last executing test programs: 2m44.089233804s ago: executing program 0 (id=11964): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x5, 0x60}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 2m43.955477546s ago: executing program 0 (id=11966): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, 0x0, 0xc00) 2m43.808899615s ago: executing program 0 (id=11971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x20008800) 2m43.600621799s ago: executing program 0 (id=11977): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000020000000620a000000000000070000000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069000c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 2m43.402331824s ago: executing program 0 (id=11983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048004000c8008000200010000001800088014"], 0x44}}, 0x0) 2m43.258050262s ago: executing program 0 (id=11989): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 2m27.154383077s ago: executing program 32 (id=11989): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 2m2.109255255s ago: executing program 4 (id=12772): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 2m1.983051141s ago: executing program 4 (id=12776): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 2m1.824014824s ago: executing program 4 (id=12779): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) 2m1.603167721s ago: executing program 4 (id=12782): r0 = syz_usb_connect$hid(0x3, 0x55, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206d0482c000000000000109022400010000b00009040000010300020009210200800122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500000057"], 0x0}, 0x0) 2m1.242819521s ago: executing program 1 (id=12789): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 2m1.035648143s ago: executing program 1 (id=12792): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r0, 0x0, 0x23) 2m0.881100644s ago: executing program 1 (id=12795): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 2m0.813046654s ago: executing program 2 (id=12796): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, 0x0) 2m0.785656593s ago: executing program 1 (id=12797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x64, 0x0, 0xb, 0x2, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x22) 2m0.592538809s ago: executing program 2 (id=12801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m0.462665394s ago: executing program 2 (id=12803): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r1}) 2m0.440099662s ago: executing program 2 (id=12805): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2m0.342581786s ago: executing program 2 (id=12806): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x1f, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m0.328226757s ago: executing program 1 (id=12807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030001000000200001800700010063740000140002800800024000000011080004400002000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) 1m59.739850524s ago: executing program 4 (id=12808): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m59.589265507s ago: executing program 2 (id=12809): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'team_slave_1\x00', &(0x7f0000000100)=@ethtool_cmd={0x15, 0x9, 0x7fffffff, 0x1, 0x9, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1ff, 0x81, 0x3, 0x1, 0x30, 0xfffff157, [0x2, 0x2]}}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m59.345985732s ago: executing program 33 (id=12809): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'team_slave_1\x00', &(0x7f0000000100)=@ethtool_cmd={0x15, 0x9, 0x7fffffff, 0x1, 0x9, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1ff, 0x81, 0x3, 0x1, 0x30, 0xfffff157, [0x2, 0x2]}}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m59.285580142s ago: executing program 1 (id=12812): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xb5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7fff}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m58.900171527s ago: executing program 34 (id=12812): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xb5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7fff}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m58.667239618s ago: executing program 4 (id=12815): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="dbc9923ebd01e7bb6c3bc4bf44", 0xd}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="af0e7367f111e070", 0x8}], 0x1) 1m58.355391989s ago: executing program 35 (id=12815): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="dbc9923ebd01e7bb6c3bc4bf44", 0xd}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)="af0e7367f111e070", 0x8}], 0x1) 3.465273768s ago: executing program 6 (id=13923): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=ANY=[], 0x88}, 0x20040881) r1 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) 3.371385581s ago: executing program 6 (id=13925): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="f301000000000000290000006c115f21ebda461d7c2685690aa8643f265592e9ead22653c381"], 0x108}}], 0x1, 0xc040) 3.258661361s ago: executing program 6 (id=13927): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 2.40605248s ago: executing program 6 (id=13940): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xd000, 0x3, &(0x7f0000004000/0xd000)=nil) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x8, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000abd1381b8bab00000040"], 0x0}, 0x0) 1.368939917s ago: executing program 8 (id=13961): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000400)='\f', 0x1}], 0x1, 0x0) 1.224944871s ago: executing program 3 (id=13965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) 1.111271571s ago: executing program 8 (id=13967): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_CODEL_ECN={0x8, 0x4, 0x40000000}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x80000001}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1000}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 959.735724ms ago: executing program 3 (id=13970): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 950.354563ms ago: executing program 7 (id=13971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="00000000000000000a0001"], 0x2c}}, 0x0) 936.378656ms ago: executing program 8 (id=13972): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="199374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 872.543989ms ago: executing program 7 (id=13973): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000540)={0x0, 0x2, 0x10100, 0x0, 0x4, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x36f0, 0x7200, 0x0, 0x0, 0x0) 810.433401ms ago: executing program 5 (id=13974): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f00000000c0)) 809.758251ms ago: executing program 3 (id=13975): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 602.642394ms ago: executing program 7 (id=13976): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 602.343989ms ago: executing program 3 (id=13977): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x4, r1}) 590.759349ms ago: executing program 5 (id=13978): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, 0x0, 0x0) 561.477312ms ago: executing program 6 (id=13979): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x1000100, {{@in=@empty, @in6=@local, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in=@private=0xa010100, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x8}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0x2, 0x1, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xef6, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 553.97143ms ago: executing program 8 (id=13980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 462.652032ms ago: executing program 3 (id=13981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r2, @ANYBLOB="0500330011"], 0x2c}}, 0x80) 462.452835ms ago: executing program 5 (id=13982): unshare(0x8040600) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x0) 399.171491ms ago: executing program 5 (id=13983): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'caif0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@loopback, 0x80, r2}) 388.265575ms ago: executing program 6 (id=13984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001340)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000012c0)={0x20, 0x1, 0x10, "c7f9836e30377de90146727b75dbd309"}, 0x0}) 385.349185ms ago: executing program 8 (id=13985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) 338.613532ms ago: executing program 3 (id=13986): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x30) 306.867963ms ago: executing program 7 (id=13987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1a900000}]}, 0x4c}}, 0x0) 221.508931ms ago: executing program 5 (id=13988): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000000840)="e8d7", 0x2, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) 167.922073ms ago: executing program 7 (id=13989): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) 124.789418ms ago: executing program 8 (id=13990): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x2, 0x7d8e, 0x1, 0x5}) 645.348µs ago: executing program 5 (id=13991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 0s ago: executing program 7 (id=13992): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "1d00"}, @global=@item_4={0x3, 0x1, 0x1, "e4f28a8c"}]}}, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): : new high-speed USB device number 61 using dummy_hcd [ 832.891799][ T6026] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 832.998716][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 833.001163][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.004350][ T5874] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 833.004381][ T5874] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 833.004405][ T5874] usb 5-1: Product: syz [ 833.004422][ T5874] usb 5-1: Manufacturer: syz [ 833.004438][ T5874] usb 5-1: SerialNumber: syz [ 833.025700][ T5874] usb 5-1: config 0 descriptor?? [ 833.053373][ T5874] smsusb:smsusb_probe: board id=2, interface number 0 [ 833.053496][ T5874] smsusb:smsusb_probe: Device initialized with return code -19 [ 833.057496][ T6026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.057534][ T6026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.057579][ T6026] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 833.057607][ T6026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.068695][ T6026] usb 4-1: config 0 descriptor?? [ 833.275863][ T5874] usb 5-1: USB disconnect, device number 61 [ 833.548065][ T6026] samsung 0003:0419:0600.0043: unknown main item tag 0x0 [ 833.548106][ T6026] samsung 0003:0419:0600.0043: unknown main item tag 0x0 [ 833.557799][ T6026] samsung 0003:0419:0600.0043: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 833.763863][ T5874] usb 4-1: USB disconnect, device number 22 [ 833.971708][ T6026] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 834.131861][ T6026] usb 2-1: Using ep0 maxpacket: 32 [ 834.134291][ T6026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.134326][ T6026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.135574][ T6026] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 834.135604][ T6026] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 834.135627][ T6026] usb 2-1: Manufacturer: syz [ 834.145049][ T6026] usb 2-1: config 0 descriptor?? [ 834.585262][T31801] ipvlan0: entered promiscuous mode [ 834.642163][ T6026] ft260 0003:0403:6030.0044: unknown main item tag 0x7 [ 834.845962][ T6026] ft260 0003:0403:6030.0044: failed to retrieve chip version [ 834.846409][ T6026] ft260 0003:0403:6030.0044: probe with driver ft260 failed with error -71 [ 834.860970][ T6026] usb 2-1: USB disconnect, device number 27 [ 835.161485][T31823] block nbd3: Unsupported socket: should be TCP or UNIX. [ 835.327974][T31833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12245'. [ 835.328006][T31833] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 835.767628][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 837.210369][ T6026] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 837.381487][ T6026] usb 2-1: Using ep0 maxpacket: 8 [ 837.384211][ T6026] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 837.384241][ T6026] usb 2-1: config 179 has no interface number 0 [ 837.384292][ T6026] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 837.384321][ T6026] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 837.384350][ T6026] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 837.384379][ T6026] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 837.384408][ T6026] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 837.384453][ T6026] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 837.384479][ T6026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.397369][T31927] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 837.563220][T22734] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 837.724280][T31927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.724763][T31927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.727578][T22734] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 837.727607][T22734] usb 5-1: config 0 has no interface number 0 [ 837.732070][T22734] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 837.732101][T22734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.732123][T22734] usb 5-1: Product: syz [ 837.732140][T22734] usb 5-1: Manufacturer: syz [ 837.732156][T22734] usb 5-1: SerialNumber: syz [ 837.808993][T22734] usb 5-1: config 0 descriptor?? [ 837.924807][T31969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12312'. [ 838.020394][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 838.020472][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 838.020547][ T5874] usb 2-1: USB disconnect, device number 28 [ 838.078547][T22734] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 838.096328][T22734] usb 5-1: USB disconnect, device number 62 [ 838.382698][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.619359][T31998] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 838.976272][ T5970] kernel read not supported for file /mdstat (pid: 5970 comm: kworker/1:6) [ 838.996264][T32023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12338'. [ 838.996497][T32023] netlink: zone id is out of range [ 838.996531][T32023] netlink: zone id is out of range [ 840.576854][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 840.587920][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 840.597748][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 840.606029][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 840.610507][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 840.756633][T32099] lo speed is unknown, defaulting to 1000 [ 840.781119][T32099] lo speed is unknown, defaulting to 1000 [ 840.859694][ T38] audit: type=1326 audit(1761700602.661:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 840.859756][ T38] audit: type=1326 audit(1761700602.661:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 840.871389][ T38] audit: type=1326 audit(1761700602.670:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 840.871455][ T38] audit: type=1326 audit(1761700602.670:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 840.871508][ T38] audit: type=1326 audit(1761700602.670:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 840.872430][ T38] audit: type=1326 audit(1761700602.670:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 840.872486][ T38] audit: type=1326 audit(1761700602.670:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 