last executing test programs: 8m28.335106927s ago: executing program 0 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8m26.378104488s ago: executing program 0 (id=207): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x3fffffe, 0x7, 0x80000000006, 0x9, 0xff, 0xfffdfffffffffffe, 0x4, 0x0, 0x2, 0xfffffffd, 0x1}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000083000/0x1000)=nil, 0x1000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 8m23.764837227s ago: executing program 0 (id=216): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 8m22.509668417s ago: executing program 0 (id=218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt(r0, 0x1, 0x9, &(0x7f0000000180)=""/112, &(0x7f0000000200)=0x70) 8m22.122926103s ago: executing program 0 (id=222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m20.319850999s ago: executing program 0 (id=227): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x3fffffe, 0x7, 0x80000000006, 0x9, 0xff, 0xfffdfffffffffffe, 0x4, 0x0, 0x2, 0xfffffffd, 0x1}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000083000/0x1000)=nil, 0x1000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 8m4.082620878s ago: executing program 32 (id=227): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x3fffffe, 0x7, 0x80000000006, 0x9, 0xff, 0xfffdfffffffffffe, 0x4, 0x0, 0x2, 0xfffffffd, 0x1}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000083000/0x1000)=nil, 0x1000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 2.411777081s ago: executing program 2 (id=3104): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xb93}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 2.299238189s ago: executing program 2 (id=3107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x143, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.13912197s ago: executing program 2 (id=3111): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x71c7, &(0x7f0000000080)={0x0, 0x9b95, 0x2, 0x9, 0x17d}) pause() close_range(r0, 0xffffffffffffffff, 0x0) 1.831630623s ago: executing program 5 (id=3117): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x7, [0xfb, 0x9, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc11, 0x1, 0x2, 0x10, 0x400, 0xa, 0x5, 0x2, 0x7, 0xa, 0x81, 0x9, 0x4, 0x3, 0x97, 0x4577, 0x2, 0x5, 0x81, 0x3, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x7fff, 0x5, 0x5, 0x2, 0x0, 0x9, 0xe9da, 0xf, 0x6, 0x3, 0x4000, 0x5], 0x4}) 1.777177761s ago: executing program 5 (id=3119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000c00505050505050"], 0x3c}}, 0x10) 1.656976645s ago: executing program 5 (id=3121): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x3, @empty, 0x2}, 0x1c) 1.562196352s ago: executing program 5 (id=3123): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r2, 0x4, 0x80000}) 1.477385224s ago: executing program 3 (id=3124): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r2, r2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) 1.392153014s ago: executing program 3 (id=3126): r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x1, 0x48001032, r1, 0x0) ftruncate(r0, 0xdcb) 1.21585907s ago: executing program 3 (id=3128): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0) 1.212795772s ago: executing program 2 (id=3129): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000120005ff"], 0x50}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x4000091, 0x40000000, 0x0) 1.167327898s ago: executing program 3 (id=3131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "8035ea41538307b8", "b8bc01cedc0fcf60344488000000e235", "5e2529a9", "eb5dea8210ead100"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x5, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) 979.774821ms ago: executing program 4 (id=3133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000800)={@val={0xa, 0x6002}, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0xa, 0x6, "ee854a", 0x10, 0x11, 0x0, @mcast2, @private0, {[@fragment={0x6, 0x0, 0x0, 0x1, 0x0, 0x6, 0x65}], {0x4e22, 0x4e22, 0x8}}}}}}}, 0x4e) 795.327476ms ago: executing program 1 (id=3137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0xbd, 0x8) 750.286596ms ago: executing program 1 (id=3138): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c010000030101030000000000000000060000022c0006"], 0x14c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008040) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000ffff"}) 623.945401ms ago: executing program 5 (id=3139): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mlockall(0x7) 560.225192ms ago: executing program 1 (id=3140): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000200)=""/217, 0xd9}], 0x2) 500.856545ms ago: executing program 4 (id=3141): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4000000f}) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x20, 0x0, 0x0) 449.773908ms ago: executing program 5 (id=3142): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0xc002, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x258) 431.747685ms ago: executing program 4 (id=3143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d530492c) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 367.109564ms ago: executing program 1 (id=3144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000008502"]) 360.483648ms ago: executing program 4 (id=3145): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a3100000000090001"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 260.430408ms ago: executing program 4 (id=3146): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 198.096998ms ago: executing program 3 (id=3147): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) 143.595746ms ago: executing program 1 (id=3148): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "f174c1129816852e132234bff877803918f8854f4931af746f09cdecb7130cc1496f45f4a2c41670e7daeff280147a0e4ce80fee39cfe91b8fb68ac976393fbf", 0x11}, 0x48, r2) request_key(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x2}, 0x0, r3) 108.252642ms ago: executing program 3 (id=3149): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000240)={0x20, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) 89.921926ms ago: executing program 2 (id=3150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) 40.15007ms ago: executing program 4 (id=3151): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x1f52b4ba) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7fffffff, 0x88000) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 35.332051ms ago: executing program 1 (id=3152): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000680)={0x44, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 0s ago: executing program 2 (id=3153): pipe2$watch_queue(&(0x7f00000002c0), 0x80) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 10213] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 509.470842][T10213] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 509.470859][T10213] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 509.810051][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 509.810086][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 509.810110][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 509.810134][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 509.810158][ T31] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 509.901986][ T31] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 510.000638][ T31] tipc: Node number set to 2886997031 [ 510.017705][ T31] usb 5-1: USB disconnect, device number 9 [ 510.110918][T10226] fido_id[10226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 510.617844][T10238] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 510.617882][T10238] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 510.617899][T10238] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 512.794723][T10273] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1465'. [ 512.870561][ T5796] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 513.380635][ T5796] usb 5-1: Using ep0 maxpacket: 8 [ 513.383080][ T5796] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 513.387773][ T5796] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 513.387798][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.387817][ T5796] usb 5-1: Product: syz [ 513.387829][ T5796] usb 5-1: Manufacturer: syz [ 513.387842][ T5796] usb 5-1: SerialNumber: syz [ 513.458029][ T5796] usb 5-1: config 0 descriptor?? [ 513.689949][ T5796] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 513.944671][T10277] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 513.944708][T10277] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 513.944725][T10277] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 514.140864][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 514.453171][ T5796] gspca_zc3xx: reg_w_i err -71 [ 515.133021][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.133053][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.133088][ T5907] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 515.133109][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.138907][ T5907] usb 6-1: config 0 descriptor?? [ 515.575033][ T5907] cp2112 0003:10C4:EA90.000E: item fetching failed at offset 5/7 [ 515.575825][ T5907] cp2112 0003:10C4:EA90.000E: parse failed [ 515.575954][ T5907] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -22 [ 515.630557][ T5796] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 515.630659][ T5796] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 515.634153][ T5796] usb 5-1: USB disconnect, device number 10 [ 515.774234][ T31] usb 6-1: USB disconnect, device number 7 [ 515.956721][T10303] program syz.1.1476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.258075][T10317] tipc: Enabled bearer , priority 10 [ 516.431486][T10313] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 516.431527][T10313] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 516.431544][T10313] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 516.553516][T10326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 516.935099][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 516.935140][T10342] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 517.505295][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 517.505369][T10364] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 517.505382][T10364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1502'. [ 517.672215][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 518.860573][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 518.862864][ T31] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 518.862888][ T31] usb 3-1: config 2 has no interface number 0 [ 518.862935][ T31] usb 3-1: config 2 interface 31 has no altsetting 0 [ 518.897960][ T31] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 518.897985][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.898003][ T31] usb 3-1: Product: syz [ 518.898014][ T31] usb 3-1: Manufacturer: syz [ 518.898025][ T31] usb 3-1: SerialNumber: syz [ 519.332439][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 519.343970][T10397] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 519.443624][T10399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1513'. [ 519.480610][ T1244] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 519.598760][ T31] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 519.625965][ T31] usb 3-1: USB disconnect, device number 14 [ 519.650580][ T1244] usb 6-1: Using ep0 maxpacket: 16 [ 519.653323][ T1244] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 519.653350][ T1244] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 519.653372][ T1244] usb 6-1: config 0 interface 0 has no altsetting 0 [ 519.656960][ T1244] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 519.656984][ T1244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.657002][ T1244] usb 6-1: Product: syz [ 519.657014][ T1244] usb 6-1: Manufacturer: syz [ 519.657026][ T1244] usb 6-1: SerialNumber: syz [ 520.864380][ T1244] usb 6-1: config 0 descriptor?? [ 520.938032][T10392] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 520.938212][T10392] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 521.266820][T10419] hsr0: entered promiscuous mode [ 521.267448][T10419] macsec1: entered promiscuous mode [ 521.282919][T10419] macsec1: entered allmulticast mode [ 521.282945][T10419] hsr0: entered allmulticast mode [ 521.282958][T10419] hsr_slave_0: entered allmulticast mode [ 521.282976][T10419] hsr_slave_1: entered allmulticast mode [ 521.334538][T10419] hsr0: left allmulticast mode [ 521.334558][T10419] hsr_slave_0: left allmulticast mode [ 521.334576][T10419] hsr_slave_1: left allmulticast mode [ 521.360557][ T1244] rc_core: IR keymap rc-hauppauge not found [ 521.360576][ T1244] Registered IR keymap rc-empty [ 521.363563][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.390589][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.433755][ T1244] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 521.437187][ T1244] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54 [ 521.481274][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.507848][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.520874][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.541655][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.561000][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.581225][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.585287][T10427] tipc: Enabling of bearer rejected, failed to enable media [ 521.603571][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.620921][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.640970][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.662128][ T1244] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.683985][ T1244] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 521.684007][ T1244] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 521.712125][ T1244] usb 6-1: USB disconnect, device number 8 [ 521.717927][T10436] program syz.3.