last executing test programs: 4.682258531s ago: executing program 0 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) 4.607058242s ago: executing program 0 (id=642): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x3f, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0xd, 0x0, "00090001", "c9c24ba1"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.092464398s ago: executing program 2 (id=650): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x68840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) pipe2(&(0x7f0000000200), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r4, r1, 0x68, 0x1) syz_ublk_setup_queues(r0, r2, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0xfffffffe, 0x250}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4705, 0x40, 0x1000000, 0x10000007}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x20000, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf75, 0x20, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0x80, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 3.921326443s ago: executing program 2 (id=652): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000140001030000000000"], 0x24}}, 0x0) 3.820610831s ago: executing program 2 (id=654): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r1, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x90, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x20, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x8}}], 0x1, 0x0, 0x0) 2.824647284s ago: executing program 0 (id=659): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$OCFS2_IOC_REFLINK(r0, 0x4008c001, 0x0) 2.189061223s ago: executing program 2 (id=663): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x4004054) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4042, 0x0) ioctl(r0, 0x80480911, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000114000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000020000000000000000000000dca1f8de"], 0x64}}, 0x0) 2.009738141s ago: executing program 2 (id=667): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f00000001c0)={0x40, 0x14}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.632142526s ago: executing program 1 (id=672): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000140001030000000000"], 0x24}}, 0x0) 1.614682363s ago: executing program 1 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x6, 0x3, ' \x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.565160563s ago: executing program 1 (id=674): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000500), &(0x7f0000000600)={'syz', 0x1}, &(0x7f00000006c0)='0', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) 1.51384224s ago: executing program 1 (id=675): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x4004054) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4042, 0x0) ioctl(r0, 0x80480911, &(0x7f0000000440)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000114000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000000020000000000000000000000dca1f8de"], 0x64}}, 0x0) 1.330944149s ago: executing program 0 (id=676): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.228765058s ago: executing program 1 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 581.592034ms ago: executing program 1 (id=686): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c80000001010203010902200001010080000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000400)={0x0, 0x1, 0x8, "ebaa550303010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 526.489204ms ago: executing program 3 (id=679): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 475.62247ms ago: executing program 3 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x68840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) pipe2(&(0x7f0000000200), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r4, r1, 0x68, 0x1) syz_ublk_setup_queues(r0, r2, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0xfffffffe, 0x250}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4705, 0x40, 0x1000000, 0x10000007}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x20000, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf75, 0x20, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0x80, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 386.018522ms ago: executing program 3 (id=681): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x10, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001400010300000000000000002c0000"], 0x24}}, 0x0) 344.95055ms ago: executing program 0 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c0002"], 0x60}}, 0x0) 261.502941ms ago: executing program 3 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000009400004803c0001800b00010065787468647200002c000280080004400000000308000740000000170800064000000001050002000000000008000340000040010900010073797a30000000000900020073797a3200000000140000001100010000"], 0x94}}, 0xc084) 207.812287ms ago: executing program 2 (id=684): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 191.77115ms ago: executing program 3 (id=685): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, 0x0, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) 139.101588ms ago: executing program 0 (id=687): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 0s ago: executing program 3 (id=688): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="3f010000000000400b060a7000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.270226][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.271158][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.271174][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.271197][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.346071][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.346086][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.346107][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.402554][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.402571][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.402595][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.404877][ T5617] team0: Port device team_slave_0 added [ 87.433703][ T5618] team0: Port device team_slave_0 added [ 87.437996][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.438036][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.438102][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.472835][ T5617] team0: Port device team_slave_1 added [ 87.528501][ T5618] team0: Port device team_slave_1 added [ 87.552513][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.552525][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.552543][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.587223][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.587263][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.587315][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.592836][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.592870][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.592937][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.685589][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.685636][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.685699][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.778203][ T5619] hsr_slave_0: entered promiscuous mode [ 87.779167][ T5619] hsr_slave_1: entered promiscuous mode [ 87.816787][ T5616] hsr_slave_0: entered promiscuous mode [ 87.819337][ T5616] hsr_slave_1: entered promiscuous mode [ 87.821386][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 87.821639][ T5616] Cannot create hsr debugfs directory [ 87.861635][ T5618] hsr_slave_0: entered promiscuous mode [ 87.862351][ T5618] hsr_slave_1: entered promiscuous mode [ 87.863242][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 87.863261][ T5618] Cannot create hsr debugfs directory [ 87.902911][ T5617] hsr_slave_0: entered promiscuous mode [ 87.903584][ T5617] hsr_slave_1: entered promiscuous mode [ 87.904059][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 87.904077][ T5617] Cannot create hsr debugfs directory [ 88.351647][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.368970][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.370448][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.376309][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.376958][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.388786][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.394260][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.422083][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.490720][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.505919][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.516002][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.529456][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.531066][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.535866][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.536637][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.548389][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.648182][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.653719][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.673371][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.684797][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.687271][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.704601][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.720354][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.723986][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.828289][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.831348][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.832432][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.834941][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.836247][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.846033][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.852452][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.889594][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.994477][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.048956][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.064624][ T5630] Bluetooth: hci2: command tx timeout [ 89.074971][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.091557][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.107023][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.107215][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.136865][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.137898][ T5630] Bluetooth: hci1: command tx timeout [ 89.137910][ T4931] Bluetooth: hci3: command tx timeout [ 89.142598][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.142853][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.180893][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.187066][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.187149][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.215309][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.215408][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.217763][ T4931] Bluetooth: hci0: command tx timeout [ 89.244353][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.244426][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.271012][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.271099][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.329107][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.394053][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.443237][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.443334][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.486511][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.486611][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.395335][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.461688][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.541347][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.546576][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.589945][ T5619] veth0_vlan: entered promiscuous mode [ 90.627164][ T5619] veth1_vlan: entered promiscuous mode [ 90.660452][ T5616] veth0_vlan: entered promiscuous mode [ 90.696445][ T5617] veth0_vlan: entered promiscuous mode [ 90.706444][ T5616] veth1_vlan: entered promiscuous mode [ 90.741303][ T5617] veth1_vlan: entered promiscuous mode [ 90.744036][ T5618] veth0_vlan: entered promiscuous mode [ 90.791679][ T5618] veth1_vlan: entered promiscuous mode [ 90.809839][ T5619] veth0_macvtap: entered promiscuous mode [ 90.820944][ T5616] veth0_macvtap: entered promiscuous mode [ 90.831068][ T5619] veth1_macvtap: entered promiscuous mode [ 90.851707][ T5616] veth1_macvtap: entered promiscuous mode [ 90.879630][ T5617] veth0_macvtap: entered promiscuous mode [ 90.896416][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.910125][ T5617] veth1_macvtap: entered promiscuous mode [ 90.916298][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.937387][ T5618] veth0_macvtap: entered promiscuous mode [ 90.942384][ T5618] veth1_macvtap: entered promiscuous mode [ 90.945023][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.977209][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.005049][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.028912][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.035111][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.061495][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062547][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062586][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062624][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062660][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062698][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062735][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062771][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.108359][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.152609][ T4931] Bluetooth: hci2: command tx timeout [ 91.218369][ T4931] Bluetooth: hci3: command tx timeout [ 91.230436][ T4931] Bluetooth: hci1: command tx timeout [ 91.277704][ T146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.277878][ T146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.298162][ T4931] Bluetooth: hci0: command tx timeout [ 91.331239][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.331265][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.354049][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354098][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354137][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354174][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354222][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354258][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.441396][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.441425][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.487814][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.487832][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.531274][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.531296][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.613670][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.613691][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.661060][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.661077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.695861][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.761230][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.761252][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.861603][ T5767] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.917981][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.939731][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.939753][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.072821][ T5769] random: crng reseeded on system resumption [ 92.323284][ T5779] comedi comedi1: adq12b: I/O base address or length out of range [ 92.401493][ T5782] random: crng reseeded on system resumption [ 92.542375][ T5790] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 92.627132][ T5792] comedi comedi3: pcl812: I/O base address or length out of range [ 92.652937][ T5794] comedi comedi0: Minor 47 could not be opened [ 92.826411][ T5800] @0Ù: renamed from virt_wifi0 [ 92.873516][ T5798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.111854][ T4931] Bluetooth: hci2: Malformed LE Event: 0x0d [ 93.218842][ T4931] Bluetooth: hci2: command tx timeout [ 93.224055][ T5818] ±ÿ: renamed from lo (while UP) [ 93.224313][ T5798] md: could not open device unknown-block(2,0). [ 93.224378][ T5798] md: error, md_import_device() returned -6 [ 93.298635][ T4931] Bluetooth: hci3: command tx timeout [ 93.307686][ T4931] Bluetooth: hci1: command tx timeout [ 93.378086][ T4931] Bluetooth: hci0: command tx timeout [ 93.705625][ T5834] comedi comedi1: dt2801: I/O base address or length out of range [ 93.840160][ T5839] comedi comedi1: 8255: I/O base address not correctly aligned [ 93.932863][ T5844] comedi comedi1: 8255: I/O base address not correctly aligned [ 93.956942][ T4931] Bluetooth: hci2: Malformed LE Event: 0x1b [ 94.003226][ T5847] nbd: must specify an index to disconnect [ 94.507165][ T5857] comedi comedi1: 8255: I/O base address not correctly aligned [ 94.967989][ T4931] Bluetooth: hci3: ACL packet too small [ 95.110004][ T4931] Bluetooth: hci2: hcon ffff888078a94000 sent 1 < count 6 [ 95.757862][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.909808][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.911120][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 95.911203][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 95.912622][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 95.912667][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 4 [ 95.915634][ T9] usb 1-1: string descriptor 0 read error: -22 [ 95.915759][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.995135][ T9] usb 1-1: 1:1 : bogus bTerminalLink 9 [ 96.037568][ T3536] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 96.189779][ T3536] usb 4-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 96.192587][ T3536] usb 4-1: config 1 has an invalid interface number: 167 but max is 0 [ 96.192614][ T3536] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.192633][ T3536] usb 4-1: config 1 has no interface number 0 [ 96.192707][ T3536] usb 4-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 96.192732][ T3536] usb 4-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.192760][ T3536] usb 4-1: config 1 interface 167 has no altsetting 0 [ 96.210809][ T3536] usb 4-1: string descriptor 0 read error: -22 [ 96.211362][ T3536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.224677][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 96.328742][ T3536] em28xx 4-1:1.167: New device @ 1.5 Mbps (1b80:e309, interface 167, class 167) [ 96.328783][ T3536] em28xx 4-1:1.167: Device initialization failed. [ 96.328798][ T3536] em28xx 4-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 96.471552][ T9] usb 1-1: USB disconnect, device number 2 [ 96.548873][ T5704] usb 4-1: USB disconnect, device number 2 [ 96.696609][ T5885] nfs: Unknown parameter 'noi' [ 96.962400][ T4931] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 97.136975][ T5888] Zero length message leads to an empty skb [ 98.252995][ T5923] comedi comedi2: rti800: I/O base address not correctly aligned [ 98.256563][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 98.770937][ T5945] ======================================================= [ 98.770937][ T5945] WARNING: The mand mount option has been deprecated and [ 98.770937][ T5945] and is ignored by this kernel. Remove the mand [ 98.770937][ T5945] option from the mount to silence this warning. [ 98.770937][ T5945] ======================================================= [ 98.772366][ T5945] devpts: Unknown parameter 'ðצ““°þ«dv¸Ô}Ÿžð[€oÀ`’Tr¹Ö®´ž´Ã6„ [ 98.772366][ T5945] vÂw¿7É›·09]O[h¸\‰0~IZK×øüÈ•¡ÙPñ«~q^«­ÝPˆ(k¨]ß_ÍÊî>†™ ò–8Òs¸Åä>ÞÒ&»PMx{ÄçîÃUOz¥1Îos2¹þ‹zì¬cybÉÍ©Ä¿~ Z¨¡'Xkïy–˜¤¶ŽÒ„W‡î¬•ÄSg¹Â*Z½áë0x00000000ffffffff' [ 98.811238][ T5945] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04 [ 100.139751][ T5934] syz.1.73 (5934): drop_caches: 2 [ 100.773583][ T5725] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.937749][ T5979] bond0: option mode: unable to set because the bond device has slaves [ 100.945039][ T5979] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 100.947381][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 100.949105][ T5725] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 100.956054][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.016609][ T5725] usb 3-1: config 0 descriptor?? [ 101.063787][ T5725] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 101.286249][ T5725] cxusb: set interface failed [ 101.286553][ T5725] dvb-usb: bulk message failed: -22 (1/0) [ 101.355340][ T5725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.370280][ T5725] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 101.370342][ T5725] usb 3-1: media controller created [ 101.450314][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.510981][ T5989] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 101.510981][ T5989] [ 101.511133][ T5989] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 101.511325][ T5989] CIFS: Attempting to mount //127.0.0.1/share [ 101.515317][ T3536] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.628683][ T5989] CIFS: VFS: cifs_mount failed w/return code = -112 [ 101.689492][ T5725] DVB: Unable to find symbol lgdt330x_attach() [ 101.689511][ T5725] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 101.716788][ T5725] dvb-usb: bulk message failed: -22 (1/0) [ 101.716810][ T5725] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 101.742855][ T5725] usb 3-1: USB disconnect, device number 2 [ 101.883301][ T5725] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 102.063453][ T6001] capability: warning: `syz.3.90' uses 32-bit capabilities (legacy support in use) [ 102.477733][ T6009] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.487694][ T6009] netlink: 'syz.1.93': attribute type 27 has an invalid length. [ 102.514085][ T6009] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 103.236009][ T4931] Bluetooth: hci2: unexpected event for opcode 0x080f [ 103.789784][ T5630] Bluetooth: hci2: unexpected event for opcode 0x202a [ 104.007953][ T5630] Bluetooth: hci0: Malformed LE Event: 0x02 [ 104.372313][ T5630] Bluetooth: Frame is too long (len 12, expected len 4) [ 104.797774][ T5630] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 104.954787][ T6060] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 105.397831][ T6066] bond0: option mode: unable to set because the bond device has slaves [ 105.399294][ T6066] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 105.518803][ T5704] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.677310][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 105.678520][ T5704] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 105.679965][ T6082] nvmet: adding nsid 1 to subsystem testsubsys [ 105.681269][ T5704] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.681309][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.701158][ T5704] usb 3-1: config 0 descriptor?? [ 106.294484][ T6077] syz.3.117 (6077): drop_caches: 2 [ 107.222791][ T5630] Bluetooth: hci3: Malformed LE Event: 0x02 [ 108.219054][ T6122] syz.0.129 (6122): drop_caches: 2 [ 108.306286][ T5704] usb 3-1: USB disconnect, device number 3 [ 108.366955][ T3536] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 108.394583][ T6125] nvmet: disable ns before setting buffered_io value. [ 108.404387][ T6125] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 108.533046][ T3536] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.533592][ T3536] usb 2-1: not running at top speed; connect to a high speed hub [ 108.533625][ T3536] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 108.554572][ T3536] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 108.554714][ T3536] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 4 [ 108.589986][ T3536] usb 2-1: string descriptor 0 read error: -22 [ 108.590201][ T3536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.656927][ T5630] Bluetooth: hci3: command tx timeout [ 108.681138][ T3536] usb 2-1: 1:1 : bogus bTerminalLink 9 [ 108.818130][ T5630] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 108.818305][ T5630] Bluetooth: hci1: Injecting HCI hardware error event [ 108.819563][ T5630] Bluetooth: hci1: hardware error 0x00 [ 108.918043][ T3536] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 108.919884][ T6133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.989297][ T6133] md: array md0 already initialised! [ 109.176297][ T3536] usb 2-1: USB disconnect, device number 3 [ 109.706007][ T6149] comedi comedi1: dt2801: I/O base address or length out of range [ 110.087201][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.140669][ T6158] nvmet: disable ns before setting buffered_io value. [ 110.142465][ T6158] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 110.237348][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 110.238157][ T30] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 110.239332][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.245419][ T30] usb 4-1: config 0 descriptor?? [ 110.282067][ T30] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 110.486204][ T30] gspca_vc032x: reg_r err -32 [ 110.486237][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486249][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486259][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486268][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486278][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486288][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486297][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486307][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486316][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486325][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486335][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486344][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486353][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486362][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486372][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486381][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486391][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486401][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 110.486410][ T30] gspca_vc032x: Unknown sensor... [ 110.486487][ T30] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 110.623047][ T6170] @0Ù: renamed from virt_wifi0 [ 110.897194][ T5630] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 110.964437][ T6181] nvmet: disable ns before setting buffered_io value. [ 110.977493][ T6181] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 111.778668][ T6206] nvmet: disable ns before setting buffered_io value. [ 111.781830][ T6206] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 112.236807][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.326712][ T3536] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.386864][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 112.387690][ T30] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 112.389180][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.389211][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 112.389258][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.393888][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.393913][ T30] usb 2-1: Product: syz [ 112.393928][ T30] usb 2-1: Manufacturer: syz [ 112.393943][ T30] usb 2-1: SerialNumber: syz [ 112.470470][ T30] usb 2-1: config 0 descriptor?? [ 112.473982][ T6219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.475563][ T30] hub 2-1:0.0: bad descriptor, ignoring hub [ 112.475587][ T30] hub 2-1:0.0: probe with driver hub failed with error -5 [ 112.477584][ T3536] usb 3-1: Using ep0 maxpacket: 8 [ 112.482441][ T3536] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 112.513198][ T3536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.513268][ T3536] usb 3-1: Product: syz [ 112.513308][ T3536] usb 3-1: Manufacturer: syz [ 112.513353][ T3536] usb 3-1: SerialNumber: syz [ 112.544685][ T30] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 112.562229][ T3536] usb 3-1: config 0 descriptor?? [ 112.584615][ T3536] gspca_main: se401-2.14.0 probing 047d:5003 [ 112.721904][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 112.721909][ T5704] usb 2-1: USB disconnect, device number 4 [ 112.894896][ T6240] nvmet: disable ns before setting buffered_io value. [ 112.904600][ T6240] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 112.948172][ T9] usb 4-1: USB disconnect, device number 3 [ 112.975539][ T3536] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 112.975624][ T3536] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 112.996379][ T3536] usb 3-1: USB disconnect, device number 4 [ 113.164917][ T6247] nvmet: disable ns before setting buffered_io value. [ 113.172122][ T6247] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 113.613199][ T6259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.177'. [ 113.613239][ T6259] openvswitch: netlink: Flow key attr not present in new flow. [ 114.220321][ T6283] netlink: 48 bytes leftover after parsing attributes in process `syz.3.188'. [ 114.220349][ T6283] openvswitch: netlink: Flow key attr not present in new flow. [ 114.350755][ T5630] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 114.791162][ T6309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.201'. [ 114.791191][ T6309] openvswitch: netlink: Flow key attr not present in new flow. [ 115.023222][ T43] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:a5f3c5a8-cf4a-4387-b57b-3b403b68a859. [ 115.067420][ T6320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'. [ 115.067444][ T6320] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.073961][ T6322] netlink: 'syz.3.208': attribute type 4 has an invalid length. [ 115.073979][ T6322] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 115.074152][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.158907][ T6315] nvme nvme0: creating 2 I/O queues. [ 115.178102][ T6315] nvme nvme0: new ctrl: "testsubsys" [ 115.472257][ T6337] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 115.472300][ T6337] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 115.474623][ T6337] vhci_hcd vhci_hcd.0: Device attached [ 115.482604][ T6340] netlink: 48 bytes leftover after parsing attributes in process `syz.1.213'. [ 115.482654][ T6340] openvswitch: netlink: Flow key