840.872540][ T38] audit: type=1326 audit(1761700602.670:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32109 comm="syz.4.12380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 841.380807][T32126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12386'. [ 841.625386][T32130] syz.4.12389(32130): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 841.815229][T32137] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 842.845880][T32099] chnl_net:caif_netlink_parms(): no params data found [ 842.866308][ T61] Bluetooth: hci5: command tx timeout [ 843.542263][T32099] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.542478][T32099] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.542689][T32099] bridge_slave_0: entered allmulticast mode [ 843.545742][T32099] bridge_slave_0: entered promiscuous mode [ 843.554185][T32099] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.554434][T32099] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.554677][T32099] bridge_slave_1: entered allmulticast mode [ 843.557997][T32099] bridge_slave_1: entered promiscuous mode [ 844.010500][ T6026] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 844.044826][T32099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.086410][T32099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.126570][ T5874] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 844.207677][ T6026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.207726][ T6026] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 844.207752][ T6026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.251163][ T6026] usb 4-1: config 0 descriptor?? [ 844.286793][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 844.290493][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.290595][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.290639][ T5874] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 844.290665][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.301668][ T5874] usb 2-1: config 0 descriptor?? [ 844.409431][T32099] team0: Port device team_slave_0 added [ 844.414353][T32099] team0: Port device team_slave_1 added [ 844.788965][ T6026] microsoft 0003:045E:00F9.0045: unbalanced delimiter at end of report description [ 844.801880][ T6026] microsoft 0003:045E:00F9.0045: parse failed [ 844.801996][ T6026] microsoft 0003:045E:00F9.0045: probe with driver microsoft failed with error -22 [ 844.806298][ T5874] mcp2200 0003:04D8:00DF.0046: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 845.024975][ T5874] usb 2-1: USB disconnect, device number 29 [ 845.050987][T22734] usb 4-1: USB disconnect, device number 23 [ 845.066367][T32099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.066384][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.066410][T32099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.088472][ T61] Bluetooth: hci5: command tx timeout [ 845.122723][T32099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.122741][T32099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.122772][T32099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.479815][T32099] hsr_slave_0: entered promiscuous mode [ 845.484647][T32099] hsr_slave_1: entered promiscuous mode [ 845.487178][T32099] debugfs: 'hsr0' already exists in 'hsr' [ 845.487230][T32099] Cannot create hsr debugfs directory [ 845.776892][T32268] netlink: 'syz.3.12450': attribute type 10 has an invalid length. [ 845.843362][T32271] netlink: 'syz.3.12450': attribute type 10 has an invalid length. [ 845.843387][T32271] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12450'. [ 845.872985][T32268] batman_adv: batadv0: Adding interface: team0 [ 845.873005][T32268] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.873039][T32268] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 845.873760][T32271] team0: entered promiscuous mode [ 845.873781][T32271] team_slave_0: entered promiscuous mode [ 845.874028][T32271] team_slave_1: entered promiscuous mode [ 845.890678][T32271] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.891088][T32271] batman_adv: batadv0: Interface activated: team0 [ 845.891137][T32271] batman_adv: batadv0: Interface deactivated: team0 [ 845.891159][T32271] batman_adv: batadv0: Removing interface: team0 [ 845.967915][T32271] bridge0: port 3(team0) entered blocking state [ 845.968086][T32271] bridge0: port 3(team0) entered disabled state [ 845.968297][T32271] team0: entered allmulticast mode [ 845.968317][T32271] team_slave_0: entered allmulticast mode [ 845.968342][T32271] team_slave_1: entered allmulticast mode [ 845.975834][T22734] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 846.139211][T22734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.139241][T22734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 846.140870][T22734] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 846.140900][T22734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 846.140922][T22734] usb 2-1: SerialNumber: syz [ 846.454019][T22734] usb 2-1: 0:2 : does not exist [ 846.505230][T22734] usb 2-1: USB disconnect, device number 30 [ 846.830942][T32099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 846.888547][T32099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 846.914510][T32099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 846.960202][T32099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 847.246258][T32099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.291340][T32099] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.311974][ T61] Bluetooth: hci5: command tx timeout [ 847.316003][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.316193][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.323259][ T5970] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 847.372162][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.372315][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.486692][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 847.486738][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 847.486784][ T5970] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 847.486811][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.535308][ T5970] usb 4-1: config 0 descriptor?? [ 847.793155][ T5970] ath6kl: Failed to submit usb control message: -71 [ 847.793208][ T5970] ath6kl: unable to send the bmi data to the device: -71 [ 847.793224][ T5970] ath6kl: Unable to send get target info: -71 [ 847.800427][ T5970] ath6kl: Failed to init ath6kl core: -71 [ 847.801867][ T5970] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 847.868370][ T5970] usb 4-1: USB disconnect, device number 24 [ 848.295668][ T61] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 848.359557][ T5874] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 848.473129][T32099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.573302][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 848.576087][ T5874] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.576118][ T5874] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 848.576149][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 848.576185][ T5874] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 848.576211][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.593118][ T5874] usb 5-1: config 0 descriptor?? [ 849.117697][ T5874] kye 0003:0458:5014.0047: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 849.131864][ T5874] kye 0003:0458:5014.0047: ignoring exceeding usage max [ 849.185130][ T5874] kye 0003:0458:5014.0047: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 849.185193][ T5874] kye 0003:0458:5014.0047: tablet-enabling feature report not found [ 849.185222][ T5874] kye 0003:0458:5014.0047: tablet enabling failed [ 849.391611][ T6026] usb 5-1: USB disconnect, device number 63 [ 849.535403][ T61] Bluetooth: hci5: command tx timeout [ 849.611831][T32099] veth0_vlan: entered promiscuous mode [ 849.650408][T32099] veth1_vlan: entered promiscuous mode [ 849.738205][T32099] veth0_macvtap: entered promiscuous mode [ 849.755325][T32099] veth1_macvtap: entered promiscuous mode [ 849.787536][T32099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.809342][T32099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.834050][ T147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.834363][ T147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.834413][ T147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.869051][ T147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.208137][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.208161][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.382573][T25703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.382596][T25703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.984788][T32433] [U]  [ 851.001673][T32437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12520'. [ 851.715976][T22731] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 851.876445][T22731] usb 2-1: Using ep0 maxpacket: 8 [ 851.879307][T22731] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 851.879337][T22731] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 851.879369][T22731] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 851.879393][T22731] usb 2-1: config 250 has no interface number 0 [ 851.879446][T22731] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 851.879475][T22731] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 851.879502][T22731] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 851.879527][T22731] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 851.879552][T22731] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 851.879580][T22731] usb 2-1: config 250 interface 228 has no altsetting 0 [ 851.886103][T22731] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 851.886133][T22731] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 851.886156][T22731] usb 2-1: Product: syz [ 851.886172][T22731] usb 2-1: SerialNumber: syz [ 851.935778][T22731] hub 2-1:250.228: bad descriptor, ignoring hub [ 851.935830][T22731] hub 2-1:250.228: probe with driver hub failed with error -5 [ 852.163382][T22731] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 31 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 852.486179][ T6026] usb 2-1: USB disconnect, device number 31 [ 852.492900][ T6026] usblp0: removed [ 852.756801][T32489] xt_l2tp: v2 tid > 0xffff: 1114244 [ 853.073586][ T5970] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 853.249534][ T5970] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 853.249592][ T5970] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 853.249619][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.291297][ T5970] usb 6-1: config 0 descriptor?? [ 853.759097][ T5970] logitech-hidpp-device 0003:046D:C090.0048: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.5-1/input0 [ 853.947042][ T5970] usb 6-1: USB disconnect, device number 2 [ 854.240496][T32549] bond0: (slave rose0): Enslaving as an active interface with an up link [ 855.396682][T32608] [U] [ 855.396734][T32608] [U] [ 855.396778][T32608] [U] [ 855.396821][T32608] [U] [ 855.396911][T32608] [U] [ 855.396956][T32608] [U] [ 855.396999][T32608] [U] [ 855.397052][T32608] [U] [ 855.397122][T32608] [U] [ 855.397166][T32608] [U] [ 855.397209][T32608] [U] [ 855.397253][T32608] [U] [ 855.397304][T32608] [U] [ 855.397346][T32608] [U] [ 855.397389][T32608] [U] [ 855.397433][T32608] [U] [ 855.397499][T32608] [U] [ 855.397542][T32608] [U] [ 855.397585][T32608] [U] [ 855.397628][T32608] [U] [ 855.397679][T32608] [U] [ 855.397721][T32608] [U] [ 855.397764][T32608] [U] [ 855.397807][T32608] [U] [ 855.397873][T32608] [U] [ 855.397916][T32608] [U] [ 855.397959][T32608] [U] [ 855.398001][T32608] [U] [ 855.398060][T32608] [U] [ 855.398103][T32608] [U] [ 855.398147][T32608] [U] [ 855.398190][T32608] [U] [ 855.398256][T32608] [U] [ 855.398311][T32608] [U] [ 855.398352][T32608] [U] [ 855.398393][T32608] [U] [ 855.398443][T32608] [U] [ 855.398483][T32608] [U] [ 855.398524][T32608] [U] [ 855.398566][T32608] [U] [ 855.398630][T32608] [U] [ 855.398671][T32608] [U] [ 855.398713][T32608] [U] [ 855.398787][T32608] [U] [ 855.398836][T32608] [U] [ 855.398877][T32608] [U] [ 855.398918][T32608] [U] [ 855.398959][T32608] [U] [ 855.399029][T32608] [U] [ 855.399071][T32608] [U] [ 855.399112][T32608] [U] [ 855.399154][T32608] [U] [ 855.399204][T32608] [U] [ 855.399246][T32608] [U] [ 855.399287][T32608] [U] [ 855.399328][T32608] [U] [ 855.399392][T32608] [U] [ 855.399433][T32608] [U] [ 855.399475][T32608] [U] [ 855.399545][T32608] [U] [ 855.399595][T32608] [U] [ 855.399638][T32608] [U] [ 855.399681][T32608] [U] [ 855.399724][T32608] [U] [ 855.399790][T32608] [U] [ 855.399833][T32608] [U] [ 855.399875][T32608] [U] [ 855.399918][T32608] [U] [ 855.399969][T32608] [U] [ 855.400020][T32608] [U] [ 855.400063][T32608] [U] [ 855.400106][T32608] [U] [ 855.400171][T32608] [U] [ 855.400213][T32608] [U] [ 855.400256][T32608] [U] [ 855.400298][T32608] [U] [ 855.400350][T32608] [U] [ 855.400393][T32608] [U] [ 855.400435][T32608] [U] [ 855.400478][T32608] [U] [ 855.400544][T32608] [U] [ 855.400587][T32608] [U] [ 855.400630][T32608] [U] [ 855.400672][T32608] [U] [ 855.400724][T32608] [U] [ 855.400767][T32608] [U] [ 855.400810][T32608] [U] [ 855.400853][T32608] [U] [ 855.400918][T32608] [U] [ 855.400961][T32608] [U] [ 855.401005][T32608] [U] [ 855.401056][T32608] [U] [ 855.401107][T32608] [U] [ 855.401151][T32608] [U] [ 855.401193][T32608] [U] [ 855.401235][T32608] [U] [ 855.401301][T32608] [U] [ 855.401344][T32608] [U] [ 855.401387][T32608] [U] [ 855.401436][T32608] [U] [ 855.401487][T32608] [U] [ 855.401530][T32608] [U] [ 855.401573][T32608] [U] [ 855.401616][T32608] [U] [ 855.401681][T32608] [U] [ 855.401724][T32608] [U] [ 855.401767][T32608] [U] [ 855.401809][T32608] [U] [ 855.401860][T32608] [U] [ 855.401903][T32608] [U] [ 855.401946][T32608] [U] [ 855.402005][T32608] [U] [ 855.402081][T32608] [U] [ 855.402124][T32608] [U] [ 855.402167][T32608] [U] [ 855.402210][T32608] [U] [ 855.402260][T32608] [U] [ 855.402304][T32608] [U] [ 855.402346][T32608] [U] [ 855.402389][T32608] [U] [ 855.402456][T32608] [U] [ 855.402499][T32608] [U] [ 855.402541][T32608] [U] [ 855.402584][T32608] [U] [ 855.402635][T32608] [U] [ 855.402677][T32608] [U] [ 855.402720][T32608] [U] [ 855.439144][T32606] [U] [ 855.574870][ T6026] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 855.735460][ T6026] usb 2-1: Using ep0 maxpacket: 8 [ 855.738464][ T6026] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 855.742556][ T6026] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 855.742591][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.742615][ T6026] usb 2-1: Product: syz [ 855.742634][ T6026] usb 2-1: Manufacturer: syz [ 855.742652][ T6026] usb 2-1: SerialNumber: syz [ 855.769776][ T6026] usb 2-1: config 0 descriptor?? [ 855.799670][ T6026] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 855.799759][ T6026] usb 2-1: setting power ON [ 855.799782][ T6026] dvb-usb: bulk message failed: -22 (2/0) [ 855.838392][ T6026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 855.843642][ T6026] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 855.843718][ T6026] usb 2-1: media controller created [ 855.962984][ T6026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.059240][ T6026] usb 2-1: selecting invalid altsetting 6 [ 856.059265][ T6026] usb 2-1: digital interface selection failed (-22) [ 856.059282][ T6026] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 856.060355][ T6026] usb 2-1: setting power OFF [ 856.060378][ T6026] dvb-usb: bulk message failed: -22 (2/0) [ 856.060398][ T6026] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 