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.170821][T10450] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 522.171012][T10450] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 522.171079][T10450] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 523.001344][ T1199] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 524.640945][ T1199] usb 2-1: Using ep0 maxpacket: 32 [ 524.644076][ T1199] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 524.653313][ T1199] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 524.653340][ T1199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.653358][ T1199] usb 2-1: Product: syz [ 524.653371][ T1199] usb 2-1: Manufacturer: syz [ 524.653384][ T1199] usb 2-1: SerialNumber: syz [ 524.674723][ T1199] usb 2-1: config 0 descriptor?? [ 524.677140][T10440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.694724][ T1199] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.989407][T10466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1532'. [ 525.309598][ T1199] usb 2-1: USB disconnect, device number 12 [ 525.603537][T10479] udevd[10479]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.057318][T10499] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1546'. [ 526.190597][ T5796] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 526.269190][T10503] kernel profiling enabled (shift: 9) [ 527.250562][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 527.253103][ T5796] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 527.253157][ T5796] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.253180][ T5796] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.253200][ T5796] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 527.253223][ T5796] usb 4-1: config 7 interface 0 has no altsetting 0 [ 527.253254][ T5796] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 527.253275][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.620624][ T5907] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 527.810587][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 527.815534][ T5907] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 527.815942][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.859978][ T5907] usb 2-1: config 0 descriptor?? [ 527.954570][ T5796] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.000F/input/input56 [ 528.001730][ T1244] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 528.090948][ T5796] kye 0003:0458:5010.000F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 528.128941][ T5796] usb 4-1: USB disconnect, device number 15 [ 528.160629][ T1244] usb 3-1: Using ep0 maxpacket: 8 [ 528.165583][ T1244] usb 3-1: unable to get BOS descriptor or descriptor too short [ 528.169156][ T1244] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 528.169234][ T1244] usb 3-1: config 4 has no interface number 0 [ 528.169265][ T1244] usb 3-1: config 4 interface 30 has no altsetting 0 [ 528.218695][ T1244] usb 3-1: string descriptor 0 read error: -22 [ 528.220056][ T1244] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 528.220081][ T1244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.274832][ T1244] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 528.274936][ T1244] dw2102: su3000_power_ctrl: 1, initialized 0 [ 528.274955][ T1244] dvb-usb: bulk message failed: -22 (2/0) [ 528.312277][ T1244] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.314362][ T1244] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 528.314416][ T1244] usb 3-1: media controller created [ 528.314496][ T1244] dvb-usb: bulk message failed: -22 (6/0) [ 528.314511][ T1244] dw2102: i2c transfer failed. [ 528.314529][ T1244] dvb-usb: bulk message failed: -22 (6/0) [ 528.314542][ T1244] dw2102: i2c transfer failed. [ 528.314558][ T1244] dvb-usb: bulk message failed: -22 (6/0) [ 528.314570][ T1244] dw2102: i2c transfer failed. [ 528.316336][ T1244] dvb-usb: bulk message failed: -22 (6/0) [ 528.316354][ T1244] dw2102: i2c transfer failed. [ 528.316375][ T1244] dvb-usb: bulk message failed: -22 (6/0) [ 528.316388][ T1244] dw2102: i2c transfer failed. [ 528.316404][ T1244] dvb-usb: bulk message failed: -22 (6/0) [ 528.316417][ T1244] dw2102: i2c transfer failed. [ 528.316427][ T1244] dvb-usb: MAC address: 02:02:02:02:02:02 [ 529.114703][ T5907] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 529.114742][ T5907] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 529.114775][ T5907] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 529.114801][ T5907] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 529.114826][ T5907] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 529.114851][ T5907] ryos 0003:1E7D:3138.0010: unknown main item tag 0x0 [ 529.189604][ T5907] ryos 0003:1E7D:3138.0010: hidraw1: USB HID v0.01 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 529.218194][T10518] dvb-usb: bulk message failed: -22 (4/0) [ 529.218213][T10518] dw2102: i2c transfer failed. [ 529.352392][ T5907] usb 2-1: USB disconnect, device number 13 [ 529.403358][ T1244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.462672][ T1244] dvb-usb: bulk message failed: -22 (3/0) [ 529.462691][ T1244] dw2102: command 0x0e transfer failed. [ 529.462700][ T1244] dvb-usb: bulk message failed: -22 (3/0) [ 529.462713][ T1244] dw2102: command 0x0e transfer failed. [ 529.529389][T10534] fido_id[10534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 529.770508][ T1244] dvb-usb: bulk message failed: -22 (3/0) [ 529.770532][ T1244] dw2102: command 0x0e transfer failed. [ 529.770541][ T1244] dvb-usb: bulk message failed: -22 (3/0) [ 529.770554][ T1244] dw2102: command 0x0e transfer failed. [ 529.770562][ T1244] dvb-usb: bulk message failed: -22 (1/0) [ 529.772894][ T1244] dw2102: command 0x51 transfer failed. [ 529.772908][ T1244] dvb-usb: bulk message failed: -22 (5/0) [ 529.772922][ T1244] dw2102: i2c probe for address 0x68 failed. [ 529.772933][ T1244] dvb-usb: bulk message failed: -22 (5/0) [ 529.772946][ T1244] dw2102: i2c probe for address 0x69 failed. [ 529.772955][ T1244] dvb-usb: bulk message failed: -22 (5/0) [ 529.772968][ T1244] dw2102: i2c probe for address 0x6a failed. [ 529.772978][ T1244] dw2102: probing for demodulator failed. Is the external power switched on? [ 529.772987][ T1244] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 530.907784][T10537] fido_id[10537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 531.117703][T10551] IPVS: Error connecting to the multicast addr [ 531.150559][ T1244] rc_core: IR keymap rc-tt-1500 not found [ 531.150578][ T1244] Registered IR keymap rc-empty [ 531.152978][ T1244] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 531.185102][ T1244] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input57 [ 531.201171][ T1244] dvb-usb: schedule remote query interval to 250 msecs. [ 531.201191][ T1244] dw2102: su3000_power_ctrl: 0, initialized 1 [ 531.201203][ T1244] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 531.233625][ T1244] usb 3-1: USB disconnect, device number 15 [ 531.260737][T10556] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 531.443487][ T1244] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 531.855992][T10580] IPv6: NLM_F_CREATE should be specified when creating new route [ 533.169759][ T1100] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.169805][ T1100] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.169838][ T1100] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.169871][ T1100] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.605806][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 533.605832][T10619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1596'. [ 533.708342][T10619] bond1: Unable to set down delay as MII monitoring is disabled [ 533.823092][T10619] bond1 (unregistering): Released all slaves [ 535.030316][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 535.170560][ T5907] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 535.321248][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 535.323977][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 535.325420][ T5907] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1023 [ 535.325447][ T5907] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 8 [ 535.325467][ T5907] usb 5-1: config 1 interface 0 has no altsetting 0 [ 535.328448][ T5907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.328472][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.328489][ T5907] usb 5-1: Product: syz [ 535.328501][ T5907] usb 5-1: Manufacturer: syz [ 535.328514][ T5907] usb 5-1: SerialNumber: syz [ 536.340191][T10636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 536.340313][T10636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 536.624869][ T5907] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 536.670337][ T5907] usb 5-1: USB disconnect, device number 11 [ 537.108820][ T5804] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 537.284842][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 537.284882][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.284918][ T5804] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 537.284938][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.305063][ T5804] usb 4-1: config 0 descriptor?? [ 537.525342][ T5796] kernel read not supported for file /vga_arbiter (pid: 5796 comm: kworker/0:3) [ 537.982170][ T5804] bigben 0003:146B:0902.0011: unexpected rdesc, please submit for review [ 537.989886][ T5804] bigben 0003:146B:0902.0011: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 537.989916][ T5804] bigben 0003:146B:0902.0011: missing HID_OUTPUT_REPORT 0 [ 537.989930][ T5804] bigben 0003:146B:0902.0011: no output report found [ 538.231948][ T5796] usb 4-1: USB disconnect, device number 16 [ 538.339494][T10686] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 538.339532][T10686] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 538.339549][T10686] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 538.399465][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.890187][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.923513][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.106070][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.496397][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.780636][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 539.936970][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.937000][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.937036][ T31] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 539.937056][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.981924][ T31] usb 3-1: config 0 descriptor?? [ 540.025482][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 540.025503][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 540.025527][T10709] netlink: 'syz.3.1634': attribute type 5 has an invalid length. [ 540.025539][T10709] netlink: 'syz.3.1634': attribute type 6 has an invalid length. [ 540.393435][ T31] hid (null): unknown global tag 0xd [ 540.420191][ T31] razer 0003:1532:010E.0012: unknown global tag 0xd [ 540.420213][ T31] razer 0003:1532:010E.0012: item 0 0 1 13 parsing failed [ 540.443953][ T31] razer 0003:1532:010E.0012: probe with driver razer failed with error -22 [ 540.600533][ T5804] usb 3-1: USB disconnect, device number 16 [ 540.720585][ T31] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 540.817505][T10737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.870531][ T5796] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 540.878973][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 540.879005][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.879043][ T31] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 540.879063][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.944681][ T31] usb 4-1: config 0 descriptor?? [ 540.945436][T10720] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 541.030524][ T5796] usb 6-1: Using ep0 maxpacket: 16 [ 541.039492][ T5796] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.039516][ T5796] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.043990][ T5796] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.044015][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.044033][ T5796] usb 6-1: Product: syz [ 541.044045][ T5796] usb 6-1: Manufacturer: syz [ 541.044056][ T5796] usb 6-1: SerialNumber: syz [ 541.384405][ T31] dragonrise 0003:0079:0011.0013: item fetching failed at offset 2/5 [ 541.385187][ T31] dragonrise 0003:0079:0011.0013: parse failed [ 541.385253][ T31] dragonrise 0003:0079:0011.0013: probe with driver dragonrise failed with error -22 [ 541.511353][ T5796] usb 6-1: cannot find UAC_HEADER [ 541.579482][ T31] usb 4-1: USB disconnect, device number 17 [ 541.738033][ T5796] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 541.748001][ T5796] usb 6-1: USB disconnect, device number 9 [ 541.787503][T10445] udevd[10445]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.240204][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.407718][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.937343][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.175116][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.122825][T10811] netlink: 'syz.2.1679': attribute type 2 has an invalid length. [ 545.214980][T10815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1682'. [ 548.413596][T10859] loop9: detected capacity change from 0 to 7 [ 549.132443][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.132588][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.132715][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.132832][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.133030][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.133164][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.133277][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.133371][T10445] ldm_validate_partition_table(): Disk read failed. [ 549.133514][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.133633][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.133746][T10445] Buffer I/O error on dev loop9, logical block 0, async page read [ 549.133925][T10445] Dev loop9: unable to read RDB block 0 [ 549.134250][T10445] loop9: unable to read partition table [ 549.134546][T10445] loop9: partition table beyond EOD, truncated [ 554.602452][T10906] xt_policy: too many policy elements [ 555.150582][ T5796] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 555.313503][ T5796] usb 4-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.313532][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 555.313564][ T5796] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 555.313585][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.365547][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1725'. [ 556.135480][ T5796] usb 4-1: config 0 descriptor?? [ 556.768399][ T5907] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 556.986665][ T5796] asus 0003:0B05:17E0.0014: hidraw0: USB HID v0.07 Device [HID 0b05:17e0] on usb-dummy_hcd.3-1/input0 [ 556.986696][ T5796] asus 0003:0B05:17E0.0014: Asus input not registered [ 557.008478][ T5796] asus 0003:0B05:17E0.0014: probe with driver asus failed with error -12 [ 557.037327][ T5796] usb 4-1: USB disconnect, device number 18 [ 557.118102][ T5907] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 557.118130][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.118148][ T5907] usb 2-1: Product: syz [ 557.118161][ T5907] usb 2-1: Manufacturer: syz [ 557.118174][ T5907] usb 2-1: SerialNumber: syz [ 557.159136][ T5907] usb 2-1: config 0 descriptor?? [ 557.366448][T10957] fido_id[10957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 557.845650][ T5907] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 557.845677][ T5907] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 557.845712][ T5907] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 557.892027][ T5907] usb 2-1: USB disconnect, device number 14 [ 557.974618][T10970] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 