attr not present in new flow. [ 115.521540][ T6339] vhci_hcd: cannot find the pending unlink 2048 [ 115.521725][ T6339] vhci_hcd: connection closed [ 115.535938][ T43] vhci_hcd vhci_hcd.2: stop threads [ 115.536284][ T43] vhci_hcd vhci_hcd.2: release socket [ 115.536327][ T43] vhci_hcd vhci_hcd.2: disconnect device [ 116.107037][ T13] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:a5f3c5a8-cf4a-4387-b57b-3b403b68a859. [ 116.136940][ T6361] nvme nvme1: creating 2 I/O queues. [ 116.185779][ T6361] nvme nvme1: new ctrl: "testsubsys" [ 116.701318][ T6382] comedi comedi1: pcl816: I/O base address not correctly aligned [ 117.123362][ T165] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:a5f3c5a8-cf4a-4387-b57b-3b403b68a859. [ 117.141585][ T6399] nvme nvme2: creating 2 I/O queues. [ 117.179285][ T6399] nvme nvme2: new ctrl: "testsubsys" [ 117.355141][ T6413] netlink: 'syz.1.242': attribute type 4 has an invalid length. [ 117.355163][ T6413] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 117.355283][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.356289][ T6412] comedi comedi2: rti800: I/O base address not correctly aligned [ 117.889374][ T6434] comedi comedi1: dac02: I/O base address or length out of range [ 118.387938][ T6448] netlink: Conntrack attr has 12 unknown bytes [ 118.388148][ T6448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.477922][ T152] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:a5f3c5a8-cf4a-4387-b57b-3b403b68a859. [ 118.507911][ T6441] nvme nvme3: creating 2 I/O queues. [ 118.516053][ T6441] nvme nvme3: new ctrl: "testsubsys" [ 118.644606][ T6458] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.377808][ T6489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 119.377835][ T6489] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 119.378149][ T6489] vhci_hcd vhci_hcd.0: Device attached [ 119.412417][ T6491] vhci_hcd: cannot find the pending unlink 2048 [ 119.412817][ T6491] vhci_hcd: connection closed [ 119.413147][ T152] vhci_hcd vhci_hcd.0: stop threads [ 119.413172][ T152] vhci_hcd vhci_hcd.0: release socket [ 119.413201][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 119.602990][ T6496] netlink: Conntrack attr has 12 unknown bytes [ 119.603025][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.166044][ T6518] netlink: 'syz.0.291': attribute type 29 has an invalid length. [ 120.417850][ T6530] nvmet: disable ns before setting buffered_io value. [ 120.420271][ T6530] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 120.498152][ T6534] comedi comedi1: dt2817: I/O base address or length out of range [ 120.597356][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.652396][ T6538] nvmet: disable ns before setting buffered_io value. [ 120.654348][ T6538] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 120.770443][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 120.771185][ T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 120.775244][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.811175][ T9] usb 1-1: config 0 descriptor?? [ 120.830340][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 120.846769][ T6543] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 120.846790][ T6543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'. [ 120.847104][ T6543] dummy0: entered promiscuous mode [ 120.847134][ T6543] dummy0: entered allmulticast mode [ 120.853031][ T6543] bridge0: port 3(dummy0) entered blocking state [ 120.853183][ T6543] bridge0: port 3(dummy0) entered disabled state [ 120.913769][ T6543] bridge0: port 3(dummy0) entered blocking state [ 120.913977][ T6543] bridge0: port 3(dummy0) entered forwarding state [ 121.047228][ T9] gspca_vc032x: reg_r err -32 [ 121.047251][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047263][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047274][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047284][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047293][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047303][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047312][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047321][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047330][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047339][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047349][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047358][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047367][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047376][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047385][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047394][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047403][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047412][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 121.047421][ T9] gspca_vc032x: Unknown sensor... [ 121.047511][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 121.239929][ T6555] nvmet: disable ns before setting buffered_io value. [ 121.244935][ T6555] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 121.412559][ T6563] nvmet: disable ns before setting buffered_io value. [ 121.414534][ T6563] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 121.596237][ T3536] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.756924][ T3536] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 121.757936][ T3536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.757987][ T3536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.767566][ T3536] pn533_usb 2-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 121.910551][ T6579] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 121.910570][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.307'. [ 121.910671][ T6579] dummy0: entered promiscuous mode [ 121.910708][ T6579] dummy0: entered allmulticast mode [ 121.911353][ T6579] bridge0: port 3(dummy0) entered blocking state [ 121.911483][ T6579] bridge0: port 3(dummy0) entered disabled state [ 121.913496][ T6579] bridge0: port 3(dummy0) entered blocking state [ 121.913575][ T6579] bridge0: port 3(dummy0) entered forwarding state [ 121.978345][ T5725] usb 2-1: USB disconnect, device number 5 [ 122.092783][ T6583] nvmet: disable ns before setting buffered_io value. [ 122.094889][ T6583] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 122.289168][ T6590] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.311'. [ 122.323844][ T6592] netlink: 'syz.3.313': attribute type 6 has an invalid length. [ 122.323866][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 122.371174][ T6594] netlink: 'syz.2.314': attribute type 5 has an invalid length. [ 122.371196][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 122.620308][ T6604] nvmet: disable ns before setting buffered_io value. [ 122.625464][ T6604] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 122.905420][ T6618] netlink: 'syz.1.323': attribute type 6 has an invalid length. [ 122.905445][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 123.304762][ T6638] nvmet: disable ns before setting buffered_io value. [ 123.314400][ T6638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 123.441813][ T5725] usb 1-1: USB disconnect, device number 3 [ 123.630428][ T6648] nvmet: disable ns before setting buffered_io value. [ 123.650710][ T6648] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 124.034164][ T6665] nvmet: disable ns before setting buffered_io value. [ 124.038967][ T6665] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 124.218037][ T6671] nvmet: disable ns before setting buffered_io value. [ 124.223319][ T6671] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 124.456171][ T3536] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.596790][ T5717] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 124.616204][ T3536] usb 2-1: Using ep0 maxpacket: 32 [ 124.617038][ T3536] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 124.618323][ T3536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.624660][ T3536] usb 2-1: config 0 descriptor?? [ 124.646994][ T3536] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 124.766926][ T5717] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 124.768153][ T5717] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.768191][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.771796][ T5717] usb 3-1: config 0 descriptor?? [ 125.151080][ T6688] nvmet: disable ns before setting buffered_io value. [ 125.153800][ T6688] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 125.218271][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x4 [ 125.218368][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.218418][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.218898][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.218938][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.218965][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.219020][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.219048][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.219074][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.219101][ T5717] wacom 0003:056A:00D0.0001: unknown main item tag 0x0 [ 125.221178][ T5717] wacom 0003:056A:00D0.0001: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 125.311371][ T5717] wacom 0003:056A:00D0.0001: hidraw0: USB HID v0.81 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 125.315823][ T5717] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0001/input/input6 [ 125.651620][ T5717] usb 3-1: USB disconnect, device number 5 [ 125.731918][ T6699] fido_id[6699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 126.228036][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.398695][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 126.401012][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 126.402516][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.402554][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.439638][ T9] usb 1-1: config 0 descriptor?? [ 126.456223][ T5717] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.489851][ T3536] gspca_vc032x: reg_r err -32 [ 126.489868][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489879][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489889][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489899][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489909][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489919][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489928][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489938][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489974][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489984][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.489994][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490003][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490013][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490023][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490032][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490042][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490051][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490060][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.490070][ T3536] gspca_vc032x: Unknown sensor... [ 126.490173][ T3536] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 126.646789][ T5717] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 126.650344][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 126.650363][ T5717] usb 4-1: Product: syz [ 126.650373][ T5717] usb 4-1: Manufacturer: syz [ 126.870922][ T9] kye 0003:0458:5019.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 126.871672][ T9] kye 0003:0458:5019.0002: collection stack underflow [ 126.871701][ T9] kye 0003:0458:5019.0002: item 0 2 0 12 parsing failed [ 126.872631][ T9] kye 0003:0458:5019.0002: parse failed [ 126.872700][ T9] kye 0003:0458:5019.0002: probe with driver kye failed with error -22 [ 127.051343][ T5704] usb 1-1: USB disconnect, device number 4 [ 127.242657][ T5717] scsi host1: uas [ 127.259103][ C1] usb 4-1: stat urb: status -75 [ 127.286170][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 127.439078][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 127.440290][ T9] usb 3-1: config 0 interface 0 altsetting 72 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 127.440324][ T9] usb 3-1: config 0 interface 0 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.440351][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.440383][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.444056][ T9] usb 3-1: config 0 descriptor?? [ 127.445206][ T6732] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 127.487552][ C1] usb 4-1: cmd cmplt err -71 [ 127.492271][ T5717] usb 4-1: USB disconnect, device number 4 [ 127.530472][ T5717] scsi 1:0:0:0: tag#28 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 127.530536][ T5717] scsi 1:0:0:0: tag#28 CDB: Inquiry 12 00 00 00 24 00 [ 127.576173][ T5704] usb 2-1: USB disconnect, device number 6 [ 127.932698][ T9] magicmouse 0003:05AC:0324.0003: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 128.096213][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.119954][ T5704] usb 3-1: USB disconnect, device number 6 [ 128.259832][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.277794][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.277822][ T9] usb 2-1: Product: syz [ 128.277837][ T9] usb 2-1: Manufacturer: syz [ 128.277852][ T9] usb 2-1: SerialNumber: syz [ 128.379466][ T5717] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.734720][ T6768] nvmet: disable ns before setting buffered_io value. [ 128.744081][ T6768] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 128.787819][ T5704] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.936668][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 128.937643][ T5704] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 128.942642][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.974379][ T5704] usb 4-1: config 0 descriptor?? [ 128.994582][ T5704] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 129.042416][ T3536] usb 2-1: USB disconnect, device number 7 [ 129.077267][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 129.127116][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.287444][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 129.288703][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.288736][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.705404][ T9] hid-picolcd 0003:04D8:C002.0004: unbalanced collection at end of report description [ 129.708383][ T9] hid-picolcd 0003:04D8:C002.0004: device report parse failed [ 129.708750][ T9] hid-picolcd 0003:04D8:C002.0004: probe with driver hid-picolcd failed with error -22 [ 129.866339][ T5717] usb 2-1: Service connection timeout for: 257 [ 129.866366][ T5717] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 129.868264][ T5717] ath9k_htc: Failed to initialize the device [ 129.869737][ T3536] usb 2-1: ath9k_htc: USB layer deinitialized [ 129.913881][ T5725] usb 1-1: USB disconnect, device number 5 [ 130.166146][ T3536] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.294625][ T6795] Bluetooth: MGMT ver 1.23 [ 130.316191][ T3536] usb 2-1: Using ep0 maxpacket: 16 [ 130.318849][ T3536] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.318898][ T3536] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 130.320288][ T3536] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.320385][ T3536] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 130.320427][ T3536] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.323181][ T3536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.323207][ T3536] usb 2-1: Product: syz [ 130.323223][ T3536] usb 2-1: Manufacturer: syz [ 130.323265][ T3536] usb 2-1: SerialNumber: syz [ 130.628227][ T3536] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 130.639143][ T3536] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 130.820913][ T3536] usb 2-1: 2:1 : can't get High Capability descriptor [ 130.823246][ T5704] gspca_vc032x: reg_r err -32 [ 130.823261][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823273][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823282][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823291][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823301][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823310][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823320][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823329][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823338][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823348][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823357][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823367][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823376][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823386][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823395][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823404][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823413][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823422][ T5704] gspca_vc032x: I2c Bus Busy Wait 00 [ 130.823431][ T5704] gspca_vc032x: Unknown sensor... [ 130.823501][ T5704] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 131.058031][ T3536] usb 2-1: USB disconnect, device number 8 [ 131.159436][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.924547][ T3536] usb 4-1: USB disconnect, device number 5 [ 132.278191][ T5725] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.307415][ T3536] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.426189][ T5725] usb 1-1: Using ep0 maxpacket: 32 [ 132.427354][ T5725] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 132.428826][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.434380][ T5725] usb 1-1: config 0 descriptor?? [ 132.457033][ T3536] usb 4-1: Using ep0 maxpacket: 8 [ 132.460154][ T3536] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 132.471476][ T3536] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.471574][ T3536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.496465][ T5725] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 132.514929][ T3536] usb 4-1: config 0 descriptor?? [ 132.742119][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742617][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.789966][ T6867] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 132.983645][ T3536] kye 0003:0458:5019.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 132.987452][ T3536] hid_parser_main: 51 callbacks suppressed [ 132.987474][ T3536] kye 0003:0458:5019.0005: unknown main item tag 0x0 [ 132.987504][ T3536] kye 0003:0458:5019.0005: collection stack underflow [ 132.987528][ T3536] kye 0003:0458:5019.0005: item 0 2 0 12 parsing failed [ 132.988294][ T3536] kye 0003:0458:5019.0005: parse failed [ 132.988398][ T3536] kye 0003:0458:5019.0005: probe with driver kye failed with error -22 [ 133.186569][ T30] usb 4-1: USB disconnect, device number 6 [ 133.636161][ T5717] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.786191][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 133.790927][ T5717] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 133.793734][ T5717] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 133.798769][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.798839][ T5717] usb 2-1: Product: syz [ 133.798890][ T5717] usb 2-1: Manufacturer: syz [ 133.798929][ T5717] usb 2-1: SerialNumber: syz [ 133.820291][ T5717] usb 2-1: config 0 descriptor?? [ 133.848762][ T5717] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 133.848829][ T5717] usb 2-1: setting power ON [ 133.848848][ T5717] dvb-usb: bulk message failed: -22 (2/0) [ 133.881518][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.884320][ T5717] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 133.884375][ T5717] usb 2-1: media controller created [ 133.931979][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.988849][ T5717] usb 2-1: selecting invalid altsetting 6 [ 133.988876][ T5717] usb 2-1: digital interface selection failed (-22) [ 133.988892][ T5717] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 133.992476][ T5717] usb 2-1: setting power OFF [ 133.992526][ T5717] dvb-usb: bulk message failed: -22 (2/0) [ 133.992543][ T5717] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 133.992556][ T5717] (NULL device *): no alternate interface [ 134.063138][ T6878] dvb-usb: bulk message failed: -22 (3/0) [ 134.121737][ T6888] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.178627][ T5717] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 134.192791][ T5717] usb 2-1: USB disconnect, device number 9 [ 134.295389][ T5725] gspca_vc032x: reg_r err -32 [ 134.295408][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295420][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295429][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295438][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295447][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295456][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295466][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295475][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295485][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295494][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295502][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295511][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295520][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295529][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295538][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295547][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295556][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295565][ T5725] gspca_vc032x: I2c Bus Busy Wait 00 [ 134.295574][ T5725] gspca_vc032x: Unknown sensor... [ 134.295647][ T5725] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 134.546187][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.697203][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 134.697935][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 134.698834][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.698867][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.702280][ T30] usb 4-1: config 0 descriptor?? [ 134.906175][ T5717] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 135.067172][ T5717] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 135.072324][ T5717] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 135.072349][ T5717] usb 2-1: Product: syz [ 135.072363][ T5717] usb 2-1: Manufacturer: syz [ 135.072377][ T5717] usb 2-1: SerialNumber: syz [ 135.087483][ T5717] usb 2-1: config 0 descriptor?? [ 135.135022][ T30] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 135.135055][ T30] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 135.135079][ T30] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 135.135102][ T30] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 135.135125][ T30] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 135.135149][ T30] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 135.135171][ T30] logitech 0003:046D:CA04.0006: unknown main item tag 0x0 [ 135.197950][ T30] logitech 0003:046D:CA04.0006: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0 [ 135.197996][ T30] logitech 0003:046D:CA04.0006: no inputs found [ 135.318294][ T6902] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 135.321091][ T5717] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 135.347800][ T3536] usb 4-1: USB disconnect, device number 7 [ 135.430754][ T30] usb 1-1: USB disconnect, device number 6 [ 135.455447][ T6904] netlink: 822 bytes leftover after parsing attributes in process `syz.2.425'. [ 135.455488][ T6904] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 135.528234][ T5717] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 135.528313][ T5717] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 135.528395][ T5717] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 135.617207][ T5717] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 135.730969][ T5717] usb 2-1: USB disconnect, device number 10 [ 135.896171][ T3536] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.056196][ T3536] usb 3-1: Using ep0 maxpacket: 8 [ 136.056833][ T3536] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.057742][ T3536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.057763][ T3536] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.057790][ T3536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.059927][ T3536] usb 3-1: config 0 descriptor?? [ 136.176279][ T30] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.285568][ T3536] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.336153][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 136.337441][ T30] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 136.340914][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.340940][ T30] usb 4-1: Product: syz [ 136.340956][ T30] usb 4-1: Manufacturer: syz [ 136.340973][ T30] usb 4-1: SerialNumber: syz [ 136.344365][ T30] usb 4-1: config 0 descriptor?? [ 136.396308][ T30] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 136.396484][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 136.396502][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.396626][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 136.396640][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.405930][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.458486][ T30] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 136.458544][ T30] usb 4-1: media controller created [ 136.482858][ T6911] iowarrior 3-1:0.0: Error -90 while submitting URB [ 136.497070][ T25] usb 3-1: USB disconnect, device number 7 [ 136.524509][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.561968][ T30] usb 4-1: selecting invalid altsetting 3 [ 136.561991][ T30] ttusb2: set interface to alts=3 failed [ 136.580454][ T6913] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 136.580719][ T6913] dvb-usb: bulk message failed: -22 (7/0) [ 136.580736][ T6913] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 136.580804][ T6913] ttusb2: i2c transfer failed. [ 136.643507][ T30] DVB: Unable to find symbol tda10086_attach() [ 136.643525][ T30] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 136.645028][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 136.645049][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.645205][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 136.645219][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 136.645294][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 136.710154][ T30] usb 4-1: USB disconnect, device number 8 [ 136.747238][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 137.021153][ T6924] 9p: Unknown access argument 18446744073709551615: -34 [ 137.376412][ T30] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.407501][ T6944] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 137.466167][ T5717] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.537652][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 137.538205][ T30] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 137.542747][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.571510][ T30] usb 2-1: config 0 descriptor?? [ 137.591062][ T30] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 137.620686][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 137.623657][ T5717] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 137.644879][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.644905][ T5717] usb 3-1: Product: syz [ 137.644920][ T5717] usb 3-1: Manufacturer: syz [ 137.644936][ T5717] usb 3-1: SerialNumber: syz [ 137.675259][ T5717] usb 3-1: config 0 descriptor?? [ 137.694389][ T5717] gspca_main: se401-2.14.0 probing 047d:5003 [ 138.089472][ T5717] gspca_se401: Bayer format not supported! [ 138.106191][ T3536] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.216230][ T6956] nvmet: disable ns before setting buffered_io value. [ 138.218369][ T6956] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 138.267374][ T3536] usb 4-1: Using ep0 maxpacket: 16 [ 138.268300][ T3536] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 138.271240][ T3536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.271320][ T3536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.271375][ T3536] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.271497][ T3536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.288779][ T3536] usb 4-1: config 0 descriptor?? [ 138.348404][ T5717] usb 3-1: USB disconnect, device number 8 [ 138.714205][ T3536] kye 0003:0458:500F.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 138.729173][ T3536] kye 0003:0458:500F.0007: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 138.729216][ T3536] kye 0003:0458:500F.0007: tablet-enabling feature report not found [ 138.729241][ T3536] kye 0003:0458:500F.0007: tablet enabling failed [ 138.920343][ T5724] usb 4-1: USB disconnect, device number 9 [ 138.923634][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 138.971922][ T6961] 9p: Unknown access argument 18446744073709551615: -34 [ 139.188410][ T6970] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 139.260362][ T6972] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 139.407017][ T5717] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 139.408991][ T30] gspca_vc032x: reg_r err -32 [ 139.409003][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409010][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409017][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409023][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409029][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409036][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409042][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409048][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409054][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409060][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409067][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409073][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409079][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409085][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409092][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409098][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409104][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409110][ T30] gspca_vc032x: I2c Bus Busy Wait 00 [ 139.409116][ T30] gspca_vc032x: Unknown sensor... [ 139.409165][ T30] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 139.608555][ T5717] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 139.610738][ T5717] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.614802][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.614827][ T5717] usb 3-1: Product: syz [ 139.614843][ T5717] usb 3-1: Manufacturer: syz [ 139.614859][ T5717] usb 3-1: SerialNumber: syz [ 139.661031][ T3536] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.681272][ T5717] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 139.696798][ T5717] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 139.817083][ T3536] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 139.818631][ T3536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 139.818657][ T3536] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 139.818710][ T3536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 139.818733][ T3536] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 139.818774][ T3536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.825176][ T3536] usb 1-1: config 0 descriptor?? [ 140.043934][ T3536] hdpvr 1-1:0.0: firmware version 0x8 dated 5 [ 140.244922][ T3536] hdpvr 1-1:0.0: device init failed [ 140.245003][ T3536] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 140.264861][ T3536] usb 1-1: USB disconnect, device number 7 [ 140.342649][ T5717] usb 3-1: USB disconnect, device number 9 [ 140.364134][ T5717] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 140.371087][ T5717] cyberjack 3-1:1.0: device disconnected [ 140.452059][ T30] usb 2-1: USB disconnect, device number 11 [ 140.594882][ T6988] nvmet: disable ns before setting buffered_io value. [ 140.603950][ T6988] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 140.691863][ T6992] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 140.750990][ T6994] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 140.928070][ T5717] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.086351][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.098321][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 141.101015][ T5717] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 141.103778][ T5717] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 141.103800][ T5717] usb 4-1: config 0 has no interface number 0 [ 141.103840][ T5717] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 141.103865][ T5717] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 141.122018][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.122092][ T5717] usb 4-1: Product: syz [ 141.122158][ T5717] usb 4-1: Manufacturer: syz [ 141.122200][ T5717] usb 4-1: SerialNumber: syz [ 141.140826][ T5717] usb 4-1: config 0 descriptor?? [ 141.153072][ T6990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.158225][ T6990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.267914][ T3536] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 141.283924][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 141.290103][ T25] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 141.291142][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.291186][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.294167][ T25] usb 1-1: config 0 descriptor?? [ 141.370727][ T6990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.372817][ T6990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.416429][ T3536] usb 2-1: Using ep0 maxpacket: 32 [ 141.417391][ T3536] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 141.419855][ T3536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.427053][ T3536] usb 2-1: config 0 descriptor?? [ 141.459754][ T3536] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 141.577483][ T5717] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 141.775402][ T25] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0008/input/input9 [ 141.784499][ T5717] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 141.784638][ T5717] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 141.795411][ T5717] asix 4-1:0.34: probe with driver asix failed with error -71 [ 141.838291][ T5717] usb 4-1: USB disconnect, device number 10 [ 141.891178][ T25] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0008/input/input10 [ 141.923247][ T25] uclogic 0003:5543:0042.0008: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 142.079295][ T9] usb 1-1: USB disconnect, device number 8 [ 142.223864][ T7012] nvmet: disable ns before setting buffered_io value. [ 142.225840][ T7012] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 142.319840][ T7014] nvmet: disable ns before setting buffered_io value. [ 142.324050][ T7014] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 142.816940][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.936125][ T7033] nvmet: disable ns before setting buffered_io value. [ 142.939403][ T7033] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 142.980512][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 142.981924][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 142.981954][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 142.981981][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 142.982007][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 142.982070][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.048822][ T9] usb 4-1: config 0 descriptor?? [ 143.260380][ T9] hdpvr 4-1:0.0: firmware version 0x8 dated 5 [ 143.276938][ T3536] gspca_vc032x: reg_r err -32 [ 143.276950][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.276958][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.276964][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.276971][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.276977][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.276983][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.276989][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.276995][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277001][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277007][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277013][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277019][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277025][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277030][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277036][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277042][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277048][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277054][ T3536] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.277060][ T3536] gspca_vc032x: Unknown sensor... [ 143.277109][ T3536] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 143.416165][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.461695][ T9] hdpvr 4-1:0.0: device init failed [ 143.461774][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 143.480462][ T9] usb 4-1: USB disconnect, device number 11 [ 143.566446][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 143.571275][ T25] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 143.586914][ T25] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 143.590138][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.590163][ T25] usb 1-1: Product: syz [ 143.590180][ T25] usb 1-1: Manufacturer: syz [ 143.590196][ T25] usb 1-1: SerialNumber: syz [ 143.593518][ T25] usb 1-1: config 0 descriptor?? [ 143.609639][ T25] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 143.609773][ T25] usb 1-1: setting power ON [ 143.609824][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 143.635310][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.641001][ T25] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 143.641123][ T25] usb 1-1: media controller created [ 143.695077][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.728989][ T25] usb 1-1: selecting invalid altsetting 6 [ 143.729016][ T25] usb 1-1: digital interface selection failed (-22) [ 143.729031][ T25] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 143.729778][ T25] usb 1-1: setting power OFF [ 143.729798][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 143.729813][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 143.729825][ T25] (NULL device *): no alternate interface [ 143.801947][ T25] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 143.886867][ T9] usb 1-1: USB disconnect, device number 9 [ 144.093663][ T7048] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 144.307313][ T9] usb 2-1: USB disconnect, device number 12 [ 144.414634][ T7057] nvmet: disable ns before setting buffered_io value. [ 144.425458][ T7057] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 144.676343][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.737982][ T5704] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.836133][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 144.837395][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 144.842963][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.842986][ T9] usb 2-1: Product: syz [ 144.843001][ T9] usb 2-1: Manufacturer: syz [ 144.843015][ T9] usb 2-1: SerialNumber: syz [ 144.886694][ T5704] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 144.887703][ T5704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.887741][ T5704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.887769][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.890647][ T9] usb 2-1: config 0 descriptor?? [ 145.302174][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 145.315196][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.325875][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 145.325928][ T9] usb 2-1: media controller created [ 145.346655][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.370935][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.406719][ T5704] wacom 0003:056A:033B.0009: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 145.406755][ T5704] input input12: Absolute device without dev->absinfo, refusing to register [ 145.410949][ T5704] wacom 0003:056A:033B.0009: probe with driver wacom failed with error -22 [ 145.496890][ T25] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 145.508254][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 145.508308][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 145.508322][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 145.513812][ T9] usb 2-1: USB disconnect, device number 13 [ 145.522801][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.522862][ T25] usb 4-1: Product: syz [ 145.522901][ T25] usb 4-1: Manufacturer: syz [ 145.522942][ T25] usb 4-1: SerialNumber: syz [ 145.580824][ T25] ums-karma 4-1:1.0: USB Mass Storage device detected [ 145.608925][ T25] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 145.608925][ T25] Please send a copy of this message to and [ 145.643735][ T5724] usb 1-1: USB disconnect, device number 10 [ 145.674743][ T7073] fido_id[7073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 145.697675][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 145.937563][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 146.037273][ T25] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5 [ 146.044444][ T25] usb 4-1: USB disconnect, device number 12 [ 146.116857][ T7085] nvmet: disable ns before setting buffered_io value. [ 146.118417][ T7085] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 146.236536][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.360503][ T7094] netlink: 822 bytes leftover after parsing attributes in process `syz.0.501'. [ 146.398074][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 146.399561][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.439899][ T9] usb 3-1: probing VID:PID(0424:012C) [ 146.442082][ T9] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 146.442106][ T9] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 146.442125][ T9] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 146.442143][ T9] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 146.442162][ T9] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 146.511376][ T7096] xt_l2tp: invalid flags combination: 0 [ 146.738093][ T7110] nvmet: disable ns before setting buffered_io value. [ 146.740345][ T7110] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 146.861123][ T7113] nvmet: disable ns before setting buffered_io value. [ 146.862890][ T7113] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.038022][ T7120] nvmet: disable ns before setting buffered_io value. [ 147.040805][ T7120] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.211201][ T7125] netlink: 822 bytes leftover after parsing attributes in process `syz.1.512'. [ 147.273167][ T7127] xt_l2tp: invalid flags combination: 0 [ 147.396702][ T7131] nvmet: disable ns before setting buffered_io value. [ 147.403136][ T7131] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.652855][ T7138] nvmet: disable ns before setting buffered_io value. [ 147.665101][ T7138] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.718282][ T9] vub300 3-1:1.0: probe with driver vub300 failed with error -110 [ 147.865415][ T5725] usb 3-1: USB disconnect, device number 10 [ 148.015972][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.520'. [ 148.016018][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.520'. [ 148.186195][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 148.336153][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 148.338080][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 148.339691][ T25] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 148.339718][ T25] usb 4-1: config 127 has no interface number 0 [ 148.339748][ T25] usb 4-1: config 127 interface 124 has no altsetting 0 [ 148.344269][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.344294][ T25] usb 4-1: Product: syz [ 148.344309][ T25] usb 4-1: Manufacturer: syz [ 148.344324][ T25] usb 4-1: SerialNumber: syz [ 148.601408][ T7155] nvmet: disable ns before setting buffered_io value. [ 148.628904][ T7155] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 148.697803][ T7159] nvmet: disable ns before setting buffered_io value. [ 148.699767][ T7159] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 149.142580][ T7175] nvmet: disable ns before setting buffered_io value. [ 149.143159][ T7174] mmap: syz.0.534 (7174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 149.144120][ T7175] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 149.154570][ T5724] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 149.255801][ T7177] nvmet: disable ns before setting buffered_io value. [ 149.265390][ T7177] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 149.286916][ T25] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 149.294315][ T7179] nvmet: disable ns before setting buffered_io value. [ 149.312679][ T7179] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 149.327514][ T5724] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00 [ 149.328695][ T5724] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 149.328741][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 149.328769][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 149.328811][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.369033][ T5724] usb 3-1: config 0 descriptor?? [ 149.394383][ T7164] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 149.495122][ T25] usb 4-1: device firmware changed [ 149.513517][ T25] usb 4-1: USB disconnect, device number 13 [ 149.657770][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 149.817261][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 149.819099][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 149.822163][ T25] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 149.822259][ T25] usb 4-1: config 127 has no interface number 0 [ 149.822292][ T25] usb 4-1: config 127 interface 124 has no altsetting 0 [ 149.857061][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.857088][ T25] usb 4-1: Product: syz [ 149.857104][ T25] usb 4-1: Manufacturer: syz [ 149.857120][ T25] usb 4-1: SerialNumber: syz [ 149.892973][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893007][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893034][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893090][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893116][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893142][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893168][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893194][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893221][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893247][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unknown main item tag 0x0 [ 149.893273][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: unbalanced collection at end of report description [ 149.893971][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: parse failed (reason: -22) [ 149.894076][ T5724] hid-corsair-void 0003:1B1C:0A30.000A: probe with driver hid-corsair-void failed with error -22 [ 150.011906][ T7197] nvmet: disable ns before setting buffered_io value. [ 150.025358][ T7197] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 150.036238][ T5725] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 150.065195][ T5704] usb 3-1: USB disconnect, device number 11 [ 150.187322][ T5725] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.188461][ T5725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.188510][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.192569][ T5725] usb 2-1: config 0 descriptor?? [ 150.399105][ T5725] usb 2-1: USB disconnect, device number 14 [ 150.856394][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 150.949191][ T25] usb 4-1: USB disconnect, device number 14 [ 151.009183][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 151.010517][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.010566][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.016399][ T9] usb 2-1: config 0 descriptor?? [ 151.055950][ T9] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 151.245530][ T9] usb 2-1: USB disconnect, device number 15 [ 151.331122][ T7235] capability: warning: `syz.3.556' uses deprecated v2 capabilities in a way that may be insecure [ 151.420415][ T7239] Bluetooth: hci0: unsupported parameter 5161 [ 151.420432][ T7239] Bluetooth: hci0: unsupported parameter 8192 [ 151.420445][ T7239] Bluetooth: hci0: unsupported parameter 5161 [ 151.420454][ T7239] Bluetooth: hci0: unsupported parameter 8192 [ 151.569562][ T7243] netlink: 774 bytes leftover after parsing attributes in process `syz.3.559'. [ 151.569590][ T7243] netlink: 52 bytes leftover after parsing attributes in process `syz.3.559'. [ 151.606148][ T3536] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 151.757126][ T3536] usb 1-1: Using ep0 maxpacket: 8 [ 151.758139][ T3536] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 151.759939][ T3536] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 151.759980][ T3536] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.760007][ T3536] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 151.760034][ T3536] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.760068][ T3536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.804458][ T3536] usb 1-1: config 0 descriptor?? [ 152.235553][ T3536] bigben 0003:146B:0902.000B: unexpected rdesc, please submit for review [ 152.246373][ T3536] bigben 0003:146B:0902.000B: missing HID_OUTPUT_REPORT 0 [ 152.246407][ T3536] bigben 0003:146B:0902.000B: no output report found [ 152.248812][ T3536] bigben 0003:146B:0902.000B: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 152.437274][ T5724] usb 1-1: USB disconnect, device number 11 [ 152.748267][ T7280] netlink: 774 bytes leftover after parsing attributes in process `syz.2.570'. [ 152.748292][ T7280] netlink: 52 bytes leftover after parsing attributes in process `syz.2.570'. [ 152.916160][ T3536] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 153.017884][ T7288] nvmet: disable ns before setting buffered_io value. [ 153.023922][ T7288] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 153.066543][ T3536] usb 2-1: Using ep0 maxpacket: 8 [ 153.067362][ T3536] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 153.070200][ T3536] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.070248][ T3536] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 153.070275][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.072788][ T3536] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 153.072815][ T3536] usb 2-1: Product: syz [ 153.072831][ T3536] usb 2-1: Manufacturer: syz [ 153.072847][ T3536] usb 2-1: SerialNumber: syz [ 153.102732][ T3536] usb 2-1: config 0 descriptor?? [ 153.246101][ T3536] rc_core: IR keymap rc-imon-rsc not found [ 153.246119][ T3536] Registered IR keymap rc-empty [ 153.253546][ T3536] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 153.262800][ T3536] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 153.421980][ T5725] usb 2-1: USB disconnect, device number 16 [ 153.467600][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 153.647257][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 153.652911][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.652947][ T9] usb 3-1: Product: syz [ 153.652963][ T9] usb 3-1: Manufacturer: syz [ 153.652979][ T9] usb 3-1: SerialNumber: syz [ 153.669898][ T9] usb 3-1: config 0 descriptor?? [ 153.876175][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 153.894349][ T3536] usb 3-1: USB disconnect, device number 12 [ 154.027447][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 154.030482][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.030528][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=7070, bcdDevice=d4.77 [ 154.031471][ T25] usb 4-1: config 98 has an invalid interface number: 138 but max is 0 [ 154.031495][ T25] usb 4-1: config 98 has no interface number 0 [ 154.031523][ T25] usb 4-1: config 98 interface 138 has no altsetting 0 [ 154.034211][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.034235][ T25] usb 4-1: Product: syz [ 154.034250][ T25] usb 4-1: Manufacturer: syz [ 154.034265][ T25] usb 4-1: SerialNumber: syz [ 154.342172][ T7314] nvmet: disable ns before setting buffered_io value. [ 154.344029][ T7314] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 154.426335][ T5724] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.518885][ T25] dvb-usb: found a 'Hauppauge Nova-T Stick' in warm state. [ 154.536430][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.537127][ T25] dvbdev: DVB: registering new adapter (Hauppauge Nova-T Stick) [ 154.537180][ T25] usb 4-1: media controller created [ 154.581021][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.586170][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 154.600284][ T5724] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 154.612715][ T5724] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.612756][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.637764][ T5724] usb 2-1: config 0 descriptor?? [ 154.705886][ T25] DVB: Unable to find symbol dib7000p_attach() [ 154.705904][ T25] dvb-usb: no frontend was attached by 'Hauppauge Nova-T Stick' [ 154.806422][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 154.806469][ T25] Registered IR keymap rc-empty [ 154.806825][ T25] dvb-usb: could not initialize remote control. [ 154.806836][ T25] dvb-usb: Hauppauge Nova-T Stick successfully initialized and connected. [ 154.858051][ T25] usb 4-1: USB disconnect, device number 15 [ 154.991087][ T25] dvb-usb: Hauppauge Nova-T Stick successfully deinitialized and disconnected. [ 155.061625][ T5724] kye 0003:0458:5019.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 155.062138][ T5724] kye 0003:0458:5019.000C: unknown main item tag 0x6 [ 155.062219][ T5724] kye 0003:0458:5019.000C: ignoring exceeding usage max [ 155.095104][ T5724] kye 0003:0458:5019.000C: hidraw0: USB HID v0.81 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 155.095139][ T5724] kye 0003:0458:5019.000C: tablet-enabling feature report not found [ 155.095155][ T5724] kye 0003:0458:5019.000C: tablet enabling failed [ 155.195936][ T7337] nvmet: disable ns before setting buffered_io value. [ 155.208453][ T7337] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 155.287753][ T3536] usb 2-1: USB disconnect, device number 17 [ 155.536234][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 155.717074][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 155.836225][ T5717] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.878482][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 155.879579][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.908372][ T9] usb 4-1: probing VID:PID(0424:012C) [ 155.914601][ T9] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 155.914625][ T9] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 155.914643][ T9] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 155.914662][ T9] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 155.914679][ T9] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 155.997164][ T5717] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 155.998543][ T5717] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.998568][ T5717] usb 1-1: config 0 has no interface number 0 [ 155.998606][ T5717] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.998631][ T5717] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.998691][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.015184][ T5717] usb 1-1: config 0 descriptor?? [ 156.457537][ T5717] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 156.457562][ T5717] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 156.457579][ T5717] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 156.457596][ T5717] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 156.457630][ T5717] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 156.457647][ T5717] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 156.457664][ T5717] prodikeys 0003:041E:2801.000D: unknown main item tag 0x0 [ 156.467654][ T5717] prodikeys 0003:041E:2801.000D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 156.490763][ T5717] hid_prodikeys: hid-prodikeys: failed to find output report [ 156.490763][ T5717] [ 156.648109][ T5717] usb 1-1: USB disconnect, device number 12 [ 156.877676][ T5724] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 157.026271][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 157.026997][ T5724] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 157.027983][ T5724] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 157.028067][ T5724] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.028096][ T5724] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 157.028123][ T5724] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.028156][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.031106][ T5724] usb 2-1: config 0 descriptor?? [ 157.151727][ T9] vub300 4-1:1.0: probe with driver vub300 failed with error -110 [ 157.351728][ T25] usb 4-1: USB disconnect, device number 16 [ 157.444110][ T5724] bigben 0003:146B:0902.000E: unexpected rdesc, please submit for review [ 157.445659][ T5724] bigben 0003:146B:0902.000E: missing HID_OUTPUT_REPORT 0 [ 157.445679][ T5724] bigben 0003:146B:0902.000E: no output report found [ 157.472771][ T5724] bigben 0003:146B:0902.000E: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 157.496450][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 157.647783][ T5724] usb 2-1: USB disconnect, device number 18 [ 157.656660][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 157.659982][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 157.665613][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.692732][ T9] usb 1-1: config 0 descriptor?? [ 157.710546][ T9] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 157.856223][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 157.904816][ T9] cxusb: set interface failed [ 157.904836][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 157.921685][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.923738][ T9] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 157.923790][ T9] usb 1-1: media controller created [ 157.970537][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.026713][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 158.027428][ T25] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 158.028591][ T25] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.028616][ T25] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.028642][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.028674][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.033556][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 158.033570][ T9] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 158.034319][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 158.034337][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 158.034898][ T25] usb 3-1: config 0 descriptor?? [ 158.114161][ T9] usb 1-1: USB disconnect, device number 13 [ 158.162901][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 158.276303][ T5724] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 158.438316][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.438368][ T5724] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 158.439638][ T5724] usb 4-1: config index 0 descriptor too short (expected 40744, got 96) [ 158.439666][ T5724] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 158.439686][ T5724] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.439753][ T5724] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 158.439779][ T5724] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 158.439798][ T5724] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 158.439816][ T5724] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 158.439834][ T5724] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 158.442366][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.442389][ T5724] usb 4-1: Product: syz [ 158.442399][ T5724] usb 4-1: Manufacturer: syz [ 158.442408][ T5724] usb 4-1: SerialNumber: syz [ 158.486283][ T5704] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 158.589997][ T25] elan 0003:04F3:074D.000F: unknown main item tag 0x0 [ 158.590034][ T25] elan 0003:04F3:074D.000F: unknown main item tag 0x0 [ 158.590247][ T25] elan 0003:04F3:074D.000F: unbalanced collection at end of report description [ 158.591099][ T25] elan 0003:04F3:074D.000F: Hid Parse failed [ 158.591222][ T25] elan 0003:04F3:074D.000F: probe with driver elan failed with error -22 [ 158.636507][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 158.638505][ T5704] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 158.639500][ T5704] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 158.639550][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.639578][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.639606][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.642761][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.642786][ T5704] usb 2-1: Product: syz [ 158.642802][ T5704] usb 2-1: Manufacturer: syz [ 158.642818][ T5704] usb 2-1: SerialNumber: syz [ 158.670892][ T5704] usb 2-1: config 0 descriptor?? [ 158.673478][ T7393] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 158.755271][ T9] usb 3-1: USB disconnect, device number 13 [ 158.781410][ T5724] usb 4-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 158.783111][ T5724] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 158.832123][ T7395] xt_hl: Unknown TTL match mode: 29 [ 158.879732][ T5724] usb 4-1: USB disconnect, device number 17 [ 158.909758][ T5704] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 158.947098][ T5704] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 159.030044][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.036974][ T7397] nvmet: disable ns before setting buffered_io value. [ 159.050547][ T7397] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 159.363549][ C0] powermate: config urb returned -71 [ 159.364018][ C0] powermate: config urb returned -71 [ 159.364219][ C0] powermate: config urb returned -71 [ 159.364537][ T5704] usb 2-1: USB disconnect, device number 19 [ 159.364649][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 159.496318][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.586161][ T5724] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 159.656184][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 159.657077][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 159.658524][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.658555][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 159.658572][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.660299][ T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 159.660317][ T9] usb 1-1: Product: syz [ 159.660327][ T9] usb 1-1: Manufacturer: syz [ 159.660338][ T9] usb 1-1: SerialNumber: syz [ 159.662526][ T9] usb 1-1: config 0 descriptor?? [ 159.756177][ T5724] usb 3-1: Using ep0 maxpacket: 16 [ 159.756872][ T5724] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.758959][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.758983][ T5724] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.761340][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.761365][ T5724] usb 3-1: Product: syz [ 159.761382][ T5724] usb 3-1: Manufacturer: syz [ 159.761398][ T5724] usb 3-1: SerialNumber: syz [ 159.817291][ T3536] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 159.835236][ T5724] usb 3-1: 0:2 : does not exist [ 159.837203][ T9] rc_core: IR keymap rc-imon-rsc not found [ 159.837237][ T9] Registered IR keymap rc-empty [ 159.844617][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 159.853148][ T9] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 159.896809][ T9] usb 1-1: USB disconnect, device number 14 [ 159.970795][ T3536] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 159.972010][ T3536] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.972043][ T3536] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.972071][ T3536] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.972106][ T3536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.013753][ T3536] usb 4-1: config 0 descriptor?? [ 160.069616][ T5724] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 160.136444][ T5724] usb 3-1: USB disconnect, device number 14 [ 160.197185][ T6853] udevd[6853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.283923][ T7417] nvmet: disable ns before setting buffered_io value. [ 160.285468][ T7417] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 160.473818][ T3536] hid-multitouch 0003:0EEF:72C4.0010: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 160.665350][ T25] usb 4-1: USB disconnect, device number 18 [ 160.756172][ T3536] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.910759][ T3536] usb 1-1: Using ep0 maxpacket: 32 [ 160.917852][ T3536] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.917966][ T3536] usb 1-1: New USB device found, idVendor=2040, idProduct=7070, bcdDevice=d4.77 [ 160.921208][ T3536] usb 1-1: config 98 has an invalid interface number: 138 but max is 0 [ 160.921281][ T3536] usb 1-1: config 98 has no interface number 0 [ 160.921377][ T3536] usb 1-1: config 98 interface 138 has no altsetting 0 [ 160.928141][ T3536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.928205][ T3536] usb 1-1: Product: syz [ 160.928246][ T3536] usb 1-1: Manufacturer: syz [ 160.928316][ T3536] usb 1-1: SerialNumber: syz [ 161.116160][ T5724] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 161.262325][ T7445] nvmet: disable ns before setting buffered_io value. [ 161.264104][ T7445] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 161.273210][ T5724] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 161.281112][ T5724] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.281177][ T5724] usb 3-1: config 0 has no interface number 0 [ 161.281281][ T5724] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.281353][ T5724] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.281454][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.292137][ T5724] usb 3-1: config 0 descriptor?? [ 161.359423][ T3536] dvb-usb: found a 'Hauppauge Nova-T Stick' in warm state. [ 161.362643][ T3536] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.363870][ T3536] dvbdev: DVB: registering new adapter (Hauppauge Nova-T Stick) [ 161.363957][ T3536] usb 1-1: media controller created [ 161.411003][ T3536] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.500111][ T3536] DVB: Unable to find symbol dib7000p_attach() [ 161.500129][ T3536] dvb-usb: no frontend was attached by 'Hauppauge Nova-T Stick' [ 161.718267][ T3536] rc_core: IR keymap rc-dib0700-rc5 not found [ 161.718287][ T3536] Registered IR keymap rc-empty [ 161.718566][ T3536] dvb-usb: could not initialize remote control. [ 161.718577][ T3536] dvb-usb: Hauppauge Nova-T Stick successfully initialized and connected. [ 161.764458][ T3536] usb 1-1: USB disconnect, device number 15 [ 161.781824][ T5724] hid_parser_main: 12 callbacks suppressed [ 161.781847][ T5724] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 161.781875][ T5724] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 161.781901][ T5724] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 161.781932][ T5724] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 161.781956][ T5724] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 161.781980][ T5724] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 161.782004][ T5724] prodikeys 0003:041E:2801.0011: unknown main item tag 0x0 [ 161.887222][ T5724] prodikeys 0003:041E:2801.0011: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 161.893812][ T5724] hid_prodikeys: hid-prodikeys: failed to find output report [ 161.893812][ T5724] [ 161.924384][ T3536] dvb-usb: Hauppauge Nova-T Stick successfully deinitialized and disconnected. [ 161.977157][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 161.980132][ T5725] usb 3-1: USB disconnect, device number 15 [ 162.009581][ T7458] fido_id[7458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 162.126786][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.128668][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.128699][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.128717][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.128758][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.131892][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.131918][ T9] usb 2-1: Product: syz [ 162.131933][ T9] usb 2-1: Manufacturer: syz [ 162.205823][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 162.205843][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 162.220502][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 162.220530][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 162.371004][ T9] usb 2-1: USB disconnect, device number 20 [ 162.766439][ T5704] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 162.917520][ T5704] usb 1-1: not running at top speed; connect to a high speed hub [ 162.917557][ T5704] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 162.919109][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.919164][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.976693][ T5704] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 163.574800][ T5704] uvcvideo 1-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 163.576895][ T5724] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 163.595344][ T5704] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 163.595408][ T5704] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 163.595991][ T5704] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 163.644299][ T5704] usb 1-1: USB disconnect, device number 16 [ 163.686205][ T5725] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 163.731182][ T5724] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 163.734483][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.734506][ T5724] usb 3-1: Product: syz [ 163.734520][ T5724] usb 3-1: Manufacturer: syz [ 163.734533][ T5724] usb 3-1: SerialNumber: syz [ 163.741784][ T5724] usb 3-1: config 0 descriptor?? [ 163.751462][ T5724] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 163.773413][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.789493][ T5724] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 163.789680][ T5724] usb 3-1: media controller created [ 163.815019][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.837196][ T5725] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 163.837231][ T5725] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 163.838382][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.838429][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.838457][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.839811][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.839859][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.839888][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.841117][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.841162][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.841187][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.842507][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.842560][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.842586][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.843746][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.843801][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.843825][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.845065][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.845107][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.845132][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.851404][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.851526][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.851603][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.858394][ T5725] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.858520][ T5725] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.858580][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.873051][ T5725] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 163.873132][ T5725] usb 2-1: Product: syz [ 163.873158][ T5725] usb 2-1: Manufacturer: syz [ 163.873173][ T5725] usb 2-1: SerialNumber: syz [ 163.888396][ T5725] usb 2-1: config 0 descriptor?? [ 164.009251][ T3536] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 164.024954][ T5725] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 164.149631][ T5725] usb 2-1: USB disconnect, device number 21 [ 164.150654][ T5724] DVB: Unable to find symbol mt352_attach() [ 164.177721][ T5725] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 164.206142][ T3536] usb 4-1: Using ep0 maxpacket: 8 [ 164.211046][ T3536] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 164.214240][ T3536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.231800][ T3536] usb 4-1: config 0 descriptor?? [ 164.252495][ T3536] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 164.291172][ T5724] DVB: Unable to find symbol nxt6000_attach() [ 164.291187][ T5724] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 164.303076][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 164.313307][ T5724] dvb-usb: schedule remote query interval to 1000 msecs. [ 164.313369][ T5724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 164.313425][ T5724] dvb-usb: bulk message failed: -22 (7/0) [ 164.313474][ T5724] dvb-usb: bulk message failed: -22 (7/0) [ 164.334339][ T5724] usb 3-1: USB disconnect, device number 16 [ 164.420231][ T5724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 164.459844][ T3536] cxusb: set interface failed [ 164.459863][ T3536] dvb-usb: bulk message failed: -22 (1/0) [ 164.468437][ T3536] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.489620][ T3536] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 164.489673][ T3536] usb 4-1: media controller created [ 164.519504][ T3536] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.569405][ T3536] DVB: Unable to find symbol lgdt330x_attach() [ 164.569416][ T3536] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 164.569971][ T3536] dvb-usb: bulk message failed: -22 (1/0) [ 164.569983][ T3536] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 164.572126][ T3536] usb 4-1: USB disconnect, device number 19 [ 164.633509][ T3536] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 164.656921][ T6777] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 164.830920][ T6777] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.832295][ T6777] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.832318][ T6777] usb 1-1: config 0 has no interface number 0 [ 164.832371][ T6777] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 164.832397][ T6777] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 164.832436][ T6777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.891576][ T6777] usb 1-1: config 0 descriptor?? [ 164.893409][ T7517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 164.918035][ T6777] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 165.158977][ T3536] usb 1-1: USB disconnect, device number 17 [ 165.393301][ T7546] Bluetooth: hci0: unsupported parameter 5161 [ 165.393802][ T7546] Bluetooth: hci0: unsupported parameter 8192 [ 165.393820][ T7546] Bluetooth: hci0: unsupported parameter 5161 [ 165.393835][ T7546] Bluetooth: hci0: unsupported parameter 8192 [ 165.456305][ T5704] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 165.536333][ T5725] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 165.626921][ T5704] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 165.628121][ T5704] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 165.628165][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.629697][ T5704] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 165.629722][ T5704] usb 3-1: Manufacturer: syz [ 165.632535][ T5704] usb 3-1: config 0 descriptor?? [ 165.686142][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 165.688805][ T5725] usb 4-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=79.43 [ 165.696775][ T5725] usb 4-1: config 0 has an invalid interface number: 181 but max is 0 [ 165.696836][ T5725] usb 4-1: config 0 has no interface number 0 [ 165.696901][ T5725] usb 4-1: config 0 interface 181 has no altsetting 0 [ 165.726726][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.726751][ T5725] usb 4-1: Product: syz [ 165.726765][ T5725] usb 4-1: Manufacturer: syz [ 165.726780][ T5725] usb 4-1: SerialNumber: syz [ 165.735429][ T5725] usb 4-1: config 0 descriptor?? [ 165.826160][ T5704] rc_core: IR keymap rc-hauppauge not found [ 165.826176][ T5704] Registered IR keymap rc-empty [ 165.827558][ T5704] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 165.833169][ T5704] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 165.981329][ T5725] safe_serial 4-1:0.181: safe_serial converter detected [ 165.981480][ T5725] safe_serial 4-1:0.181: probe with driver safe_serial failed with error -22 [ 166.002380][ T5725] usb 4-1: USB disconnect, device number 20 [ 166.323713][ T5704] usb 3-1: USB disconnect, device number 17 [ 166.806220][ T5704] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 166.962093][ T5704] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 166.963066][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.988035][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.988061][ T5704] usb 2-1: Product: syz [ 166.988076][ T5704] usb 2-1: Manufacturer: syz [ 166.988091][ T5704] usb 2-1: SerialNumber: syz [ 166.990466][ T7583] nvmet: disable ns before setting buffered_io value. [ 166.992952][ T7583] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 167.346193][ T5725] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 167.356268][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 167.372952][ T3536] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 167.452815][ T5704] usb 2-1: cannot create comm data receiver. [ 167.453551][ T5704] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -2 [ 167.496925][ T5725] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 167.497787][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.497808][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.498648][ T5725] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 167.498664][ T5725] usb 4-1: Manufacturer: syz [ 167.500983][ T5725] usb 4-1: config 0 descriptor?? [ 167.526481][ T3536] usb 3-1: Using ep0 maxpacket: 32 [ 167.526619][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 167.537254][ T3536] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 167.537923][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 167.545020][ T3536] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.545092][ T3536] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.555122][ T3536] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 167.555241][ T3536] usb 3-1: Product: syz [ 167.555281][ T3536] usb 3-1: Manufacturer: syz [ 167.556967][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.557046][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.557113][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.557195][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.584429][ T9] usb 1-1: config 0 descriptor?? [ 167.635329][ T3536] hub 3-1:4.0: USB hub found [ 167.682149][ T5724] usb 2-1: USB disconnect, device number 22 [ 167.813126][ T3536] hub 3-1:4.0: 2 ports detected [ 167.915302][ T5725] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 167.915340][ T5725] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 167.915359][ T5725] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 167.915408][ T5725] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 167.915437][ T5725] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 167.938715][ T5725] cougar 0003:060B:700A.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 168.069746][ T9] input: HID 046d:c211 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C211.0013/input/input25 [ 168.094005][ T9] logitech 0003:046D:C211.0013: input,hidraw1: USB HID v0.00 Joystick [HID 046d:c211] on usb-dummy_hcd.0-1/input0 [ 168.094043][ T9] logitech 0003:046D:C211.0013: missing HID_OUTPUT_REPORT 0 [ 168.129984][ T5725] usb 4-1: USB disconnect, device number 21 [ 168.230548][ T3536] hub 3-1:4.0: set hub depth failed [ 168.250335][ T7591] ================================================================== [ 168.250355][ T7591] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 168.250405][ T7591] Read of size 24 at addr ffff88802c909180 by task fido_id/7591 [ 168.250429][ T7591] [ 168.250454][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: fido_id Not tainted syzkall ** replaying previous printk message ** [ 168.250454][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 168.250479][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.250497][ T7591] Call Trace: [ 168.250510][ T7591] [ 168.250519][ T7591] dump_stack_lvl+0xe8/0x150 [ 168.250548][ T7591] print_address_description+0x55/0x1e0 [ 168.250580][ T7591] ? report_descriptor_read+0xb5/0x100 [ 168.250605][ T7591] print_report+0x58/0x70 [ 168.250633][ T7591] kasan_report+0x117/0x150 [ 168.250656][ T7591] ? lock_acquire+0x115/0x350 [ 168.250688][ T7591] ? report_descriptor_read+0xb5/0x100 [ 168.250719][ T7591] kasan_check_range+0x264/0x2c0 [ 168.250742][ T7591] ? report_descriptor_read+0xb5/0x100 [ 168.250769][ T7591] __asan_memcpy+0x29/0x70 [ 168.250800][ T7591] report_descriptor_read+0xb5/0x100 [ 168.250826][ T7591] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 168.250857][ T7591] kernfs_fop_read_iter+0x434/0x6a0 [ 168.250886][ T7591] vfs_read+0x595/0xa80 [ 168.250920][ T7591] ? __pfx_vfs_read+0x10/0x10 [ 168.250950][ T7591] ? do_sys_openat2+0x14e/0x200 [ 168.250973][ T7591] ? kmem_cache_free+0x182/0x650 [ 168.251014][ T7591] ksys_read+0x150/0x270 [ 168.251044][ T7591] ? __pfx_ksys_read+0x10/0x10 [ 168.251080][ T7591] do_syscall_64+0x166/0x520 [ 168.251100][ T7591] ? trace_irq_disable+0x3b/0x140 [ 168.251132][ T7591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.251156][ T7591] ? clear_bhb_loop+0x70/0xc0 [ 168.251181][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.251203][ T7591] RIP: 0033:0x7f745f2a7407 [ 168.251228][ T7591] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.251246][ T7591] RSP: 002b:00007ffff4a2cb50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 168.251274][ T7591] RAX: ffffffffffffffda RBX: 00007f745f948880 RCX: 00007f745f2a7407 [ 168.251291][ T7591] RDX: 0000000000001000 RSI: 00007ffff4a2cba0 RDI: 0000000000000004 [ 168.251315][ T7591] RBP: 000055b03c0e5730 R08: 0000000000000000 R09: 0000000000000000 [ 168.251330][ T7591] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b03c0e4930 [ 168.251345][ T7591] R13: 00007ffff4a2cba0 R14: 0000000000000004 R15: 000055b037e604d8 [ 168.251368][ T7591] [ 168.251376][ T7591] [ 168.251386][ T7591] Allocated by task 9: [ 168.251396][ T7591] kasan_save_track+0x3e/0x80 [ 168.251428][ T7591] __kasan_kmalloc+0x93/0xb0 [ 168.251447][ T7591] __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 168.251478][ T7591] kmemdup_noprof+0x2b/0x70 [ 168.251509][ T7591] hid_open_report+0x1fa/0xf00 [ 168.251540][ T7591] lg_probe+0x29c/0x890 [ 168.251565][ T7591] hid_device_probe+0x46a/0x870 [ 168.251584][ T7591] really_probe+0x254/0xae0 [ 168.251610][ T7591] __driver_probe_device+0x1e8/0x360 [ 168.251646][ T7591] driver_probe_device+0x4f/0x240 [ 168.251672][ T7591] __device_attach_driver+0x270/0x410 [ 168.251697][ T7591] bus_for_each_drv+0x258/0x2f0 [ 168.251715][ T7591] __device_attach+0x2c4/0x450 [ 168.251738][ T7591] device_initial_probe+0xa1/0xd0 [ 168.251761][ T7591] bus_probe_device+0x12a/0x220 [ 168.251779][ T7591] device_add+0x7d7/0xb80 [ 168.251799][ T7591] hid_add_device+0x272/0x3e0 [ 168.251819][ T7591] usbhid_probe+0x9d4/0xde0 [ 168.251839][ T7591] usb_probe_interface+0x788/0xe50 [ 168.251860][ T7591] really_probe+0x254/0xae0 [ 168.251884][ T7591] __driver_probe_device+0x1e8/0x360 [ 168.251907][ T7591] driver_probe_device+0x4f/0x240 [ 168.251932][ T7591] __device_attach_driver+0x270/0x410 [ 168.251958][ T7591] bus_for_each_drv+0x258/0x2f0 [ 168.251976][ T7591] __device_attach+0x2c4/0x450 [ 168.251999][ T7591] device_initial_probe+0xa1/0xd0 [ 168.252023][ T7591] bus_probe_device+0x12a/0x220 [ 168.252040][ T7591] device_add+0x7d7/0xb80 [ 168.252060][ T7591] usb_set_configuration+0x1ad8/0x2180 [ 168.252079][ T7591] usb_generic_driver_probe+0x8d/0x150 [ 168.252109][ T7591] usb_probe_device+0x1c3/0x3b0 [ 168.252128][ T7591] really_probe+0x254/0xae0 [ 168.252153][ T7591] __driver_probe_device+0x1e8/0x360 [ 168.252177][ T7591] driver_probe_device+0x4f/0x240 [ 168.252203][ T7591] __device_attach_driver+0x270/0x410 [ 168.252228][ T7591] bus_for_each_drv+0x258/0x2f0 [ 168.252246][ T7591] __device_attach+0x2c4/0x450 [ 168.252268][ T7591] device_initial_probe+0xa1/0xd0 [ 168.252291][ T7591] bus_probe_device+0x12a/0x220 [ 168.252309][ T7591] device_add+0x7d7/0xb80 [ 168.252336][ T7591] usb_new_device+0x9aa/0x1690 [ 168.252369][ T7591] hub_event+0x28e8/0x4d30 [ 168.252386][ T7591] process_scheduled_works+0xc3d/0x1630 [ 168.252424][ T7591] worker_thread+0xa47/0xfb0 [ 168.252447][ T7591] kthread+0x38b/0x480 [ 168.252475][ T7591] ret_from_fork+0x514/0xb70 [ 168.252502][ T7591] ret_from_fork_asm+0x1a/0x30 [ 168.252530][ T7591] [ 168.252536][ T7591] The buggy address belongs to the object at ffff88802c909180 [ 168.252536][ T7591] which belongs to the cache kmalloc-32 of size 32 [ 168.252553][ T7591] The buggy address is located 0 bytes inside of [ 168.252553][ T7591] freed 32-byte region [ffff88802c909180, ffff88802c9091a0) [ 168.252574][ T7591] [ 168.252580][ T7591] The buggy address belongs to the physical page: [ 168.252598][ T7591] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c909 [ 168.252618][ T7591] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 168.252644][ T7591] page_type: f5(slab) [ 168.252664][ T7591] raw: 00fff00000000000 ffff88813ff1a780 dead000000000100 dead000000000122 [ 168.252682][ T7591] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 168.252694][ T7591] page dumped because: kasan: bad access detected [ 168.252709][ T7591] page_owner tracks the page as allocated [ 168.252717][ T7591] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2175, tgid 2175 (kworker/u8:7), ts 14842040654 [ 168.252750][ T7591] post_alloc_hook+0x1f9/0x250 [ 168.252777][ T7591] get_page_from_freelist+0x2209/0x2280 [ 168.252808][ T7591] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 168.252841][ T7591] allocate_slab+0x7d/0x620 [ 168.252863][ T7591] refill_objects+0x2d5/0x350 [ 168.252886][ T7591] __pcs_replace_empty_main+0x2c8/0x6c0 [ 168.252907][ T7591] __kmalloc_cache_noprof+0x396/0x600 [ 168.252937][ T7591] kmem_cache_free+0x156/0x650 [ 168.252966][ T7591] __fput_deferred+0x2ae/0x390 [ 168.252989][ T7591] fput_close+0x11f/0x240 [ 168.253011][ T7591] path_openat+0x170b/0x1e40 [ 168.253040][ T7591] do_file_open+0x23e/0x4a0 [ 168.253069][ T7591] do_open_execat+0x12b/0x590 [ 168.253093][ T7591] alloc_bprm+0x24/0x640 [ 168.253122][ T7591] kernel_execve+0x85/0x9a0 [ 168.253149][ T7591] call_usermodehelper_exec_async+0x20f/0x360 [ 168.253172][ T7591] page last free pid 152 tgid 152 ts 14787563599 stack trace: [ 168.253188][ T7591] __free_frozen_pages+0xc93/0xd90 [ 168.253215][ T7591] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 168.253244][ T7591] alloc_vmap_area+0xd10/0x1410 [ 168.253267][ T7591] __get_vm_area_node+0x200/0x2f0 [ 168.253292][ T7591] __vmalloc_node_range_noprof+0x340/0x1690 [ 168.253328][ T7591] __vmalloc_node_noprof+0xc2/0x100 [ 168.253354][ T7591] dup_task_struct+0x2c6/0xa00 [ 168.253376][ T7591] copy_process+0x81b/0x43e0 [ 168.253396][ T7591] kernel_clone+0x2d7/0x940 [ 168.253420][ T7591] user_mode_thread+0x115/0x180 [ 168.253444][ T7591] call_usermodehelper_exec_work+0x5c/0x230 [ 168.253466][ T7591] process_scheduled_works+0xc3d/0x1630 [ 168.253488][ T7591] worker_thread+0xa47/0xfb0 [ 168.253510][ T7591] kthread+0x38b/0x480 [ 168.253537][ T7591] ret_from_fork+0x514/0xb70 [ 168.253564][ T7591] ret_from_fork_asm+0x1a/0x30 [ 168.253602][ T7591] [ 168.253607][ T7591] Memory state around the buggy address: [ 168.253619][ T7591] ffff88802c909080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 168.253633][ T7591] ffff88802c909100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 168.253646][ T7591] >ffff88802c909180: fb fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 168.253657][ T7591] ^ [ 168.253668][ T7591] ffff88802c909200: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 168.253682][ T7591] ffff88802c909280: 00 00 04 fc fc fc fc fc 00 00 04 fc fc fc fc fc [ 168.253693][ T7591] ================================================================== [ 168.278401][ T3536] usb 3-1: USB disconnect, device number 18 [ 168.292343][ T7591] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.095692][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) [ 169.104728][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.114797][ T7591] Call Trace: [ 169.118114][ T7591] [ 169.121059][ T7591] vpanic+0x56d/0xa70 [ 169.125068][ T7591] ? rcu_is_watching+0x16/0xb0 [ 169.129859][ T7591] ? __pfx_vpanic+0x10/0x10 [ 169.134393][ T7591] ? __pfx___schedule+0x10/0x10 [ 169.139266][ T7591] panic+0xc5/0xd0 [ 169.143017][ T7591] ? __pfx_panic+0x10/0x10 [ 169.147460][ T7591] ? preempt_schedule_common+0x7f/0xd0 [ 169.152949][ T7591] ? report_descriptor_read+0xb5/0x100 [ 169.158446][ T7591] check_panic_on_warn+0x89/0xb0 [ 169.163413][ T7591] ? report_descriptor_read+0xb5/0x100 [ 169.168891][ T7591] end_report+0x73/0x170 [ 169.173151][ T7591] ? report_descriptor_read+0xb5/0x100 [ 169.178638][ T7591] kasan_report+0x128/0x150 [ 169.183157][ T7591] ? lock_acquire+0x115/0x350 [ 169.187879][ T7591] ? report_descriptor_read+0xb5/0x100 [ 169.193364][ T7591] kasan_check_range+0x264/0x2c0 [ 169.198326][ T7591] ? report_descriptor_read+0xb5/0x100 [ 169.203805][ T7591] __asan_memcpy+0x29/0x70 [ 169.208268][ T7591] report_descriptor_read+0xb5/0x100 [ 169.213632][ T7591] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 169.219111][ T7591] kernfs_fop_read_iter+0x434/0x6a0 [ 169.224332][ T7591] vfs_read+0x595/0xa80 [ 169.228510][ T7591] ? __pfx_vfs_read+0x10/0x10 [ 169.233213][ T7591] ? do_sys_openat2+0x14e/0x200 [ 169.238076][ T7591] ? kmem_cache_free+0x182/0x650 [ 169.243043][ T7591] ksys_read+0x150/0x270 [ 169.247306][ T7591] ? __pfx_ksys_read+0x10/0x10 [ 169.252096][ T7591] do_syscall_64+0x166/0x520 [ 169.256699][ T7591] ? trace_irq_disable+0x3b/0x140 [ 169.261744][ T7591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.267826][ T7591] ? clear_bhb_loop+0x70/0xc0 [ 169.272519][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.278428][ T7591] RIP: 0033:0x7f745f2a7407 [ 169.282864][ T7591] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 169.302500][ T7591] RSP: 002b:00007ffff4a2cb50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 169.310929][ T7591] RAX: ffffffffffffffda RBX: 00007f745f948880 RCX: 00007f745f2a7407 [ 169.318923][ T7591] RDX: 0000000000001000 RSI: 00007ffff4a2cba0 RDI: 0000000000000004 [ 169.326906][ T7591] RBP: 000055b03c0e5730 R08: 0000000000000000 R09: 0000000000000000 [ 169.334895][ T7591] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b03c0e4930 [ 169.342879][ T7591] R13: 00007ffff4a2cba0 R14: 0000000000000004 R15: 000055b037e604d8 [ 169.350883][ T7591] [ 169.354507][ T7591] Kernel Offset: disabled [ 169.358842][ T7591] Rebooting in 86400 seconds..