856.060412][ T6026] (NULL device *): no alternate interface [ 856.245185][ T6026] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 856.281968][ T6026] usb 2-1: USB disconnect, device number 32 [ 856.737218][T32644] nbd: must specify a device to reconfigure [ 856.790590][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12623'. [ 856.792075][T32650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.942632][T32656] netlink: 'syz.3.12624': attribute type 1 has an invalid length. [ 857.318512][ T38] audit: type=1326 audit(1761700618.050:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.318572][ T38] audit: type=1326 audit(1761700618.050:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.318622][ T38] audit: type=1326 audit(1761700618.050:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.318670][ T38] audit: type=1326 audit(1761700618.059:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.323239][ T38] audit: type=1326 audit(1761700618.059:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.323295][ T38] audit: type=1326 audit(1761700618.059:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.323344][ T38] audit: type=1326 audit(1761700618.059:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.323392][ T38] audit: type=1326 audit(1761700618.059:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.323446][ T38] audit: type=1326 audit(1761700618.059:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.323494][ T38] audit: type=1326 audit(1761700618.059:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32670 comm="syz.3.12633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 857.648668][ T6026] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 857.664182][T32683] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x38414761, 8, 0, 0, 0) [ 857.812784][ T6026] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 857.812849][ T6026] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.814804][ T6026] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 857.814834][ T6026] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 857.814857][ T6026] usb 2-1: Manufacturer: syz [ 857.847741][ T6026] usb 2-1: config 0 descriptor?? [ 857.958629][ T6026] rc_core: IR keymap rc-hauppauge not found [ 857.958652][ T6026] Registered IR keymap rc-empty [ 857.960597][ T6026] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 857.971764][ T6026] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input79 [ 858.570636][T22733] usb 2-1: USB disconnect, device number 33 [ 859.440003][T32744] netlink: 'syz.5.12666': attribute type 1 has an invalid length. [ 859.440045][T32744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.020683][ T303] program syz.1.12679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.025042][ T321] netlink: 6 bytes leftover after parsing attributes in process `syz.1.12688'. [ 862.111222][ T363] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12707'. [ 862.555110][T22733] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 862.561575][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 862.561658][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 862.717875][T22733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.717913][T22733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.717939][T22733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 862.717987][T22733] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 862.718013][T22733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.723504][T22733] usb 2-1: config 0 descriptor?? [ 863.096998][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12723'. [ 863.174260][T22733] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x2 [ 863.192296][T22733] plantronics 0003:047F:FFFF.0049: reserved main item tag 0xd [ 863.192335][T22733] plantronics 0003:047F:FFFF.0049: unbalanced delimiter at end of report description [ 863.193248][T22733] plantronics 0003:047F:FFFF.0049: parse failed [ 863.193355][T22733] plantronics 0003:047F:FFFF.0049: probe with driver plantronics failed with error -22 [ 863.421018][T22731] usb 2-1: USB disconnect, device number 34 [ 863.490810][ T411] comedi comedi3: 8255: I/O port conflict (0x4f2a,4) [ 863.490873][ T411] comedi comedi3: 8255: I/O port conflict (0xffffffff80000002,4) [ 863.490928][ T411] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 863.490979][ T411] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 863.491145][ T411] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 863.491245][ T411] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 863.491341][ T411] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 863.491391][ T411] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 863.491493][ T411] comedi comedi3: 8255: I/O port conflict (0x800004f,4) [ 863.491605][ T411] comedi comedi3: 8255: I/O port conflict (0xfe,4) [ 863.597718][ T414] overlay: filesystem on ./file0 is read-only [ 864.261476][ T457] sp0: Synchronizing with TNC [ 864.653490][ T5970] IPVS: starting estimator thread 0... [ 864.746578][ T481] IPVS: using max 8 ests per chain, 19200 per kthread [ 864.971022][ T5970] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 865.131399][ T5970] usb 6-1: Using ep0 maxpacket: 8 [ 865.134090][ T5970] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 865.134118][ T5970] usb 6-1: config 0 has no interface number 0 [ 865.137292][ T5970] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=f3.fa [ 865.137321][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.137343][ T5970] usb 6-1: Product: syz [ 865.137359][ T5970] usb 6-1: Manufacturer: syz [ 865.137375][ T5970] usb 6-1: SerialNumber: syz [ 865.161344][ T38] audit: type=1326 audit(1761700625.394:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.161410][ T38] audit: type=1326 audit(1761700625.394:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.161463][ T38] audit: type=1326 audit(1761700625.394:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.161515][ T38] audit: type=1326 audit(1761700625.394:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.161861][ T38] audit: type=1326 audit(1761700625.394:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.162186][ T38] audit: type=1326 audit(1761700625.394:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.162555][ T38] audit: type=1326 audit(1761700625.394:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.162907][ T38] audit: type=1326 audit(1761700625.394:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.176682][ T38] audit: type=1326 audit(1761700625.403:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.176750][ T38] audit: type=1326 audit(1761700625.403:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=508 comm="syz.4.12776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc35b09efc9 code=0x7ffc0000 [ 865.420687][ T5970] usb 6-1: config 0 descriptor?? [ 865.678865][ T5970] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 865.678922][ T5970] dvb-usb: bulk message failed: -22 (2/0) [ 865.678942][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 865.682516][ T5970] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 865.682591][ T5970] usb 6-1: media controller created [ 865.690480][ T526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.758810][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.789121][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 865.789172][ T5970] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 865.815793][ T5970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input80 [ 865.817866][ T5970] dvb-usb: schedule remote query interval to 50 msecs. [ 865.817894][ T5970] dvb-usb: bulk message failed: -22 (2/0) [ 865.817912][ T5970] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 865.826161][ T6026] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 865.868572][ T5970] usb 6-1: USB disconnect, device number 3 [ 865.980491][ T5970] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 866.029343][ T6026] usb 5-1: Using ep0 maxpacket: 32 [ 866.032305][ T6026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.032339][ T6026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.032405][ T6026] usb 5-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 866.032430][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.038632][ T6026] usb 5-1: config 0 descriptor?? [ 866.509190][ T6026] logitech-hidpp-device 0003:046D:C082.004A: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.4-1/input0 [ 866.691967][ T5970] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 866.747366][ T6026] usb 5-1: USB disconnect, device number 64 [ 866.861177][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 866.861217][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.861259][ T5970] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 866.861286][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.912512][ T5970] usb 4-1: config 0 descriptor?? [ 866.923251][ T5970] hub 4-1:0.0: USB hub found [ 867.113119][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.146406][ T5970] hub 4-1:0.0: 2 ports detected [ 867.239871][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.549811][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.633034][ T5970] usb 4-1: USB disconnect, device number 25 [ 868.201594][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.316464][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 868.347547][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 868.359253][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 868.407620][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 868.409094][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 868.665198][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.758038][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.847232][ T589] block nbd3: shutting down sockets [ 868.930846][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 868.962315][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 868.989877][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 869.024668][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 869.029679][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 869.259515][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.307645][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.526655][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 869.559557][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 869.562688][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 869.564512][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 869.565746][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 869.820851][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.848756][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.914719][ T583] lo speed is unknown, defaulting to 1000 [ 869.941511][ T583] lo speed is unknown, defaulting to 1000 [ 869.984256][ T591] lo speed is unknown, defaulting to 1000 [ 870.143015][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.284486][ T13] bond0: (slave netdevsim0): Releasing backup interface [ 870.327003][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.380817][ T591] lo speed is unknown, defaulting to 1000 [ 870.444858][ T608] lo speed is unknown, defaulting to 1000 [ 870.657829][ T5811] Bluetooth: hci2: command tx timeout [ 870.684247][ T639] overlayfs: missing 'workdir' [ 871.049857][ T13] bridge0: port 3(batadv0) entered disabled state [ 871.151354][ T13] bridge_slave_1: left allmulticast mode [ 871.151559][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.225943][ T13] bridge_slave_0: left allmulticast mode [ 871.226224][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.267090][ T5811] Bluetooth: hci3: command tx timeout [ 871.566445][T22731] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 871.726169][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.769816][ T5811] Bluetooth: hci4: command tx timeout [ 871.773724][T22731] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 871.775234][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.775258][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.776746][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.776770][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.778263][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.778287][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.779791][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.779816][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.812215][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.812243][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.844176][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.844205][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.876304][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.876340][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.927176][T22731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.927197][T22731] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 871.948886][T22731] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 871.948909][T22731] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 871.948925][T22731] usb 4-1: Product: syz [ 871.948937][T22731] usb 4-1: Manufacturer: syz [ 871.948948][T22731] usb 4-1: SerialNumber: syz [ 871.985525][T22731] usb 4-1: config 0 descriptor?? [ 871.990980][T22731] yurex 4-1:0.0: Could not find endpoints [ 872.136726][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.210341][T22733] usb 4-1: USB disconnect, device number 26 [ 872.562616][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.699454][T22733] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 872.870581][T22733] usb 4-1: Using ep0 maxpacket: 16 [ 872.875730][T22733] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 872.877384][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.877410][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.880453][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.880479][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.881119][ T5811] Bluetooth: hci2: command tx timeout [ 872.914203][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.914231][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.919705][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.919732][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.945285][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.945313][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.972456][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.972477][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.995777][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.995797][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.035913][T22733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.035941][T22733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 873.038997][T22733] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=49.0d [ 873.039025][T22733] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 873.039048][T22733] usb 4-1: Product: syz [ 873.039063][T22733] usb 4-1: Manufacturer: syz [ 873.039078][T22733] usb 4-1: SerialNumber: syz [ 873.047274][T22733] usb 4-1: config 0 descriptor?? [ 873.053844][T22733] s2255 4-1:0.0: Could not find bulk-in endpoint [ 873.053967][T22733] Sensoray 2255 driver load failed: 0xfffffff4 [ 873.054000][T22733] s2255 4-1:0.0: probe with driver s2255 failed with error -12 [ 873.271948][T22731] usb 4-1: USB disconnect, device number 27 [ 873.515574][ T5811] Bluetooth: hci3: command tx timeout [ 873.938834][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.001653][ T5811] Bluetooth: hci4: command tx timeout [ 874.226664][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.390580][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.474806][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.520903][ T13] bond0 (unregistering): Released all slaves [ 874.559901][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.757292][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.807799][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.916046][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.968144][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.021746][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.118310][ T5811] Bluetooth: hci2: command tx timeout [ 875.332191][ T13] bond1 (unregistering): Released all slaves [ 875.352785][ T13] bond2 (unregistering): Released all slaves [ 875.484381][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.703156][ T5811] Bluetooth: hci3: command tx timeout [ 876.058275][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.111568][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.188343][ T13] bond3 (unregistering): Released all slaves [ 876.202913][ T13] bond4 (unregistering): Released all slaves [ 876.217134][ T5811] Bluetooth: hci4: command tx timeout [ 876.258216][ T608] lo speed is unknown, defaulting to 1000 [ 876.526403][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.634681][ T13] tipc: Disabling bearer [ 876.708461][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.762846][ T13] tipc: Left network mode [ 876.845960][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.007001][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.091902][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.220228][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.329249][ T5811] Bluetooth: hci2: command tx timeout [ 877.529370][ T701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12869'. [ 877.950733][ T5811] Bluetooth: hci3: command tx timeout [ 878.352381][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.439649][ T5811] Bluetooth: hci4: command tx timeout [ 879.068452][ T745] 9pnet_fd: p9_fd_create_unix (745): problem connecting socket: qY3aK: -111 [ 879.162063][ T583] chnl_net:caif_netlink_parms(): no params data found [ 879.875342][ T764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12892'. [ 879.968531][ T13] hsr_slave_0: left promiscuous mode [ 880.011121][ T13] hsr_slave_1: left promiscuous mode [ 880.012148][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.012489][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.068364][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.068396][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.199045][ T13] veth0_macvtap: left promiscuous mode [ 880.199319][ T13] veth1_vlan: left promiscuous mode [ 880.199448][ T13] veth0_vlan: left promiscuous mode [ 880.571147][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.202903][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.294322][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.506614][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.816373][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.884879][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.941358][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.137293][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.260554][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.450289][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.578491][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.769586][ T13] team0 (unregistering): Port device team_slave_1 removed [ 882.878256][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.059669][ T13] team0 (unregistering): Port device team_slave_0 removed [ 883.469279][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.216635][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.463067][ T2370] pvrusb2: request_firmware fatal error with code=-110 [ 884.463088][ T2370] pvrusb2: Failure uploading firmware1 [ 884.463098][ T2370] pvrusb2: Device initialization was not successful. [ 884.463107][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 884.463119][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 884.463245][ T9646] pvrusb2: Device being rendered inoperable [ 884.464080][ T2370] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 884.464105][ T2370] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 885.412799][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.646484][ C1] vkms_vblank_simulate: vblank timer overrun [ 885.940432][ T793] random: crng reseeded on system resumption [ 885.958867][ T591] chnl_net:caif_netlink_parms(): no params data found [ 886.130245][ T583] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.130480][ T583] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.130720][ T583] bridge_slave_0: entered allmulticast mode [ 886.134988][ T583] bridge_slave_0: entered promiscuous mode [ 886.252133][ T583] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.252265][ T583] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.252431][ T583] bridge_slave_1: entered allmulticast mode [ 886.263380][ T583] bridge_slave_1: entered promiscuous mode [ 886.378973][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.604314][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.804083][ T583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.843184][ T608] chnl_net:caif_netlink_parms(): no params data found [ 886.867943][ T583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.122527][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.247876][ T5970] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 887.429595][ T5970] usb 6-1: Using ep0 maxpacket: 32 [ 887.431634][ T5970] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 887.431662][ T5970] usb 6-1: config 0 has no interface number 0 [ 887.434084][ T5970] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 887.434111][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.434126][ T5970] usb 6-1: Product: syz [ 887.434137][ T5970] usb 6-1: Manufacturer: syz [ 887.434147][ T5970] usb 6-1: SerialNumber: syz [ 887.437921][ T5970] usb 6-1: config 0 descriptor?? [ 887.497112][ T5970] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 887.552711][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.552941][ T591] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.553167][ T591] bridge_slave_0: entered allmulticast mode [ 887.556241][ T591] bridge_slave_0: entered promiscuous mode [ 887.666598][ T5970] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 887.686240][ T5970] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 887.759746][ T583] team0: Port device team_slave_0 added [ 887.760453][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.762157][ T591] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.762802][ T591] bridge_slave_1: entered allmulticast mode [ 887.766143][ T591] bridge_slave_1: entered promiscuous mode [ 887.813821][ T583] team0: Port device team_slave_1 added [ 888.106849][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 888.109694][ T6026] usb 6-1: USB disconnect, device number 4 [ 888.119444][ T6026] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 888.125555][ T6026] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 888.126328][ T6026] quatech2 6-1:0.51: device disconnected [ 888.392689][ T591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.394730][ T583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.394746][ T583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.394771][ T583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.537266][ T591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.538715][ T583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.538732][ T583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.538763][ T583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.761675][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.767181][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.767464][ T608] bridge_slave_0: entered allmulticast mode [ 888.772502][ T608] bridge_slave_0: entered promiscuous mode [ 888.883319][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.883466][ T608] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.883706][ T608] bridge_slave_1: entered allmulticast mode [ 888.888488][ T608] bridge_slave_1: entered promiscuous mode [ 888.921917][ T591] team0: Port device team_slave_0 added [ 889.048552][ T591] team0: Port device team_slave_1 added [ 889.217744][ T865] netlink: 19 bytes leftover after parsing attributes in process `syz.5.12933'. [ 889.365490][ T869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12935'. [ 889.386113][T22731] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 889.546191][T22731] usb 4-1: Using ep0 maxpacket: 8 [ 889.548698][T22731] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 889.551111][T22731] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 889.551141][T22731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.551156][T22731] usb 4-1: Product: syz [ 889.551167][T22731] usb 4-1: Manufacturer: syz [ 889.551179][T22731] usb 4-1: SerialNumber: syz [ 889.554922][T22731] usb 4-1: config 0 descriptor?? [ 889.560336][T22731] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 889.560390][T22731] usb 4-1: setting power ON [ 889.560412][T22731] dvb-usb: bulk message failed: -22 (2/0) [ 889.574799][T22731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 889.576224][T22731] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 889.576298][T22731] usb 4-1: media controller created [ 889.645155][T22731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 889.665978][T22731] usb 4-1: selecting invalid altsetting 6 [ 889.666002][T22731] usb 4-1: digital interface selection failed (-22) [ 889.666019][T22731] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 889.666914][T22731] usb 4-1: setting power OFF [ 889.666936][T22731] dvb-usb: bulk message failed: -22 (2/0) [ 889.666955][T22731] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 889.666969][T22731] (NULL device *): no alternate interface [ 889.724916][T22731] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 889.791334][ T5970] usb 4-1: USB disconnect, device number 28 [ 890.095293][ T608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.218518][ T583] hsr_slave_0: entered promiscuous mode [ 890.220347][ T583] hsr_slave_1: entered promiscuous mode [ 890.221827][ T583] debugfs: 'hsr0' already exists in 'hsr' [ 890.225969][ T583] Cannot create hsr debugfs directory [ 890.239215][ T608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.241330][ T591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.241349][ T591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.241384][ T591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.440881][ C1] vkms_vblank_simulate: vblank timer overrun [ 890.490173][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.490206][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 890.627561][ T591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.627583][ T591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.627605][ T591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.005267][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.005307][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 891.064401][ T608] team0: Port device team_slave_0 added [ 891.138118][ T608] team0: Port device team_slave_1 added [ 891.547926][ C1] vkms_vblank_simulate: vblank timer overrun [ 891.610033][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.610074][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 891.896578][ T608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.896598][ T608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.896629][ T608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.909719][ T591] hsr_slave_0: entered promiscuous mode [ 891.911389][ T591] hsr_slave_1: entered promiscuous mode [ 891.912517][ T591] debugfs: 'hsr0' already exists in 'hsr' [ 891.912549][ T591] Cannot create hsr debugfs directory [ 891.929871][T22731] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 892.027155][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.027186][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 892.066161][ T608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.066182][ T608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.066211][ T608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.104247][T22731] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 892.104328][T22731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.106368][T22731] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 892.106401][T22731] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 892.106427][T22731] usb 4-1: Manufacturer: syz [ 892.135452][T22731] usb 4-1: config 0 descriptor?? [ 892.239797][T22731] rc_core: IR keymap rc-hauppauge not found [ 892.239820][T22731] Registered IR keymap rc-empty [ 892.241326][T22731] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 892.244037][T22731] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input81 [ 892.586666][ C0] igorplugusb 4-1:0.0: receive overflow, at least 25 lost [ 892.802793][T22735] usb 4-1: USB disconnect, device number 29 [ 893.078461][ T608] hsr_slave_0: entered promiscuous mode [ 893.079968][ T608] hsr_slave_1: entered promiscuous mode [ 893.081036][ T608] debugfs: 'hsr0' already exists in 'hsr' [ 893.081063][ T608] Cannot create hsr debugfs directory [ 893.547673][ T947] netlink: 'syz.3.12965': attribute type 11 has an invalid length. [ 893.547693][ T947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12965'. [ 893.838132][ T944] bridge0: entered promiscuous mode [ 893.851419][ T944] bridge0: port 3(macvlan2) entered blocking state [ 893.851795][ T944] bridge0: port 3(macvlan2) entered disabled state [ 893.852410][ T944] macvlan2: entered allmulticast mode [ 893.852431][ T944] bridge0: entered allmulticast mode [ 893.920481][ T944] macvlan2: left allmulticast mode [ 893.920506][ T944] bridge0: left allmulticast mode [ 893.922026][ T944] bridge0: left promiscuous mode [ 893.942610][ T965] ntfs3(nullb0): Primary boot signature is not NTFS. [ 893.947683][ T965] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 894.022653][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.651757][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.949574][ T979] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 894.991389][ T583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 895.273776][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.336747][ T583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 895.425716][ T583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 895.617912][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.658284][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.702920][ T990] tipc: Enabling of bearer rejected, failed to enable media [ 895.856487][ T583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 896.042408][ T13] bridge0: port 4(netdevsim0) entered disabled state [ 896.142857][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.191382][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 896.191409][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 896.195847][ T13] bridge0: port 4(netdevsim0) entered disabled state [ 896.282217][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.463182][ T1017] netlink: 'syz.5.12992': attribute type 1 has an invalid length. [ 896.465557][ T38] kauditd_printk_skb: 32 callbacks suppressed [ 896.465575][ T38] audit: type=1326 audit(1761700654.684:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1018 comm="syz.3.