last executing test programs: 6.472699937s ago: executing program 3 (id=204): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000200)={0x2, 0xffffffff, 0x5, 0x5, 0x3, 0x45}) 4.983195198s ago: executing program 4 (id=208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001880)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) 4.895808023s ago: executing program 1 (id=210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000080)) 4.727973799s ago: executing program 3 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x278100003e7, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x1, r2, 0x1}) 4.709995014s ago: executing program 1 (id=213): connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14"], 0x28}}, 0x0) 4.693823752s ago: executing program 4 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x803, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2, 0x1}) 4.467636356s ago: executing program 1 (id=216): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020310000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x14, &(0x7f00000005c0)={0x40, 0x0, 0x7, {0x7, 0x22, "4632c4fe0b"}}, 0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 4.400989401s ago: executing program 3 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) 4.359230138s ago: executing program 2 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 4.305204641s ago: executing program 4 (id=220): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 4.200833689s ago: executing program 2 (id=221): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.810734199s ago: executing program 3 (id=222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000200)={0x2, 0xffffffff, 0x5, 0x5, 0x3, 0x45}) 2.610984791s ago: executing program 0 (id=223): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000080)) 2.488258672s ago: executing program 0 (id=224): socket$inet(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 2.351101234s ago: executing program 0 (id=225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001880)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) 2.294221269s ago: executing program 4 (id=226): connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14"], 0x28}}, 0x0) 2.270441163s ago: executing program 1 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x278100003e7, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x1, r2, 0x1}) 2.086901896s ago: executing program 0 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000000c001a800800058004000580"], 0x2c}}, 0x0) 1.991118655s ago: executing program 4 (id=229): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 1.686362841s ago: executing program 1 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x803, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2, 0x1}) 1.581170223s ago: executing program 0 (id=231): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) 1.419170704s ago: executing program 1 (id=232): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x5, 0x4, [0xffffff7f]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfd, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.344235662s ago: executing program 2 (id=233): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) setfsuid(0x0) chroot(&(0x7f00000001c0)='./file0/../file0\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 1.134865115s ago: executing program 2 (id=234): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000080)) 1.088582187s ago: executing program 2 (id=235): socket$inet(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 854.766011ms ago: executing program 4 (id=236): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000300)={&(0x7f0000000140)=[{0x7, 0x0, 0x0, 0x0}, {0x5, 0x2000, 0x0, 0x0}], 0x2}) 803.128645ms ago: executing program 2 (id=237): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 602.992456ms ago: executing program 3 (id=238): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25d0, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0xa, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0xd31, 0x9, 0x1, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0xd, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0xffffffff, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3438, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x0, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0x1, 0x2, 0x1, 0xd8ce, 0x2, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x6, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 124.69475ms ago: executing program 0 (id=239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 0s ago: executing program 3 (id=240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x278100003e7, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x1, r2, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 86.757752][ T1248] cfg80211: failed to load regulatory.db [ 90.357544][ T5794] cgroup: Unknown subsys name 'net' [ 90.639179][ T5794] cgroup: Unknown subsys name 'cpuset' [ 90.684069][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.669211][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.594984][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.649704][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.650527][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.652873][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.660632][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.661426][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.664200][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.664378][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.665264][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.666642][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.669632][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.670398][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.672968][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.674440][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.675311][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.680698][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.686585][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.687537][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.689100][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.692608][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.694037][ T5124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.712138][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.723257][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.755602][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.756480][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.690632][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 96.811041][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 96.821023][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 96.924836][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 97.164830][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 97.606367][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.607392][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.607877][ T5819] bridge_slave_0: entered allmulticast mode [ 97.609884][ T5819] bridge_slave_0: entered promiscuous mode [ 97.716019][ T5124] Bluetooth: hci3: command tx timeout [ 97.793755][ T5124] Bluetooth: hci4: command tx timeout [ 97.794020][ T5818] Bluetooth: hci1: command tx timeout [ 97.794167][ T5124] Bluetooth: hci2: command tx timeout [ 97.805728][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.805865][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.806059][ T5819] bridge_slave_1: entered allmulticast mode [ 97.809084][ T5819] bridge_slave_1: entered promiscuous mode [ 97.963748][ T5124] Bluetooth: hci0: command tx timeout [ 98.225393][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.225513][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.225678][ T5812] bridge_slave_0: entered allmulticast mode [ 98.227765][ T5812] bridge_slave_0: entered promiscuous mode [ 98.230213][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.230331][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.230497][ T5814] bridge_slave_0: entered allmulticast mode [ 98.232642][ T5814] bridge_slave_0: entered promiscuous mode [ 98.334487][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.334625][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.334796][ T5823] bridge_slave_0: entered allmulticast mode [ 98.336733][ T5823] bridge_slave_0: entered promiscuous mode [ 98.338641][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.338766][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.338940][ T5812] bridge_slave_1: entered allmulticast mode [ 98.340872][ T5812] bridge_slave_1: entered promiscuous mode [ 