31034] raw_local_deliver+0x9ee/0xe90 [ 955.025784][T31034] ip_protocol_deliver_rcu+0x46/0x440 [ 955.033532][T31034] ip_local_deliver_finish+0x3bb/0x6f0 [ 955.041433][T31034] NF_HOOK+0x309/0x3a0 [ 955.047687][T31034] NF_HOOK+0x309/0x3a0 [ 955.053932][T31034] __netif_receive_skb+0x143/0x380 [ 955.061211][T31034] process_backlog+0x60e/0x14f0 [ 955.068321][T31034] __napi_poll+0xc4/0x360 [ 955.074818][T31034] net_rx_action+0x707/0xe30 [ 955.081594][T31034] handle_softirqs+0x286/0x870 [ 955.088533][T31034] do_softirq+0xec/0x180 [ 955.094956][T31034] __local_bh_enable_ip+0x17d/0x1c0 [ 955.102592][T31034] __dev_queue_xmit+0x1d79/0x3b50 [ 955.109900][T31034] ip_finish_output2+0xd03/0x1160 [ 955.117106][T31034] ip_push_pending_frames+0xbe/0x150 [ 955.124578][T31034] raw_sendmsg+0x1440/0x18b0 [ 955.131716][T31034] __sock_sendmsg+0x19c/0x270 [ 955.138583][T31034] __sys_sendto+0x3bd/0x520 [ 955.145355][T31034] __ia32_sys_sendto+0xdd/0x100 [ 955.152393][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 955.159793][T31034] do_fast_syscall_32+0x34/0x80 [ 955.166829][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.175336][T31034] } [ 955.178199][T31034] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 955.187147][T31034] ... acquired at: [ 955.191033][T31034] lock_acquire+0x120/0x360 [ 955.195713][T31034] _raw_read_lock_irqsave+0xaf/0x100 [ 955.201208][T31034] kill_fasync+0x199/0x4d0 [ 955.205800][T31034] evdev_pass_values+0x627/0xbd0 [ 955.210928][T31034] evdev_events+0x1e6/0x340 [ 955.215617][T31034] input_pass_values+0x288/0x890 [ 955.220728][T31034] input_event_dispose+0x330/0x6b0 [ 955.226132][T31034] input_inject_event+0x1fe/0x320 [ 955.231338][T31034] evdev_write+0x2fc/0x480 [ 955.235947][T31034] vfs_write+0x27b/0xa90 [ 955.240367][T31034] ksys_write+0x145/0x250 [ 955.244872][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 955.250160][T31034] do_fast_syscall_32+0x34/0x80 [ 955.255192][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.261720][T31034] [ 955.264053][T31034] -> (&f_owner->lock){....}-{3:3} { [ 955.269448][T31034] INITIAL USE at: [ 955.273348][T31034] lock_acquire+0x120/0x360 [ 955.279420][T31034] _raw_write_lock_irq+0xa2/0xf0 [ 955.285922][T31034] __f_setown+0x67/0x370 [ 955.291771][T31034] generic_setlease+0xd5d/0x1240 [ 955.298269][T31034] fcntl_setlease+0x3a2/0x4c0 [ 955.304524][T31034] do_fcntl+0x6a9/0x1910 [ 955.310343][T31034] do_compat_fcntl64+0x477/0x720 [ 955.317115][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 955.323809][T31034] do_fast_syscall_32+0x34/0x80 [ 955.330334][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.338238][T31034] INITIAL READ USE at: [ 955.342569][T31034] lock_acquire+0x120/0x360 [ 955.349076][T31034] _raw_read_lock_irqsave+0xaf/0x100 [ 955.356378][T31034] send_sigio+0x38/0x370 [ 955.362622][T31034] kill_fasync+0x24d/0x4d0 [ 955.369085][T31034] lease_break_callback+0x26/0x30 [ 955.376367][T31034] __break_lease+0x6a5/0x1620 [ 955.383041][T31034] do_dentry_open+0xd62/0x1970 [ 955.390241][T31034] vfs_open+0x3b/0x340 [ 955.396403][T31034] path_openat+0x2ee5/0x3830 [ 955.402998][T31034] do_filp_open+0x1fa/0x410 [ 955.409520][T31034] do_sys_openat2+0x121/0x1c0 [ 955.416376][T31034] __ia32_compat_sys_open+0x117/0x140 [ 955.423742][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 955.430964][T31034] do_fast_syscall_32+0x34/0x80 [ 955.437993][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.446412][T31034] } [ 955.449000][T31034] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 955.458038][T31034] ... acquired at: [ 955.461872][T31034] lock_acquire+0x120/0x360 [ 955.466560][T31034] _raw_read_lock_irqsave+0xaf/0x100 [ 955.472070][T31034] send_sigio+0x38/0x370 [ 955.476572][T31034] kill_fasync+0x24d/0x4d0 [ 955.481189][T31034] lease_break_callback+0x26/0x30 [ 955.486407][T31034] __break_lease+0x6a5/0x1620 [ 955.491274][T31034] do_dentry_open+0xd62/0x1970 [ 955.496218][T31034] vfs_open+0x3b/0x340 [ 955.500618][T31034] path_openat+0x2ee5/0x3830 [ 955.505399][T31034] do_filp_open+0x1fa/0x410 [ 955.510162][T31034] do_sys_openat2+0x121/0x1c0 [ 955.515023][T31034] __ia32_compat_sys_open+0x117/0x140 [ 955.520570][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 955.525866][T31034] do_fast_syscall_32+0x34/0x80 [ 955.530893][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.537583][T31034] [ 955.540083][T31034] [ 955.540083][T31034] the dependencies between the lock to be acquired [ 955.540092][T31034] and SOFTIRQ-irq-unsafe lock: [ 955.553876][T31034] -> (tasklist_lock){.+.+}-{3:3} { [ 955.559004][T31034] HARDIRQ-ON-R at: [ 955.562987][T31034] lock_acquire+0x120/0x360 [ 955.569242][T31034] _raw_read_lock+0x36/0x50 [ 955.575509][T31034] __do_wait+0xde/0x740 [ 955.581405][T31034] do_wait+0x1f8/0x520 [ 955.587121][T31034] kernel_wait+0xab/0x170 [ 955.593603][T31034] call_usermodehelper_exec_work+0xbe/0x230 [ 955.601586][T31034] process_scheduled_works+0xade/0x17b0 [ 955.608995][T31034] worker_thread+0x8a0/0xda0 [ 955.615259][T31034] kthread+0x711/0x8a0 [ 955.621067][T31034] ret_from_fork+0x3f9/0x770 [ 955.627325][T31034] ret_from_fork_asm+0x1a/0x30 [ 955.633745][T31034] SOFTIRQ-ON-R at: [ 955.637742][T31034] lock_acquire+0x120/0x360 [ 955.643908][T31034] _raw_read_lock+0x36/0x50 [ 955.650211][T31034] __do_wait+0xde/0x740 [ 955.656117][T31034] do_wait+0x1f8/0x520 [ 955.661863][T31034] kernel_wait+0xab/0x170 [ 955.667869][T31034] call_usermodehelper_exec_work+0xbe/0x230 [ 955.675766][T31034] process_scheduled_works+0xade/0x17b0 [ 955.682964][T31034] worker_thread+0x8a0/0xda0 [ 955.689219][T31034] kthread+0x711/0x8a0 [ 955.695455][T31034] ret_from_fork+0x3f9/0x770 [ 955.701738][T31034] ret_from_fork_asm+0x1a/0x30 [ 955.708189][T31034] INITIAL USE at: [ 955.712094][T31034] lock_acquire+0x120/0x360 [ 955.718166][T31034] _raw_write_lock_irq+0xa2/0xf0 [ 955.724757][T31034] copy_process+0x224f/0x3c00 [ 955.731089][T31034] kernel_clone+0x21e/0x840 [ 955.737260][T31034] user_mode_thread+0xdd/0x140 [ 955.743600][T31034] rest_init+0x23/0x300 [ 955.749322][T31034] start_kernel+0x3a9/0x410 [ 955.755489][T31034] x86_64_start_reservations+0x24/0x30 [ 955.762519][T31034] x86_64_start_kernel+0x143/0x1c0 [ 955.769209][T31034] common_startup_64+0x13e/0x147 [ 955.775800][T31034] INITIAL READ USE at: [ 955.780126][T31034] lock_acquire+0x120/0x360 [ 955.786811][T31034] _raw_read_lock+0x36/0x50 [ 955.793573][T31034] __do_wait+0xde/0x740 [ 955.799729][T31034] do_wait+0x1f8/0x520 [ 955.805975][T31034] kernel_wait+0xab/0x170 [ 955.812490][T31034] call_usermodehelper_exec_work+0xbe/0x230 [ 955.820386][T31034] process_scheduled_works+0xade/0x17b0 [ 955.828029][T31034] worker_thread+0x8a0/0xda0 [ 955.834624][T31034] kthread+0x711/0x8a0 [ 955.840695][T31034] ret_from_fork+0x3f9/0x770 [ 955.847377][T31034] ret_from_fork_asm+0x1a/0x30 [ 955.854398][T31034] } [ 955.856903][T31034] ... key at: [] tasklist_lock+0x18/0x40 [ 955.864666][T31034] ... acquired at: [ 955.868472][T31034] lock_acquire+0x120/0x360 [ 955.873237][T31034] _raw_read_lock+0x36/0x50 [ 955.877997][T31034] send_sigio+0x101/0x370 [ 955.882586][T31034] kill_fasync+0x24d/0x4d0 [ 955.887188][T31034] sock_wake_async+0x137/0x160 [ 955.892215][T31034] sock_def_readable+0x3bb/0x550 [ 955.897322][T31034] netlink_sendskb+0x9e/0x140 [ 955.902168][T31034] netlink_unicast+0x397/0x9e0 [ 955.907106][T31034] ctrl_getfamily+0x499/0x590 [ 955.911966][T31034] genl_family_rcv_msg_doit+0x215/0x300 [ 955.917804][T31034] genl_rcv_msg+0x60e/0x790 [ 955.922522][T31034] netlink_rcv_skb+0x208/0x470 [ 955.927462][T31034] genl_rcv+0x28/0x40 [ 955.931622][T31034] netlink_unicast+0x82c/0x9e0 [ 955.936566][T31034] netlink_sendmsg+0x805/0xb30 [ 955.941506][T31034] __sock_sendmsg+0x219/0x270 [ 955.946457][T31034] __sys_sendto+0x3bd/0x520 [ 955.951234][T31034] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 955.957313][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 955.962643][T31034] do_fast_syscall_32+0x34/0x80 [ 955.967693][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.974211][T31034] [ 955.976543][T31034] [ 955.976543][T31034] stack backtrace: [ 955.982451][T31034] CPU: 1 UID: 0 PID: 31034 Comm: syz.3.11181 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 955.982475][T31034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 955.982485][T31034] Call Trace: [ 955.982494][T31034] [ 955.982502][T31034] dump_stack_lvl+0x189/0x250 [ 955.982524][T31034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 955.982539][T31034] ? __pfx__printk+0x10/0x10 [ 955.982560][T31034] validate_chain+0x1f05/0x2140 [ 955.982598][T31034] __lock_acquire+0xab9/0xd20 [ 955.982619][T31034] ? send_sigio+0x101/0x370 [ 955.982632][T31034] lock_acquire+0x120/0x360 [ 955.982650][T31034] ? send_sigio+0x101/0x370 [ 955.982664][T31034] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 955.982681][T31034] ? do_raw_read_lock+0x3d/0x90 [ 955.982697][T31034] _raw_read_lock+0x36/0x50 [ 955.982711][T31034] ? send_sigio+0x101/0x370 [ 955.982724][T31034] send_sigio+0x101/0x370 [ 955.982738][T31034] kill_fasync+0x24d/0x4d0 [ 955.982752][T31034] ? kill_fasync+0x53/0x4d0 [ 955.982766][T31034] sock_wake_async+0x137/0x160 [ 955.982783][T31034] sock_def_readable+0x3bb/0x550 [ 955.982798][T31034] ? sock_def_readable+0xbe/0x550 [ 955.982813][T31034] netlink_sendskb+0x9e/0x140 [ 955.982829][T31034] netlink_unicast+0x397/0x9e0 [ 955.982843][T31034] ? memblock_double_array+0x344/0x7f0 [ 955.982859][T31034] ? __pfx_netlink_unicast+0x10/0x10 [ 955.982875][T31034] ? __alloc_skb+0x1bc/0x2d0 [ 