557.974656][T10970] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 557.974695][T10970] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 558.186780][T10981] netlink: 'syz.5.1746': attribute type 3 has an invalid length. [ 559.253704][T10994] netlink: 822 bytes leftover after parsing attributes in process `syz.3.1749'. [ 561.456864][T11014] xt_socket: unknown flags 0xd0 [ 561.550693][T11019] geneve2: entered promiscuous mode [ 561.550720][T11019] geneve2: entered allmulticast mode [ 563.447151][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.447220][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.536702][T11040] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 563.536741][T11040] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 563.536759][T11040] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 564.187376][T11055] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1775'. [ 565.019665][T11083] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 565.019703][T11083] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 565.019719][T11083] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 565.642304][T11092] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 565.642343][T11092] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 565.642360][T11092] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 567.391476][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1800'. [ 567.391529][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 568.036538][T11126] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 568.036578][T11126] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 568.036594][T11126] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 568.416187][T11136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1806'. [ 568.722638][T11143] team_slave_0: entered promiscuous mode [ 568.722694][T11143] team_slave_1: entered promiscuous mode [ 568.724606][T11143] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 568.735183][ T61] Bluetooth: hci5: unexpected subevent 0x03 length: 11 > 9 [ 568.930686][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 568.950654][ T5796] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 569.090685][ T1244] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 569.090906][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 569.093227][ T5907] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 569.093251][ T5907] usb 4-1: config 0 has no interface number 0 [ 569.093304][ T5907] usb 4-1: config 0 interface 184 has no altsetting 0 [ 569.096128][ T5907] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 569.096145][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.096155][ T5907] usb 4-1: Product: syz [ 569.096162][ T5907] usb 4-1: Manufacturer: syz [ 569.096168][ T5907] usb 4-1: SerialNumber: syz [ 569.099721][ T5907] usb 4-1: config 0 descriptor?? [ 569.119370][ T5796] usb 2-1: Using ep0 maxpacket: 8 [ 569.181217][ T5907] smsc75xx v1.0.0 [ 569.182875][ T5796] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 569.182902][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.182920][ T5796] usb 2-1: Product: syz [ 569.182969][ T5796] usb 2-1: Manufacturer: syz [ 569.182978][ T5796] usb 2-1: SerialNumber: syz [ 569.226330][ T5796] usb 2-1: config 0 descriptor?? [ 569.243891][ T5796] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 569.243959][ T5796] pctv452e: pctv452e_power_ctrl: 1 [ 569.243959][ T5796] [ 569.243987][ T5796] usb 2-1: selecting invalid altsetting 3 [ 569.243995][ T5796] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 569.243995][ T5796] [ 569.244004][ T5796] dvb-usb: bulk message failed: -22 (5/0) [ 569.254123][ T1244] usb 3-1: Using ep0 maxpacket: 8 [ 569.300803][ T1244] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 569.300831][ T1244] usb 3-1: config 2 has no interface number 0 [ 569.300876][ T1244] usb 3-1: config 2 interface 31 has no altsetting 0 [ 569.304155][ T1244] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 569.304233][ T1244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.304253][ T1244] usb 3-1: Product: syz [ 569.304265][ T1244] usb 3-1: Manufacturer: syz [ 569.304278][ T1244] usb 3-1: SerialNumber: syz [ 569.308393][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.316780][ T5796] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 569.316840][ T5796] usb 2-1: media controller created [ 569.399650][ T5796] dvb-usb: bulk message failed: -22 (8/0) [ 569.399707][ T5796] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 569.404468][ T5796] dvb-usb: MAC address reading failed. [ 569.459720][T11149] dvb-usb: bulk message failed: -22 (7/0) [ 569.459738][T11149] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 569.485311][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.575528][ T5796] DVB: Unable to find symbol stb0899_attach() [ 569.575578][ T5796] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 569.690583][ T5796] rc_core: IR keymap rc-tt-1500 not found [ 569.690603][ T5796] Registered IR keymap rc-empty [ 569.697511][ T5796] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 569.700221][ T5796] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input65 [ 569.726199][ T5796] dvb-usb: schedule remote query interval to 100 msecs. [ 569.726440][ T5796] pctv452e: pctv452e_power_ctrl: 0 [ 569.726440][ T5796] [ 569.726451][ T5796] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 569.763547][ T5907] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 569.763576][ T5907] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 569.763594][ T5907] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 569.764077][ T5907] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 569.766344][ T5796] usb 2-1: USB disconnect, device number 15 [ 569.892040][ T5907] usb 4-1: USB disconnect, device number 19 [ 569.994459][ T1244] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 570.015184][ T1244] usb 3-1: USB disconnect, device number 17 [ 570.059426][ T5796] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 570.148245][T11166] netlink: 'syz.1.1820': attribute type 2 has an invalid length. [ 570.189928][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 570.472143][T11170] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 570.472171][T11170] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 570.472181][T11170] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 570.501118][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 570.509425][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 570.509449][ T9] usb 5-1: config 179 has no interface number 0 [ 570.509498][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 570.509520][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 570.509545][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 570.509568][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 570.509591][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 570.509629][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 570.509648][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.521433][T11162] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 570.562976][ T5804] kernel read not supported for file /dsp1 (pid: 5804 comm: kworker/1:3) [ 570.719526][ T5796] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 570.890346][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.890548][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.890584][ T5796] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 570.890605][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.928946][ T5796] usb 2-1: config 0 descriptor?? [ 571.098233][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 571.098315][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 571.098708][ T1244] usb 5-1: USB disconnect, device number 12 [ 571.328314][ T37] audit: type=1326 audit(1761468363.183:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11181 comm="syz.3.1828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x0 [ 571.361184][T11183] overlayfs: overlapping lowerdir path [ 571.490315][ T5796] a4tech 0003:09DA:0006.0015: unknown main item tag 0x0 [ 571.490351][ T5796] a4tech 0003:09DA:0006.0015: unknown main item tag 0x0 [ 571.490375][ T5796] a4tech 0003:09DA:0006.0015: unknown main item tag 0x0 [ 571.502167][ T5796] a4tech 0003:09DA:0006.0015: unknown main item tag 0x0 [ 571.502207][ T5796] a4tech 0003:09DA:0006.0015: unknown main item tag 0x0 [ 571.502232][ T5796] a4tech 0003:09DA:0006.0015: unknown main item tag 0x0 [ 571.502263][ T5796] a4tech 0003:09DA:0006.0015: unknown main item tag 0x0 [ 571.521166][ T5796] a4tech 0003:09DA:0006.0015: hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.1-1/input0 [ 571.599884][T11188] program syz.5.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.714107][ T5804] usb 2-1: USB disconnect, device number 16 [ 573.220292][T11227] netlink: 'syz.1.1845': attribute type 11 has an invalid length. [ 573.220312][T11227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1845'. [ 573.532467][ T5796] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 573.680511][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 573.682926][ T5796] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 573.682949][ T5796] usb 3-1: config 0 has no interface number 0 [ 573.686727][ T5796] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 573.686749][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.686764][ T5796] usb 3-1: Product: syz [ 573.686777][ T5796] usb 3-1: Manufacturer: syz [ 573.686787][ T5796] usb 3-1: SerialNumber: syz [ 573.749997][ T5796] usb 3-1: config 0 descriptor?? [ 573.774721][ T5796] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 573.774766][ T5796] pctv452e: pctv452e_power_ctrl: 1 [ 573.774766][ T5796] [ 573.774809][ T5796] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 573.774809][ T5796] [ 573.774823][ T5796] dvb-usb: bulk message failed: -22 (5/0) [ 573.848440][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.862854][ T5796] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 573.862912][ T5796] usb 3-1: media controller created [ 573.862962][ T5796] dvb-usb: bulk message failed: -22 (8/0) [ 573.862976][ T5796] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 573.863030][ T5796] dvb-usb: MAC address reading failed. [ 573.939118][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.989949][T11229] dvb-usb: bulk message failed: -22 (7/0) [ 573.989969][T11229] pctv452e: I2C error -22; AA 02 04 00 02 -> aa 02 31 03 04 00 02 [ 575.047511][ T5796] DVB: Unable to find symbol stb0899_attach() [ 575.047528][ T5796] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 575.398504][T11261] netlink: 'syz.5.1860': attribute type 25 has an invalid length. [ 575.398524][T11261] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1860'. [ 575.424389][ T5796] rc_core: IR keymap rc-tt-1500 not found [ 575.424408][ T5796] Registered IR keymap rc-empty [ 575.455105][ T5796] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 575.458347][ T5796] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input67 [ 576.441704][ T5796] dvb-usb: schedule remote query interval to 100 msecs. [ 576.441734][ T5796] pctv452e: pctv452e_power_ctrl: 0 [ 576.441734][ T5796] [ 576.441744][ T5796] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 577.434204][ T5796] usb 3-1: USB disconnect, device number 18 [ 579.055164][ T5796] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 582.330555][ T1199] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 582.490916][T11328] vlan4: entered promiscuous mode [ 582.490937][T11328] bond0: entered promiscuous mode [ 582.490949][T11328] bond_slave_0: entered promiscuous mode [ 582.491278][T11328] bond_slave_1: entered promiscuous mode [ 582.739971][ T1199] usb 6-1: Using ep0 maxpacket: 32 [ 582.743890][ T1199] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 582.743914][ T1199] usb 6-1: config 0 has no interface number 0 [ 582.743944][ T1199] usb 6-1: config 0 interface 196 has no altsetting 0 [ 582.746805][ T1199] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 582.746830][ T1199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.746847][ T1199] usb 6-1: Product: syz [ 582.746859][ T1199] usb 6-1: Manufacturer: syz [ 582.746872][ T1199] usb 6-1: SerialNumber: syz [ 582.752376][ T1199] usb 6-1: config 0 descriptor?? [ 583.523223][ T1199] ipheth 6-1:0.196: Unable to find endpoints [ 583.826711][ T5804] usb 6-1: USB disconnect, device number 10 [ 584.220573][T10532] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 585.245902][T10532] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 585.245931][T10532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.245949][T10532] usb 2-1: Product: syz [ 585.245962][T10532] usb 2-1: Manufacturer: syz [ 585.245974][T10532] usb 2-1: SerialNumber: syz [ 585.285602][T10532] usb 2-1: config 0 descriptor?? [ 585.320579][ T5813] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 585.322013][T11361] netlink: 'syz.5.1896': attribute type 19 has an invalid length. [ 585.480516][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 585.484350][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.484378][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.484400][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.484438][ T5813] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 585.484459][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.519063][ T5813] usb 4-1: config 0 descriptor?? [ 585.788035][T11371] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.786389][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.033903][ T5813] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0016/input/input68 [ 587.068025][T10532] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 587.068053][T10532] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 587.068308][T10532] asix 2-1:0.0: probe with driver asix failed with error -71 [ 587.113842][ T5813] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 587.166253][ T5813] usb 4-1: USB disconnect, device number 20 [ 587.166857][T10532] usb 2-1: USB disconnect, device number 17 [ 587.437410][T11383] fido_id[11383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 588.231170][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.385497][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.661209][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.006154][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.107142][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1917'. [ 589.832889][T11414] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 589.832963][T11418] netlink: 'syz.1.1921': attribute type 3 has an invalid length. [ 589.897991][T11433] syz_tun: entered allmulticast mode [ 590.096488][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.152768][T11429] syz_tun: left allmulticast mode [ 591.494099][T11458] mkiss: ax0: crc mode is auto. [ 591.844225][ T37] audit: type=1326 audit(1761468383.703:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.844521][ T37] audit: type=1326 