98.354169][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.354313][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.354526][ T5814] bridge_slave_1: entered allmulticast mode [ 98.357647][ T5814] bridge_slave_1: entered promiscuous mode [ 98.449057][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.449314][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.449495][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.449671][ T5823] bridge_slave_1: entered allmulticast mode [ 98.451654][ T5823] bridge_slave_1: entered promiscuous mode [ 98.677506][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.955049][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.955174][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.955307][ T5811] bridge_slave_0: entered allmulticast mode [ 98.957057][ T5811] bridge_slave_0: entered promiscuous mode [ 99.120110][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.123373][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.125357][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.125493][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.125679][ T5811] bridge_slave_1: entered allmulticast mode [ 99.128829][ T5811] bridge_slave_1: entered promiscuous mode [ 99.218169][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.220885][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.223363][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.296251][ T5819] team0: Port device team_slave_0 added [ 99.299369][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.557393][ T5819] team0: Port device team_slave_1 added [ 99.777711][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.794999][ T5124] Bluetooth: hci3: command tx timeout [ 99.874149][ T5818] Bluetooth: hci1: command tx timeout [ 99.874180][ T5818] Bluetooth: hci4: command tx timeout [ 99.874316][ T5124] Bluetooth: hci2: command tx timeout [ 99.947628][ T5812] team0: Port device team_slave_0 added [ 99.949883][ T5814] team0: Port device team_slave_0 added [ 99.954921][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.033790][ T5124] Bluetooth: hci0: command tx timeout [ 100.052479][ T5823] team0: Port device team_slave_0 added [ 100.062240][ T5812] team0: Port device team_slave_1 added [ 100.072173][ T5814] team0: Port device team_slave_1 added [ 100.517518][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.517531][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.517551][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.520755][ T5823] team0: Port device team_slave_1 added [ 100.755209][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.755224][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.755249][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.956612][ T5811] team0: Port device team_slave_0 added [ 101.035345][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.035360][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.035382][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.036631][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.036644][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.036670][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.039609][ T5811] team0: Port device team_slave_1 added [ 101.042211][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.042224][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.042253][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.046728][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.046743][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.046770][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.048350][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.048363][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.048391][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.124337][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.124367][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.124396][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.475489][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.475505][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.475524][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.578334][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.578346][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.578363][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.586583][ T5819] hsr_slave_0: entered promiscuous mode [ 101.588461][ T5819] hsr_slave_1: entered promiscuous mode [ 101.873693][ T5124] Bluetooth: hci3: command tx timeout [ 101.953692][ T5124] Bluetooth: hci2: command tx timeout [ 101.953722][ T5124] Bluetooth: hci4: command tx timeout [ 101.953741][ T5124] Bluetooth: hci1: command tx timeout [ 102.072013][ T5812] hsr_slave_0: entered promiscuous mode [ 102.072914][ T5812] hsr_slave_1: entered promiscuous mode [ 102.074547][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 102.074689][ T5812] Cannot create hsr debugfs directory [ 102.085686][ T5814] hsr_slave_0: entered promiscuous mode [ 102.087683][ T5814] hsr_slave_1: entered promiscuous mode [ 102.088805][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 102.088831][ T5814] Cannot create hsr debugfs directory [ 102.102473][ T5823] hsr_slave_0: entered promiscuous mode [ 102.107009][ T5823] hsr_slave_1: entered promiscuous mode [ 102.108240][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 102.108265][ T5823] Cannot create hsr debugfs directory [ 102.113852][ T5822] Bluetooth: hci0: command tx timeout [ 102.630539][ T5811] hsr_slave_0: entered promiscuous mode [ 102.631567][ T5811] hsr_slave_1: entered promiscuous mode [ 102.632226][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 102.632245][ T5811] Cannot create hsr debugfs directory [ 103.953652][ T5822] Bluetooth: hci3: command tx timeout [ 104.034209][ T5822] Bluetooth: hci1: command tx timeout [ 104.034242][ T5822] Bluetooth: hci4: command tx timeout [ 104.034265][ T5822] Bluetooth: hci2: command tx timeout [ 104.121577][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.162330][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.193927][ T5124] Bluetooth: hci0: command tx timeout [ 104.198832][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.252322][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.356249][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.380530][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.423029][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.473811][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.575533][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.621200][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.665457][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.727472][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.858547][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.896033][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.936587][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.985934][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.136310][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.139789][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.169724][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.212197][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.259500][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.332451][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.373342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.382457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.401928][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.424997][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.425250][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.498768][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.525898][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.547102][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.547235][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.587335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.587452][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.637926][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.653096][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.685346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.685483][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.720607][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.720790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.779826][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.848015][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.848171][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.859893][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.909081][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.909255][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.017532][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.059949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.060100][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.107307][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.107479][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.169013][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.452607][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.489881][ T5819] veth0_vlan: entered promiscuous mode [ 106.554905][ T5819] veth1_vlan: entered promiscuous mode [ 106.620907][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.761396][ T5814] veth0_vlan: entered promiscuous mode [ 106.781556][ T5819] veth0_macvtap: entered promiscuous mode [ 106.810745][ T5819] veth1_macvtap: entered promiscuous mode [ 106.832999][ T5814] veth1_vlan: entered promiscuous mode [ 106.849121][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.927720][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.964655][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.002319][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.030880][ T3622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.042191][ T3622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.052587][ T3622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.058604][ T3622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.060565][ T5814] veth0_macvtap: entered promiscuous mode [ 107.131647][ T5814] veth1_macvtap: entered promiscuous mode [ 107.212772][ T5812] veth0_vlan: entered promiscuous mode [ 107.299866][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.339448][ T5812] veth1_vlan: entered promiscuous mode [ 107.349235][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.411642][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.426200][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.426220][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.443181][ T5811] veth0_vlan: entered promiscuous mode [ 107.447810][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.467671][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.482262][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.558382][ T5811] veth1_vlan: entered promiscuous mode [ 107.560759][ T1449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.560776][ T1449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.562504][ T5823] veth0_vlan: entered promiscuous mode [ 107.697423][ T5823] veth1_vlan: entered promiscuous mode [ 107.746054][ T5812] veth0_macvtap: entered promiscuous mode [ 107.786996][ T5812] veth1_macvtap: entered promiscuous mode [ 107.842711][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.936674][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.936696][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.960217][ T5811] veth0_macvtap: entered promiscuous mode [ 107.965925][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.011804][ T5811] veth1_macvtap: entered promiscuous mode [ 108.024205][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.081486][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.081505][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.082748][ T1449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.101052][ T1449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.119486][ T1449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.135221][ T1449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.146496][ T5823] veth0_macvtap: entered promiscuous mode [ 108.180023][ T5823] veth1_macvtap: entered promiscuous mode [ 108.240701][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.298860][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.432407][ T1495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.448435][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.448644][ T1495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.452464][ T1495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.494159][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.534832][ T1495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.539793][ T5933] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 108.583394][ T5933] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.604201][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.674583][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 108.719721][ T5899] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.719754][ T5899] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.719778][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.720997][ T5899] usb 4-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 108.721031][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.783603][ T1495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.783621][ T1495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.809886][ T5899] usb 4-1: config 0 descriptor?? [ 108.836122][ T1495] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.911028][ T1495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.926499][ T1495] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.976082][ T1495] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.110692][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.110712][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.284778][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 109.284893][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 109.320008][ T5899] usb 4-1: USB disconnect, device number 2 [ 109.393401][ T1495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.393421][ T1495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.463601][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.542166][ T1449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.542187][ T1449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.623609][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 109.631156][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.631195][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.662181][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.662218][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.662235][ T10] usb 1-1: Product: syz [ 109.662248][ T10] usb 1-1: Manufacturer: syz [ 109.662262][ T10] usb 1-1: SerialNumber: syz [ 109.701669][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.701687][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.973523][ T10] usb 1-1: 0:2 : does not exist [ 109.989257][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 110.013339][ T1449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.013360][ T1449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.119851][ T10] usb 1-1: USB disconnect, device number 2 [ 110.378604][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.445153][ T1248] IPVS: starting estimator thread 0... [ 110.522093][ T5897] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.543249][ T5954] IPVS: using max 7 ests per chain, 16800 per kthread [ 110.687398][ T5897] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 110.687429][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.687447][ T5897] usb 3-1: Product: syz [ 110.687461][ T5897] usb 3-1: Manufacturer: syz [ 110.687475][ T5897] usb 3-1: SerialNumber: syz [ 110.694393][ T5899] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.860869][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.860976][ T5899] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 110.861000][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.048133][ T5899] usb 2-1: config 0 descriptor?? [ 111.193700][ T5899] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 111.437902][ T5953] IPVS: sh: TCP [::]:0 - no destination available [ 111.577143][ T5160] bcm5974 2-1:0.0: could not read from device [ 111.707601][ T5160] bcm5974 2-1:0.0: could not read from device [ 111.821553][ T5899] usb 2-1: USB disconnect, device number 2 [ 111.822719][ T5160] bcm5974 2-1:0.0: could not read from device [ 112.064297][ T5897] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 112.064358][ T5897] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.066063][ T5897] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.071360][ T5940] udevd[5940]: Error opening device "/dev/input/event4": No such file or directory [ 112.071492][ T5940] udevd[5940]: Unable to EVIOCGABS device "/dev/input/event4" [ 112.071608][ T5940] udevd[5940]: Unable to EVIOCGABS device "/dev/input/event4" [ 112.092638][ T5940] udevd[5940]: Unable to EVIOCGABS device "/dev/input/event4" [ 112.092767][ T5940] udevd[5940]: Unable to EVIOCGABS device "/dev/input/event4" [ 112.181721][ T5953] syz.1.12 (5953) used greatest stack depth: 18616 bytes left [ 112.192135][ T5897] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 112.355466][ T5897] usb 3-1: USB