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 896.473305][ T38] audit: type=1326 audit(1761700654.684:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1018 comm="syz.3.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 896.473364][ T38] audit: type=1326 audit(1761700654.684:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1018 comm="syz.3.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 896.473413][ T38] audit: type=1326 audit(1761700654.684:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1018 comm="syz.3.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 896.473461][ T38] audit: type=1326 audit(1761700654.684:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1018 comm="syz.3.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 896.473513][ T38] audit: type=1326 audit(1761700654.684:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1018 comm="syz.3.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 896.473559][ T38] audit: type=1326 audit(1761700654.684:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1018 comm="syz.3.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 896.530146][ T591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 896.711019][ T591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 896.765730][ T591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 896.928356][ T591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 897.300378][ T608] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 897.358392][ T608] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 897.463207][ T13] bridge0: port 3(batadv0) entered disabled state [ 897.543680][ T13] bridge_slave_1: left allmulticast mode [ 897.543705][ T13] bridge_slave_1: left promiscuous mode [ 897.543962][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.607329][ T13] bridge_slave_0: left allmulticast mode [ 897.607355][ T13] bridge_slave_0: left promiscuous mode [ 897.607534][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.418386][T22731] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 898.592045][T22731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.592074][T22731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.593883][T22731] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 898.593911][T22731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 898.593933][T22731] usb 4-1: SerialNumber: syz [ 898.669391][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.766976][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.905990][T22731] usb 4-1: invalid UAC_HEADER (v1) [ 898.942946][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.950277][T22731] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 898.968500][T22731] usb 4-1: USB disconnect, device number 30 [ 899.111586][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.365718][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.543809][ T1084] new mount options do not match the existing superblock, will be ignored [ 899.546570][ T1084] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 899.633654][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.697181][ T1086] program syz.3.13014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 899.828742][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.954363][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.345885][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.408772][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.626871][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.697088][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.757919][ T13] `: Port device bridge0 removed [ 901.251541][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.486926][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.835722][ C1] vkms_vblank_simulate: vblank timer overrun [ 901.893515][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.103676][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.252539][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.374105][ T13] bond0 (unregistering): (slave `): Releasing backup interface [ 902.440874][ T13] bond0 (unregistering): Released all slaves [ 902.455558][ T13] bond1 (unregistering): Released all slaves [ 902.476046][ T13] bond2 (unregistering): Released all slaves [ 902.743363][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.781577][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.068421][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.362177][ T13] bond3 (unregistering): Released all slaves [ 903.377672][ T13] bond4 (unregistering): Released all slaves [ 903.482349][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.817344][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.046298][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.299553][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.406176][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.602107][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.936675][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.973639][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.367363][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.437307][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.502051][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.539993][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.596957][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.737213][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.783958][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.912291][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.998839][ T13] bond0 (unregistering): Released all slaves [ 906.013384][ T13] bond1 (unregistering): Released all slaves [ 906.027888][ T13] bond2 (unregistering): Released all slaves [ 906.044406][ T13] bond3 (unregistering): Released all slaves [ 906.094287][ T608] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 906.164640][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.190114][ T608] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 906.314360][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.384453][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.524633][ T13] : left promiscuous mode [ 906.574561][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.761317][ T13] 9: left promiscuous mode [ 906.975536][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.998640][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 907.033026][ T583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.079078][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.223286][ T583] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.279044][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.279331][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.343291][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.369480][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.370770][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.446592][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.508853][ T591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.541798][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.645588][ T608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.696103][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.754363][ T591] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.795333][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.795563][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.865075][ T608] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.879631][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.879838][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.973715][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.973868][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.068112][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.068445][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.568366][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.894401][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.112972][ T583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.232780][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.599602][ T591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.208177][ T583] veth0_vlan: entered promiscuous mode [ 910.340955][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.526056][ T583] veth1_vlan: entered promiscuous mode [ 910.628180][ C1] vkms_vblank_simulate: vblank timer overrun [ 910.646544][ T608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.692033][ T13] batman_adv: batadv0: Interface deactivated: wlan0 [ 911.026198][ T13] batman_adv: batadv0: Removing interface: wlan0 [ 911.304522][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.369818][ T583] veth0_macvtap: entered promiscuous mode [ 911.535317][ T1203] batman_adv: batadv0: Adding interface: gretap1 [ 911.535338][ T1203] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.535376][ T1203] batman_adv: batadv0: Interface activated: gretap1 [ 911.589194][ T583] veth1_macvtap: entered promiscuous mode [ 911.658822][ T1207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13050'. [ 911.688133][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.868513][ T591] veth0_vlan: entered promiscuous mode [ 912.003576][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.041740][ T583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.162321][ T591] veth1_vlan: entered promiscuous mode [ 912.212464][ T583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.247617][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.299638][ T9032] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.319596][ T9032] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.543012][ T1098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.557739][ T1098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.559652][ T608] veth0_vlan: entered promiscuous mode [ 912.725243][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.823970][ T608] veth1_vlan: entered promiscuous mode [ 913.025715][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.367149][ T591] veth0_macvtap: entered promiscuous mode [ 913.391751][ T591] veth1_macvtap: entered promiscuous mode [ 913.633934][ T1241] erspan0: entered promiscuous mode [ 913.698103][ T591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.716320][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.716343][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.717855][ T608] veth0_macvtap: entered promiscuous mode [ 913.744767][ T591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.805068][ T608] veth1_macvtap: entered promiscuous mode [ 913.823458][ T1243] sctp: [Deprecated]: syz.5.13066 (pid 1243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 913.823458][ T1243] Use struct sctp_sack_info instead [ 913.942808][ T1245] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 913.959608][ T1245] batadv1: entered promiscuous mode [ 913.959826][ T1245] batadv1: entered allmulticast mode [ 913.967845][ T1245] team0: Port device batadv1 added [ 913.968787][ T1637] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.070864][ T1637] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.136362][ T1637] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.146091][ T1637] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.181223][ T9032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.181247][ T9032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.305845][ T608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.425464][ T1255] netlink: 'syz.5.13069': attribute type 4 has an invalid length. [ 914.425490][ T1255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13069'. [ 914.439231][ T608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.439880][ T68] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 914.439898][ T68] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 914.641380][ T147] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.642887][ T147] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.643225][ T147] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.643452][ T147] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.245035][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.245058][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.642557][ T13] hsr_slave_0: left promiscuous mode [ 915.671103][T21597] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 915.689645][ T13] hsr_slave_1: left promiscuous mode [ 915.690693][ T13] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 915.690720][ T13] batman_adv: batadv0: Removing interface: virt_wifi0 [ 915.853688][T21597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 915.853727][T21597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 915.853767][T21597] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 915.853784][T21597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.857895][T21597] usb 6-1: config 0 descriptor?? [ 916.013118][ T13] hsr_slave_0: left promiscuous mode [ 916.034543][ T13] hsr_slave_1: left promiscuous mode [ 916.035950][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.035977][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.093682][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.093715][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.226468][ T13] veth1_macvtap: left promiscuous mode [ 916.226585][ T13] veth0_macvtap: left promiscuous mode [ 916.350354][ T13] macsec0: left allmulticast mode [ 916.350381][ T13] veth1_macvtap: left allmulticast mode [ 916.350600][ T13] veth1_macvtap: left promiscuous mode [ 916.353928][ T13] veth0_macvtap: left promiscuous mode [ 916.411849][T22731] usb 6-1: USB disconnect, device number 5 [ 917.113608][ T1284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13083'. [ 917.366747][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.645837][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.728681][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.958971][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.028323][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.438433][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.507957][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.614594][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.087398][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.207641][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.211845][ T1718] smc: removing ib device syz! [ 919.350982][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.693285][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.757131][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.827216][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.885532][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.004370][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.110626][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.167649][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.512555][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.131525][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.171251][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.292557][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.343648][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.774324][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.927921][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.090687][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.252444][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.292103][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.431502][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.573075][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.754127][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.107959][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.264096][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.428073][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.584605][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.720873][ T13] team0 (unregistering): Port device team_slave_1 removed [ 923.755048][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.872907][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.988389][ T13] team0 (unregistering): Port device team_slave_0 removed [ 924.074496][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.281827][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.459154][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.694437][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.913932][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.956843][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.030010][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.101510][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.337659][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.530000][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.865288][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.908067][ C1] vkms_vblank_simulate: vblank timer overrun [ 925.972390][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.015339][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.176662][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.281712][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.452791][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.492726][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.602893][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.769928][ T4388] smc: removing ib device syz2 [ 926.815274][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.815299][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.860776][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.921144][ T1280] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 926.922915][T22731] lo speed is unknown, defaulting to 1000 [ 926.922946][T22731] infiniband syz0: ib_query_port failed (-19) [ 927.138448][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.138472][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.458657][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.586805][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.845907][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.864096][T25703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.864119][T25703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.235382][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 928.631411][ T1313] loop2: detected capacity change from 0 to 7 [ 928.657073][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.657258][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.709454][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.709497][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.709799][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.709890][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.710143][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.710172][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.710390][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.710420][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.710623][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.710652][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.710843][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.710872][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.710962][ T1313] ldm_validate_partition_table(): Disk read failed. [ 928.711119][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.711235][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.711521][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.711551][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.711823][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 928.711852][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 928.714260][ T1313] Dev loop2: unable to read RDB block 0 [ 928.725055][ T1313] loop2: unable to read partition table [ 928.725412][ T1313] loop2: partition table beyond EOD, truncated [ 928.725436][ T1313] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 928.979642][T22735] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 929.103256][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.231144][T22735] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 929.231180][T22735] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.231203][T22735] usb 9-1: Product: syz [ 929.231226][T22735] usb 9-1: Manufacturer: syz [ 929.231242][T22735] usb 9-1: SerialNumber: syz [ 929.337222][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.439700][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.439742][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.439770][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.439799][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.439828][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.439858][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.439904][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.439932][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.440492][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.440525][T22733] hid-generic 0003:0003:0000.004B: unknown main item tag 0x0 [ 929.522908][T22735] usb 9-1: config 0 descriptor?? [ 929.621455][T22735] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 929.975978][T22733] hid-generic 0003:0003:0000.004B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 930.218074][ C1] vkms_vblank_simulate: vblank timer overrun [ 930.319195][T22735] gspca_sunplus: reg_r err -71 [ 930.319300][T22735] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 930.574936][T22735] usb 9-1: USB disconnect, device number 2 [ 930.686127][ T1346] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 930.806781][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.050684][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.208812][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.522660][ T1415] netlink: 'syz.6.13129': attribute type 19 has an invalid length. [ 936.187933][ T13] IPVS: stop unused estimator thread 0... [ 936.941292][ T1475] netdevsim netdevsim5 netdevsim0: refused to change device tx_queue_len [ 937.049094][ T1477] bond1: option xmit_hash_policy: invalid value (9) [ 937.074777][ T1477] bond1 (unregistering): Released all slaves [ 937.202842][ T1480] netlink: 256 bytes leftover after parsing attributes in process `syz.5.13160'. [ 937.284498][ C1] vkms_vblank_simulate: vblank timer overrun [ 938.419611][T22732] kernel write not supported for file /427/clear_refs (pid: 22732 comm: kworker/0:2) [ 938.486330][ T1323] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 938.673585][ T1323] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 938.673619][ T1323] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.673641][ T1323] usb 8-1: Product: syz [ 938.673656][ T1323] usb 8-1: Manufacturer: syz [ 938.673672][ T1323] usb 8-1: SerialNumber: syz [ 938.835262][T22732] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 938.926881][ T1323] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 938.926945][ T1323] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 938.926969][ T1323] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 939.003599][ T1323] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 939.016611][T22732] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 939.016664][T22732] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 939.036905][T22732] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.040311][ T1323] usb 8-1: USB disconnect, device number 2 [ 939.070885][T22732] usb 9-1: config 0 descriptor?? [ 939.072297][ T1513] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 939.412137][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.457003][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.526124][T22732] hid_parser_main: 8 callbacks suppressed [ 939.526152][T22732] belkin 0003:050D:3201.004C: unknown main item tag 0x0 [ 939.526187][T22732] belkin 0003:050D:3201.004C: unknown main item tag 0x0 [ 939.526216][T22732] belkin 0003:050D:3201.004C: item fetching failed at offset 2/3 [ 939.527052][T22732] belkin 0003:050D:3201.004C: parse failed [ 939.527135][T22732] belkin 0003:050D:3201.004C: probe with driver belkin failed with error -22 [ 939.765571][ T5970] usb 9-1: USB disconnect, device number 3 [ 940.391692][ T1560] bond1: (slave batadv_slave_1): Device is not bonding slave [ 940.391719][ T1560] bond1: option active_slave: invalid value (batadv_slave_1) [ 940.453639][ T1560] bond1 (unregistering): Released all slaves [ 940.643207][ C1] vkms_vblank_simulate: vblank timer overrun [ 942.312156][ T1619] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 943.904926][ T1655] batadv_slave_1: entered promiscuous mode [ 943.908672][ T1655] batman_adv: batadv0: Adding interface: macvlan2 [ 943.908692][ T1655] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.908731][ T1655] batman_adv: batadv0: Interface activated: macvlan2 [ 944.121952][ T1663] veth1_to_bond: entered allmulticast mode [ 944.122277][ T1663] veth1_to_bond: left allmulticast mode [ 944.289957][ T1673] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 944.290001][ T1673] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 944.290237][ T1673] overlayfs: failed to get uuid (43/file0, err=-13); falling back to uuid=null. [ 944.421556][T22734] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 944.598133][T22734] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 944.598169][T22734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.598193][T22734] usb 9-1: Product: syz [ 944.598209][T22734] usb 9-1: Manufacturer: syz [ 944.598226][T22734] usb 9-1: SerialNumber: syz [ 944.603877][T22734] usb 9-1: config 0 descriptor?? [ 944.649659][T22734] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 004 [ 945.087820][T22734] (null): failure reading functionality [ 945.106221][T22734] i2c i2c-2: connected i2c-tiny-usb device [ 945.337499][T22734] usb 9-1: USB disconnect, device number 4 [ 945.408109][ T1716] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13265'. [ 945.842056][ T1728] loop6: detected capacity change from 0 to 7 [ 945.857009][ T1728] buffer_io_error: 5 callbacks suppressed [ 945.857031][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.857155][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.857275][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.857483][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.857619][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.857768][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.857876][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.885900][ T1728] ldm_validate_partition_table(): Disk read failed. [ 945.886004][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.886142][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.886274][ T1728] Buffer I/O error on dev loop6, logical block 0, async page read [ 945.886469][ T1728] Dev loop6: unable to read RDB block 0 [ 945.913523][ T1728] loop6: unable to read partition table [ 945.913795][ T1728] loop6: partition table beyond EOD, truncated [ 945.913818][ T1728] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 946.200415][ T1739] netlink: 'syz.5.13273': attribute type 1 has an invalid length. [ 946.200442][ T1739] netlink: 232 bytes leftover after parsing attributes in process `syz.5.13273'. [ 946.283759][ T1742] netlink: 'syz.6.13277': attribute type 32 has an invalid length. [ 946.283783][ T1742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13277'. [ 946.362417][ T1742] bond1: option coupled_control: invalid value (28) [ 946.417541][ T1742] bond1 (unregistering): Released all slaves [ 946.642653][ T1749] netlink: 'syz.5.13280': attribute type 3 has an invalid length. [ 946.642679][ T1749] netlink: 812 bytes leftover after parsing attributes in process `syz.5.13280'. [ 946.890055][ T1764] program syz.5.13288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 948.070842][T22731] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 948.243464][T22731] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 948.243496][T22731] usb 7-1: config 0 has no interface number 0 [ 948.248308][T22731] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 948.248341][T22731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.248364][T22731] usb 7-1: Product: syz [ 948.248399][T22731] usb 7-1: Manufacturer: syz [ 948.248415][T22731] usb 7-1: SerialNumber: syz [ 948.258885][T22731] usb 7-1: config 0 descriptor?? [ 948.488298][T22731] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 948.497518][T22731] usb 7-1: USB disconnect, device number 2 [ 948.804874][ T1818] pimreg: entered allmulticast mode [ 948.821009][ T1818] pimreg: left allmulticast mode [ 950.116725][ T2370] pvrusb2: request_firmware fatal error with code=-110 [ 950.116748][ T2370] pvrusb2: Failure uploading firmware1 [ 950.116768][ T2370] pvrusb2: Device initialization was not successful. [ 950.116778][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 950.116790][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 950.119329][ T9646] pvrusb2: Device being rendered inoperable [ 950.123403][ T2370] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 950.123437][ T2370] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 950.416104][ T38] audit: type=1326 audit(1761700705.154:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.416419][ T38] audit: type=1326 audit(1761700705.154:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.420121][ T38] audit: type=1326 audit(1761700705.154:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.421285][ T38] audit: type=1326 audit(1761700705.154:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.421579][ T38] audit: type=1326 audit(1761700705.154:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.537083][ T38] audit: type=1326 audit(1761700705.154:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.537143][ T38] audit: type=1326 audit(1761700705.257:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.538083][ T38] audit: type=1326 audit(1761700705.257:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.538140][ T38] audit: type=1326 audit(1761700705.257:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.538191][ T38] audit: type=1326 audit(1761700705.257:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1873 comm="syz.5.13336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 950.722763][ T1882] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13340'. [ 950.722801][ T1882] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13340'. [ 950.722819][ T1882] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13340'. [ 951.177136][ T1889] Falling back ldisc for ttyS3. [ 951.325790][ T1906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13350'. [ 951.325832][ T1906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13350'. [ 951.727849][ T1916] program syz.6.13355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.329768][ T1930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13360'. [ 952.502952][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.695446][ T1936] tipc: Started in network mode [ 952.695483][ T1936] tipc: Node identity ac14140f, cluster