audit(1761468383.703:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.846498][ T37] audit: type=1326 audit(1761468383.703:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.846784][ T37] audit: type=1326 audit(1761468383.703:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.847078][ T37] audit: type=1326 audit(1761468383.703:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.847531][ T37] audit: type=1326 audit(1761468383.703:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.847572][ T37] audit: type=1326 audit(1761468383.703:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.848257][ T37] audit: type=1326 audit(1761468383.703:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.848681][ T37] audit: type=1326 audit(1761468383.703:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 591.848722][ T37] audit: type=1326 audit(1761468383.703:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11472 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe50ddaefc9 code=0x7ffc0000 [ 592.590956][T11506] tap0: tun_chr_ioctl cmd 1074025677 [ 592.591176][T11506] tap0: linktype set to 805 [ 593.032270][T10532] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 593.060580][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 593.191701][T10532] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.191727][T10532] usb 6-1: config 0 has no interface number 0 [ 593.194785][T10532] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 593.194811][T10532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.194829][T10532] usb 6-1: Product: syz [ 593.194841][T10532] usb 6-1: Manufacturer: syz [ 593.194854][T10532] usb 6-1: SerialNumber: syz [ 593.250095][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 593.257949][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 593.257976][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.278972][T10532] usb 6-1: config 0 descriptor?? [ 593.298501][ T10] usb 4-1: config 0 descriptor?? [ 593.498632][T10532] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 593.528977][T10532] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 593.529605][T10532] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 593.529662][T10532] usb 6-1: media controller created [ 593.571002][ T1199] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 593.606859][T10532] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.719975][ T10] logitech 0003:046D:C29C.0017: unknown main item tag 0x0 [ 593.728510][ T1199] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 593.728535][ T1199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.728552][ T1199] usb 2-1: Product: syz [ 593.728564][ T1199] usb 2-1: Manufacturer: syz [ 593.728575][ T1199] usb 2-1: SerialNumber: syz [ 593.747962][ T1199] usb 2-1: config 0 descriptor?? [ 593.761568][ T1199] hub 2-1:0.0: bad descriptor, ignoring hub [ 593.761604][ T1199] hub 2-1:0.0: probe with driver hub failed with error -5 [ 593.807063][ T10] logitech 0003:046D:C29C.0017: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 593.907072][T11544] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 593.907344][T11544] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 593.907363][T11544] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 593.984267][ T1199] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 593.997793][ T1199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 594.001371][ T1199] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 594.001424][ T1199] usb 2-1: media controller created [ 594.217972][ T10] logitech 0003:046D:C29C.0017: no inputs found [ 594.289677][ T1199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.315918][ T10] usb 4-1: USB disconnect, device number 21 [ 594.526328][ T1199] DVB: Unable to find symbol dib7000p_attach() [ 594.526344][ T1199] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 594.684736][ T1199] rc_core: IR keymap rc-dib0700-rc5 not found [ 594.684756][ T1199] Registered IR keymap rc-empty [ 594.688187][ T1199] dvb-usb: could not initialize remote control. [ 594.688199][ T1199] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 594.863198][T10532] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 594.979382][T10532] usb 6-1: USB disconnect, device number 11 [ 595.058475][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1980'. [ 595.279809][T11558] nbd: socks must be embedded in a SOCK_ITEM attr [ 595.603772][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 595.603805][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 595.643747][ T6827] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.644198][ T6827] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.644252][ T6827] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.644285][ T6827] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.711831][ T5884] usb 2-1: USB disconnect, device number 18 [ 596.919850][T10445] udevd[10445]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 596.953592][ T5884] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 597.192997][T11594] netlink: 'syz.4.1991': attribute type 3 has an invalid length. [ 597.197025][T11594] netlink: 'syz.4.1991': attribute type 3 has an invalid length. [ 599.654962][T11620] program syz.1.2003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.032163][T11611] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 601.032203][T11611] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 601.032220][T11611] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 601.491255][T11634] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 601.491276][T11634] netlink: 'syz.4.2008': attribute type 7 has an invalid length. [ 601.491290][T11634] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2008'. [ 601.670586][T10532] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 601.793176][T11647] bond0: Removing last ns target with arp_interval on [ 601.850563][T10532] usb 4-1: Using ep0 maxpacket: 8 [ 601.853594][T10532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.853633][T10532] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 601.853655][T10532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.932520][T10532] usb 4-1: config 0 descriptor?? [ 604.630050][T10532] usbhid 4-1:0.0: can't add hid device: -71 [ 604.630171][T10532] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 604.681428][T10532] usb 4-1: USB disconnect, device number 22 [ 604.995527][T11682] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 606.854307][ T61] block nbd0: Receive control failed (result -32) [ 606.994346][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 608.183356][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 608.214370][T11722] tipc: Resetting bearer [ 608.271811][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2045'. [ 609.167376][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.314748][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.492334][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.836386][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.942887][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.102961][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.314218][T11763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.604166][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 610.604183][ T37] audit: type=1326 audit(1761468402.463:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.604229][ T37] audit: type=1326 audit(1761468402.463:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.606479][ T37] audit: type=1326 audit(1761468402.463:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.608424][ T37] audit: type=1326 audit(1761468402.463:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.608702][ T37] audit: type=1326 audit(1761468402.463:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.609118][ T37] audit: type=1326 audit(1761468402.463:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.609167][ T37] audit: type=1326 audit(1761468402.463:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.609445][ T37] audit: type=1326 audit(1761468402.463:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.610218][ T37] audit: type=1326 audit(1761468402.463:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.610261][ T37] audit: type=1326 audit(1761468402.463:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11781 comm="syz.3.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bf4c5efc9 code=0x7ffc0000 [ 610.794234][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.850636][ T5813] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 612.005312][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.016919][ T1199] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 612.105883][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.105914][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.105950][ T5813] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 612.105970][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.114905][ T5813] usb 2-1: config 0 descriptor?? [ 612.165717][ T1199] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 612.165824][ T1199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.165848][ T1199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.165867][ T1199] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 612.167937][ T1199] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 612.168021][ T1199] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 612.168040][ T1199] usb 6-1: Manufacturer: syz [ 612.222221][ T1199] usb 6-1: config 0 descriptor?? [ 612.588932][ T5813] arvo 0003:1E7D:30D4.0018: unknown main item tag 0x0 [ 612.628730][ T5813] arvo 0003:1E7D:30D4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 612.695364][ T1199] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 612.801433][ T1199] appleir 0003:05AC:8243.0019: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 613.000199][ T5813] usb 2-1: USB disconnect, device number 19 [ 613.093767][T11812] syz.4.2084 (11812): /proc/11811/oom_adj is deprecated, please use /proc/11811/oom_score_adj instead. [ 613.248326][T11814] program syz.3.2086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.640576][T10532] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 613.802956][T10532] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 613.802984][T10532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.803001][T10532] usb 3-1: Product: syz [ 613.803013][T10532] usb 3-1: Manufacturer: syz [ 613.803025][T10532] usb 3-1: SerialNumber: syz [ 613.808652][T10532] usb 3-1: config 0 descriptor?? [ 613.846092][ T5813] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 613.964193][ T1199] usb 6-1: USB disconnect, device number 12 [ 614.005860][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 614.005891][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.005926][ T5813] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 614.005946][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.285101][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.326736][ T5813] usb 2-1: config 0 descriptor?? [ 614.409488][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.438142][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.212039][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.241715][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.272175][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.666342][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.816607][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.944582][T10532] usb 3-1: f81604_write: reg: 105 data: b7 failed: -EPROTO [ 615.944611][T10532] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 615.944647][T10532] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 616.025121][T10532] usb 3-1: USB disconnect, device number 19 [ 616.194505][ T5813] cherry 0003:046A:0027.001A: hidraw0: USB HID vff.fd Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 616.371192][ T1199] usb 2-1: USB disconnect, device number 20 [ 616.397618][T11853] fido_id[11853]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 616.529614][T11859] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2104'. [ 616.918765][T11867] program syz.3.2108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.301617][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.316241][T11947] netlink: 'syz.5.2141': attribute type 25 has an invalid length. [ 622.316261][T11947] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2141'. [ 622.356927][ T1199] kernel write not supported for file bpf-map (pid: 1199 comm: kworker/1:2) [ 622.411365][T11952] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 622.723365][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 623.148538][T11986] ======================================================= [ 623.148538][T11986] WARNING: The mand mount option has been deprecated and [ 623.148538][T11986] and is ignored by this kernel. Remove the mand [ 623.148538][T11986] option from the mount to silence this warning. [ 623.148538][T11986] ======================================================= [ 624.153446][T12015] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 624.153706][T12015] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 624.153897][T12015] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 624.639694][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.639765][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.074841][T12033] loop7: detected capacity change from 0 to 7 [ 625.115847][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.115888][ C0] buffer_io_error: 9 callbacks suppressed [ 625.115900][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.147835][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.147870][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.148141][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.148190][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.148440][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.148466][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.149283][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.149311][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.149621][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.149647][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.149903][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.149930][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.150021][T10445] ldm_validate_partition_table(): Disk read failed. [ 625.150207][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.150236][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.169491][T12038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.196409][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 625.196425][ T37] audit: type=1326 audit(1761468423.048:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12037 comm="syz.3.2183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bf4c5efc9 code=0x0 [ 625.300657][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.300694][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.303208][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 