disconnect, device number 2 [ 112.394661][ T38] audit: type=1326 audit(1761021451.239:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5986 comm="syz.1.20" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82502fefc9 code=0x0 [ 113.803634][ T6013] capability: warning: `syz.2.30' uses deprecated v2 capabilities in a way that may be insecure [ 113.807902][ T6013] process 'syz.2.30' launched '/dev/fd/3' with NULL argv: empty string added [ 114.443580][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.605826][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.605864][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.607443][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.607471][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.607491][ T10] usb 5-1: SerialNumber: syz [ 114.755851][ T5884] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.874950][ T10] usb 5-1: 0:2 : does not exist [ 115.129248][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 115.131540][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.131567][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.131604][ T5884] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 115.131625][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.195517][ T5884] usb 2-1: config 0 descriptor?? [ 115.202092][ T10] usb 5-1: USB disconnect, device number 2 [ 115.488906][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.542812][ T6046] Zero length message leads to an empty skb [ 115.814398][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 115.814517][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 115.820353][ T5884] usb 2-1: USB disconnect, device number 3 [ 115.853639][ T49] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.014726][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 116.020011][ T49] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 116.020037][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.020056][ T49] usb 4-1: Product: syz [ 116.020069][ T49] usb 4-1: Manufacturer: syz [ 116.020082][ T49] usb 4-1: SerialNumber: syz [ 116.046887][ T49] usb 4-1: config 0 descriptor?? [ 116.072439][ T49] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 116.145299][ T6058] vivid-000: disconnect [ 116.152508][ T6057] vivid-000: reconnect [ 116.613640][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.903563][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 116.911901][ T5897] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.931436][ T5897] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 116.931833][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.931854][ T5897] usb 1-1: Product: syz [ 116.931868][ T5897] usb 1-1: Manufacturer: syz [ 116.931881][ T5897] usb 1-1: SerialNumber: syz [ 117.004985][ T5897] usb 1-1: config 0 descriptor?? [ 117.458851][ T5897] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 117.458896][ T5897] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 117.681351][ T5897] usb 1-1: USB disconnect, device number 3 [ 117.718016][ T49] gspca_stk1135: reg_w 0x200 err -71 [ 117.719085][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719098][ T49] gspca_stk1135: Sensor write failed [ 117.719135][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719146][ T49] gspca_stk1135: Sensor write failed [ 117.719181][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719191][ T49] gspca_stk1135: Sensor read failed [ 117.719226][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719236][ T49] gspca_stk1135: Sensor read failed [ 117.719243][ T49] gspca_stk1135: Detected sensor type unknown (0x0) [ 117.719293][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719309][ T49] gspca_stk1135: Sensor read failed [ 117.719345][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719355][ T49] gspca_stk1135: Sensor read failed [ 117.719398][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719407][ T49] gspca_stk1135: Sensor write failed [ 117.719443][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 117.719453][ T49] gspca_stk1135: Sensor write failed [ 117.719546][ T49] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 117.831979][ T49] usb 4-1: USB disconnect, device number 3 [ 118.673694][ T5955] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.943693][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 118.954769][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.954807][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.954853][ T5955] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 118.954880][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.971845][ T5955] usb 4-1: config 0 descriptor?? [ 119.598657][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 119.598785][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 119.635585][ T5955] usb 4-1: USB disconnect, device number 4 [ 120.683607][ T5884] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.752911][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.303931][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 123.304311][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 123.304640][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 123.304759][ T5884] usb 1-1: device descriptor read/all, error -32 [ 123.573574][ T5876] usb 2-1: device not accepting address 4, error -71 [ 123.714587][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.910880][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.910910][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.910930][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.910969][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.910990][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.967579][ T9] usb 5-1: config 0 descriptor?? [ 123.988849][ T6168] netlink: 43 bytes leftover after parsing attributes in process `syz.3.88'. [ 124.103829][ T6170] syz.2.89 uses obsolete (PF_INET,SOCK_PACKET) [ 124.578223][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 124.578346][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.610216][ T9] usb 5-1: USB disconnect, device number 3 [ 126.003572][ T49] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.154660][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 126.156966][ T49] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 126.157025][ T49] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 126.157054][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.157078][ T49] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.157121][ T49] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.157144][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.212636][ T49] usbtmc 4-1:16.0: bulk endpoints not found [ 126.353684][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.515141][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 126.544426][ T31] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 126.544458][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.544541][ T31] usb 5-1: Product: syz [ 126.544557][ T31] usb 5-1: Manufacturer: syz [ 126.544572][ T31] usb 5-1: SerialNumber: syz [ 126.665292][ T31] usb 5-1: config 0 descriptor?? [ 126.708956][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 126.946515][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.98'. [ 128.726748][ T5955] usb 4-1: USB disconnect, device number 5 [ 128.933988][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.115682][ T9] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 129.115711][ T9] usb 1-1: config 160 has no interface number 0 [ 129.115764][ T9] usb 1-1: config 160 interface 200 has no altsetting 0 [ 129.122618][ T9] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 129.122647][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.122668][ T9] usb 1-1: Product: syz [ 129.122683][ T9] usb 1-1: Manufacturer: syz [ 129.122698][ T9] usb 1-1: SerialNumber: syz [ 129.348974][ T31] gspca_stk1135: reg_w 0x200 err -71 [ 129.350025][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350037][ T31] gspca_stk1135: Sensor write failed [ 129.350069][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350078][ T31] gspca_stk1135: Sensor write failed [ 129.350108][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350118][ T31] gspca_stk1135: Sensor read failed [ 129.350148][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350164][ T31] gspca_stk1135: Sensor read failed [ 129.350170][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 129.350202][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350210][ T31] gspca_stk1135: Sensor read failed [ 129.350237][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350244][ T31] gspca_stk1135: Sensor read failed [ 129.350271][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350279][ T31] gspca_stk1135: Sensor