identity 4711 [ 952.696939][ T1936] tipc: New replicast peer: 255.255.255.255 [ 952.725870][ T1936] tipc: Enabled bearer , priority 10 [ 952.726872][ T1936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13362'. [ 953.296490][ T1964] netlink: 36 bytes leftover after parsing attributes in process `syz.8.13377'. [ 953.546751][ T1981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13385'. [ 953.605133][ T1983] dummy0: entered allmulticast mode [ 953.890022][T22734] tipc: Node number set to 2886997007 [ 954.264966][ T2006] input: syz1 as /devices/virtual/input/input82 [ 954.762441][T22731] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 954.884864][ T2032] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13410'. [ 954.936331][T22731] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 954.936367][T22731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.943898][T22731] usb 4-1: config 0 descriptor?? [ 955.177186][T22731] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 955.421483][T22731] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 955.421512][T22731] [drm] Initialized udl on minor 2 [ 955.605098][T22731] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 955.605477][T22731] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 955.751802][ T2049] program syz.7.13418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 955.822674][T21597] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 955.828444][T21597] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 955.828625][T21597] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 955.830343][T21597] usb 4-1: USB disconnect, device number 31 [ 956.292379][ T2073] Bluetooth: hci6: Frame reassembly failed (-84) [ 956.440141][ T2081] input: syz1 as /devices/virtual/input/input83 [ 956.590423][T22731] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 956.755115][T22731] usb 9-1: Using ep0 maxpacket: 32 [ 956.757574][T22731] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 956.757604][T22731] usb 9-1: config 0 has no interface number 0 [ 956.757655][T22731] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 956.757684][T22731] usb 9-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 956.808972][T22731] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 956.809005][T22731] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.809028][T22731] usb 9-1: Product: syz [ 956.809043][T22731] usb 9-1: Manufacturer: syz [ 956.809061][T22731] usb 9-1: SerialNumber: syz [ 956.821426][T22731] usb 9-1: config 0 descriptor?? [ 956.889557][ T38] audit: type=1326 audit(1761700711.198:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f63575e67 code=0x7ffc0000 [ 956.890476][ T38] audit: type=1326 audit(1761700711.207:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f6351b099 code=0x7ffc0000 [ 956.891504][ T38] audit: type=1326 audit(1761700711.207:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 956.897127][ T38] audit: type=1326 audit(1761700711.207:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 956.901807][ T38] audit: type=1326 audit(1761700711.207:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 956.903412][ T38] audit: type=1326 audit(1761700711.226:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f63575e67 code=0x7ffc0000 [ 956.905984][ T38] audit: type=1326 audit(1761700711.226:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f6351b099 code=0x7ffc0000 [ 956.907539][ T38] audit: type=1326 audit(1761700711.226:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 956.909419][ T38] audit: type=1326 audit(1761700711.226:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6357efc9 code=0x7ffc0000 [ 956.915016][ T38] audit: type=1326 audit(1761700711.235:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2091 comm="syz.5.13438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f63575e67 code=0x7ffc0000 [ 957.075490][T22731] radio-si470x 9-1:0.35: this is not a si470x device. [ 957.104567][T22731] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 957.360420][T22731] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 957.593987][T22731] usb 9-1: USB disconnect, device number 5 [ 957.597638][T22731] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 957.628175][ T2107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13444'. [ 957.984991][ T2118] loop8: detected capacity change from 0 to 7 [ 957.996594][ T2118] Dev loop8: unable to read RDB block 7 [ 957.996656][ T2118] loop8: unable to read partition table [ 957.996939][ T2118] loop8: partition table beyond EOD, truncated [ 957.996962][ T2118] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 958.482572][ T61] Bluetooth: hci6: command 0x1003 tx timeout [ 958.487992][ T5811] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 958.699517][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.047386][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.831701][ T2183] netlink: 'syz.8.13477': attribute type 1 has an invalid length. [ 959.831730][ T2183] netlink: 'syz.8.13477': attribute type 2 has an invalid length. [ 960.031211][ T2198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13485'. [ 960.031235][ T2198] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13485'. [ 960.031259][ T2198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13485'. [ 960.142728][T21597] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 960.305524][T21597] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 960.305555][T21597] usb 8-1: config 0 has no interface number 0 [ 960.309886][T21597] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 960.309916][T21597] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.309939][T21597] usb 8-1: Product: syz [ 960.309955][T21597] usb 8-1: Manufacturer: syz [ 960.309970][T21597] usb 8-1: SerialNumber: syz [ 960.323713][T21597] usb 8-1: config 0 descriptor?? [ 960.577304][T21597] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 960.581264][T21597] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 960.581707][T21597] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 960.581765][T21597] usb 8-1: media controller created [ 960.688638][T21597] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 960.745677][ T2229] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.794229][T21597] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 960.901827][T21597] usb 8-1: USB disconnect, device number 3 [ 961.095306][T25703] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.100295][T25703] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.100347][T25703] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.100388][T25703] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.827549][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13520'. [ 961.827589][ T2279] netlink: 'syz.6.13520': attribute type 18 has an invalid length. [ 961.827606][ T2279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13520'. [ 962.354086][ T2304] netlink: 'syz.8.13535': attribute type 14 has an invalid length. [ 962.393914][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.776648][ T2435] mkiss: ax0: crc mode is auto. [ 967.092480][ T2556] netlink: 360 bytes leftover after parsing attributes in process `syz.8.13619'. [ 967.751559][ T2592] Invalid logical block size (4095) [ 969.338066][ C1] vkms_vblank_simulate: vblank timer overrun [ 969.930858][T22731] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 970.091077][T22731] usb 8-1: Using ep0 maxpacket: 16 [ 970.093668][T22731] usb 8-1: config 0 interface 0 has no altsetting 0 [ 970.093709][T22731] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 970.093734][T22731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.146407][T22731] usb 8-1: config 0 descriptor?? [ 970.554824][ T2737] ref_ctr_offset mismatch. inode: 0x38d9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 970.629925][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.629971][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630002][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630032][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630060][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630089][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630118][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630147][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630177][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.630205][T22731] hid-generic 0003:0DFC:0101.004D: unknown main item tag 0x0 [ 970.691585][T22731] hid-generic 0003:0DFC:0101.004D: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.7-1/input0 [ 970.829723][ T5970] usb 8-1: USB disconnect, device number 4 [ 970.999777][ T1323] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 971.160083][ T1323] usb 7-1: Using ep0 maxpacket: 16 [ 971.162186][ T1323] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 971.162213][ T1323] usb 7-1: config 0 has no interface number 0 [ 971.162253][ T1323] usb 7-1: config 0 interface 41 has no altsetting 0 [ 971.165311][ T1323] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 971.165340][ T1323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.165372][ T1323] usb 7-1: Product: syz [ 971.165388][ T1323] usb 7-1: Manufacturer: syz [ 971.165405][ T1323] usb 7-1: SerialNumber: syz [ 971.235901][ T1323] usb 7-1: config 0 descriptor?? [ 971.241245][ T1323] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 971.482093][ T1323] usb 7-1: USB disconnect, device number 3 [ 972.716311][ T2847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13734'. [ 972.814712][ T2852] smc: net device bond0 applied user defined pnetid SYZ0 [ 972.815536][ T2852] smc: net device bond0 erased user defined pnetid SYZ0 [ 973.223150][ T6026] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 973.403998][ T6026] usb 4-1: Using ep0 maxpacket: 16 [ 973.411765][ T6026] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 973.411795][ T6026] usb 4-1: config 0 has no interface number 0 [ 973.411845][ T6026] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 973.411874][ T6026] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 973.414934][ T6026] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 973.414965][ T6026] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 973.414989][ T6026] usb 4-1: Product: syz [ 973.415006][ T6026] usb 4-1: SerialNumber: syz [ 973.428776][ T6026] usb 4-1: config 0 descriptor?? [ 973.466588][ T6026] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 973.472443][ T6026] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input84 [ 973.515590][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13751'. [ 973.731810][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.733919][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.734184][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.734441][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.734690][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.734938][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.735185][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.735284][ T1323] usb 4-1: USB disconnect, device number 32 [ 973.735436][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 973.735460][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 973.738761][ T1323] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 973.789639][ T2907] program syz.8.13755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 973.988248][ T2911] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13758'. [ 974.194513][ T2921] program syz.6.13763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 974.392713][T22734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.559706][ T6026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.602840][ T2931] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 974.737607][T25703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.753375][ T6026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.784828][ T6026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.066268][ T2949] netlink: 'syz.8.13776': attribute type 1 has an invalid length. [ 975.066438][ T2949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 975.066493][ T2949] IPv6: NLM_F_CREATE should be set when creating new route [ 975.066530][ T2949] IPv6: NLM_F_CREATE should be set when creating new route [ 975.344093][ T2961] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13779'. [ 975.344129][ T2961] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13779'. [ 975.410376][ T2963] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13779'. [ 975.410411][ T2963] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13779'. [ 975.553587][T22734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.416546][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 976.416566][ T38] audit: type=1326 audit(1761700729.468:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2989 comm="syz.3.13794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f144de15e67 code=0x7ffc0000 [ 976.417035][ T38] audit: type=1326 audit(1761700729.468:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2989 comm="syz.3.13794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f144ddbb099 code=0x7ffc0000 [ 976.417331][ T38] audit: type=1326 audit(1761700729.468:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2989 comm="syz.3.13794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 976.418107][ T38] audit: type=1326 audit(1761700729.468:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2989 comm="syz.3.13794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 976.418739][ T38] audit: type=1326 audit(1761700729.468:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2989 comm="syz.3.13794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 976.419301][ T38] audit: type=1326 audit(1761700729.468:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2989 comm="syz.3.13794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144de1efc9 code=0x7ffc0000 [ 976.420547][ T38] audit: type=1326 audit(1761700729.477:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2989 comm="syz.3.13794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f144de15e67 code=0x7ffc0000 [ 976.667192][T22731] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 976.718745][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.838792][T22731] usb 7-1: config 0 has an invalid interface number: 123 but max is 0 [ 976.838821][T22731] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.838839][T22731] usb 7-1: config 0 has no interface number 0 [ 976.841966][T22731] usb 7-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 976.841997][T22731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.842017][T22731] usb 7-1: Product: syz [ 976.842031][T22731] usb 7-1: Manufacturer: syz [ 976.842046][T22731] usb 7-1: SerialNumber: syz [ 976.855136][T22731] usb 7-1: config 0 descriptor?? [ 976.863103][T22731] cdc_acm 7-1:0.123: More than one union descriptor, skipping ... [ 977.086888][ T6026] usb 7-1: USB disconnect, device number 4 [ 977.601680][ T3028] netlink: 'syz.8.13812': attribute type 3 has an invalid length. [ 977.601707][ T3028] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13812'. [ 977.601744][ T3028] netlink: 'syz.8.13812': attribute type 3 has an invalid length. [ 977.679471][ T3030] pimreg1: tun_chr_ioctl cmd 1074025681 [ 977.809367][T22734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.074472][T22731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.108939][ T3043] vcan0: tx drop: invalid da for name 0x0000000000000e00 [ 978.924420][T22734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.476530][T22731] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 