955.982899][T31034] ctrl_getfamily+0x499/0x590 [ 955.982920][T31034] ? __pfx_ctrl_getfamily+0x10/0x10 [ 955.982940][T31034] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 955.982964][T31034] genl_family_rcv_msg_doit+0x215/0x300 [ 955.982988][T31034] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 955.983014][T31034] ? stack_trace_save+0x9c/0xe0 [ 955.983031][T31034] genl_rcv_msg+0x60e/0x790 [ 955.983053][T31034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 955.983073][T31034] ? __pfx_ctrl_getfamily+0x10/0x10 [ 955.983098][T31034] netlink_rcv_skb+0x208/0x470 [ 955.983114][T31034] ? __lock_acquire+0xab9/0xd20 [ 955.983132][T31034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 955.983152][T31034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 955.983174][T31034] ? down_read+0x1ad/0x2e0 [ 955.983193][T31034] genl_rcv+0x28/0x40 [ 955.983212][T31034] netlink_unicast+0x82c/0x9e0 [ 955.983229][T31034] ? __pfx_netlink_unicast+0x10/0x10 [ 955.983244][T31034] ? netlink_sendmsg+0x642/0xb30 [ 955.983260][T31034] ? skb_put+0x11b/0x210 [ 955.983279][T31034] netlink_sendmsg+0x805/0xb30 [ 955.983299][T31034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.983317][T31034] ? aa_sock_msg_perm+0x94/0x160 [ 955.983333][T31034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.983348][T31034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.983371][T31034] __sock_sendmsg+0x219/0x270 [ 955.983387][T31034] __sys_sendto+0x3bd/0x520 [ 955.983406][T31034] ? __pfx___sys_sendto+0x10/0x10 [ 955.983427][T31034] ? __might_fault+0xb0/0x130 [ 955.983452][T31034] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 955.983472][T31034] ? count_memcg_event_mm+0x21/0x260 [ 955.983489][T31034] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 955.983510][T31034] ? exc_page_fault+0x76/0xf0 [ 955.983528][T31034] ? lockdep_hardirqs_on+0x9c/0x150 [ 955.983545][T31034] __do_fast_syscall_32+0xb6/0x2b0 [ 955.983564][T31034] ? lockdep_hardirqs_on+0x9c/0x150 [ 955.983586][T31034] do_fast_syscall_32+0x34/0x80 [ 955.983604][T31034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.983622][T31034] RIP: 0023:0xf707e539 [ 955.983636][T31034] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 955.983650][T31034] RSP: 002b:00000000f506d430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 955.983667][T31034] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f506d444 [ 955.983679][T31034] RDX: 0000000000000000 RSI: 00000000f506d560 RDI: 00000000f73e4ff4 [ 955.983689][T31034] RBP: 00000000f506d560 R08: 0000000000000000 R09: 0000000000000000 [ 955.983698][T31034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 955.983707][T31034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.983721][T31034] [ 956.395590][ T3469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.452927][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.683136][ T3469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.494550][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.803218][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.811469][T20408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.522585][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog