last executing test programs: 6.884833591s ago: executing program 2 (id=1091): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.813664602s ago: executing program 1 (id=1093): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000058c0)=[0x0], 0x1}) 5.750079638s ago: executing program 0 (id=1103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x12, 0x0, 0x7}]}) 5.59066446s ago: executing program 2 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x40010) 5.38252226s ago: executing program 2 (id=1108): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(r0, r1, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 5.381075132s ago: executing program 1 (id=1109): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x38}}, 0x20000000) 5.305764475s ago: executing program 0 (id=1110): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.136501281s ago: executing program 2 (id=1111): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c0d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='@') syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 5.084166198s ago: executing program 1 (id=1112): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) 4.821121668s ago: executing program 1 (id=1115): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 4.738642753s ago: executing program 0 (id=1116): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 4.509157824s ago: executing program 0 (id=1120): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000740)={{}, "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"}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffdf6, &(0x7f0000000200)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c7807e8773eed7b94fa099ab84feadec2ea95f67aba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e9b8e4fb4634f8d4c0000000d75f34bb50d8f7084000000000000000000") 4.092593568s ago: executing program 3 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14, 0xfffe}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0xfc0, 0x68, 0x0, 0xb, 0x32, 0x0, @private=0xa010100, @broadcast}, "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"}}, 0xfce) 2.602545976s ago: executing program 2 (id=1124): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 2.602153894s ago: executing program 3 (id=1125): close(0x3) inotify_init1(0x80800) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 2.397711009s ago: executing program 3 (id=1127): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) 2.397376745s ago: executing program 4 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0xa}]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)) 2.379641448s ago: executing program 1 (id=1129): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 2.011156655s ago: executing program 3 (id=1130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x3, 0x8248}) 2.010493956s ago: executing program 4 (id=1131): open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.73309572s ago: executing program 4 (id=1132): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x80c0, &(0x7f0000000240)={0xa, 0x4e20, 0xffbffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000001880)={0xa, 0x0, 0x9, @private0, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0xa00}, 0x8) 1.731485645s ago: executing program 2 (id=1133): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0x9, "1088c20b"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0xffffffff, 0x6}) 1.461709418s ago: executing program 3 (id=1134): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.420357807s ago: executing program 4 (id=1135): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x775}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000ab5000/0x3000)=nil, 0x3000, 0x17) 1.273507978s ago: executing program 3 (id=1136): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100000001010400"], 0x138}}, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.224720636s ago: executing program 4 (id=1137): creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x2) 1.148465916s ago: executing program 0 (id=1138): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 961.661139ms ago: executing program 4 (id=1139): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfbfc, 0x0, 0x0, 0x90f0}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7ff, 0x9}, &(0x7f0000000180)=0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 853.356149ms ago: executing program 0 (id=1140): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000000c0)=""/138) 0s ago: executing program 1 (id=1141): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x2, 0xe, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 1786.721:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 120.185482][ T30] audit: type=1326 audit(1771481786.751:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 120.223475][ T30] audit: type=1326 audit(1771481786.761:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 120.261396][ T30] audit: type=1326 audit(1771481786.761:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.2.258" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 120.357944][ T5831] hdpvr 2-1:0.0: firmware version 0x0 dated [ 120.379516][ T5831] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 120.575475][ T5924] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.700560][ T6577] syz_tun: entered promiscuous mode [ 120.710035][ T6577] team0: Port device syz_tun added [ 120.731945][ T6577] syz_tun: left promiscuous mode [ 120.755262][ T6577] team0: Port device syz_tun removed [ 120.769259][ T6577] bridge_slave_0: left allmulticast mode [ 120.776778][ T6577] bridge_slave_0: left promiscuous mode [ 120.785338][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.810317][ T5924] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.834583][ T5924] usb 5-1: config 0 has no interface number 0 [ 120.848512][ T5831] hdpvr 2-1:0.0: Could not setup controls [ 120.874274][ T5924] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 120.886040][ T6577] bridge_slave_1: left allmulticast mode [ 120.891743][ T6577] bridge_slave_1: left promiscuous mode [ 120.901118][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.912739][ T5831] hdpvr 2-1:0.0: registering videodev failed [ 120.919776][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.935559][ T6577] bond0: (slave bond_slave_0): Releasing backup interface [ 120.941402][ T5924] usb 5-1: Product: syz [ 120.947803][ T5924] usb 5-1: Manufacturer: syz [ 120.955187][ T5924] usb 5-1: SerialNumber: syz [ 120.969533][ T5924] usb 5-1: config 0 descriptor?? [ 120.986589][ T5831] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 120.988708][ T6577] bond0: (slave bond_slave_1): Releasing backup interface [ 121.010600][ T6577] team_slave_0: left promiscuous mode [ 121.017493][ T5831] usb 2-1: USB disconnect, device number 6 [ 121.024322][ T6577] team0: Port device team_slave_0 removed [ 121.038446][ T6577] team_slave_1: left promiscuous mode [ 121.055911][ T6577] team0: Port device team_slave_1 removed [ 121.064151][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.071610][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.085832][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.097252][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.109501][ T6577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.191515][ T5924] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 121.226096][ T5924] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.238602][ T5924] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 121.248022][ T5924] usb 5-1: media controller created [ 121.278423][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.519635][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 121.528945][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 121.705031][ T6595] netlink: 80 bytes leftover after parsing attributes in process `syz.3.272'. [ 121.715521][ T6595] netlink: 80 bytes leftover after parsing attributes in process `syz.3.272'. [ 121.913214][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 121.922340][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 121.935776][ T5915] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.084677][ T5831] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.118426][ T5915] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 122.132312][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.143865][ T5915] usb 2-1: Product: syz [ 122.153791][ T5915] usb 2-1: Manufacturer: syz [ 122.163654][ T5915] usb 2-1: SerialNumber: syz [ 122.181112][ T5915] usb 2-1: config 0 descriptor?? [ 122.264077][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 122.271784][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.302349][ T5831] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 122.325780][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.350751][ T5831] usb 4-1: config 0 descriptor?? [ 122.402316][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.413120][ T5924] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 122.489782][ T5924] usb 5-1: USB disconnect, device number 8 [ 122.578833][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.590448][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.601621][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.611330][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.619852][ T5915] usb 2-1: Firmware version (0.0) predates our first public release. [ 122.628297][ T9] usb 3-1: SerialNumber: syz [ 122.634068][ T5915] usb 2-1: Please update to version 0.2 or newer [ 122.642485][ T5915] usb 2-1: Firmware: build [ 122.797737][ T5831] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.0007/input/input9 [ 122.809552][ T982] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 122.865305][ T9] usb 3-1: 0:2 : does not exist [ 122.872414][ T5915] usb 2-1: USB disconnect, device number 7 [ 122.923689][ T5831] creative-sb0540 0003:041E:3100.0007: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 122.989871][ T982] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 123.025834][ T982] usb 1-1: config 7 has no interface number 0 [ 123.060812][ T982] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 123.096308][ T5831] usb 4-1: USB disconnect, device number 9 [ 123.105047][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.126592][ T9] usb 3-1: USB disconnect, device number 5 [ 123.135438][ T982] usb 1-1: Product: syz [ 123.139657][ T982] usb 1-1: Manufacturer: syz [ 123.151650][ T982] usb 1-1: SerialNumber: syz [ 123.186409][ T6620] fido_id[6620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 123.255511][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.994928][ T982] as10x_usb: device has been detected [ 124.027746][ T6647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 124.036026][ T982] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 124.078002][ T982] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 124.172481][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.306497][ T982] as10x_usb: error during firmware upload part1 [ 124.324693][ T982] Registered device Elgato EyeTV DTT Deluxe [ 124.332552][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 124.345846][ T982] usb 1-1: USB disconnect, device number 5 [ 124.355783][ T5901] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 124.376353][ T5901] usb 2-1: config 0 has no interface number 0 [ 124.397359][ T5901] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 124.407465][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.451955][ T5901] usb 2-1: Product: syz [ 124.461931][ T5901] usb 2-1: Manufacturer: syz [ 124.478825][ T5901] usb 2-1: SerialNumber: syz [ 124.487872][ T5901] usb 2-1: config 0 descriptor?? [ 124.499252][ T982] Unregistered device Elgato EyeTV DTT Deluxe [ 124.514268][ T982] as10x_usb: device has been disconnected [ 124.908715][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 124.941144][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 125.016740][ T6666] team0: Port device syz_tun added [ 125.026872][ T6664] pim6reg1: entered promiscuous mode [ 125.033204][ T6664] pim6reg1: entered allmulticast mode [ 125.063348][ T6668] team0: Port device syz_tun removed [ 125.086035][ T6668] bridge_slave_0: left allmulticast mode [ 125.116377][ T6668] bridge_slave_0: left promiscuous mode [ 125.132981][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.151226][ T6668] bridge_slave_1: left allmulticast mode [ 125.157632][ T6668] bridge_slave_1: left promiscuous mode [ 125.163894][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.184564][ T6668] bond0: (slave bond_slave_0): Releasing backup interface [ 125.199566][ T6668] bond0: (slave bond_slave_1): Releasing backup interface [ 125.219714][ T6668] team0: Port device team_slave_0 removed [ 125.231290][ T6668] team0: Port device team_slave_1 removed [ 125.238857][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.246825][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.259269][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.267765][ T6668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.278792][ T6668] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.373034][ T5901] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 125.403859][ T5901] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 125.433336][ T5901] usb 2-1: USB disconnect, device number 8 [ 125.972186][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.092383][ T5831] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.149087][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.183316][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.228003][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 126.249528][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.304279][ T5831] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 126.316588][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.337519][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.342368][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.372172][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.395566][ T5901] usb 5-1: config 0 descriptor?? [ 126.402618][ T6685] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.450119][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.491561][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.536460][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.551370][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.560649][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.570131][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.587633][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.597512][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.614487][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.626532][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.637016][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.647584][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.659603][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.667909][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.677542][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.690097][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.698608][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.714340][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.726107][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.735748][ T5831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.748933][ T5831] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.762577][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.772665][ T5831] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.782748][ T5831] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.806564][ T5831] usb 3-1: Product: syz [ 126.834500][ T5831] usb 3-1: Manufacturer: syz [ 126.859746][ T5831] usb 3-1: SerialNumber: syz [ 126.881131][ T5831] usb 3-1: config 0 descriptor?? [ 126.915343][ T5901] plantronics 0003:047F:FFFF.0008: ignoring exceeding usage max [ 126.938151][ T5831] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 126.997430][ T5901] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 127.135057][ T5826] usb 5-1: USB disconnect, device number 9 [ 127.202118][ T5831] usb 3-1: USB disconnect, device number 6 [ 127.243780][ T5831] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 127.279418][ T6710] fido_id[6710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 128.373496][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 128.382624][ T5901] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.555203][ T5901] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.573395][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.605162][ T5901] usb 3-1: config 0 descriptor?? [ 128.635185][ T5901] cp210x 3-1:0.0: cp210x converter detected [ 129.245526][ T5901] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 129.265700][ T5901] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 129.334446][ T5901] usb 3-1: cp210x converter now attached to ttyUSB0 [ 129.382948][ T5901] usb 3-1: USB disconnect, device number 7 [ 129.446237][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.485018][ T5901] cp210x 3-1:0.0: device disconnected [ 129.727718][ T6786] netlink: 116 bytes leftover after parsing attributes in process `syz.0.348'. [ 130.761462][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.762223][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.873465][ T6806] input: syz1 as /devices/virtual/input/input10 [ 130.932561][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 130.960802][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 130.968217][ T5901] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.997335][ T5901] usb 2-1: config 0 has no interface number 0 [ 130.998523][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 131.020350][ T5901] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.050032][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.059570][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.081396][ T5901] usb 2-1: Product: syz [ 131.088959][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.106711][ T5901] usb 2-1: Manufacturer: syz [ 131.126542][ T5901] usb 2-1: SerialNumber: syz [ 131.147805][ T5901] usb 2-1: config 0 descriptor?? [ 131.165114][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.192927][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.201012][ T9] usb 3-1: Product: syz [ 131.206808][ T5901] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.220006][ T6810] netlink: 80 bytes leftover after parsing attributes in process `syz.0.356'. [ 131.247169][ T9] usb 3-1: Manufacturer: syz [ 131.251844][ T9] usb 3-1: SerialNumber: syz [ 131.427365][ T5901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.489646][ T5901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.706925][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 91 [ 131.735416][ T9] usb 3-1: 0:2 : does not exist [ 131.932819][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.935936][ T982] usb 2-1: USB disconnect, device number 9 [ 132.007466][ T982] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 132.063242][ T982] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.075974][ T982] quatech2 2-1:0.51: device disconnected [ 132.391249][ T9] usb 3-1: 1:0: bogus dB values (-12637/-11528), disabling dB reporting [ 132.492420][ T9] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 132.692994][ T9] usb 3-1: USB disconnect, device number 8 [ 132.825279][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.977548][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.984562][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.777690][ T6876] syzkaller1: entered promiscuous mode [ 134.805765][ T6876] syzkaller1: entered allmulticast mode [ 135.299725][ T6892] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 135.775660][ T6903] geneve2: entered promiscuous mode [ 135.792159][ T5901] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.862410][ T5831] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.976395][ T5901] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 136.005332][ T5901] usb 5-1: config 0 has no interface number 0 [ 136.038135][ T5901] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 136.063983][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.072211][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 136.089189][ T5831] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 136.094772][ T5901] usb 5-1: Product: syz [ 136.112680][ T5831] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.113276][ T5901] usb 5-1: Manufacturer: syz [ 136.143130][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.162142][ T5901] usb 5-1: SerialNumber: syz [ 136.181042][ T5831] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.193127][ T5901] usb 5-1: config 0 descriptor?? [ 136.212140][ T5831] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.250460][ T5831] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.275986][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.426569][ T5901] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 136.454561][ T5901] uvcvideo 5-1:0.64: No valid video chain found. [ 136.495826][ T5901] usb 5-1: USB disconnect, device number 10 [ 136.526793][ T5831] usb 1-1: usb_control_msg returned -32 [ 136.542283][ T5831] usbtmc 1-1:16.0: can't read capabilities [ 136.613285][ T982] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.797483][ T982] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.802345][ T798] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.807114][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.827374][ T982] usb 2-1: Product: syz [ 136.831597][ T982] usb 2-1: Manufacturer: syz [ 136.837353][ T982] usb 2-1: SerialNumber: syz [ 136.859021][ T982] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.885205][ T5915] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 136.927576][ T6914] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 137.004101][ T798] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.015197][ T798] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.031570][ T798] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.041305][ T798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 137.052889][ T798] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 137.068469][ T798] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.082162][ T798] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.100427][ T798] usb 4-1: Product: syz [ 137.110502][ T798] usb 4-1: Manufacturer: syz [ 137.132090][ T982] usb 1-1: USB disconnect, device number 6 [ 137.137283][ T798] cdc_wdm 4-1:1.0: skipping garbage [ 137.162267][ T798] cdc_wdm 4-1:1.0: skipping garbage [ 137.172414][ T798] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 137.194038][ T798] cdc_wdm 4-1:1.0: Unknown control protocol [ 137.263134][ T6918] bridge_slave_0: entered promiscuous mode [ 137.283711][ T9] usb 2-1: USB disconnect, device number 10 [ 137.406439][ T798] usb 4-1: USB disconnect, device number 10 [ 137.415296][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 137.463028][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 137.932335][ T5915] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 137.939916][ T5915] ath9k_htc: Failed to initialize the device [ 137.951747][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 138.075976][ T6936] binder: 6935:6936 ioctl 40046205 0 returned -22 [ 138.532014][ T6948] mmap: syz.4.418 (6948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.617604][ T6950] loop5: detected capacity change from 0 to 7 [ 138.646405][ T6950] Dev loop5: unable to read RDB block 7 [ 138.665527][ T6950] loop5: AHDI p1 p2 p3 [ 138.672038][ T6950] loop5: partition table partially beyond EOD, truncated [ 138.683216][ T6950] loop5: p1 start 50331648 is beyond EOD, truncated [ 138.689991][ T6950] loop5: p2 start 1702059890 is beyond EOD, truncated [ 139.423051][ T6976] geneve2: entered promiscuous mode [ 139.762469][ T5901] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.966488][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.985949][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.021378][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.057209][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.078300][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.111451][ T5901] usb 5-1: config 0 descriptor?? [ 140.442741][ T5894] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 140.546075][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 140.563981][ T5901] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.602375][ T5901] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.613451][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 140.629047][ T5901] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.637872][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 140.656944][ T5901] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.692518][ T5901] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.703354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.704346][ T5894] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 140.722550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.743222][ T5901] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 140.761261][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.781781][ T5901] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 140.799250][ T5894] usb 2-1: Product: syz [ 140.813027][ T5894] usb 2-1: Manufacturer: syz [ 140.832372][ T5894] usb 2-1: SerialNumber: syz [ 140.856200][ T5901] usb 5-1: USB disconnect, device number 11 [ 140.865250][ T5894] usb 2-1: config 0 descriptor?? [ 140.882736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.925719][ T5894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 140.997766][ T7018] fido_id[7018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 141.085582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.117069][ T5894] gspca_stk1135: reg_w 0x2 err -71 [ 141.162366][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.185910][ T5894] gspca_stk1135: Sensor write failed [ 141.197435][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.204044][ T5894] gspca_stk1135: Sensor write failed [ 141.209491][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.230091][ T5894] gspca_stk1135: Sensor read failed [ 141.238288][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.245030][ T5894] gspca_stk1135: Sensor read failed [ 141.250679][ T5894] gspca_stk1135: Detected sensor type unknown (0x0) [ 141.259366][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.287201][ T5894] gspca_stk1135: Sensor read failed [ 141.302332][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.312202][ T5894] gspca_stk1135: Sensor read failed [ 141.317658][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.324218][ T5894] gspca_stk1135: Sensor write failed [ 141.335149][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 141.347940][ T5894] gspca_stk1135: Sensor write failed [ 141.353521][ T5894] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 141.383991][ T5894] usb 2-1: USB disconnect, device number 11 [ 141.732592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 142.022474][ T5894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.184076][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.222284][ T5894] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.255847][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.289914][ T5894] usb 3-1: config 0 descriptor?? [ 142.544663][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 142.550779][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 142.603032][ T5894] usb 3-1: USB disconnect, device number 9 [ 143.033249][ T5894] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.212349][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 143.274474][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.336859][ T5894] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 143.389452][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.433217][ T5894] usb 3-1: config 0 descriptor?? [ 143.445403][ T7093] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 143.464367][ T5894] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 143.508000][ T5894] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 143.893941][ T5894] usb 3-1: USB disconnect, device number 10 [ 143.927707][ T5894] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 144.762199][ T5826] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 144.802392][ T5901] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.950908][ T7136] kvm: user requested TSC rate below hardware speed [ 144.967107][ T5826] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 144.986036][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.994931][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 145.012390][ T5826] usb 1-1: Product: syz [ 145.018832][ T5901] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 145.031971][ T5826] usb 1-1: Manufacturer: syz [ 145.037025][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.047363][ T5826] usb 1-1: SerialNumber: syz [ 145.065963][ T5901] usb 3-1: config 0 descriptor?? [ 145.083363][ T5894] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 145.092763][ T5826] usb 1-1: config 0 descriptor?? [ 145.126317][ T5826] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 145.264070][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.286172][ T5901] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 145.293796][ T5894] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 145.323956][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.335273][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.353586][ T5826] pwc: Failed to set LED on/off time (-71) [ 145.360291][ T5826] pwc: send_video_command error -71 [ 145.365863][ T5826] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 145.374321][ T5901] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 145.381642][ T5901] usb 3-1: media controller created [ 145.387384][ T5826] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 145.402518][ T5894] usb 4-1: config 0 descriptor?? [ 145.409286][ T7134] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 145.441579][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.461045][ T5826] usb 1-1: USB disconnect, device number 7 [ 145.544584][ T5901] az6027: usb out operation failed. (-71) [ 145.562421][ T5901] az6027: usb out operation failed. (-71) [ 145.574931][ T5901] stb0899_attach: Driver disabled by Kconfig [ 145.581030][ T5901] az6027: no front-end attached [ 145.581030][ T5901] [ 145.590433][ T5901] az6027: usb out operation failed. (-71) [ 145.596507][ T5901] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 145.608145][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 145.647552][ T5901] dvb-usb: schedule remote query interval to 400 msecs. [ 145.665205][ T5901] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 145.712431][ T5901] usb 3-1: USB disconnect, device number 11 [ 145.814784][ T5901] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 145.884523][ T5894] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 145.992998][ T7152] loop6: detected capacity change from 0 to 2560 [ 146.013984][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.035926][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.063166][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.081599][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.102945][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.111049][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.149315][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.196375][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.226110][ T7152] ldm_validate_partition_table(): Disk read failed. [ 146.239470][ T7156] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.504'. [ 146.274531][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.312518][ T7152] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.350289][ T7152] Dev loop6: unable to read RDB block 0 [ 146.375909][ T7152] loop6: unable to read partition table [ 146.394501][ T7152] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 146.587149][ T7160] loop9: detected capacity change from 0 to 7 [ 146.603890][ T7161] syzkaller1: entered promiscuous mode [ 146.619781][ T7161] syzkaller1: entered allmulticast mode [ 146.636416][ T7160] Dev loop9: unable to read RDB block 7 [ 146.651221][ T7160] loop9: unable to read partition table [ 146.661488][ T7160] loop9: partition table beyond EOD, truncated [ 146.669125][ T7160] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 146.827369][ T5831] IPVS: starting estimator thread 0... [ 146.943542][ T7166] IPVS: using max 30 ests per chain, 72000 per kthread [ 147.007391][ T7171] capability: warning: `syz.0.509' uses 32-bit capabilities (legacy support in use) [ 147.149942][ T7172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.162997][ T7172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.180254][ T7172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.202546][ T7172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.208757][ T7172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.221982][ T7172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.231780][ T7172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.239691][ T7172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.250607][ T7172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.261212][ T7172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.271845][ T7172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.281759][ T7172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.291784][ T7172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.304182][ T7172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.315989][ T7172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.675025][ T5901] usb 4-1: USB disconnect, device number 11 [ 148.028608][ T7193] loop8: detected capacity change from 0 to 8 [ 148.064632][ T7193] Dev loop8: unable to read RDB block 8 [ 148.082472][ T7193] loop8: unable to read partition table [ 148.097612][ T7193] loop8: partition table beyond EOD, truncated [ 148.122130][ T7193] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 148.743764][ T7216] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.756834][ T7216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.773428][ T7216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.784187][ T7216] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.797173][ T7216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.823266][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.832154][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.838420][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.841837][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.845370][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.006313][ T30] audit: type=1326 audit(1771481817.631:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7270 comm="syz.1.552" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f37f6c code=0x0 [ 151.366970][ T7287] misc userio: Invalid payload size [ 151.382822][ T5838] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 152.007369][ T7309] Invalid argument reading file caps for ./file0 [ 152.052601][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.238749][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 152.274826][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 152.295854][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.345268][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.364281][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.380173][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.398874][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.416630][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.492156][ T5831] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 152.632773][ T7326] loop8: detected capacity change from 0 to 8 [ 152.646104][ T29] usb 3-1: usb_control_msg returned -32 [ 152.660147][ T7326] Dev loop8: unable to read RDB block 8 [ 152.669531][ T7326] loop8: unable to read partition table [ 152.670359][ T29] usbtmc 3-1:16.0: can't read capabilities [ 152.681914][ T7326] loop8: partition table beyond EOD, truncated [ 152.691320][ T5831] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.708322][ T7326] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 152.752233][ T5831] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.801480][ T5831] usb 2-1: config 1 has no interface number 0 [ 152.831133][ T5831] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.862447][ T5831] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 152.882116][ T5831] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 152.891235][ T5831] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.901827][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.901847][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.907934][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.907965][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.926108][ T5831] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.943423][ T5831] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.952755][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.961102][ T5831] usb 2-1: Product: syz [ 152.965423][ T5831] usb 2-1: Manufacturer: syz [ 152.970130][ T5831] usb 2-1: SerialNumber: syz [ 152.979714][ T7316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.008553][ T7329] usbtmc 3-1:16.0: usb_bulk_msg returned -71 [ 153.210822][ T9] usb 3-1: USB disconnect, device number 12 [ 153.395451][ T7316] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.807039][ T5831] cdc_ncm 2-1:1.1: bind() failure [ 154.010150][ T5831] usb 2-1: USB disconnect, device number 12 [ 154.642931][ T7339] kvm: user requested TSC rate below hardware speed [ 154.842278][ T29] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.972418][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.978488][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.982438][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.984958][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.032734][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 155.055721][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.086689][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.128712][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.167892][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 155.233556][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.293387][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.314901][ T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.335117][ T29] usb 1-1: Manufacturer: syz [ 155.351359][ T29] usb 1-1: config 0 descriptor?? [ 155.802169][ T29] rc_core: IR keymap rc-hauppauge not found [ 155.828649][ T29] Registered IR keymap rc-empty [ 155.854136][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.926278][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.983355][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 156.038761][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 156.102285][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.142663][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.166754][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.230259][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.279819][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.323333][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.352277][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.373934][ T7373] netlink: 'syz.1.594': attribute type 11 has an invalid length. [ 156.401875][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 156.412339][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.452204][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.484340][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.512302][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.552024][ T29] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 156.592178][ T29] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.656870][ T29] usb 1-1: USB disconnect, device number 8 [ 156.739999][ T7380] sctp: [Deprecated]: syz.2.598 (pid 7380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.739999][ T7380] Use struct sctp_sack_info instead [ 156.962186][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.132341][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 157.170162][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.205413][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.223176][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 157.234451][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.278996][ T9] usb 5-1: config 0 descriptor?? [ 157.657735][ T7403] tipc: Started in network mode [ 157.682138][ T7403] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.738840][ T7403] tipc: Enabled bearer , priority 10 [ 157.779581][ T9] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 158.032225][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.115437][ T5831] usb 5-1: USB disconnect, device number 12 [ 158.198760][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 158.214245][ T5915] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 158.231562][ T5915] usb 3-1: config 1 has no interface number 0 [ 158.251550][ T5915] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 158.264093][ T5915] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.277815][ T5915] usb 3-1: config 1 interface 105 has no altsetting 0 [ 158.292729][ T5915] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 158.305886][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.331257][ T5915] usb 3-1: Product: syz [ 158.335761][ T5915] usb 3-1: Manufacturer: syz [ 158.340524][ T5915] usb 3-1: SerialNumber: syz [ 158.355135][ T7405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.375148][ T7405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.396994][ T7421] netlink: 268 bytes leftover after parsing attributes in process `syz.1.616'. [ 158.493227][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.567692][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 158.583831][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.593879][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.606965][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.621469][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.820198][ T7405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.830989][ T7405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.843895][ T5894] tipc: Node number set to 2886997162 [ 158.854606][ T7433] netlink: 7 bytes leftover after parsing attributes in process `syz.3.622'. [ 158.864889][ T7433] netlink: 7 bytes leftover after parsing attributes in process `syz.3.622'. [ 158.962677][ T29] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 159.126504][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.156116][ T29] usb 5-1: config 1 has no interface number 0 [ 159.172280][ T29] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.204561][ T29] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.251985][ T29] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 159.273365][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 159.296761][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 120, setting to 64 [ 159.342881][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.366849][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.384561][ T29] usb 5-1: Product: syz [ 159.393285][ T29] usb 5-1: Manufacturer: syz [ 159.406035][ T29] usb 5-1: SerialNumber: syz [ 159.425332][ T7429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.468047][ T5915] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 159.517923][ T5915] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 159.533012][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.715807][ T5915] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 32:bb:76:07:41:20 [ 159.729756][ T7429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.744789][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.753561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.767238][ T7429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.791123][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.804586][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.815078][ T5915] usb 3-1: USB disconnect, device number 13 [ 159.824169][ T5915] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 159.983818][ T5915] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 159.995540][ T7429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.013933][ T5915] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 160.033592][ T5915] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 160.061049][ T7463] team_slave_0: entered promiscuous mode [ 160.066834][ T7463] team_slave_1: entered promiscuous mode [ 160.085659][ T7463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.180503][ T7463] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 160.367043][ T982] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 160.390386][ T982] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.449802][ T7429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.462132][ T5915] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.473782][ T7429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.498246][ T29] cdc_ncm 5-1:1.1: bind() failure [ 160.632145][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 160.656191][ T5915] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 160.676579][ T5915] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.715004][ T5915] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.733581][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.745437][ T5831] usb 5-1: USB disconnect, device number 13 [ 160.788674][ T5915] usbtmc 3-1:16.0: bulk endpoints not found [ 160.858543][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.643'. [ 160.997868][ T982] usb 3-1: USB disconnect, device number 14 [ 161.022621][ T5915] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 161.184768][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 161.216277][ T5915] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.259121][ T7490] syzkaller1: entered promiscuous mode [ 161.263229][ T5915] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.266066][ T7490] syzkaller1: entered allmulticast mode [ 161.276883][ T5915] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.336462][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.694665][ T5838] Bluetooth: hci0: unexpected event for opcode 0x201c [ 161.790294][ T5915] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 161.865922][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 162.044764][ T29] usb 2-1: USB disconnect, device number 13 [ 162.312221][ T5901] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.387905][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.464131][ T7529] sctp: [Deprecated]: syz.3.664 (pid 7529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.464131][ T7529] Use struct sctp_sack_info instead [ 162.483077][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.491867][ T5901] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 162.503083][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.514912][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 162.529787][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 162.549275][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.558705][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 162.575930][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.588206][ T5901] usb 3-1: Product: syz [ 162.592990][ T5901] usb 3-1: Manufacturer: syz [ 162.602951][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.632572][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.634394][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 162.649669][ T5894] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 162.663632][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.671979][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 162.685782][ T5901] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 162.691726][ T5901] cdc_wdm 3-1:1.0: Unknown control protocol [ 162.701197][ T5894] usb 5-1: config 0 descriptor?? [ 162.995246][ T5901] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 163.100477][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 163.107535][ C1] wdm_int_callback: 5 callbacks suppressed [ 163.107563][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.120028][ C1] wdm_int_callback: 5 callbacks suppressed [ 163.120052][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.132638][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.139289][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.146790][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.153433][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.161392][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.168041][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.175109][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.181758][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.188088][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.194726][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.201305][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.207935][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.214674][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.221307][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.228011][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.234644][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.242005][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.248660][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.262289][ T5894] cherry 0003:046A:0027.000E: reserved main item tag 0xe [ 163.265849][ T5915] usb 3-1: USB disconnect, device number 15 [ 163.269581][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 163.285394][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 163.298639][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.306588][ T5901] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 163.315306][ T5901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.325956][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.333060][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.345604][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.353070][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.360076][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.367587][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.378498][ T5901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.393124][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.400174][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.415745][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.424976][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.432013][ T5894] cherry 0003:046A:0027.000E: unknown main item tag 0x0 [ 163.442195][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.476036][ T5894] cherry 0003:046A:0027.000E: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 163.519254][ T5894] usb 5-1: USB disconnect, device number 14 [ 163.564987][ T7540] fido_id[7540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 163.702905][ T5826] net_ratelimit: 8 callbacks suppressed [ 163.702926][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.166411][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 164.225847][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 164.234883][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 164.287614][ T7559] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 164.334754][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 164.340230][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.348847][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.361766][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.370802][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.381548][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.390467][ T5901] usb 4-1: config 4 interface 0 has no altsetting 0 [ 164.401866][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 164.408448][ T5901] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 164.418686][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.443570][ T5901] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 164.466348][ T5901] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.481830][ T5901] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 164.497809][ T798] usb 2-1: USB disconnect, device number 14 [ 164.513013][ T5901] usb 4-1: media controller created [ 164.546832][ T5826] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 164.560724][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.593659][ T7567] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 164.601622][ T7567] netlink: 'syz.2.679': attribute type 2 has an invalid length. [ 164.612960][ T7567] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 164.620654][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'. [ 164.712176][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 164.731155][ T5826] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 164.753509][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.769886][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.795201][ T5826] pvrusb2: Hardware description: Terratec Grabster AV400 [ 164.808022][ T5826] pvrusb2: ********** [ 164.812315][ T5826] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 164.823986][ T5826] pvrusb2: Important functionality might not be entirely working. [ 164.832297][ T5826] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 164.844435][ T5826] pvrusb2: ********** [ 165.020151][ T2345] pvrusb2: Invalid write control endpoint [ 165.155791][ T2345] pvrusb2: Invalid write control endpoint [ 165.175710][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 165.198882][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 165.210750][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 165.221952][ T2345] pvrusb2: Device being rendered inoperable [ 165.230742][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 165.241253][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 165.255622][ T2345] pvrusb2: Attached sub-driver cx25840 [ 165.272614][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 165.279739][ T5826] usb 5-1: USB disconnect, device number 15 [ 165.321189][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 165.362538][ T5915] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.383268][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.572161][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 165.579644][ T5915] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 165.591605][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.603981][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.619795][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 165.634138][ T5915] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 165.643393][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.655080][ T5915] usb 1-1: config 0 descriptor?? [ 165.773006][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.804069][ T5901] usb 4-1: USB disconnect, device number 12 [ 165.934028][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 165.965190][ T7599] macvlan4: entered promiscuous mode [ 165.970724][ T7599] bond0: entered promiscuous mode [ 165.976855][ T7599] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 166.021217][ T7602] netlink: 27 bytes leftover after parsing attributes in process `syz.1.692'. [ 166.128552][ T5915] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000F/input/input14 [ 166.231417][ T5915] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.000F/input/input15 [ 166.254235][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.347552][ T5915] kye 0003:0458:5013.000F: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 166.401305][ T5915] usb 1-1: USB disconnect, device number 9 [ 166.492684][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.559732][ T7612] fido_id[7612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 166.659217][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 167.285280][ T7636] batadv_slave_1: entered promiscuous mode [ 167.303967][ T7633] batadv_slave_1: left promiscuous mode [ 167.332152][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 167.516651][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 167.523768][ T7648] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 167.531462][ T7648] netlink: 76 bytes leftover after parsing attributes in process `syz.2.713'. [ 167.532347][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 167.565634][ T5915] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.584466][ T5915] usb 4-1: config 0 has no interface number 0 [ 167.607623][ T5915] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 167.624216][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.642562][ T5915] usb 4-1: Product: syz [ 167.652166][ T5915] usb 4-1: Manufacturer: syz [ 167.656824][ T5915] usb 4-1: SerialNumber: syz [ 167.675722][ T5915] usb 4-1: config 0 descriptor?? [ 167.704183][ T5915] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 167.713820][ T7653] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.715'. [ 167.772418][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 167.788195][ T9] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 167.819020][ T9] usb 2-1: config 0 has no interface number 0 [ 167.842234][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.870917][ T9] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 167.893475][ T5915] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 167.902894][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.910954][ T9] usb 2-1: Product: syz [ 167.921305][ T5915] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 167.930804][ T9] usb 2-1: Manufacturer: syz [ 167.936133][ T9] usb 2-1: SerialNumber: syz [ 167.961349][ T9] usb 2-1: config 0 descriptor?? [ 168.296480][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.300361][ T5901] usb 4-1: USB disconnect, device number 13 [ 168.331770][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.368597][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.381662][ T5894] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.403600][ T5901] quatech2 4-1:0.51: device disconnected [ 168.542191][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 168.575224][ T5894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.595479][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.614472][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input16 [ 168.632473][ T5894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.655465][ T5894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.682179][ T5894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.713262][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.886766][ T5901] usb 2-1: USB disconnect, device number 15 [ 168.901721][ T5826] net_ratelimit: 10 callbacks suppressed [ 168.901740][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.988869][ T5894] usb 5-1: GET_CAPABILITIES returned 0 [ 169.002677][ T5894] usbtmc 5-1:16.0: can't read capabilities [ 169.066747][ T7682] bond0: entered promiscuous mode [ 169.074668][ T7682] batadv0: entered promiscuous mode [ 169.084590][ T7682] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 169.096743][ T7682] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 169.215021][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.224200][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.233319][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.270515][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.279675][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.288821][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.297902][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.309955][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.319103][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.328229][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.338819][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.347969][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.357181][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.371841][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.380980][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.390085][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.403941][ T9] usb 5-1: USB disconnect, device number 16 [ 169.613943][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.933165][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.122178][ T5894] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 170.179501][ T7722] netlink: 'syz.2.746': attribute type 29 has an invalid length. [ 170.191100][ T7722] netlink: 'syz.2.746': attribute type 29 has an invalid length. [ 170.205422][ T7722] netlink: 600 bytes leftover after parsing attributes in process `syz.2.746'. [ 170.215226][ T7722] unsupported nla_type 58 [ 170.300683][ T5894] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.342139][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.370872][ T5894] usb 4-1: config 0 descriptor?? [ 170.402133][ T982] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 170.411904][ T5894] cp210x 4-1:0.0: cp210x converter detected [ 170.447092][ T24] IPVS: starting estimator thread 0... [ 170.455876][ T7732] tipc: Started in network mode [ 170.460956][ T7732] tipc: Node identity ac1414aa, cluster identity 4711 [ 170.469458][ T7732] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.477728][ T7732] tipc: Enabled bearer , priority 10 [ 170.492491][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.552249][ T7733] IPVS: using max 26 ests per chain, 62400 per kthread [ 170.564436][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.585896][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.602225][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.619966][ T982] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 170.622661][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.651448][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.660106][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.674728][ T982] usb 2-1: config 0 descriptor?? [ 170.742178][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.822139][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 170.829635][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 170.841751][ T5894] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 170.865265][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.882151][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.899920][ T5894] usb 4-1: cp210x converter now attached to ttyUSB0 [ 170.926672][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.942583][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.974753][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.985978][ T24] usb 3-1: Product: syz [ 170.990189][ T24] usb 3-1: Manufacturer: syz [ 171.003025][ T24] usb 3-1: SerialNumber: syz [ 171.016328][ T24] usb 3-1: config 0 descriptor?? [ 171.039899][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.053045][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 171.093257][ T5915] usb 4-1: USB disconnect, device number 14 [ 171.109227][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.149192][ T5915] cp210x 4-1:0.0: device disconnected [ 171.320925][ T982] usb 2-1: string descriptor 0 read error: -22 [ 171.463632][ T5915] tipc: Node number set to 2886997162 [ 171.642918][ T24] em28xx 3-1:0.0: chip ID is em2874 [ 171.730842][ T982] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #100: -71 [ 171.747666][ T982] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 171.758724][ T982] uclogic 0003:256C:006D.0010: failed probing pen v1 parameters: -71 [ 171.767694][ T982] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 171.782126][ T982] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 171.818264][ T982] usb 2-1: USB disconnect, device number 16 [ 171.879825][ T5915] usb 3-1: USB disconnect, device number 16 [ 171.901920][ T5915] em28xx 3-1:0.0: Disconnecting em28xx [ 171.920320][ T5915] em28xx 3-1:0.0: Freeing device [ 172.782237][ T5894] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.884336][ T5915] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 172.932164][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 172.950411][ T5894] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 172.953794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 172.984245][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.002610][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.032557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 173.041430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 173.041874][ T5894] pvrusb2: Hardware description: Terratec Grabster AV400 [ 173.050117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 173.052493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 173.074893][ T5894] pvrusb2: ********** [ 173.074913][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 173.078920][ T5894] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 173.078936][ T5894] pvrusb2: Important functionality might not be entirely working. [ 173.078947][ T5894] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 173.078959][ T5894] pvrusb2: ********** [ 173.189384][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.202159][ T5915] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 173.210288][ T5915] usb 5-1: config 0 has no interface number 0 [ 173.237387][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.243373][ T5915] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 173.261641][ T2345] pvrusb2: Invalid write control endpoint [ 173.279500][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.294450][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.325418][ T5915] usb 5-1: Product: syz [ 173.329655][ T5915] usb 5-1: Manufacturer: syz [ 173.331136][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.357330][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.371177][ T5915] usb 5-1: SerialNumber: syz [ 173.392695][ T5915] usb 5-1: config 0 descriptor?? [ 173.403349][ T24] usb 1-1: config 0 descriptor?? [ 173.433999][ T2345] pvrusb2: Invalid write control endpoint [ 173.475804][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 173.502884][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 173.520820][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 173.533852][ T2345] pvrusb2: Device being rendered inoperable [ 173.544216][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 173.551417][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 173.556510][ T5826] usb 3-1: USB disconnect, device number 17 [ 173.598084][ T2345] pvrusb2: Attached sub-driver cx25840 [ 173.628364][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 173.648026][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 173.886049][ T24] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.100299][ T24] net_ratelimit: 19 callbacks suppressed [ 174.100318][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.137507][ T5826] usb 1-1: USB disconnect, device number 10 [ 174.453909][ T5915] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 174.469001][ T5915] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 174.479104][ T5915] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 174.490785][ T5915] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 174.499109][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.514116][ T5915] usb 5-1: USB disconnect, device number 17 [ 174.814457][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.133975][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.409871][ T7843] syzkaller1: entered promiscuous mode [ 175.424706][ T7843] syzkaller1: entered allmulticast mode [ 175.532114][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.855976][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.172573][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.492407][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.582127][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.590260][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.652276][ T5894] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.816271][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 176.827180][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.848480][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.881285][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 176.915787][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.928317][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.939133][ T5894] usb 1-1: SerialNumber: syz [ 176.955078][ T5894] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 177.214748][ T5826] usb 1-1: USB disconnect, device number 11 [ 177.352228][ T5915] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 177.537418][ T5915] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.549532][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.602896][ T5915] usb 5-1: config 0 descriptor?? [ 177.623983][ T5915] cp210x 5-1:0.0: cp210x converter detected [ 178.040972][ T5915] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 178.086314][ T7910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.829'. [ 178.100403][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.829'. [ 178.110006][ T7910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.829'. [ 178.132091][ T5915] usb 5-1: cp210x converter now attached to ttyUSB0 [ 178.237064][ T7915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.831'. [ 178.261680][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.270596][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.305396][ T7916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.831'. [ 178.341234][ T5915] usb 5-1: USB disconnect, device number 18 [ 178.367359][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.397351][ T5915] cp210x 5-1:0.0: device disconnected [ 178.692688][ T7927] loop5: detected capacity change from 0 to 7 [ 178.705631][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.715327][ C1] buffer_io_error: 11 callbacks suppressed [ 178.715348][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.729494][ T5826] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 178.737946][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.747658][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.759427][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.769193][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.778068][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.787733][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.797107][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.806797][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.815220][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.824889][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.833737][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.843586][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.851571][ T5851] ldm_validate_partition_table(): Disk read failed. [ 178.858577][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.868265][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.877874][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.887524][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.905980][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.915643][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 178.933576][ T5851] Dev loop5: unable to read RDB block 0 [ 178.944017][ T5851] loop5: unable to read partition table [ 178.961106][ T5851] loop5: partition table beyond EOD, truncated [ 178.974389][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.007191][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.027630][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.056358][ T7927] ldm_validate_partition_table(): Disk read failed. [ 179.064631][ T7927] Dev loop5: unable to read RDB block 0 [ 179.073174][ T7927] loop5: unable to read partition table [ 179.080250][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 179.083944][ T5826] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.098610][ T7927] loop5: partition table beyond EOD, truncated [ 179.110043][ T7927] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.148323][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.187060][ T5826] usb 3-1: config 0 descriptor?? [ 179.295050][ T5894] net_ratelimit: 705 callbacks suppressed [ 179.295070][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.612378][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.648470][ T5826] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 179.692109][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 179.856545][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.865260][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.874147][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.882733][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.891097][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.899994][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.908411][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.926140][ T5826] usb 3-1: USB disconnect, device number 18 [ 179.993278][ T5915] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 180.189328][ T5915] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.214148][ T5915] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.231782][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.245364][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.469544][ T5915] usb 1-1: usb_control_msg returned -32 [ 180.481686][ T5915] usbtmc 1-1:16.0: can't read capabilities [ 180.722375][ T5826] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 180.893706][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 180.904143][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 180.929320][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 180.942131][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 180.958561][ T5826] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.987228][ T5826] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 180.999811][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 181.008974][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 181.021950][ T5826] usb 2-1: Product: syz [ 181.030831][ T5826] usb 2-1: Manufacturer: syz [ 181.040500][ T5826] usb 2-1: SerialNumber: syz [ 181.090284][ T5826] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input17 [ 181.110495][ T5915] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 181.135746][ T5915] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 181.162455][ T5915] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 181.197408][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.218218][ T5915] usb 3-1: Product: syz [ 181.228783][ T5915] usb 3-1: Manufacturer: syz [ 181.247050][ T5915] usb 3-1: SerialNumber: syz [ 181.284034][ T5915] usb 3-1: config 0 descriptor?? [ 181.311769][ T7975] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 181.340314][ T7975] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 181.393834][ T5894] usb 2-1: USB disconnect, device number 17 [ 181.431181][ T5894] appletouch 2-1:1.0: input: appletouch disconnected [ 181.472228][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 181.580857][ T7975] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 181.601887][ T7975] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 181.654974][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 181.663877][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.678639][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.689339][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.696667][ T9] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 181.706634][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.727319][ T9] usb 5-1: config 0 descriptor?? [ 182.032556][ T5915] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 182.149543][ T9] hid (null): unknown global tag 0xd [ 182.169375][ T9] hid (null): unknown global tag 0xe [ 182.176562][ T9] hid (null): report_id 11427 is invalid [ 182.183283][ T9] hid (null): unknown global tag 0xe [ 182.191528][ T9] hid (null): invalid report_count 546983283 [ 182.205161][ T9] hid (null): bogus close delimiter [ 182.210651][ T9] hid (null): invalid report_size 3640 [ 182.234957][ T9] hid_parser_main: 50 callbacks suppressed [ 182.234980][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.250404][ T5915] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 182.267588][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.275192][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.282883][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.291996][ T5915] usb 3-1: USB disconnect, device number 19 [ 182.365095][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.405377][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.422644][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.429678][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.456599][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.464066][ T9] cougar 0003:060B:500A.0013: unknown main item tag 0x0 [ 182.474013][ T9] cougar 0003:060B:500A.0013: unexpected long global item [ 182.482001][ T9] cougar 0003:060B:500A.0013: parse failed [ 182.488405][ T9] cougar 0003:060B:500A.0013: probe with driver cougar failed with error -22 [ 182.529497][ T9] usb 5-1: USB disconnect, device number 19 [ 182.820542][ T9] usb 1-1: USB disconnect, device number 12 [ 183.261305][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 183.299698][ T8030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.879'. [ 184.280816][ T8062] netlink: 192 bytes leftover after parsing attributes in process `syz.2.891'. [ 184.311039][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b948c00: rx timeout, send abort [ 184.321358][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b948c00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.516287][ T29] net_ratelimit: 705 callbacks suppressed [ 184.516321][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.732157][ T982] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 184.892109][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 184.902573][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 184.912213][ T982] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 184.921304][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.945638][ T982] usb 2-1: config 0 descriptor?? [ 185.161504][ T982] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 185.171465][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.181976][ T982] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 185.190652][ T982] usb 2-1: media controller created [ 185.207405][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.216674][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.268938][ T982] DVB: Unable to find symbol dib7000p_attach() [ 185.273178][ T29] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 185.281116][ T982] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 185.332216][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.352222][ T982] rc_core: IR keymap rc-dib0700-rc5 not found [ 185.358557][ T982] Registered IR keymap rc-empty [ 185.365537][ T982] dvb-usb: could not initialize remote control. [ 185.372122][ T982] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 185.432183][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 185.439807][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.451106][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 185.460398][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.476280][ T29] usb 3-1: config 0 descriptor?? [ 185.492204][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 185.503111][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.513492][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.528299][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.533218][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.540530][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.553880][ T9] usb 1-1: Product: syz [ 185.558112][ T9] usb 1-1: Manufacturer: syz [ 185.562853][ T9] usb 1-1: SerialNumber: syz [ 185.611920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b948000: rx timeout, send abort [ 185.620662][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b948000: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.669092][ T982] usb 2-1: USB disconnect, device number 18 [ 185.702297][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.724981][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 185.745892][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 185.791143][ T29] usb 3-1: USB disconnect, device number 20 [ 185.825184][ T9] usb 1-1: 0:2 : does not exist [ 185.844918][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 185.875020][ T982] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 185.932113][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.989274][ T9] usb 1-1: USB disconnect, device number 13 [ 186.020635][ T8097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.029795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.041455][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.094243][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.253652][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.643214][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 186.663000][ T8120] sit0: entered promiscuous mode [ 186.701233][ T8120] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 186.730160][ T8120] netlink: 1 bytes leftover after parsing attributes in process `syz.2.916'. [ 187.185160][ T5826] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.224433][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 187.328613][ T8149] fido_id[8149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 187.382158][ T29] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 187.405324][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.430858][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.460988][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.477513][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.489617][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.503293][ T9] usb 5-1: config 0 descriptor?? [ 187.544163][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.573311][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.597141][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.616524][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.627266][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.651595][ T29] usb 2-1: config 0 descriptor?? [ 187.978658][ T9] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 188.099284][ T29] hid_parser_main: 74 callbacks suppressed [ 188.099311][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.118535][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.129435][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.137887][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.148997][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.164388][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.181896][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.190014][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.197999][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.205985][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 188.235137][ T5826] usb 5-1: USB disconnect, device number 20 [ 188.261201][ T29] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 188.315511][ T9] usb 2-1: USB disconnect, device number 19 [ 188.413912][ T8178] fido_id[8178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 189.186304][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 189.214576][ T30] audit: type=1326 audit(1771481855.851:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.2.950" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 189.589302][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 189.692505][ T5826] net_ratelimit: 20 callbacks suppressed [ 189.692526][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.812178][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.995214][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.017495][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.029137][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 190.039575][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.084209][ T9] usb 1-1: config 0 descriptor?? [ 190.102110][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.165273][ T8232] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 190.179009][ T8232] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 190.278145][ T5826] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.412686][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.442152][ T5826] usb 4-1: Using ep0 maxpacket: 32 [ 190.449769][ T5826] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 190.460686][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.475473][ T5826] usb 4-1: config 0 descriptor?? [ 190.710372][ T5826] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 190.730836][ T9] usb 1-1: string descriptor 0 read error: -22 [ 190.748009][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.758937][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.778324][ T5826] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 190.787512][ T5826] usb 4-1: media controller created [ 190.808801][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.898723][ T5826] DVB: Unable to find symbol dib7000p_attach() [ 190.909794][ T5826] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 191.022283][ T5826] rc_core: IR keymap rc-dib0700-rc5 not found [ 191.028521][ T5826] Registered IR keymap rc-empty [ 191.034632][ T5826] dvb-usb: could not initialize remote control. [ 191.041033][ T5826] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 191.127956][ T9] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #100: -71 [ 191.136894][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.145266][ T9] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 191.153438][ T9] uclogic 0003:256C:006D.0017: failed probing pen v1 parameters: -71 [ 191.161588][ T9] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 191.197637][ T5826] usb 4-1: USB disconnect, device number 15 [ 191.209312][ T9] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 191.260522][ T9] usb 1-1: USB disconnect, device number 14 [ 191.377877][ T5826] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 191.773623][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.781772][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.822919][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 192.026933][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 192.051616][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.100587][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.131071][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.172493][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.179905][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.210274][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.240398][ T9] usb 3-1: config 0 descriptor?? [ 192.775467][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 192.818719][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.137482][ T5826] usb 3-1: USB disconnect, device number 21 [ 193.212110][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.836814][ T8318] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 194.422318][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428676][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.621516][ T8344] input: syz0 as /devices/virtual/input/input20 [ 194.818941][ T5831] net_ratelimit: 2 callbacks suppressed [ 194.818960][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.896290][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.292526][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.694742][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.932405][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.332191][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.972602][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.022968][ T29] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.195855][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 197.217799][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.249465][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.282114][ T29] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 197.325156][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.372108][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.392119][ T29] usb 1-1: config 0 descriptor?? [ 197.463757][ T8423] netlink: 35284 bytes leftover after parsing attributes in process `syz.2.1044'. [ 197.855657][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.905362][ T29] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 198.022208][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.156989][ T9] usb 1-1: USB disconnect, device number 15 [ 198.409775][ T8458] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 198.418576][ T8458] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 198.761110][ T8474] ======================================================= [ 198.761110][ T8474] WARNING: The mand mount option has been deprecated and [ 198.761110][ T8474] and is ignored by this kernel. Remove the mand [ 198.761110][ T8474] option from the mount to silence this warning. [ 198.761110][ T8474] ======================================================= [ 198.854373][ T8476] tmpfs: Unknown parameter 'ZmHSuLVόGU9Q1' [ 198.862424][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 198.892480][ T5826] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.924047][ T982] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.972444][ T5831] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 199.024567][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 199.034484][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 199.046767][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 199.052285][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 199.062388][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.070381][ T5826] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 199.070426][ T5826] usb 5-1: config 0 has no interface number 0 [ 199.070491][ T5826] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 199.085901][ T9] usb 3-1: Product: syz [ 199.085923][ T9] usb 3-1: Manufacturer: syz [ 199.102556][ T5826] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 199.109837][ T9] usb 3-1: SerialNumber: syz [ 199.110518][ T982] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 199.117738][ T5826] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 199.139147][ T5826] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 199.139178][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.139199][ T5826] usb 5-1: Product: syz [ 199.139215][ T5826] usb 5-1: Manufacturer: syz [ 199.139231][ T5826] usb 5-1: SerialNumber: syz [ 199.156773][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.159015][ T982] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 199.179856][ T5826] usb 5-1: config 0 descriptor?? [ 199.181462][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 199.205749][ T8468] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.209853][ T982] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 199.219087][ T8468] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.223169][ T5831] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 199.237704][ T9] usb 3-1: config 0 descriptor?? [ 199.244816][ T5831] usb 2-1: config 0 has no interface number 0 [ 199.251017][ T5831] usb 2-1: config 0 interface 230 has no altsetting 0 [ 199.254608][ T8466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.258185][ T982] usb 4-1: Manufacturer: syz [ 199.270812][ T8466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.279190][ T5831] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 199.291816][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.302095][ T5831] usb 2-1: Product: syz [ 199.307563][ T5831] usb 2-1: Manufacturer: syz [ 199.312565][ T982] usb 4-1: config 0 descriptor?? [ 199.318995][ T5831] usb 2-1: SerialNumber: syz [ 199.344235][ T5831] usb 2-1: config 0 descriptor?? [ 199.358912][ T5831] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 199.374346][ T5831] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 199.422239][ T982] rc_core: IR keymap rc-hauppauge not found [ 199.428643][ T982] Registered IR keymap rc-empty [ 199.436442][ T982] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 199.447870][ T8468] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.455669][ T982] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 199.462427][ T8468] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.513634][ T8466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.521309][ T8466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.547540][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 199.557860][ T5894] usb 4-1: USB disconnect, device number 16 [ 199.680086][ T5826] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 199.884034][ T5826] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 199.898701][ T5826] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 199.913178][ T5826] asix 5-1:0.34: probe with driver asix failed with error -71 [ 199.946038][ T5826] usb 5-1: USB disconnect, device number 21 [ 200.095828][ T24] net_ratelimit: 3 callbacks suppressed [ 200.095848][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.183421][ T8492] Invalid argument reading file caps for ./file0 [ 200.338395][ T9] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 200.359737][ T9] usb 3-1: USB disconnect, device number 22 [ 200.392210][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 200.502177][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.565173][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.602330][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.632184][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.665605][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.675022][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.692560][ T24] usb 1-1: config 0 descriptor?? [ 200.793462][ T8504] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.801321][ T9] IPVS: starting estimator thread 0... [ 201.136301][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.610608][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.642510][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.750537][ T5831] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 201.772231][ T8508] IPVS: using max 26 ests per chain, 62400 per kthread [ 201.875425][ T24] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 201.965652][ T9] usb 2-1: USB disconnect, device number 20 [ 202.133783][ T24] usb 1-1: USB disconnect, device number 16 [ 202.173956][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.460933][ T8534] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1087'. [ 202.652424][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.212541][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.692587][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.842132][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.002403][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 205.042494][ T5894] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 205.067122][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.086005][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 205.129418][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.175591][ T24] usb 3-1: config 0 descriptor?? [ 205.232446][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 205.242629][ T5894] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 205.263815][ T5894] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 205.292656][ T5826] net_ratelimit: 4 callbacks suppressed [ 205.292687][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.306499][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.325311][ T5894] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.350984][ T5894] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 205.377999][ T5894] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 205.395439][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.404588][ T5894] usb 2-1: Product: syz [ 205.408856][ T5894] usb 2-1: Manufacturer: syz [ 205.413877][ T5894] usb 2-1: SerialNumber: syz [ 205.450811][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 205.462259][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 205.502698][ T5894] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input22 [ 205.562469][ T8614] syzkaller1: entered promiscuous mode [ 205.568287][ T8614] syzkaller1: entered allmulticast mode [ 205.618115][ T24] corsair-psu 0003:1B1C:1C0D.001B: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 205.639316][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.651069][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.661874][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.675160][ T9] usb 1-1: config 0 descriptor?? [ 205.712217][ T5894] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 205.720641][ T5894] (id 0x00) [ 205.772310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.822159][ T5894] rc_core: IR keymap rc-imon-pad not found [ 205.828039][ T5894] Registered IR keymap rc-empty [ 205.852237][ T5894] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 205.862657][ T5894] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 205.916612][ T5894] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 205.930033][ T5894] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input23 [ 205.957093][ T5894] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:21> initialized [ 206.011494][ T24] corsair-psu 0003:1B1C:1C0D.001B: unable to initialize device (-95) [ 206.048352][ T24] corsair-psu 0003:1B1C:1C0D.001B: probe with driver corsair-psu failed with error -95 [ 206.079861][ T24] usb 3-1: USB disconnect, device number 23 [ 206.109706][ T9] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 206.136785][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001C/input/input24 [ 206.159343][ T8598] imon:display_open: display port is already open [ 206.172116][ T982] usb 2-1: USB disconnect, device number 21 [ 206.253496][ T9] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 206.332367][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.489997][ C0] Mem-Info: [ 206.493434][ C0] active_anon:7245 inactive_anon:0 isolated_anon:0 [ 206.493434][ C0] active_file:12932 inactive_file:39991 isolated_file:0 [ 206.493434][ C0] unevictable:768 dirty:279 writeback:0 [ 206.493434][ C0] slab_reclaimable:10990 slab_unreclaimable:96258 [ 206.493434][ C0] mapped:30310 shmem:2390 pagetables:1238 [ 206.493434][ C0] sec_pagetables:0 bounce:0 [ 206.493434][ C0] kernel_misc_reclaimable:0 [ 206.493434][ C0] free:1316294 free_pcp:10268 free_cma:0 [ 206.538882][ C0] Node 0 active_anon:28980kB inactive_anon:0kB active_file:51728kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121240kB dirty:1116kB writeback:0kB shmem:8024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11964kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.570724][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.600643][ C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.630484][ C0] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 206.636276][ C0] Node 0 DMA32 free:1301996kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28980kB inactive_anon:0kB active_file:51728kB inactive_file:159764kB unevictable:1536kB writepending:1116kB zspages:0kB present:3129332kB managed:2552860kB mlocked:0kB bounce:0kB free_pcp:41068kB local_pcp:20868kB free_cma:0kB [ 206.669677][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 206.674427][ C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 206.703740][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 206.708571][ C0] Node 1 Normal free:3947820kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.740238][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 206.744987][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.757724][ C0] Node 0 DMA32: 2740*4kB (UM) 2005*8kB (UME) 514*16kB (UM) 312*32kB (UME) 216*64kB (UME) 138*128kB (UME) 100*256kB (UM) 31*512kB (UME) 20*1024kB (UME) 2*2048kB (UE) 283*4096kB (UM) = 1301912kB [ 206.776819][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 206.788344][ C0] Node 1 Normal: 1*4kB (U) 3*8kB (UME) 11*16kB (UME) 13*32kB (UME) 13*64kB (UME) 5*128kB (UME) 3*256kB (ME) 3*512kB (ME) 1*1024kB (M) 3*2048kB (UE) 961*4096kB (M) = 3947820kB [ 206.806029][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.815696][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.825439][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.835028][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.844326][ C0] 55309 total pagecache pages [ 206.849031][ C0] 0 pages in swap cache [ 206.853198][ C0] Free swap = 124996kB [ 206.857394][ C0] Total swap = 124996kB [ 206.861570][ C0] 2097051 pages RAM [ 206.865386][ C0] 0 pages HighMem/MovableOnly [ 206.870069][ C0] 427000 pages reserved [ 206.874241][ C0] 0 pages cma reserved [ 206.880061][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.373976][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.582166][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 207.692433][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.768862][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 207.790308][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 207.817501][ T5831] usb 1-1: USB disconnect, device number 17 [ 207.842144][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.904163][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.932222][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.957877][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.988342][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.034404][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.055231][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.292307][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 208.360981][ T24] usb 2-1: usb_control_msg returned -32 [ 208.368149][ T24] usbtmc 2-1:16.0: can't read capabilities [ 208.418058][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.482850][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.510390][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.520846][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.533993][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.544527][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.552863][ T5894] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 208.575984][ T9] usb 3-1: config 0 descriptor?? [ 208.732716][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 208.751537][ T5894] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.771861][ T5894] usb 4-1: config 179 has no interface number 0 [ 208.781302][ T24] hid_parser_main: 20 callbacks suppressed [ 208.781325][ T24] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 208.821110][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 208.849912][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 208.864987][ T24] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.883322][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.907274][ T5894] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 208.935173][ T24] usb 2-1: USB disconnect, device number 22 [ 208.971324][ T5894] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.992436][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.016936][ T5894] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 209.050744][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.068572][ T9] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 209.099189][ T8647] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 Stopping sshd: [ 209.310138][ T5831] usb 3-1: USB disconnect, device number 24 stopped /usr/sbin/sshd (pid 5583) OK [ 209.406271][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input25 Stopping crond: [ 209.793281][ T5915] usb 4-1: USB disconnect, device number 17 [ 209.793497][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 209.807680][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.816649][ C1] ================================================================== [ 209.824749][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 209.832590][ C1] Read of size 4 at addr ffff88805a4ea05c by task syz.1.1141/8670 [ 209.840434][ C1] [ 209.842817][ C1] CPU: 1 UID: 0 PID: 8670 Comm: syz.1.1141 Not tainted syzkaller #0 PREEMPT(full) [ 209.842846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.842868][ C1] Call Trace: [ 209.842878][ C1] [ 209.842888][ C1] dump_stack_lvl+0xe8/0x150 [ 209.842922][ C1] print_report+0xba/0x230 [ 209.842951][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 209.842972][ C1] kasan_report+0x117/0x150 [ 209.843001][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 209.843026][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 209.843060][ C1] ? lock_acquire+0xf0/0x2e0 [ 209.843086][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 209.843112][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 209.843142][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 209.843169][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 209.843196][ C1] dummy_timer+0xbbd/0x45d0 [ 209.843227][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 209.843266][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 209.843292][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 209.843316][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.843345][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 209.843374][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 209.843395][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 209.843454][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 209.843485][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 209.843517][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 209.843554][ C1] handle_softirqs+0x22a/0x870 [ 209.843584][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 209.843617][ C1] __irq_exit_rcu+0x5f/0x150 [ 209.843645][ C1] irq_exit_rcu+0x9/0x30 [ 209.843671][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 209.843703][ C1] [ 209.843711][ C1] [ 209.843721][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 209.843746][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0xf1/0x120 [ 209.843785][ C1] Code: 84 00 4c 85 3b 75 1a 48 c7 c7 00 67 76 8e be 04 00 00 00 e8 71 ae 84 00 83 3d 4a 7b cb 0c 00 74 16 b0 01 65 ff 0d 6f b4 70 11 <74> 0f 5b 41 5e 41 5f e9 53 ed 04 0a cc 31 c0 eb e8 e8 59 c2 88 ff [ 209.843802][ C1] RSP: 0000:ffffc9000c617328 EFLAGS: 00000282 [ 209.843818][ C1] RAX: 1ffffffff1cecb01 RBX: ffffffff8e765e70 RCX: 0000000080000002 [ 209.843832][ C1] RDX: 0000000000000000 RSI: ffffffff8c27a4e0 RDI: ffff8880b873bd68 [ 209.843844][ C1] RBP: 0000000000000001 R08: ffffffff823bce44 R09: ffffffff8e7602e0 [ 209.843856][ C1] R10: dffffc0000000000 R11: fffff94000364321 R12: 000000000006c864 [ 209.843869][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000002 [ 209.843885][ C1] ? page_table_check_clear+0x144/0x5f0 [ 209.843906][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 209.843934][ C1] rcu_read_lock_held+0x1e/0x50 [ 209.843960][ C1] page_ext_lookup+0xe7/0x180 [ 209.843977][ C1] page_table_check_clear+0x238/0x5f0 [ 209.843993][ C1] ? page_table_check_clear+0x144/0x5f0 [ 209.844009][ C1] ? vm_normal_page+0x10d/0x240 [ 209.844029][ C1] unmap_page_range+0x33b3/0x48f0 [ 209.844068][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 209.844091][ C1] ? mas_find+0xb0e/0xd30 [ 209.844115][ C1] ? unmap_vmas+0x157/0x5c0 [ 209.844134][ C1] unmap_vmas+0x3c0/0x5c0 [ 209.844156][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 209.844185][ C1] exit_mmap+0x261/0xdb0 [ 209.844212][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 209.844237][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 209.844268][ C1] ? __pfx_exit_aio+0x10/0x10 [ 209.844297][ C1] ? uprobe_clear_state+0x27c/0x290 [ 209.844318][ C1] __mmput+0x118/0x430 [ 209.844340][ C1] exit_mm+0x168/0x220 [ 209.844362][ C1] do_exit+0x62e/0x2320 [ 209.844381][ C1] ? __pfx_do_exit+0x10/0x10 [ 209.844398][ C1] ? do_raw_spin_lock+0x26c/0x2f0 [ 209.844419][ C1] do_group_exit+0x21b/0x2d0 [ 209.844435][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.844458][ C1] get_signal+0x1284/0x1330 [ 209.844487][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 209.844508][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 209.844536][ C1] exit_to_user_mode_loop+0x86/0x480 [ 209.844555][ C1] ? rcu_is_watching+0x15/0xb0 [ 209.844580][ C1] __do_fast_syscall_32+0x415/0x640 [ 209.844596][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.844621][ C1] ? do_fast_syscall_32+0x33/0x70 [ 209.844636][ C1] ? irqentry_exit+0x10e/0x620 [ 209.844660][ C1] ? trace_irq_disable+0x3b/0x150 [ 209.844687][ C1] do_fast_syscall_32+0x33/0x70 [ 209.844702][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.844723][ C1] RIP: 0023:0xf7f37f6c [ 209.844745][ C1] Code: Unable to access opcode bytes at 0xf7f37f42. [ 209.844754][ C1] RSP: 002b:00000000f53f65bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 209.844771][ C1] RAX: fffffffffffffe00 RBX: 00000000f73f4f88 RCX: 0000000000000080 [ 209.844783][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f4f8c [ 209.844794][ C1] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 209.844804][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.844814][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.844831][ C1] [ 209.844837][ C1] [ 210.339551][ C1] Allocated by task 5894: [ 210.343896][ C1] kasan_save_track+0x3e/0x80 [ 210.348603][ C1] __kasan_kmalloc+0x93/0xb0 [ 210.353216][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 210.358610][ C1] xpad_probe+0x428/0x1fc0 [ 210.363053][ C1] usb_probe_interface+0x668/0xc90 [ 210.368183][ C1] really_probe+0x267/0xaf0 [ 210.372706][ C1] __driver_probe_device+0x18c/0x320 [ 210.378019][ C1] driver_probe_device+0x4f/0x240 [ 210.383060][ C1] __device_attach_driver+0x2d4/0x4c0 [ 210.388446][ C1] bus_for_each_drv+0x258/0x2f0 [ 210.393325][ C1] __device_attach+0x2c5/0x450 [ 210.398101][ C1] device_initial_probe+0xa1/0xd0 [ 210.403140][ C1] bus_probe_device+0x12a/0x220 [ 210.408025][ C1] device_add+0x7b6/0xb70 [ 210.412407][ C1] usb_set_configuration+0x1a87/0x2110 [ 210.417894][ C1] usb_generic_driver_probe+0x8d/0x150 [ 210.423380][ C1] usb_probe_device+0x1c4/0x3b0 [ 210.428262][ C1] really_probe+0x267/0xaf0 [ 210.432784][ C1] __driver_probe_device+0x18c/0x320 [ 210.438092][ C1] driver_probe_device+0x4f/0x240 [ 210.443135][ C1] __device_attach_driver+0x2d4/0x4c0 [ 210.448530][ C1] bus_for_each_drv+0x258/0x2f0 [ 210.453403][ C1] __device_attach+0x2c5/0x450 [ 210.458182][ C1] device_initial_probe+0xa1/0xd0 [ 210.463214][ C1] bus_probe_device+0x12a/0x220 [ 210.468102][ C1] device_add+0x7b6/0xb70 [ 210.472456][ C1] usb_new_device+0xa08/0x16f0 [ 210.477244][ C1] hub_event+0x2a1c/0x4f30 [ 210.481688][ C1] process_scheduled_works+0xb02/0x1830 [ 210.487257][ C1] worker_thread+0xa50/0xfc0 [ 210.491889][ C1] kthread+0x388/0x470 [ 210.495983][ C1] ret_from_fork+0x51e/0xb90 [ 210.500614][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.505416][ C1] [ 210.507766][ C1] Freed by task 5915: [ 210.511770][ C1] kasan_save_track+0x3e/0x80 [ 210.516478][ C1] kasan_save_free_info+0x46/0x50 [ 210.521539][ C1] __kasan_slab_free+0x5c/0x80 [ 210.526330][ C1] kfree+0x1c1/0x630 [ 210.530249][ C1] xpad_disconnect+0x350/0x480 [ 210.535057][ C1] usb_unbind_interface+0x26e/0x910 [ 210.540326][ C1] device_release_driver_internal+0x4d9/0x860 [ 210.546431][ C1] bus_remove_device+0x34d/0x440 [ 210.551408][ C1] device_del+0x527/0x8f0 [ 210.555776][ C1] usb_disable_device+0x3d4/0x8d0 [ 210.560835][ C1] usb_disconnect+0x32f/0x990 [ 210.565579][ C1] hub_event+0x1cc9/0x4f30 [ 210.570024][ C1] process_scheduled_works+0xb02/0x1830 [ 210.575590][ C1] worker_thread+0xa50/0xfc0 [ 210.580207][ C1] kthread+0x388/0x470 [ 210.584286][ C1] ret_from_fork+0x51e/0xb90 [ 210.588894][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.593684][ C1] [ 210.596027][ C1] Last potentially related work creation: [ 210.601773][ C1] kasan_save_stack+0x3e/0x60 [ 210.606485][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 210.611718][ C1] insert_work+0x3d/0x330 [ 210.616074][ C1] __queue_work+0xd03/0x1020 [ 210.620691][ C1] queue_work_on+0x106/0x1d0 [ 210.625301][ C1] xpad_irq_in+0xb57/0x25e0 [ 210.629833][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 210.635253][ C1] dummy_timer+0xbbd/0x45d0 [ 210.639777][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 210.644999][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 210.650136][ C1] handle_softirqs+0x22a/0x870 [ 210.655019][ C1] __irq_exit_rcu+0x5f/0x150 [ 210.659633][ C1] irq_exit_rcu+0x9/0x30 [ 210.663910][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 210.669583][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.675870][ C1] [ 210.678219][ C1] Second to last potentially related work creation: [ 210.684824][ C1] kasan_save_stack+0x3e/0x60 [ 210.689546][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 210.694793][ C1] insert_work+0x3d/0x330 [ 210.699170][ C1] __queue_work+0xd03/0x1020 [ 210.703787][ C1] queue_work_on+0x106/0x1d0 [ 210.708404][ C1] xpad_irq_in+0xb57/0x25e0 [ 210.712953][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 210.718393][ C1] dummy_timer+0xbbd/0x45d0 [ 210.722957][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 210.728203][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 210.733354][ C1] handle_softirqs+0x22a/0x870 [ 210.738171][ C1] __irq_exit_rcu+0x5f/0x150 [ 210.742796][ C1] irq_exit_rcu+0x9/0x30 [ 210.747070][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 210.752736][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.758736][ C1] [ 210.761072][ C1] The buggy address belongs to the object at ffff88805a4ea000 [ 210.761072][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 210.775160][ C1] The buggy address is located 92 bytes inside of [ 210.775160][ C1] freed 1024-byte region [ffff88805a4ea000, ffff88805a4ea400) [ 210.789086][ C1] [ 210.791446][ C1] The buggy address belongs to the physical page: [ 210.798063][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a4e8 [ 210.806880][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 210.815404][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 210.822973][ C1] page_type: f5(slab) [ 210.826968][ C1] raw: 00fff00000000040 ffff88813fea8dc0 dead000000000100 dead000000000122 [ 210.835676][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 210.844299][ C1] head: 00fff00000000040 ffff88813fea8dc0 dead000000000100 dead000000000122 [ 210.852990][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 210.861682][ C1] head: 00fff00000000003 ffffea0001693a01 00000000ffffffff 00000000ffffffff [ 210.870373][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 210.879061][ C1] page dumped because: kasan: bad access detected [ 210.885492][ C1] page_owner tracks the page as allocated [ 210.891246][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 23, tgid 23 (ksoftirqd/1), ts 95657167346, free_ts 26845583674 [ 210.910129][ C1] post_alloc_hook+0x231/0x280 [ 210.914916][ C1] get_page_from_freelist+0x24dc/0x2580 [ 210.920478][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 210.926311][ C1] alloc_pages_mpol+0x232/0x4a0 [ 210.931270][ C1] allocate_slab+0x83/0x660 [ 210.935791][ C1] ___slab_alloc+0x150/0x6b0 [ 210.940413][ C1] __kmalloc_noprof+0x18a/0x760 [ 210.945274][ C1] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 210.951190][ C1] ieee80211_inform_bss+0x161/0x1160 [ 210.956500][ C1] cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 210.962852][ C1] cfg80211_inform_bss_data+0x266/0x3c40 [ 210.968508][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 210.974597][ C1] ieee80211_bss_info_update+0x794/0xa40 [ 210.980247][ C1] ieee80211_scan_rx+0x552/0xa40 [ 210.985202][ C1] ieee80211_rx_list+0x29e5/0x3710 [ 210.990330][ C1] ieee80211_rx_napi+0x1b1/0x3e0 [ 210.995376][ C1] page last free pid 1 tgid 1 stack trace: [ 211.001215][ C1] __free_frozen_pages+0xc00/0xd90 [ 211.006343][ C1] free_contig_range+0xbb/0x170 [ 211.011223][ C1] destroy_args+0x4e5/0x570 [ 211.015768][ C1] debug_vm_pgtable+0x3f8/0x410 [ 211.020640][ C1] do_one_initcall+0x250/0x8d0 [ 211.025430][ C1] do_initcall_level+0x104/0x190 [ 211.030393][ C1] do_initcalls+0x59/0xa0 [ 211.034742][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 211.039957][ C1] kernel_init+0x1d/0x1d0 [ 211.044309][ C1] ret_from_fork+0x51e/0xb90 [ 211.048928][ C1] ret_from_fork_asm+0x1a/0x30 [ 211.053722][ C1] [ 211.056058][ C1] Memory state around the buggy address: [ 211.061702][ C1] ffff88805a4e9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.069782][ C1] ffff88805a4e9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.077866][ C1] >ffff88805a4ea000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.085941][ C1] ^ [ 211.092461][ C0] net_ratelimit: 2 callbacks suppressed [ 211.092503][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.093146][ C1] ffff88805a4ea080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.113684][ C1] ffff88805a4ea100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.121763][ C1] ================================================================== [ 211.129841][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.137068][ C1] CPU: 1 UID: 0 PID: 8670 Comm: syz.1.1141 Not tainted syzkaller #0 PREEMPT(full) [ 211.146375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.156474][ C1] Call Trace: [ 211.159797][ C1] [ 211.162673][ C1] vpanic+0x56c/0xa60 [ 211.166696][ C1] ? __pfx_vpanic+0x10/0x10 [ 211.171239][ C1] panic+0xc5/0xd0 [ 211.174988][ C1] ? __pfx_panic+0x10/0x10 [ 211.179441][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 211.184493][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 211.189541][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 211.194582][ C1] check_panic_on_warn+0x89/0xb0 [ 211.199547][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 211.204593][ C1] end_report+0x73/0x180 [ 211.208857][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 211.213899][ C1] kasan_report+0x128/0x150 [ 211.218458][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 211.223503][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 211.228380][ C1] ? lock_acquire+0xf0/0x2e0 [ 211.233004][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.238442][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 211.243686][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 211.248910][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 211.254300][ C1] dummy_timer+0xbbd/0x45d0 [ 211.258833][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 211.263819][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.269230][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 211.274208][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 211.280069][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 211.285054][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 211.290023][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 211.295268][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 211.301057][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 211.307172][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 211.312321][ C1] handle_softirqs+0x22a/0x870 [ 211.317106][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 211.321896][ C1] __irq_exit_rcu+0x5f/0x150 [ 211.326510][ C1] irq_exit_rcu+0x9/0x30 [ 211.330772][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 211.336425][ C1] [ 211.339372][ C1] [ 211.342323][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.348324][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0xf1/0x120 [ 211.355114][ C1] Code: 84 00 4c 85 3b 75 1a 48 c7 c7 00 67 76 8e be 04 00 00 00 e8 71 ae 84 00 83 3d 4a 7b cb 0c 00 74 16 b0 01 65 ff 0d 6f b4 70 11 <74> 0f 5b 41 5e 41 5f e9 53 ed 04 0a cc 31 c0 eb e8 e8 59 c2 88 ff [ 211.374737][ C1] RSP: 0000:ffffc9000c617328 EFLAGS: 00000282 [ 211.380863][ C1] RAX: 1ffffffff1cecb01 RBX: ffffffff8e765e70 RCX: 0000000080000002 [ 211.388865][ C1] RDX: 0000000000000000 RSI: ffffffff8c27a4e0 RDI: ffff8880b873bd68 [ 211.396851][ C1] RBP: 0000000000000001 R08: ffffffff823bce44 R09: ffffffff8e7602e0 [ 211.404839][ C1] R10: dffffc0000000000 R11: fffff94000364321 R12: 000000000006c864 [ 211.412828][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000002 [ 211.420816][ C1] ? page_table_check_clear+0x144/0x5f0 [ 211.426388][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 211.432570][ C1] rcu_read_lock_held+0x1e/0x50 [ 211.437440][ C1] page_ext_lookup+0xe7/0x180 [ 211.442141][ C1] page_table_check_clear+0x238/0x5f0 [ 211.447533][ C1] ? page_table_check_clear+0x144/0x5f0 [ 211.453112][ C1] ? vm_normal_page+0x10d/0x240 [ 211.457978][ C1] unmap_page_range+0x33b3/0x48f0 [ 211.463046][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 211.468437][ C1] ? mas_find+0xb0e/0xd30 [ 211.472795][ C1] ? unmap_vmas+0x157/0x5c0 [ 211.477337][ C1] unmap_vmas+0x3c0/0x5c0 [ 211.481691][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 211.486567][ C1] exit_mmap+0x261/0xdb0 [ 211.490834][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 211.495616][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 211.501303][ C1] ? __pfx_exit_aio+0x10/0x10 [ 211.506007][ C1] ? uprobe_clear_state+0x27c/0x290 [ 211.511236][ C1] __mmput+0x118/0x430 [ 211.515324][ C1] exit_mm+0x168/0x220 [ 211.519433][ C1] do_exit+0x62e/0x2320 [ 211.523605][ C1] ? __pfx_do_exit+0x10/0x10 [ 211.528210][ C1] ? do_raw_spin_lock+0x26c/0x2f0 [ 211.533248][ C1] do_group_exit+0x21b/0x2d0 [ 211.537851][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 211.543163][ C1] get_signal+0x1284/0x1330 [ 211.547702][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 211.553266][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 211.559440][ C1] exit_to_user_mode_loop+0x86/0x480 [ 211.564740][ C1] ? rcu_is_watching+0x15/0xb0 [ 211.569550][ C1] __do_fast_syscall_32+0x415/0x640 [ 211.574792][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.580031][ C1] ? do_fast_syscall_32+0x33/0x70 [ 211.585085][ C1] ? irqentry_exit+0x10e/0x620 [ 211.589881][ C1] ? trace_irq_disable+0x3b/0x150 [ 211.594937][ C1] do_fast_syscall_32+0x33/0x70 [ 211.599811][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.606155][ C1] RIP: 0023:0xf7f37f6c [ 211.610326][ C1] Code: Unable to access opcode bytes at 0xf7f37f42. [ 211.617004][ C1] RSP: 002b:00000000f53f65bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 211.625435][ C1] RAX: fffffffffffffe00 RBX: 00000000f73f4f88 RCX: 0000000000000080 [ 211.633429][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f4f8c [ 211.641419][ C1] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 211.649443][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 211.657431][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.665428][ C1] [ 211.669050][ C1] Kernel Offset: disabled [ 211.673374][ C1] Rebooting in 86400 seconds..