write failed [ 129.350306][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 129.350314][ T31] gspca_stk1135: Sensor write failed [ 129.350400][ T31] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 129.365673][ T31] usb 5-1: USB disconnect, device number 4 [ 130.404818][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.404936][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 130.761160][ T9] usb 1-1: USB disconnect, device number 6 [ 130.916745][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.075457][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.075490][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.075512][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.075556][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.075579][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.139694][ T31] usb 4-1: config 0 descriptor?? [ 131.226693][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 131.374813][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.589071][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 131.589204][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 131.612378][ T31] usb 4-1: USB disconnect, device number 6 [ 131.924626][ T5955] IPVS: starting estimator thread 0... [ 132.015128][ T6245] IPVS: using max 7 ests per chain, 16800 per kthread [ 132.081320][ T6246] netlink: 48 bytes leftover after parsing attributes in process `syz.0.110'. [ 132.203657][ T5955] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.358427][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.358475][ T5955] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 132.358498][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.418062][ T5955] usb 5-1: config 0 descriptor?? [ 132.443888][ T5955] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 132.656261][ T5160] bcm5974 5-1:0.0: could not read from device [ 133.007464][ T5876] kernel write not supported for file /52/sched (pid: 5876 comm: kworker/1:3) [ 133.756040][ T5955] usb 5-1: USB disconnect, device number 5 [ 133.983100][ T5952] udevd[5952]: Error opening device "/dev/input/event4": No such file or directory [ 133.983265][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 133.983385][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 134.030076][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 134.030216][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 136.018595][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.214054][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 137.217970][ T10] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.217998][ T10] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.218033][ T10] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.218070][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 137.221672][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.221698][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.221719][ T10] usb 5-1: Product: syz [ 137.221734][ T10] usb 5-1: Manufacturer: syz [ 137.221748][ T10] usb 5-1: SerialNumber: syz [ 137.523571][ T5884] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.715068][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.715113][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.715135][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.715176][ T5884] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 137.715199][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.785187][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 137.809735][ T5884] usb 4-1: config 0 descriptor?? [ 138.300033][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.455560][ T49] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.746649][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.746753][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.876762][ T990] usb 5-1: USB disconnect, device number 6 [ 138.893647][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 138.897209][ T5876] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 138.897232][ T5876] usb 2-1: config 0 has no interface number 0 [ 138.897279][ T5876] usb 2-1: config 0 interface 12 has no altsetting 0 [ 138.945835][ T990] usblp0: removed [ 138.947697][ T5876] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 138.947724][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.947747][ T5876] usb 2-1: Product: syz [ 138.947762][ T5876] usb 2-1: Manufacturer: syz [ 138.947777][ T5876] usb 2-1: SerialNumber: syz [ 138.964185][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 138.966474][ T49] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.966497][ T49] usb 1-1: config 0 has no interface number 0 [ 138.969781][ T49] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 138.969805][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.969823][ T49] usb 1-1: Product: syz [ 138.969836][ T49] usb 1-1: Manufacturer: syz [ 138.969850][ T49] usb 1-1: SerialNumber: syz [ 139.411088][ T49] usb 1-1: config 0 descriptor?? [ 139.418077][ T5876] usb 2-1: config 0 descriptor?? [ 139.450099][ T49] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 139.506057][ T5884] nintendo 0003:057E:2019.0001: unknown main item tag 0x3 [ 139.589177][ T5884] nintendo 0003:057E:2019.0001: hidraw0: USB HID v80.00 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 139.625091][ T49] gspca_spca1528: reg_w err -71 [ 139.643677][ T49] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 139.655348][ T5884] nintendo 0003:057E:2019.0001: Failed to get joycon info; ret=-38 [ 139.655385][ T5884] nintendo 0003:057E:2019.0001: Failed to retrieve controller info; ret=-38 [ 139.655406][ T5884] nintendo 0003:057E:2019.0001: Failed to initialize controller; ret=-38 [ 139.713358][ T49] usb 1-1: USB disconnect, device number 7 [ 139.783113][ T6319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.137'. [ 139.824294][ T5884] nintendo 0003:057E:2019.0001: probe - fail = -38 [ 139.824460][ T5884] nintendo 0003:057E:2019.0001: probe with driver nintendo failed with error -38 [ 139.921162][ T5884] usb 4-1: USB disconnect, device number 7 [ 139.972531][ T6320] fido_id[6320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 140.705918][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.497828][ T6335] tipc: Started in network mode [ 141.497870][ T6335] tipc: Node identity ac14140f, cluster identity 4711 [ 141.498855][ T6335] tipc: New replicast peer: 255.255.255.255 [ 141.534649][ T6335] tipc: Enabled bearer , priority 10 [ 142.150291][ T6342] 9pnet_fd: Insufficient options for proto=fd [ 142.626083][ T5884] tipc: Node number set to 2886997007 [ 142.694383][ T5876] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 142.694469][ T5876] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 142.694487][ T5876] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 142.694588][ T5876] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 142.971034][ T5876] usb 2-1: USB disconnect, device number 6 [ 143.012623][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.473727][ T49] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.498739][ T6362] kvm: pic: single mode not supported [ 143.498845][ T6362] kvm: pic: level sensitive irq not supported [ 143.498901][ T6362] kvm: pic: single mode not supported [ 143.498912][ T6362] kvm: pic: level sensitive irq not supported [ 143.574931][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.623590][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 143.626079][ T49] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.632261][ T49] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 143.632289][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.632309][ T49] usb 1-1: Product: syz [ 143.632323][ T49] usb 1-1: Manufacturer: syz [ 143.632337][ T49] usb 1-1: SerialNumber: syz [ 143.661330][ T49] usb 1-1: config 0 descriptor?? [ 143.672026][ T49] gs_usb 1-1:0.0: Required endpoints not found [ 143.784314][ T5884] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.784341][ T5884] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.784359][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.784414][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 143.784446][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.787578][ T5884] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.787605][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.787625][ T5884] usb 3-1: Product: syz [ 143.787640][ T5884] usb 3-1: Manufacturer: syz [ 143.866117][ T5884] cdc_wdm 3-1:1.0: skipping garbage [ 143.866139][ T5884] cdc_wdm 3-1:1.0: skipping garbage [ 144.013179][ T6375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.143623][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 144.146836][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.150627][ T5884] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 144.150660][ T5884] cdc_wdm 3-1:1.0: Unknown control protocol [ 144.211313][ T5876] usb 3-1: USB disconnect, device number 3 [ 144.313580][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 144.318764][ T49] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 144.318791][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.318812][ T49] usb 4-1: Product: syz [ 144.318827][ T49] usb 4-1: Manufacturer: syz [ 144.318842][ T49] usb 4-1: SerialNumber: syz [ 144.336512][ T49] usb 4-1: config 0 descriptor?? [ 144.375126][ T6380] netlink: 48 bytes leftover after parsing attributes in process `syz.1.161'. [ 144.376496][ T49] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 144.943949][ T5876] IPVS: starting estimator thread 0... [ 145.034980][ T6390] IPVS: using max 8 ests per chain, 19200 per kthread [ 145.413691][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.487637][ T49] gspca_stk1135: reg_w 0x5 err -110 [ 145.488687][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.488699][ T49] gspca_stk1135: Sensor write failed [ 145.488731][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.488741][ T49] gspca_stk1135: Sensor write failed [ 145.488773][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.488782][ T49] gspca_stk1135: Sensor read failed [ 145.488815][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.488824][ T49] gspca_stk1135: Sensor read failed [ 145.488830][ T49] gspca_stk1135: Detected sensor type unknown (0x0) [ 145.488867][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.488876][ T49] gspca_stk1135: Sensor read failed [ 145.488927][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.488936][ T49] gspca_stk1135: Sensor read failed [ 145.488969][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.488979][ T49] gspca_stk1135: Sensor write failed [ 145.489012][ T49] gspca_stk1135: serial bus timeout: status=0x00 [ 145.489022][ T49] gspca_stk1135: Sensor write failed [ 145.489133][ T49] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 145.495348][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.677471][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.677524][ T5876] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00 [ 145.677548][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.716268][ T5876] usb 3-1: config 0 descriptor?? [ 145.731625][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 145.850066][ T6398] 9pnet_fd: Insufficient options for proto=fd [ 145.930424][ T5160] bcm5974 3-1:0.0: could not read from device [ 146.018644][ T5876] usb 3-1: USB disconnect, device number 4 [ 146.125403][ T5952] udevd[5952]: Error opening device "/dev/input/event4": No such file or directory [ 146.125459][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 146.125504][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 146.125548][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 146.125594][ T5952] udevd[5952]: Unable to EVIOCGABS device "/dev/input/event4" [ 146.125644][ T5952] udevd[5952]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 146.209358][ T5175] udevd[5175]: worker [5952] terminated by signal 6 (Aborted) [ 146.209416][ T5175] udevd[5175]: worker [5952] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7/event4' [ 146.328026][ T5884] usb 1-1: USB disconnect, device number 8 [ 146.645161][ T5955] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.800673][ T5955] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.800710][ T5955] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.800749][ T5955] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.800771][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.814845][ T6408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.877201][ T5955] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.024350][ T990] usb 4-1: USB disconnect, device number 8 [ 147.093786][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.175587][ T5955] usb 2-1: USB disconnect, device number 7 [ 147.382273][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.404977][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 147.409206][ T10] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 147.409265][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 147.409291][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.409316][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 147.409342][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 147.409365][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.409406][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.409428][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.611988][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.802779][ T6433] netlink: 48 bytes leftover after parsing attributes in process `syz.3.181'. [ 147.996671][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.293755][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 148.293807][ T10] usbtmc 3-1:16.0: can't read capabilities [ 148.514928][ T990] usb 3-1: USB disconnect, device number 5 [ 148.584329][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.591516][ T5955] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.749183][ T5955] usb 1-1: no configurations [ 148.749206][ T5955] usb 1-1: can't read configurations, error -22 [ 148.893666][ T5955] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.984649][ T6447] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 149.065385][ T5955] usb 1-1: no configurations [ 149.065405][ T5955] usb 1-1: can't read configurations, error -22 [ 149.065731][ T5955] usb usb1-port1: attempt power cycle [ 149.425245][ T5955] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.447510][ T5955] usb 1-1: no configurations [ 149.447524][ T5955] usb 1-1: can't read configurations, error -22 [ 149.503616][ T990] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.583782][ T5955] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.608165][ T5955] usb 1-1: no configurations [ 149.608178][ T5955] usb 1-1: can't read configurations, error -22 [ 149.608562][ T5955] usb usb1-port1: unable to enumerate USB device [ 149.658518][ T990] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 149.658548][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.658569][ T990] usb 3-1: Product: syz [ 149.658583][ T990] usb 3-1: Manufacturer: syz [ 149.658599][ T990] usb 3-1: SerialNumber: syz [ 149.793607][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.205159][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.223595][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 150.225979][ T9] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.226011][ T9] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.226035][ T9] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.226062][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 150.232936][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 150.232982][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.233002][ T9] usb 2-1: Product: syz [ 150.233016][ T9] usb 2-1: Manufacturer: syz [ 150.233031][ T9] usb 2-1: SerialNumber: syz [ 150.411486][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.751392][ T6471] netlink: 48 bytes leftover after parsing attributes in process `syz.4.194'. [ 151.137410][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.157485][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 151.174557][ T9] usb 2-1: USB disconnect, device number 8 [ 151.337506][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.354664][ T9] usblp0: removed [ 151.423735][ T5957] udevd[5957]: setting mode of /dev/bus/usb/002/008 to 020664 failed: No such file or directory [ 151.423957][ T5957] udevd[5957]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=7 failed: No such file or directory [ 151.917235][ T990] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 151.918149][ T990] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 152.139134][ T990] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 152.139196][ T990] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 152.140091][ T990] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 152.191333][ T990] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 152.225609][ T990] usb 3-1: USB disconnect, device number 6 [ 152.813298][ T6501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.207'. [ 154.293654][ T990] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.448801][ T990] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 154.448832][ T990] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 154.448883][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.448902][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.448917][ T990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.448946][ T990] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 154.448963][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.455935][ T990] usb 2-1: config 0 descriptor?? [ 154.505359][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.507331][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.563667][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.653705][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 154.661882][ T5876] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.661912][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.714012][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 154.723714][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 154.735806][ T5884] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.735837][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.752289][ T31] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 154.752325][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.752348][ T31] usb 3-1: Product: syz [ 154.752365][ T31] usb 3-1: Manufacturer: syz [ 154.752610][ T31] usb 3-1: SerialNumber: syz [ 154.827585][ T5884] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.827608][ T5884] pvrusb2: ********** [ 154.827615][ T5884] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.827628][ T5884] pvrusb2: Important functionality might not be entirely working. [ 154.827637][ T5884] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.827648][ T5884] pvrusb2: ********** [ 154.833050][ T5876] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.833066][ T5876] pvrusb2: ********** [ 154.833072][ T5876] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.833082][ T5876] pvrusb2: Important functionality might not be entirely working. [ 154.833241][ T31] usb 3-1: config 0 descriptor?? [ 154.833335][ T5876] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.833347][ T5876] pvrusb2: ********** [ 154.955380][ T2373] pvrusb2: Invalid write control endpoint [ 154.979265][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 155.110332][ T2373] pvrusb2: Invalid write control endpoint [ 155.110348][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.110358][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.110366][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.110381][ T2373] pvrusb2: Device being rendered inoperable [ 155.160093][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 155.160493][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 155.164697][ T5876] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.199698][ T2373] pvrusb2: Attached sub-driver cx25840 [ 155.199726][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.199738][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.199774][ T2373] pvrusb2: Invalid write control endpoint [ 155.220333][ T5899] usb 1-1: USB disconnect, device number 13 [ 155.316010][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.316041][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.316082][ T5876] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.316098][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.333214][ T990] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0002/input/input8 [ 155.521408][ T2373] pvrusb2: Invalid write control endpoint [ 155.521422][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.521431][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.521438][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.521447][ T2373] pvrusb2: Device being rendered inoperable [ 155.521517][ T2373] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 155.522421][ T2373] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 155.594850][ T2373] pvrusb2: Attached sub-driver cx25840 [ 155.594867][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.594878][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.648032][ T5876] usb 4-1: config 0 descriptor?? [ 155.737069][ T5876] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 155.870260][ T990] uclogic 0003:28BD:0909.0002: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 155.882007][ T49] usb 5-1: USB disconnect, device number 7 [ 156.100398][ T990] usb 2-1: USB disconnect, device number 9 [ 156.532669][ T31] gspca_stk1135: reg_w 0x200 err -71 [ 156.535684][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.535704][ T31] gspca_stk1135: Sensor write failed [ 156.535743][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.535760][ T31] gspca_stk1135: Sensor write failed [ 156.535799][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.535811][ T31] gspca_stk1135: Sensor read failed [ 156.535849][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.535860][ T31] gspca_stk1135: Sensor read failed [ 156.535868][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 156.535917][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.535928][ T31] gspca_stk1135: Sensor read failed [ 156.535966][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.535976][ T31] gspca_stk1135: Sensor read failed [ 156.536020][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.536031][ T31] gspca_stk1135: Sensor write failed [ 156.536069][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 156.536080][ T31] gspca_stk1135: Sensor write failed [ 156.536181][ T31] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 156.582013][ T31] usb 3-1: USB disconnect, device number 7 [ 157.213591][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 157.363652][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 157.366791][ T31] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.366825][ T31] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.366850][ T31] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.366877][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 157.367534][ T5884] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.370014][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 157.370040][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.370069][ T31] usb 1-1: Product: syz [ 157.370083][ T31] usb 1-1: Manufacturer: syz [ 157.370098][ T31] usb 1-1: SerialNumber: syz [ 157.623429][ T31] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 157.646727][ T5884] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.646758][ T5884] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.646779][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.646835][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 157.646861][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 157.651747][ T31] usb 1-1: USB disconnect, device number 14 [ 157.694228][ T5884] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.694265][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.694286][ T5884] usb 2-1: Product: syz [ 157.694301][ T5884] usb 2-1: Manufacturer: syz [ 157.774339][ T5955] usb 4-1: USB disconnect, device number 9 [ 157.858754][ T31] usblp0: removed [ 157.879838][ T5884] cdc_wdm 2-1:1.0: skipping garbage [ 157.879858][ T5884] cdc_wdm 2-1:1.0: skipping garbage [ 157.923744][ T49] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.923898][ T5884] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 157.923915][ T5884] cdc_wdm 2-1:1.0: Unknown control protocol [ 158.013710][ T990] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.076730][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 158.082767][ T49] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 158.082797][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.101223][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 158.101243][ T49] pvrusb2: ********** [ 158.101252][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 158.101272][ T49] pvrusb2: Important functionality might not be entirely working. [ 158.101283][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 158.101296][ T49] pvrusb2: ********** [ 158.163708][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 158.168800][ T990] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 158.170028][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.257326][ T990] pvrusb2: Hardware description: Terratec Grabster AV400 [ 158.257346][ T990] pvrusb2: ********** [ 158.257354][ T990] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 158.257365][ T990] pvrusb2: Important functionality might not be entirely working. [ 158.257758][ T990] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 158.257773][ T990] pvrusb2: ********** [ 158.352417][ T2373] pvrusb2: Invalid write control endpoint [ 158.413770][ T49] usb 2-1: USB disconnect, device number 10 [ 158.559759][ T990] usb 5-1: USB disconnect, device number 8 [ 158.619897][ T2373] pvrusb2: Invalid write control endpoint [ 158.619913][ T2373] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 158.619923][ T2373] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 158.619931][ T2373] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 158.619941][ T2373] pvrusb2: Device being rendered inoperable [ 158.620401][ T2373] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 158.620458][ T2373] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 158.682672][ T2373] pvrusb2: Attached sub-driver cx25840 [ 158.682688][ T2373] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 158.682699][ T2373] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 158.682741][ T2373] pvrusb2: Invalid write control endpoint [ 158.717583][ T6572] ------------[ cut here ]------------ [ 158.717597][ T6572] refcount_t: addition on 0; use-after-free. [ 158.718285][ T6572] WARNING: CPU: 1 PID: 6572 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 158.718332][ T6572] Modules linked in: [ 158.718368][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.718393][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.718407][ T6572] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 158.718432][ T6572] Code: 00 00 e8 e9 f5 3d fd 5b 41 5e c3 cc cc cc cc cc e8 db f5 3d fd c6 05 b8 91 60 0a 01 90 48 c7 c7 a0 9a 3e 8b e8 e7 3d 02 fd 90 <0f> 0b 90 90 eb d7 e8 bb f5 3d fd c6 05 99 91 60 0a 01 90 48 c7 c7 [ 158.718450][ T6572] RSP: 0018:ffffc9000cdef6d8 EFLAGS: 00010246 [ 158.718467][ T6572] RAX: 07f404c01321b500 RBX: 0000000000000002 RCX: 0000000000080000 [ 158.718482][ T6572] RDX: ffffc90005d09000 RSI: 00000000000008d8 RDI: 00000000000008d9 [ 158.718496][ T6572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.718508][ T6572] R10: dffffc0000000000 R11: ffffed101712487b R12: ffffffff8b995c88 [ 158.718524][ T6572] R13: dffffc0000000000 R14: ffff88805dd48390 R15: dffffc0000000000 [ 158.718540][ T6572] FS: 00007fd67c35e6c0(0000) GS:ffff888126cc2000(0000) knlGS:0000000000000000 [ 158.718558][ T6572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.718573][ T6572] CR2: 0000001b3001eff8 CR3: 000000003a534000 CR4: 00000000003526f0 [ 158.718590][ T6572] Call Trace: [ 158.718603][ T6572] [ 158.718625][ T6572] kobject_get+0xfd/0x120 [ 158.718660][ T6572] i2c_get_adapter+0x6d/0xa0 [ 158.718692][ T6572] i2cdev_open+0x48/0x190 [ 158.718725][ T6572] chrdev_open+0x4cf/0x5e0 [ 158.718755][ T6572] ? __pfx_chrdev_open+0x10/0x10 [ 158.718782][ T6572] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 158.718814][ T6572] ? __pfx_chrdev_open+0x10/0x10 [ 158.718837][ T6572] do_dentry_open+0x9b1/0x1350 [ 158.718879][ T6572] vfs_open+0x3b/0x350 [ 158.718959][ T6572] ? path_openat+0x2ed9/0x3840 [ 158.718995][ T6572] path_openat+0x2ef1/0x3840 [ 158.719036][ T6572] ? try_to_take_rt_mutex+0x840/0xb00 [ 158.719092][ T6572] ? __pfx_path_openat+0x10/0x10 [ 158.719125][ T6572] ? do_raw_spin_lock+0x121/0x290 [ 158.719171][ T6572] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 158.719203][ T6572] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.719233][ T6572] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 158.719271][ T6572] do_filp_open+0x1fa/0x410 [ 158.719305][ T6572] ? __pfx_do_filp_open+0x10/0x10 [ 158.719335][ T6572] ? rt_mutex_slowunlock+0x493/0x8a0 [ 158.719385][ T6572] ? alloc_fd+0x64f/0x6c0 [ 158.719419][ T6572] do_sys_openat2+0x121/0x1c0 [ 158.719452][ T6572] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.719488][ T6572] ? rcu_is_watching+0x15/0xb0 [ 158.719517][ T6572] __x64_sys_openat+0x138/0x170 [ 158.719552][ T6572] do_syscall_64+0xfa/0xfa0 [ 158.719579][ T6572] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.719605][ T6572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.719627][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 158.719653][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.719673][ T6572] RIP: 0033:0x7fd67e0fd810 [ 158.719700][ T6572] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 158.719717][ T6572] RSP: 002b:00007fd67c35db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 158.719738][ T6572] RAX: ffffffffffffffda RBX: 0000000000002603 RCX: 00007fd67e0fd810 [ 158.719754][ T6572] RDX: 0000000000002603 RSI: 00007fd67c35dc10 RDI: 00000000ffffff9c [ 158.719769][ T6572] RBP: 00007fd67c35dc10 R08: 0000000000000000 R09: 00232d6332692f76 [ 158.719783][ T6572] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 158.719796][ T6572] R13: 00007fd67e356038 R14: 00007fd67e355fa0 R15: 00007ffec547dee8 [ 158.719838][ T6572] [ 158.719853][ T6572] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.719870][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.719958][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.719971][ T6572] Call Trace: [ 158.719980][ T6572] [ 158.719989][ T6572] dump_stack_lvl+0x99/0x250 [ 158.720019][ T6572] ? __asan_memcpy+0x40/0x70 [ 158.720052][ T6572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.720080][ T6572] ? __pfx__printk+0x10/0x10 [ 158.720122][ T6572] vpanic+0x237/0x6d0 [ 158.720143][ T6572] ? __pfx_vpanic+0x10/0x10 [ 158.720237][ T6572] panic+0xb9/0xc0 [ 158.720260][ T6572] ? __pfx_panic+0x10/0x10 [ 158.720299][ T6572] __warn+0x31b/0x4b0 [ 158.720320][ T6572] ? refcount_warn_saturate+0xfa/0x1d0 [ 158.720349][ T6572] ? refcount_warn_saturate+0xfa/0x1d0 [ 158.720375][ T6572] report_bug+0x2be/0x4f0 [ 158.720400][ T6572] ? refcount_warn_saturate+0xfa/0x1d0 [ 158.720426][ T6572] ? refcount_warn_saturate+0xfa/0x1d0 [ 158.720450][ T6572] ? refcount_warn_saturate+0xfc/0x1d0 [ 158.720475][ T6572] handle_bug+0x84/0x160 [ 158.720509][ T6572] exc_invalid_op+0x1a/0x50 [ 158.720542][ T6572] asm_exc_invalid_op+0x1a/0x20 [ 158.720562][ T6572] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 158.720587][ T6572] Code: 00 00 e8 e9 f5 3d fd 5b 41 5e c3 cc cc cc cc cc e8 db f5 3d fd c6 05 b8 91 60 0a 01 90 48 c7 c7 a0 9a 3e 8b e8 e7 3d 02 fd 90 <0f> 0b 90 90 eb d7 e8 bb f5 3d fd c6 05 99 91 60 0a 01 90 48 c7 c7 [ 158.720606][ T6572] RSP: 0018:ffffc9000cdef6d8 EFLAGS: 00010246 [ 158.720625][ T6572] RAX: 07f404c01321b500 RBX: 0000000000000002 RCX: 0000000000080000 [ 158.720640][ T6572] RDX: ffffc90005d09000 RSI: 00000000000008d8 RDI: 00000000000008d9 [ 158.720654][ T6572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.720668][ T6572] R10: dffffc0000000000 R11: ffffed101712487b R12: ffffffff8b995c88 [ 158.720685][ T6572] R13: dffffc0000000000 R14: ffff88805dd48390 R15: dffffc0000000000 [ 158.720720][ T6572] ? refcount_warn_saturate+0xf9/0x1d0 [ 158.720745][ T6572] kobject_get+0xfd/0x120 [ 158.720777][ T6572] i2c_get_adapter+0x6d/0xa0 [ 158.720808][ T6572] i2cdev_open+0x48/0x190 [ 158.720841][ T6572] chrdev_open+0x4cf/0x5e0 [ 158.720869][ T6572] ? __pfx_chrdev_open+0x10/0x10 [ 158.720897][ T6572] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 158.720929][ T6572] ? __pfx_chrdev_open+0x10/0x10 [ 158.720952][ T6572] do_dentry_open+0x9b1/0x1350 [ 158.720993][ T6572] vfs_open+0x3b/0x350 [ 158.721017][ T6572] ? path_openat+0x2ed9/0x3840 [ 158.721052][ T6572] path_openat+0x2ef1/0x3840 [ 158.721091][ T6572] ? try_to_take_rt_mutex+0x840/0xb00 [ 158.721153][ T6572] ? __pfx_path_openat+0x10/0x10 [ 158.721187][ T6572] ? do_raw_spin_lock+0x121/0x290 [ 158.721232][ T6572] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 158.721260][ T6572] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.721289][ T6572] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 158.721327][ T6572] do_filp_open+0x1fa/0x410 [ 158.721363][ T6572] ? __pfx_do_filp_open+0x10/0x10 [ 158.721391][ T6572] ? rt_mutex_slowunlock+0x493/0x8a0 [ 158.721441][ T6572] ? alloc_fd+0x64f/0x6c0 [ 158.721476][ T6572] do_sys_openat2+0x121/0x1c0 [ 158.721510][ T6572] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.721549][ T6572] ? rcu_is_watching+0x15/0xb0 [ 158.721581][ T6572] __x64_sys_openat+0x138/0x170 [ 158.721617][ T6572] do_syscall_64+0xfa/0xfa0 [ 158.721645][ T6572] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.721674][ T6572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.721696][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 158.721722][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.721743][ T6572] RIP: 0033:0x7fd67e0fd810 [ 158.721763][ T6572] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 158.721780][ T6572] RSP: 002b:00007fd67c35db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 158.721803][ T6572] RAX: ffffffffffffffda RBX: 0000000000002603 RCX: 00007fd67e0fd810 [ 158.721819][ T6572] RDX: 0000000000002603 RSI: 00007fd67c35dc10 RDI: 00000000ffffff9c [ 158.721834][ T6572] RBP: 00007fd67c35dc10 R08: 0000000000000000 R09: 00232d6332692f76 [ 158.721849][ T6572] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 158.721863][ T6572] R13: 00007fd67e356038 R14: 00007fd67e355fa0 R15: 00007ffec547dee8 [ 158.721898][ T6572] [ 158.722109][ T6572] Kernel Offset: disabled