625.303237][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 625.303630][T10445] Dev loop7: unable to read RDB block 0 [ 625.308401][T10445] loop7: unable to read partition table [ 625.308647][T10445] loop7: partition table beyond EOD, truncated [ 625.359242][T12033] ldm_validate_partition_table(): Disk read failed. [ 625.371284][T12033] Dev loop7: unable to read RDB block 0 [ 625.375561][T12033] loop7: unable to read partition table [ 625.375789][T12033] loop7: partition table beyond EOD, truncated [ 625.375817][T12033] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 625.534435][T12044] batadv_slave_1: entered promiscuous mode [ 625.540079][T12044] batman_adv: batadv0: Adding interface: macvlan3 [ 625.540095][T12044] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.540128][T12044] batman_adv: batadv0: Interface activated: macvlan3 [ 627.970546][ T5804] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 628.120540][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 628.123254][ T5804] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 628.123279][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.155108][ T5804] usb 4-1: config 0 descriptor?? [ 628.406324][T12099] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 628.406363][T12099] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 628.406381][T12099] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 628.495130][ T5804] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 628.513443][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 628.515173][ T5804] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 628.515227][ T5804] usb 4-1: media controller created [ 628.566232][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.699835][T12088] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 628.709196][ T5804] az6027: usb out operation failed. (-71) [ 628.709622][ T5804] az6027: usb out operation failed. (-71) [ 628.709635][ T5804] stb0899_attach: Driver disabled by Kconfig [ 628.709644][ T5804] az6027: no front-end attached [ 628.709644][ T5804] [ 628.710039][ T5804] az6027: usb out operation failed. (-71) [ 628.710052][ T5804] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 628.754461][ T5804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 628.781904][ T5804] dvb-usb: schedule remote query interval to 400 msecs. [ 628.781925][ T5804] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 628.786327][ T5804] usb 4-1: USB disconnect, device number 23 [ 628.962683][T12106] macvtap1: entered allmulticast mode [ 628.962702][T12106] veth0_macvtap: entered allmulticast mode [ 629.083186][ T5804] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 629.351865][T12112] program syz.1.2214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.660163][T12158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2234'. [ 633.278862][T12173] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 633.278901][T12173] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 633.278917][T12173] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 633.395634][ T37] audit: type=1326 audit(1761468431.238:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59097efc9 code=0x7ffc0000 [ 633.396357][ T37] audit: type=1326 audit(1761468431.248:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59097efc9 code=0x7ffc0000 [ 633.410272][ T37] audit: type=1326 audit(1761468431.258:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe59097efc9 code=0x7ffc0000 [ 633.411090][ T37] audit: type=1326 audit(1761468431.268:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59097efc9 code=0x7ffc0000 [ 633.414415][ T37] audit: type=1326 audit(1761468431.268:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe59097efc9 code=0x7ffc0000 [ 633.414837][ T37] audit: type=1326 audit(1761468431.268:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59097efc9 code=0x7ffc0000 [ 633.419626][ T37] audit: type=1326 audit(1761468431.268:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59097efc9 code=0x7ffc0000 [ 633.421807][ T37] audit: type=1326 audit(1761468431.268:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe59091b099 code=0x7ffc0000 [ 633.430720][ T37] audit: type=1326 audit(1761468431.278:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe59091b099 code=0x7ffc0000 [ 633.431511][ T37] audit: type=1326 audit(1761468431.288:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12174 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe59091b099 code=0x7ffc0000 [ 634.728817][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.924556][T12194] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 634.924742][T12194] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 634.924809][T12194] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 635.512585][T12197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2250'. [ 635.672338][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.985609][T12203] netlink: 'syz.5.2252': attribute type 16 has an invalid length. [ 635.985630][T12203] netlink: 'syz.5.2252': attribute type 17 has an invalid length. [ 636.021856][T12201] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.024484][T12201] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.837778][T12203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 636.888841][T12213] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 636.888879][T12213] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 636.888896][T12213] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 637.142944][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.732111][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.385671][T12237] overlayfs: missing 'lowerdir' [ 638.730053][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 638.751487][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 638.754325][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 638.754576][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 638.759492][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 638.759704][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 638.810987][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 638.811191][T12254] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 638.811210][T12254] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 639.123194][T12263] netlink: 'syz.1.2277': attribute type 8 has an invalid length. [ 639.124429][T12263] bridge0: entered promiscuous mode [ 641.102961][ T5813] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 641.995454][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.016011][ T5813] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 642.016067][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.018085][ T5813] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 642.018117][ T5813] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 642.018134][ T5813] usb 5-1: Manufacturer: syz [ 642.065076][ T5813] usb 5-1: config 0 descriptor?? [ 642.162074][ T5813] rc_core: IR keymap rc-hauppauge not found [ 642.162093][ T5813] Registered IR keymap rc-empty [ 642.181623][ T5813] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 642.184687][ T5813] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input79 [ 642.333530][ T10] usb 5-1: USB disconnect, device number 13 [ 642.758368][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 643.280646][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.494354][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.965088][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.220328][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.434843][T12371] block nbd1: Unsupported socket: should be TCP or UNIX. [ 644.813657][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.975401][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.510911][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.737939][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.190581][ T5908] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 646.342907][ T5908] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 646.342932][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.342950][ T5908] usb 6-1: config 0 has no interface number 0 [ 646.342996][ T5908] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 646.343017][ T5908] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.346166][ T5908] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 646.346192][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.346210][ T5908] usb 6-1: Product: syz [ 646.346223][ T5908] usb 6-1: Manufacturer: syz [ 646.346235][ T5908] usb 6-1: SerialNumber: syz [ 646.398031][ C1] vkms_vblank_simulate: vblank timer overrun [ 646.619092][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.361708][ T5908] usb 6-1: config 0 descriptor?? [ 647.687216][T10532] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 647.850683][T10532] usb 5-1: Using ep0 maxpacket: 16 [ 647.853917][T10532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.854017][T10532] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 647.854038][T10532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.870173][T10532] usb 5-1: config 0 descriptor?? [ 648.016515][ T5908] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.117/input/input80 [ 648.221094][ T31] usb 6-1: USB disconnect, device number 13 [ 648.405472][T10532] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 648.405507][T10532] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 648.405532][T10532] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 648.405556][T10532] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 648.405580][T10532] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 648.406603][T10532] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 648.729159][ C0] usb 5-1: input irq status -75 received [ 649.389224][T10532] usb 5-1: USB disconnect, device number 14 [ 651.254191][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'. [ 651.711675][ T1199] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 652.267800][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.472987][ T1199] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 652.473013][ T1199] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 652.473030][ T1199] usb 3-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 652.473046][ T1199] usb 3-1: config 220 has no interface number 2 [ 652.473117][ T1199] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 652.473141][ T1199] usb 3-1: config 220 interface 0 has no altsetting 0 [ 652.473157][ T1199] usb 3-1: config 220 interface 76 has no altsetting 0 [ 652.473173][ T1199] usb 3-1: config 220 interface 1 has no altsetting 0 [ 652.481556][ T1199] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 652.481582][ T1199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.481599][ T1199] usb 3-1: Product: syz [ 652.481611][ T1199] usb 3-1: Manufacturer: syz [ 652.481622][ T1199] usb 3-1: SerialNumber: syz [ 652.734832][ T1199] usb 3-1: selecting invalid altsetting 0 [ 652.760976][ T1199] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 652.761007][ T1199] uvcvideo 3-1:220.0: No valid video chain found. [ 652.787145][ T1199] usb 3-1: selecting invalid altsetting 0 [ 652.787182][ T1199] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 652.822111][ T1199] usb 3-1: USB disconnect, device number 20 [ 653.218662][T12517] sch_fq: defrate 9 ignored. [ 653.845425][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 654.486970][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.548269][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 654.742383][ C0] vkms_vblank_simulate: vblank timer overrun [ 655.729716][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.453970][T12594] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2410'. [ 656.453992][T12594] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2410'. [ 656.748272][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.901011][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.949134][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.996925][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.041832][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.480128][T12623] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2421'. [ 659.700947][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2426'. [ 659.717720][T12633] bridge0: entered promiscuous mode [ 662.474234][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 662.474262][T12694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2452'. [ 664.124193][T12743] skbuff: bad partial csum: csum=65506/2 headroom=162 headlen=65526 [ 664.160629][ T1244] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 664.327397][ T1244] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 664.327424][ T1244] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 664.327442][ T1244] usb 5-1: Product: syz [ 664.327455][ T1244] usb 5-1: Manufacturer: syz [ 664.327468][ T1244] usb 5-1: SerialNumber: syz [ 664.364440][ T1244] usb 5-1: config 0 descriptor?? [ 664.368584][ T1244] ch341 5-1:0.0: ch341-uart converter detected [ 665.197605][ T1244] usb 5-1: failed to send control message: -71 [ 665.197663][ T1244] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 665.225773][ T1244] usb 5-1: USB disconnect, device number 15 [ 665.240869][ T1244] ch341 5-1:0.0: device disconnected [ 666.621679][ T1199] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 666.720597][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 666.770601][ T1199] usb 5-1: Using ep0 maxpacket: 8 [ 666.776980][ T1199] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 666.777008][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.777026][ T1199] usb 5-1: Product: syz [ 666.777038][ T1199] usb 5-1: Manufacturer: syz [ 666.777051][ T1199] usb 5-1: SerialNumber: syz [ 666.792998][ T1199] usb 5-1: config 0 descriptor?? [ 666.870501][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 666.873623][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.873644][ T31] usb 6-1: config 0 has no interface number 0 [ 666.879771][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 666.879795][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.879863][ T31] usb 6-1: Product: syz [ 666.879876][ T31] usb 6-1: Manufacturer: syz [ 666.879887][ T31] usb 6-1: SerialNumber: syz [ 666.938396][ T31] usb 6-1: config 0 descriptor?? [ 666.957475][ T31] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 666.957563][ T31] usb 6-1: selecting invalid altsetting 1 [ 666.957578][ T31] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 666.979522][ T31] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 666.981912][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 666.981962][ T31] usb 6-1: media controller created [ 667.009758][T12778] program syz.4.2490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.024222][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.052416][ T1199] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 