979.497845][ T1323] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 979.650135][T22731] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.650167][T22731] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.655394][T22731] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 979.655429][T22731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.655453][T22731] usb 7-1: Product: syz [ 979.655470][T22731] usb 7-1: Manufacturer: syz [ 979.655485][T22731] usb 7-1: SerialNumber: syz [ 979.658212][ T1323] usb 4-1: Using ep0 maxpacket: 16 [ 979.672045][ T1323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.672089][ T1323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.672137][ T1323] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 979.672165][ T1323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.780309][ T1323] usb 4-1: config 0 descriptor?? [ 980.034608][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.213411][ T6026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.224326][T22731] usb 7-1: cannot find UAC_HEADER [ 980.241327][ T1323] hid (null): unknown global tag 0xd [ 980.275253][T22731] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 980.287925][T22731] usb 7-1: USB disconnect, device number 5 [ 980.301807][ T1323] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.004E/input/input85 [ 980.335152][ T1323] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.004E/input/input86 [ 980.438916][ T1323] kye 0003:0458:5012.004E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 980.466385][ T1323] usb 4-1: USB disconnect, device number 33 [ 981.144464][ T1323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.252922][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13869'. [ 981.252962][ T3148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13869'. [ 981.321261][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.256526][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.668955][ T3214] trusted_key: encrypted_key: keyword 'uew' not recognized [ 983.370213][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.396299][ T3251] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13914'. [ 983.569317][ T3260] tap0: tun_chr_ioctl cmd 1074025675 [ 983.569344][ T3260] tap0: persist disabled [ 984.163236][ T38] audit: type=1107 audit(1761700736.718:505): pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 984.479925][T22735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.565067][T22731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.013594][T22735] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 985.159027][ T3319] pimreg: tun_chr_ioctl cmd 1074025680 [ 985.171022][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 985.187024][T22735] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 985.187069][T22735] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 985.187086][T22735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.190777][T22735] usb 7-1: config 0 descriptor?? [ 985.415130][ T3329] netlink: 'syz.8.13954': attribute type 14 has an invalid length. [ 985.630533][T22735] logitech 0003:046D:C626.004F: nested delimiters [ 985.630558][T22735] logitech 0003:046D:C626.004F: item 0 4 2 10 parsing failed [ 985.631435][T22735] logitech 0003:046D:C626.004F: parse failed [ 985.631543][T22735] logitech 0003:046D:C626.004F: probe with driver logitech failed with error -22 [ 985.870873][ T5874] usb 7-1: USB disconnect, device number 6 [ 986.020805][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.588404][ T3384] netlink: 64 bytes leftover after parsing attributes in process `syz.6.13979'. [ 986.980728][T22731] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 987.045701][ T39] INFO: task syz.0.11989:31301 blocked for more than 143 seconds. [ 987.045726][ T39] Not tainted syzkaller #0 [ 987.045738][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 987.045749][ T39] task:syz.0.11989 state:D stack:28168 pid:31301 tgid:31298 ppid:21132 task_flags:0x400040 flags:0x00080002 [ 987.045819][ T39] Call Trace: [ 987.045828][ T39] [ 987.045844][ T39] __schedule+0x16f3/0x4c20 [ 987.045892][ T39] ? __lock_acquire+0xab9/0xd20 [ 987.045937][ T39] ? __pfx___schedule+0x10/0x10 [ 987.045992][ T39] rt_mutex_schedule+0x77/0xf0 [ 987.046016][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 987.046055][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 987.046084][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 987.046112][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 987.046137][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 987.046159][ T39] ? __lock_acquire+0xab9/0xd20 [ 987.046202][ T39] ? usbdev_open+0x16e/0x790 [ 987.046237][ T39] ? bus_find_device+0x279/0x2c0 [ 987.046263][ T39] ? __pfx_device_match_devt+0x10/0x10 [ 987.046314][ T39] ? usbdev_open+0x16e/0x790 [ 987.046342][ T39] mutex_lock_nested+0x16a/0x1d0 [ 987.046369][ T39] ? usbdev_open+0xa7/0x790 [ 987.046404][ T39] usbdev_open+0x16e/0x790 [ 987.046438][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 987.046464][ T39] ? __pfx_usbdev_open+0x10/0x10 [ 987.046491][ T39] ? rt_spin_unlock+0x150/0x200 [ 987.046520][ T39] ? rt_spin_unlock+0x161/0x200 [ 987.046548][ T39] chrdev_open+0x4cf/0x5e0 [ 987.046584][ T39] ? __pfx_chrdev_open+0x10/0x10 [ 987.046620][ T39] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 987.046661][ T39] ? __pfx_chrdev_open+0x10/0x10 [ 987.046692][ T39] do_dentry_open+0x9b1/0x1350 [ 987.046758][ T39] vfs_open+0x3b/0x350 [ 987.046778][ T39] ? path_openat+0x2ed9/0x3840 [ 987.046808][ T39] path_openat+0x2ef1/0x3840 [ 987.046977][ T39] ? try_to_take_rt_mutex+0x840/0xb00 [ 987.047038][ T39] ? __pfx_path_openat+0x10/0x10 [ 987.047065][ T39] ? do_raw_spin_lock+0x121/0x290 [ 987.047104][ T39] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 987.047136][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.047168][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 987.047205][ T39] do_filp_open+0x1fa/0x410 [ 987.047234][ T39] ? __pfx_do_filp_open+0x10/0x10 [ 987.047257][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 987.047318][ T39] ? alloc_fd+0x64f/0x6c0 [ 987.047363][ T39] do_sys_openat2+0x121/0x1c0 [ 987.047390][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 987.047417][ T39] ? exc_page_fault+0x82/0x100 [ 987.047450][ T39] ? do_user_addr_fault+0xc85/0x1380 [ 987.047482][ T39] __x64_sys_openat+0x138/0x170 [ 987.047512][ T39] do_syscall_64+0xfa/0xfa0 [ 987.047540][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.047570][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.047593][ T39] ? clear_bhb_loop+0x60/0xb0 [ 987.047621][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.047644][ T39] RIP: 0033:0x7f6e8151d810 [ 987.047664][ T39] RSP: 002b:00007f6e7f77db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 987.047688][ T39] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6e8151d810 [ 987.047706][ T39] RDX: 0000000000000002 RSI: 00007f6e7f77dc10 RDI: 00000000ffffff9c [ 987.047721][ T39] RBP: 00007f6e7f77dc10 R08: 0000000000000000 R09: 0000000000000000 [ 987.047736][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 987.047752][ T39] R13: 00007f6e81776038 R14: 00007f6e81775fa0 R15: 00007ffc18ae3828 [ 987.047791][ T39] [ 987.047864][ T39] [ 987.047864][ T39] Showing all locks held in the system: [ 987.047881][ T39] 1 lock held by khungtaskd/39: [ 987.047895][ T39] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 987.047967][ T39] 2 locks held by pvrusb2-context/2370: [ 987.047980][ T39] #0: ffff888062c541b8 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xc6/0x3ac0 [ 987.048036][ T39] #1: ffffffff8d4513e0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 987.048104][ T39] 2 locks held by getty/5554: [ 987.048118][ T39] #0: ffff88823bf6e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 987.048173][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 987.048235][ T39] 1 lock held by syz-executor/5785: [ 987.048251][ T39] 6 locks held by kworker/1:8/9646: [ 987.048264][ T39] #0: ffff8881404a7138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 987.048328][ T39] #1: ffffc9000402fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 987.048385][ T39] #2: ffff888145f58188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 987.048436][ T39] #3: ffff8880277c1188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x940 [ 987.048498][ T39] #4: ffff8880245ca150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 987.048559][ T39] #5: ffff888062c541b8 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 987.048617][ T39] 6 locks held by kworker/0:1/22731: [ 987.048630][ T39] #0: ffff8881404a7138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 987.048685][ T39] #1: ffffc9001d4d7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 987.048739][ T39] #2: ffff88802752c188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 987.048791][ T39] #3: ffff8880275585b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 987.048844][ T39] #4: ffff888026a58e58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 987.048897][ T39] #5: ffffffff8e124760 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1740 [ 987.048954][ T39] 1 lock held by syz.0.11989/31301: [ 987.048967][ T39] #0: ffff888145f58188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 987.049029][ T39] 1 lock held by syz-executor/591: [ 987.049049][ T39] 2 locks held by kworker/u8:49/2367: [ 987.049062][ T39] #0: ffff8881452ff938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 987.049119][ T39] #1: ffffc90006317ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 987.049179][ T39] 10 locks held by syz.3.13986/3397: [ 987.049193][ T39] 3 locks held by syz-executor/3404: [ 987.049207][ T39] [ 987.049214][ T39] ============================================= [ 987.049214][ T39] [ 987.049225][ T39] NMI backtrace for cpu 1 [ 987.049241][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 987.049273][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 987.049301][ T39] Call Trace: [ 987.049310][ T39] [ 987.049319][ T39] dump_stack_lvl+0x189/0x250 [ 987.049360][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.049396][ T39] ? __pfx__printk+0x10/0x10 [ 987.049437][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 987.049464][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 987.049490][ T39] ? __pfx__printk+0x10/0x10 [ 987.049522][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 987.049549][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 987.049575][ T39] watchdog+0xf60/0xfa0 [ 987.049611][ T39] ? watchdog+0x1e2/0xfa0 [ 987.049649][ T39] kthread+0x711/0x8a0 [ 987.049686][ T39] ? __pfx_watchdog+0x10/0x10 [ 987.049715][ T39] ? __pfx_kthread+0x10/0x10 [ 987.049744][ T39] ? rt_spin_unlock+0x150/0x200 [ 987.049770][ T39] ? rt_spin_unlock+0x161/0x200 [ 987.049789][ T39] ? __pfx_kthread+0x10/0x10 [ 987.049819][ T39] ret_from_fork+0x4bc/0x870 [ 987.049849][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 987.049881][ T39] ? __switch_to_asm+0x39/0x70 [ 987.049902][ T39] ? __switch_to_asm+0x33/0x70 [ 987.049921][ T39] ? __pfx_kthread+0x10/0x10 [ 987.049954][ T39] ret_from_fork_asm+0x1a/0x30 [ 987.049993][ T39] [ 987.050001][ T39] Sending NMI from CPU 1 to CPUs 0: [ 987.050028][ C0] NMI backtrace for cpu 0 [ 987.050044][ C0] CPU: 0 UID: 0 PID: 5785 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 987.050066][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 987.050079][ C0] RIP: 0010:ttwu_do_wakeup+0x0/0x150 [ 987.050108][ C0] Code: e6 46 a2 ff e9 06 ff ff ff 90 0f 0b 90 e9 79 ff ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 8d 5f 18 48 89 d8 [ 987.050128][ C0] RSP: 0000:ffffc90004b7fc28 EFLAGS: 00000082 [ 987.050145][ C0] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 71ec069e87ac5e00 [ 987.050158][ C0] RDX: 0000000000000000 RSI: ffffffff8cf63301 RDI: ffff888026445a00 [ 987.050172][ C0] RBP: ffff888026445a00 R08: ffff8880342b5a07 R09: 1ffff11006856b40 [ 987.050187][ C0] R10: dffffc0000000000 R11: ffffed1006856b41 R12: dffffc0000000000 [ 987.050200][ C0] R13: ffff8880b883adc0 R14: ffff888026445a68 R15: 1ffff11004c88b4d [ 987.050215][ C0] FS: 0000555571f2f500(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 987.050231][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 987.050244][ C0] CR2: 00007fffb336ee38 CR3: 0000000028cf6000 CR4: 00000000003526f0 [ 987.050261][ C0] Call Trace: [ 987.050269][ C0] [ 987.050276][ C0] ttwu_do_activate+0x21e/0x870 [ 987.050308][ C0] try_to_wake_up+0x721/0x12b0 [ 987.050344][ C0] __handle_irq_event_percpu+0x542/0xab0 [ 987.050372][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 987.050398][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 987.050424][ C0] handle_irq_event+0x8b/0x1e0 [ 987.050444][ C0] ? handle_edge_irq+0x229/0xa10 [ 987.050463][ C0] handle_edge_irq+0x23b/0xa10 [ 987.050487][ C0] __common_interrupt+0x141/0x1f0 [ 987.050508][ C0] common_interrupt+0x5e/0xe0 [ 987.050527][ C0] asm_common_interrupt+0x26/0x40 [ 987.050552][ C0] RIP: 0033:0x7f6589e3dca8 [ 987.050567][ C0] Code: ff e8 9c f7 ff ff 48 3b 1d fd 9f 26 00 0f 83 35 ff ff ff 64 48 8b 14 25 c8 ff ff ff 48 85 d2 0f 84 23 ff ff ff 0f 1f 44 00 00 <0f> b7 0c 5a 66 85 c9 0f 84 11 ff ff ff 48 8d 7b 10 48 8b 04 fa a8 [ 987.050583][ C0] RSP: 002b:00007ffea4315c10 EFLAGS: 00000287 [ 987.050598][ C0] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000000000003bf12 [ 987.050610][ C0] RDX: 0000555571f2fe90 RSI: 0000000000000005 RDI: 0000000000000018 [ 987.050623][ C0] RBP: 0000000000000018 R08: 0000000000000007 R09: 0000555571f51b50 [ 987.050635][ C0] R10: 244bc97f9abce5b5 R11: 0000000000000202 R12: 0000000000000001 [ 987.050647][ C0] R13: 0000000000000000 R14: 00007ffea4315c60 R15: 00000000000036a7 [ 987.050670][ C0] [ 987.172838][T22731] usb 7-1: Using ep0 maxpacket: 16 [ 987.175297][T22731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.175331][T22731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.175372][T22731] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 987.175396][T22731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.185573][T22731] usb 7-1: config 0 descriptor?? [ 987.429956][ T1323] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 987.600969][ T1323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.601011][ T1323] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.601059][ T1323] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 987.601086][ T1323] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.619389][ T1323] usb 8-1: config 0 descriptor?? [ 988.196282][ T1323] arvo 0003:1E7D:30D4.0051: item fetching failed at offset 5/7 [ 988.201551][ T1323] arvo 0003:1E7D:30D4.0051: parse failed [ 988.201644][ T1323] arvo 0003:1E7D:30D4.0051: probe with driver arvo failed with error -22 [ 988.349646][T22731] playstation 0003:054C:05C4.0050: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 988.397158][ T5970] usb 8-1: USB disconnect, device number 5 [ 988.420209][T22731] playstation 0003:054C:05C4.0050: Invalid reportID received, expected 18 got 199 [ 988.420241][T22731] playstation 0003:054C:05C4.0050: Failed to retrieve DualShock4 pairing info: -22 [ 988.420295][T22731] playstation 0003:054C:05C4.0050: Failed to get MAC address from DualShock4 [ 988.420314][T22731] playstation 0003:054C:05C4.0050: Failed to create dualshock4. [ 988.564895][T22731] playstation 0003:054C:05C4.0050: probe with driver playstation failed with error -22 [ 988.658261][ T1323] usb 7-1: USB disconnect, device number 7 [ 993.889695][ T1318] ieee802154 phy0 wpan0: encryption failed: -22