667.052895][ T1199] gspca_sunplus: reg_w_riv err -71 [ 667.052973][ T1199] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 667.056943][ T1199] usb 5-1: USB disconnect, device number 16 [ 668.088452][T12819] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 668.088670][T12819] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 668.088744][T12819] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 668.830284][T12826] netlink: 'syz.1.2512': attribute type 27 has an invalid length. [ 668.830307][T12826] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 668.835778][ T31] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 668.835851][ T31] zl10353_read_register: readreg error (reg=127, ret==-110) [ 668.875792][T12826] bridge0: port 1(bridge_slave_0) entered learning state [ 668.989049][ T31] usb 6-1: USB disconnect, device number 14 [ 669.252343][T12840] vxcan2: entered allmulticast mode [ 669.343601][ T1244] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 669.494432][ T1244] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 669.494460][ T1244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.530660][ T1244] usb 5-1: config 0 descriptor?? [ 669.535966][ T1244] gspca_main: spca508-2.14.0 probing 8086:0110 [ 669.740958][ T1244] gspca_spca508: reg_read err -32 [ 669.748095][ T1244] gspca_spca508: reg_read err -32 [ 670.014134][ T1244] gspca_spca508: reg_read err -71 [ 670.014556][ T1244] gspca_spca508: reg_read err -71 [ 670.014962][ T1244] gspca_spca508: reg write: error -71 [ 670.015051][ T1244] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 671.013279][ T1244] usb 5-1: USB disconnect, device number 17 [ 672.523812][ T37] kauditd_printk_skb: 904 callbacks suppressed [ 672.523829][ T37] audit: type=1326 audit(1761468470.378:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12867 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 672.524127][ T37] audit: type=1326 audit(1761468470.378:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12867 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 672.524393][ T37] audit: type=1326 audit(1761468470.378:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12867 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 672.524931][ T37] audit: type=1326 audit(1761468470.378:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12867 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 672.525188][ T37] audit: type=1326 audit(1761468470.378:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12867 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 672.525447][ T37] audit: type=1326 audit(1761468470.378:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12867 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 672.525981][ T37] audit: type=1326 audit(1761468470.378:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12867 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 673.569625][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 673.810539][ T1244] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 673.983471][ T1244] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 673.983500][ T1244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.983518][ T1244] usb 2-1: Product: syz [ 673.983531][ T1244] usb 2-1: Manufacturer: syz [ 673.983543][ T1244] usb 2-1: SerialNumber: syz [ 674.179957][ T1244] usb 2-1: config 0 descriptor?? [ 676.193468][ T1244] usb 2-1: Firmware version (0.0) predates our first public release. [ 676.193493][ T1244] usb 2-1: Please update to version 0.2 or newer [ 676.646615][ T1244] usb 2-1: USB disconnect, device number 21 [ 676.976110][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 677.370806][T12927] hsr_slave_1 (unregistering): left promiscuous mode [ 677.400682][ T5908] kernel read not supported for file /dsp1 (pid: 5908 comm: kworker/0:7) [ 677.472946][T12929] batman_adv: batadv0: Adding interface: gretap1 [ 677.472970][T12929] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.473001][T12929] batman_adv: batadv0: Interface activated: gretap1 [ 677.787695][T12942] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2558'. [ 678.456599][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.707031][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 679.662649][T12971] bond1: option resend_igmp: invalid value (262144) [ 679.662674][T12971] bond1: option resend_igmp: allowed values 0 - 255 [ 679.946140][T12971] bond1 (unregistering): Released all slaves [ 680.089744][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2575'. [ 680.263157][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 680.647103][ T1244] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 681.641797][ T1244] usb 3-1: Using ep0 maxpacket: 32 [ 681.646461][ T1244] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 681.646486][ T1244] usb 3-1: config 0 has no interface number 0 [ 681.646531][ T1244] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.646555][ T1244] usb 3-1: config 0 interface 85 has no altsetting 0 [ 681.715153][ T1244] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 681.715181][ T1244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.715199][ T1244] usb 3-1: Product: syz [ 681.715212][ T1244] usb 3-1: Manufacturer: syz [ 681.715223][ T1244] usb 3-1: SerialNumber: syz [ 681.729145][ T1244] usb 3-1: config 0 descriptor?? [ 682.213535][T13008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.375924][ T1244] appletouch 3-1:0.85: Geyser mode initialized. [ 682.386111][ T1244] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input82 [ 682.585326][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 682.585397][ T31] usb 3-1: USB disconnect, device number 21 [ 682.872904][ T31] appletouch 3-1:0.85: input: appletouch disconnected [ 683.265123][T13039] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2595'. [ 683.472711][T13051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2600'. [ 683.472736][T13051] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2600'. [ 683.472750][T13051] netlink: 'syz.2.2600': attribute type 6 has an invalid length. [ 683.472762][T13051] netlink: 'syz.2.2600': attribute type 5 has an invalid length. [ 683.472773][T13051] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2600'. [ 684.389781][T13079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.535283][T13082] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 684.535322][T13082] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 684.535340][T13082] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 685.187411][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.490554][ T1199] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 685.572401][T13122] tap0: tun_chr_ioctl cmd 1074025677 [ 685.572604][T13122] tap0: linktype set to 0 [ 685.603221][T13124] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2633'. [ 685.643656][ T1199] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.643681][ T1199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.646716][ T1199] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.646741][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.646759][ T1199] usb 5-1: Product: syz [ 685.646771][ T1199] usb 5-1: Manufacturer: syz [ 685.646784][ T1199] usb 5-1: SerialNumber: syz [ 685.806940][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.854851][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.073335][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.073403][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.123838][ T1199] usb 5-1: 0:2 : does not exist [ 686.303712][T13135] EXT4-fs (loop5): unable to read superblock [ 686.610734][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.650958][ T1199] usb 5-1: USB disconnect, device number 18 [ 686.675220][T13140] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 686.675259][T13140] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 686.675279][T13140] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 686.767915][T10445] udevd[10445]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 687.236835][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.431415][T13149] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2643'. [ 687.857026][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.063428][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.634470][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.818658][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.005188][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.091937][T13181] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 689.091974][T13181] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 689.091989][T13181] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 689.231674][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 691.397455][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.397712][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.397884][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.398063][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.398243][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.398421][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.398607][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.399425][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.399833][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.400019][T13233] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 691.812950][T13250] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 692.326554][ T37] audit: type=1400 audit(1761468490.138:1061): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=13255 comm="syz.5.2690" dest=20000 netif=wpan0 [ 692.785698][T13274] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2698'. [ 692.920230][T13277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2699'. [ 696.217832][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 696.380136][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 696.380165][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.380182][ T10] usb 6-1: Product: syz [ 696.380195][ T10] usb 6-1: Manufacturer: syz [ 696.380207][ T10] usb 6-1: SerialNumber: syz [ 696.392616][ T10] usb 6-1: config 0 descriptor?? [ 696.435599][T13376] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 696.435599][T13376] The task syz.2.2742 (13376) triggered the difference, watch for misbehavior. [ 696.500552][ T1199] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 696.650545][ T1199] usb 4-1: Using ep0 maxpacket: 16 [ 696.653479][ T1199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.653523][ T1199] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 696.653544][ T1199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.700636][ T1199] usb 4-1: config 0 descriptor?? [ 697.902154][ T10] usb 6-1: Firmware version (0.0) predates our first public release. [ 697.902179][ T10] usb 6-1: Please update to version 0.2 or newer [ 697.908784][ T1199] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 697.908818][ T1199] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 697.908843][ T1199] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 697.909760][ T1199] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 698.116464][ T1199] usb 4-1: USB disconnect, device number 24 [ 698.198231][ T10] usb 6-1: USB disconnect, device number 15 [ 698.234163][T13391] QAT: Invalid ioctl 1075883590 [ 698.234277][T13391] QAT: Invalid ioctl 1075883590 [ 698.234358][T13391] QAT: Invalid ioctl 1075883590 [ 698.234439][T13391] QAT: Invalid ioctl 1075883590 [ 698.234564][T13391] QAT: Invalid ioctl 1075883590 [ 698.234648][T13391] QAT: Invalid ioctl 1075883590 [ 698.234727][T13391] QAT: Invalid ioctl 1075883590 [ 698.234807][T13391] QAT: Invalid ioctl 1075883590 [ 698.234929][T13391] QAT: Invalid ioctl 1075883590 [ 698.235009][T13391] QAT: Invalid ioctl 1075883590 [ 698.321537][T13397] loop8: detected capacity change from 0 to 8 [ 698.373705][T10113] Dev loop8: unable to read RDB block 8 [ 698.373755][T10113] loop8: unable to read partition table [ 698.376490][T10113] loop8: partition table beyond EOD, truncated [ 698.383363][T13397] Dev loop8: unable to read RDB block 8 [ 698.383404][T13397] loop8: unable to read partition table [ 698.383621][T13397] loop8: partition table beyond EOD, truncated [ 698.383638][T13397] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 699.138912][T13430] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2764'. [ 701.430553][ T5813] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 702.100556][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 702.250585][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 702.256473][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 702.256503][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.325511][ T10] usb 3-1: config 0 descriptor?? [ 702.338952][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 702.363801][ T5813] usb 6-1: Using ep0 maxpacket: 16 [ 702.366089][ T5813] usb 6-1: config 0 has no interfaces? [ 702.372609][ T5813] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 702.372636][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.372654][ T5813] usb 6-1: Product: syz [ 702.372666][ T5813] usb 6-1: Manufacturer: syz [ 702.372679][ T5813] usb 6-1: SerialNumber: syz [ 702.401293][ T5813] r8152-cfgselector 6-1: Unknown version 0x0000 [ 702.401317][ T5813] r8152-cfgselector 6-1: config 0 descriptor?? [ 703.210949][ T10] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 703.270604][ T10] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 703.276395][ T10] usb 3-1: USB disconnect, device number 22 [ 703.390563][ T1199] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 703.432072][ T1244] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 703.543704][ T1199] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 703.543732][ T1199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.551161][ T1199] usb 5-1: config 0 descriptor?? [ 703.602909][ T1244] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.602946][ T1244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 703.602959][ T1244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 703.602970][ T1244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 703.602998][ T1244] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 703.603019][ T1244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.611673][ T1244] usb 4-1: config 0 descriptor?? [ 703.962955][T13449] r8152-cfgselector 6-1: USB disconnect, device number 16 [ 704.020820][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 704.123494][ T1244] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 704.170909][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 704.173292][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.173321][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.173341][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 704.173378][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 704.173399][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.180270][ T10] usb 2-1: config 0 descriptor?? [ 704.519314][ T1244] usb 4-1: USB disconnect, device number 25 [ 704.639263][ T1199] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 704.673499][ T1199] usb 5-1: USB disconnect, device number 19 [ 704.695035][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 704.699376][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001E/input/input89 [ 704.738089][ T10] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 704.851772][T13514] Bluetooth: MGMT ver 1.23 [ 704.937853][ T1199] usb 2-1: USB disconnect, device number 22 [ 705.002936][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 705.597539][ T37] audit: type=1326 audit(1761468503.448:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.598138][ T37] audit: type=1326 audit(1761468503.448:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.612883][ T37] audit: type=1326 audit(1761468503.468:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.612932][ T37] audit: type=1326 audit(1761468503.468:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.612971][ T37] audit: type=1326 audit(1761468503.468:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.613008][ T37] audit: type=1326 audit(1761468503.468:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.613045][ T37] audit: type=1326 audit(1761468503.468:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.613081][ T37] audit: type=1326 audit(1761468503.468:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.613119][ T37] audit: type=1326 audit(1761468503.468:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 705.613156][ T37] audit: type=1326 audit(1761468503.468:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13529 comm="syz.1.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953eecefc9 code=0x7ffc0000 [ 708.232044][ T5813] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 708.812995][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 708.813027][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.813045][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.813083][ T5813] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 708.813105][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.882142][ T5813] usb 2-1: config 0 descriptor?? [ 709.264477][T13580] sctp: [Deprecated]: syz.2.2825 (pid 13580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 709.264477][T13580] Use struct sctp_sack_info instead [ 710.197354][T11919] Bluetooth: hci1: command 0x1003 tx timeout [ 710.197706][ T61] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 710.304498][ T5813] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.001F/input/input90 [ 710.491227][ T5813] uclogic 0003:28BD:0933.001F: input,hidraw0: USB HID vf.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 710.496398][ T5813] usb 2-1: USB disconnect, device number 23 [ 710.768773][T13590] fido_id[13590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 711.600752][ T5813] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 711.782944][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.782986][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.783007][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 711.783047][ T5813] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 711.783068][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.878780][ T5813] usb 4-1: config 0 descriptor?? [ 712.577410][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577445][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577473][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577498][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577523][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577547][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577571][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577594][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577618][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.577641][ T5813] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 712.645479][ T5813] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 712.853375][ T5796] usb 4-1: USB disconnect, device number 26 [ 714.195954][ T1100] Bluetooth: hci1: Frame reassembly failed (-84) [ 714.213984][ T44] Bluetooth: hci1: Frame reassembly failed (-84) [ 714.548665][T13629] vlan3: entered promiscuous mode [ 714.548856][T13629] vlan3: entered allmulticast mode [ 714.548869][T13629] bridge0: entered allmulticast mode [ 714.690097][T13637] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2841'. [ 715.025200][ T5796] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 715.176963][ T5796] usb 3-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 715.176993][ T5796] usb 3-1: config 16 has an invalid descriptor of length 109, skipping remainder of the config [ 715.177011][ T5796] usb 3-1: config 16 has no interfaces? [ 715.177038][ T5796] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 715.177059][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.515919][ T5813] usb 3-1: USB disconnect, device number 23 [ 715.883792][T13671] netlink: 'syz.1.2861': attribute type 1 has an invalid length. [ 715.883813][T13671] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2861'. [ 716.171401][T13686] loop6: detected capacity change from 0 to 7 [ 716.201094][T10445] Dev loop6: unable to read RDB block 7 [ 716.201144][T10445] loop6: unable to read partition table [ 716.201397][T10445] loop6: partition table beyond EOD, truncated [ 716.220974][ T61] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 716.242597][T13686] Dev loop6: unable to read RDB block 7 [ 716.242648][T13686] loop6: unable to read partition table [ 716.242866][T13686] loop6: partition table beyond EOD, truncated [ 716.242894][T13686] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 716.819810][T13703] netlink: 'syz.1.2877': attribute type 10 has an invalid length. [ 716.872965][T13703] team0: Port device dummy0 added [ 716.903245][T13703] netlink: 'syz.1.2877': attribute type 10 has an invalid length. [ 716.983024][T13703] team0: Port device dummy0 removed [ 717.002681][T13703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 717.060058][T13711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2881'. [ 717.540672][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'. [ 717.820610][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 718.016377][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.016406][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.016425][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.016463][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.016482][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.106617][T13743] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x2) [ 718.107037][ T10] usb 4-1: config 0 descriptor?? [ 718.549972][ T10] hid_parser_main: 5 callbacks suppressed [ 718.549992][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 718.550020][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 718.550045][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 718.550070][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 718.550094][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 718.550118][ T10] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 718.569367][ T10] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 718.593679][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2896'. [ 718.779416][T13762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.820692][ T1244] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 718.822251][ T5813] usb 4-1: USB disconnect, device number 27 [ 718.970864][ T1244] usb 5-1: Using ep0 maxpacket: 8 [ 718.973120][ T1244] usb 5-1: unable to get BOS descriptor or descriptor too short [ 718.974057][ T1244] usb 5-1: config 4 interface 0 has no altsetting 0 [ 718.977568][ T1244] usb 5-1: string descriptor 0 read error: -22 [ 718.977659][ T1244] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 718.977680][ T1244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.040107][ T1244] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 719.055755][ T1244] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 719.056191][ T1244] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 719.056240][ T1244] usb 5-1: media controller created [ 719.109698][ T1244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 720.098469][T13792] netlink: 'syz.5.2912': attribute type 2 has an invalid length. [ 720.366937][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.565486][T13801] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 720.565699][T13801] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 720.565767][T13801] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 720.584618][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.181421][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.206578][ T1244] usb 5-1: USB disconnect, device number 20 [ 721.385397][ T37] audit: type=1326 audit(1761468519.238:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13804 comm="syz.3.2916" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bf4c5efc9 code=0x0 [ 722.042659][ T61] Bluetooth: hci5: unexpected event for opcode 0x2035 [ 722.368511][T13849] sp0: Synchronizing with TNC [ 722.460687][ T1199] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 722.602303][ T6028] tipc: Subscription rejected, illegal request [ 722.620635][ T1199] usb 5-1: Using ep0 maxpacket: 32 [ 722.623190][ T1199] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 722.623214][ T1199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.658907][ T1199] usb 5-1: config 0 descriptor?? [ 722.673194][ T1199] gspca_main: sunplus-2.14.0 probing 041e:400b [ 722.750686][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 722.843847][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 722.900637][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 722.902951][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.902977][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.903013][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 722.903033][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.912729][ T10] usb 4-1: config 0 descriptor?? [ 723.166896][T13868] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2944'. [ 723.367233][ T10] koneplus 0003:1E7D:2D51.0022: invalid report_count -851608744 [ 723.367257][ T10] koneplus 0003:1E7D:2D51.0022: item 0 4 1 9 parsing failed [ 723.368034][ T10] koneplus 0003:1E7D:2D51.0022: parse failed [ 723.368106][ T10] koneplus 0003:1E7D:2D51.0022: probe with driver koneplus failed with error -22 [ 723.423204][T13871] af_packet: tpacket_rcv: packet too big, clamped from 31 to 4294967286. macoff=82 [ 723.701323][ T1199] gspca_sunplus: reg_w_riv err -71 [ 723.701439][ T1199] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 723.732935][ T1199] usb 5-1: USB disconnect, device number 21 [ 724.110596][ T5813] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 725.000208][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.034970][ T5813] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 725.034997][ T5813] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 725.035015][ T5813] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 725.035064][ T5813] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 725.035087][ T5813] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 725.075491][ T5813] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.075520][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.075539][ T5813] usb 6-1: Product: syz [ 725.075551][ T5813] usb 6-1: Manufacturer: syz [ 725.143201][ T5813] cdc_wdm 6-1:1.0: skipping garbage [ 725.143220][ T5813] cdc_wdm 6-1:1.0: skipping garbage [ 725.174139][ T5813] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 725.174159][ T5813] cdc_wdm 6-1:1.0: Unknown control protocol [ 725.180721][ T61] Bluetooth: hci5: command 0x0c1a tx timeout [ 725.426111][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.426200][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.426407][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.426426][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.426636][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.426647][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.426839][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.426849][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.428008][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.428021][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.428232][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.428244][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.428432][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.428442][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.428624][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.428634][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.428882][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.428900][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.429019][ T5813] usb 6-1: USB disconnect, device number 17 [ 725.429111][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 725.429121][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 725.429130][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 725.575210][ T5908] usb 4-1: USB disconnect, device number 28 [ 726.020771][T13449] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 726.061116][ T61] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 726.061392][ T61] Bluetooth: hci5: Injecting HCI hardware error event [ 726.174196][T13449] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 726.174222][T13449] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 726.174246][T13449] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 726.174295][T13449] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 726.174317][T13449] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 726.176162][T13449] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 726.176240][T13449] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 726.176258][T13449] usb 5-1: Product: syz [ 726.176270][T13449] usb 5-1: Manufacturer: syz [ 726.269268][T13449] cdc_wdm 5-1:1.0: skipping garbage [ 726.269286][T13449] cdc_wdm 5-1:1.0: skipping garbage [ 726.286821][T13449] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 726.286840][T13449] cdc_wdm 5-1:1.0: Unknown control protocol [ 726.372281][T13912] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 727.650590][T13449] usb 5-1: USB disconnect, device number 22 [ 727.900624][ T61] Bluetooth: hci5: command 0x0c1a tx timeout [ 727.908438][T11919] Bluetooth: hci5: hardware error 0x00 [ 728.270038][T13936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 728.280298][T13939] batadv_slave_0: entered promiscuous mode [ 728.285089][T13939] batadv_slave_0: left promiscuous mode [ 728.345012][T13943] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2973'. [ 728.345039][T13943] netlink: 'syz.3.2973': attribute type 6 has an invalid length. [ 728.345051][T13943] netlink: 'syz.3.2973': attribute type 5 has an invalid length. [ 728.345063][T13943] netlink: 'syz.3.2973': attribute type 4 has an invalid length. [ 728.358194][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2972'. [ 728.485161][T13949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2976'. [ 728.661373][T13960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2977'. [ 729.426578][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2985'. [ 729.440574][T13996] netem: change failed [ 729.506401][T14000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2985'. [ 730.021495][T13449] IPVS: starting estimator thread 0... [ 730.021983][T14014] net_ratelimit: 44 callbacks suppressed [ 730.021997][T14014] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 730.110669][T14016] IPVS: using max 8 ests per chain, 19200 per kthread [ 730.149188][T13959] netlink: 'syz.1.2978': attribute type 16 has an invalid length. [ 730.149209][T13959] netlink: 'syz.1.2978': attribute type 17 has an invalid length. [ 730.176916][T13959] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 730.226036][T11919] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 731.921978][T14060] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3011'. [ 732.726376][T14100] loop4: detected capacity change from 0 to 7 [ 732.773246][T14100] Dev loop4: unable to read RDB block 7 [ 732.773297][T14100] loop4: unable to read partition table [ 732.773531][T14100] loop4: partition table beyond EOD, truncated [ 732.773549][T14100] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 733.183995][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.403513][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.449594][ C1] vkms_vblank_simulate: vblank timer overrun [ 733.898230][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.116552][ C1] vkms_vblank_simulate: vblank timer overrun [ 734.512080][T14139] syzkaller1: entered promiscuous mode [ 734.512105][T14139] syzkaller1: entered allmulticast mode [ 734.647123][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.246412][T14172] netlink: 'syz.2.3057': attribute type 2 has an invalid length. [ 735.698608][T14198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.780730][T13449] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 735.954224][T13449] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.954251][T13449] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 735.954268][T13449] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.954320][T13449] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 735.954344][T13449] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 735.965466][T13449] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.965501][T13449] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.965519][T13449] usb 6-1: Product: syz [ 735.965531][T13449] usb 6-1: Manufacturer: syz [ 735.992250][T13449] cdc_wdm 6-1:1.0: skipping garbage [ 735.992269][T13449] cdc_wdm 6-1:1.0: skipping garbage [ 736.016661][T13449] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 736.016681][T13449] cdc_wdm 6-1:1.0: Unknown control protocol [ 736.348450][T14221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.503938][T14253] syz_tun: entered promiscuous mode [ 737.504304][T14253] macvtap1: entered promiscuous mode [ 737.586004][T14253] syz_tun: left promiscuous mode [ 737.652007][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.780870][ T1199] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 737.784206][T14260] syzkaller1: entered promiscuous mode [ 737.784229][T14260] syzkaller1: entered allmulticast mode [ 737.930558][ T1199] usb 4-1: Using ep0 maxpacket: 8 [ 737.935534][ T1199] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.935560][ T1199] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.935581][ T1199] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.935593][ T1199] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.935619][ T1199] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.935630][ T1199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.157055][ T1199] usb 4-1: GET_CAPABILITIES returned 0 [ 738.157099][ T1199] usbtmc 4-1:16.0: can't read capabilities [ 738.297989][T14272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3099'. [ 738.363287][ T10] usb 4-1: USB disconnect, device number 29 [ 738.590211][ T1244] usb 6-1: USB disconnect, device number 18 [ 738.731109][T14285] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3103'. [ 739.994339][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3128'. [ 740.053095][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3129'. [ 740.077592][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3129'. [ 740.077976][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3129'. [ 740.078182][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3129'. [ 740.078386][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3129'. [ 740.078582][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3129'. [ 740.078902][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3129'. [ 740.815211][T14374] cifs: Unknown parameter '' [ 741.259865][T14395] ------------[ cut here ]------------ [ 741.259878][T14395] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 741.260520][T14395] WARNING: CPU: 1 PID: 14395 at drivers/net/wireless/virtual/mac80211_hwsim.c:2690 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 741.260563][T14395] Modules linked in: [ 741.260582][T14395] CPU: 1 UID: 0 PID: 14395 Comm: syz.1.3152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 741.260603][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 741.260614][T14395] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 741.260649][T14395] Code: 81 20 00 00 48 c7 c7 80 b1 7a 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 c0 b4 3f fb 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 0d 6d 7b fb 90 0f 0b 90 e9 fe fe ff [ 741.260665][T14395] RSP: 0018:ffffc900102bee40 EFLAGS: 00010282 [ 741.260681][T14395] RAX: a51c8ee8957a8000 RBX: 0000000000000014 RCX: 0000000000080000 [ 741.260695][T14395] RDX: ffffc9000dd9a000 RSI: 0000000000001263 RDI: 0000000000001264 [ 741.260708][T14395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 741.260719][T14395] R10: dffffc0000000000 R11: ffffed101712487b R12: 0000000000000000 [ 741.260733][T14395] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 741.260746][T14395] FS: 00007f953d12e6c0(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 741.260762][T14395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.260775][T14395] CR2: 0000200000001080 CR3: 0000000031938000 CR4: 00000000003526f0 [ 741.260791][T14395] Call Trace: [ 741.260798][T14395] [ 741.260811][T14395] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 741.260839][T14395] mac80211_hwsim_sta_add+0xa3/0x310 [ 741.260864][T14395] drv_sta_state+0x8c1/0x1840 [ 741.260892][T14395] sta_info_insert_rcu+0x1a30/0x2840 [ 741.260919][T14395] ? sta_info_insert_rcu+0x349/0x2840 [ 741.260968][T14395] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 741.260991][T14395] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 741.261019][T14395] ? ieee80211_add_station+0x4f1/0x6a0 [ 741.261042][T14395] sta_info_insert+0x16/0xc0 [ 741.261063][T14395] rdev_add_station+0x108/0x290 [ 741.261089][T14395] nl80211_new_station+0x1755/0x1b70 [ 741.261126][T14395] ? __pfx_nl80211_new_station+0x10/0x10 [ 741.261145][T14395] ? netdev_run_todo+0xe1d/0xea0 [ 741.261192][T14395] ? nl80211_pre_doit+0x4f1/0x930 [ 741.261217][T14395] genl_family_rcv_msg_doit+0x215/0x300 [ 741.261248][T14395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.261283][T14395] ? bpf_lsm_capable+0x9/0x20 [ 741.261301][T14395] ? security_capable+0x7e/0x2e0 [ 741.261330][T14395] genl_rcv_msg+0x60e/0x790 [ 741.261357][T14395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.261377][T14395] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 741.261392][T14395] ? __pfx_nl80211_new_station+0x10/0x10 [ 741.261409][T14395] ? __pfx_nl80211_post_doit+0x10/0x10 [ 741.261431][T14395] ? __lock_acquire+0xab9/0xd20 [ 741.261468][T14395] netlink_rcv_skb+0x208/0x470 [ 741.261487][T14395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.261510][T14395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.261544][T14395] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.261561][T14395] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.261583][T14395] genl_rcv+0x28/0x40 [ 741.261603][T14395] netlink_unicast+0x846/0xa10 [ 741.261637][T14395] ? __pfx_netlink_unicast+0x10/0x10 [ 741.261663][T14395] ? netlink_sendmsg+0x642/0xb30 [ 741.261679][T14395] ? skb_put+0x11b/0x210 [ 741.261701][T14395] netlink_sendmsg+0x805/0xb30 [ 741.261730][T14395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.261757][T14395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 741.261780][T14395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.261799][T14395] __sock_sendmsg+0x21c/0x270 [ 741.261826][T14395] ____sys_sendmsg+0x508/0x820 [ 741.261853][T14395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.261883][T14395] ? import_iovec+0x74/0xa0 [ 741.261906][T14395] ___sys_sendmsg+0x21f/0x2a0 [ 741.261929][T14395] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.262021][T14395] ? __fget_files+0x2a/0x420 [ 741.262046][T14395] ? __fget_files+0x3a6/0x420 [ 741.262081][T14395] __x64_sys_sendmsg+0x1a1/0x260 [ 741.262104][T14395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.262143][T14395] ? do_syscall_64+0xbe/0xfa0 [ 741.262170][T14395] do_syscall_64+0xfa/0xfa0 [ 741.262191][T14395] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.262211][T14395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.262229][T14395] ? clear_bhb_loop+0x60/0xb0 [ 741.262251][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.262269][T14395] RIP: 0033:0x7f953eecefc9 [ 741.262286][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.262301][T14395] RSP: 002b:00007f953d12e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.262321][T14395] RAX: ffffffffffffffda RBX: 00007f953f125fa0 RCX: 00007f953eecefc9 [ 741.262334][T14395] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 741.262345][T14395] RBP: 00007f953ef51f91 R08: 0000000000000000 R09: 0000000000000000 [ 741.262356][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.262368][T14395] R13: 00007f953f126038 R14: 00007f953f125fa0 R15: 00007fff05853308 [ 741.262400][T14395] [ 741.262422][T14395] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 741.262437][T14395] CPU: 1 UID: 0 PID: 14395 Comm: syz.1.3152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 741.262457][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 741.262467][T14395] Call Trace: [ 741.262474][T14395] [ 741.262482][T14395] dump_stack_lvl+0x99/0x250 [ 741.262509][T14395] ? __asan_memcpy+0x40/0x70 [ 741.262530][T14395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.262554][T14395] ? __pfx__printk+0x10/0x10 [ 741.262589][T14395] vpanic+0x237/0x6d0 [ 741.262607][T14395] ? __pfx_vpanic+0x10/0x10 [ 741.262635][T14395] panic+0xb9/0xc0 [ 741.262652][T14395] ? __pfx_panic+0x10/0x10 [ 741.262686][T14395] __warn+0x31b/0x4b0 [ 741.262703][T14395] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 741.262729][T14395] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 741.262751][T14395] report_bug+0x2be/0x4f0 [ 741.262771][T14395] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 741.262795][T14395] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 741.262817][T14395] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 741.262840][T14395] handle_bug+0x84/0x160 [ 741.262865][T14395] exc_invalid_op+0x1a/0x50 [ 741.262888][T14395] asm_exc_invalid_op+0x1a/0x20 [ 741.262904][T14395] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 741.262926][T14395] Code: 81 20 00 00 48 c7 c7 80 b1 7a 8b 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 c0 b4 3f fb 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 0d 6d 7b fb 90 0f 0b 90 e9 fe fe ff [ 741.262942][T14395] RSP: 0018:ffffc900102bee40 EFLAGS: 00010282 [ 741.262966][T14395] RAX: a51c8ee8957a8000 RBX: 0000000000000014 RCX: 0000000000080000 [ 741.262980][T14395] RDX: ffffc9000dd9a000 RSI: 0000000000001263 RDI: 0000000000001264 [ 741.262992][T14395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 741.263004][T14395] R10: dffffc0000000000 R11: ffffed101712487b R12: 0000000000000000 [ 741.263017][T14395] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 741.263053][T14395] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 741.263079][T14395] mac80211_hwsim_sta_add+0xa3/0x310 [ 741.263105][T14395] drv_sta_state+0x8c1/0x1840 [ 741.263132][T14395] sta_info_insert_rcu+0x1a30/0x2840 [ 741.263159][T14395] ? sta_info_insert_rcu+0x349/0x2840 [ 741.263201][T14395] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 741.263221][T14395] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 741.263249][T14395] ? ieee80211_add_station+0x4f1/0x6a0 [ 741.263274][T14395] sta_info_insert+0x16/0xc0 [ 741.263295][T14395] rdev_add_station+0x108/0x290 [ 741.263319][T14395] nl80211_new_station+0x1755/0x1b70 [ 741.263358][T14395] ? __pfx_nl80211_new_station+0x10/0x10 [ 741.263376][T14395] ? netdev_run_todo+0xe1d/0xea0 [ 741.263420][T14395] ? nl80211_pre_doit+0x4f1/0x930 [ 741.263445][T14395] genl_family_rcv_msg_doit+0x215/0x300 [ 741.263474][T14395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.263507][T14395] ? bpf_lsm_capable+0x9/0x20 [ 741.263526][T14395] ? security_capable+0x7e/0x2e0 [ 741.263553][T14395] genl_rcv_msg+0x60e/0x790 [ 741.263583][T14395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.263604][T14395] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 741.263620][T14395] ? __pfx_nl80211_new_station+0x10/0x10 [ 741.263639][T14395] ? __pfx_nl80211_post_doit+0x10/0x10 [ 741.263661][T14395] ? __lock_acquire+0xab9/0xd20 [ 741.263693][T14395] netlink_rcv_skb+0x208/0x470 [ 741.263712][T14395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.263736][T14395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.263772][T14395] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.263789][T14395] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.263812][T14395] genl_rcv+0x28/0x40 [ 741.263831][T14395] netlink_unicast+0x846/0xa10 [ 741.263867][T14395] ? __pfx_netlink_unicast+0x10/0x10 [ 741.263893][T14395] ? netlink_sendmsg+0x642/0xb30 [ 741.263909][T14395] ? skb_put+0x11b/0x210 [ 741.263931][T14395] netlink_sendmsg+0x805/0xb30 [ 741.263967][T14395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.263996][T14395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 741.264020][T14395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.264040][T14395] __sock_sendmsg+0x21c/0x270 [ 741.264068][T14395] ____sys_sendmsg+0x508/0x820 [ 741.264096][T14395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.264127][T14395] ? import_iovec+0x74/0xa0 [ 741.264151][T14395] ___sys_sendmsg+0x21f/0x2a0 [ 741.264174][T14395] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.264230][T14395] ? __fget_files+0x2a/0x420 [ 741.264252][T14395] ? __fget_files+0x3a6/0x420 [ 741.264289][T14395] __x64_sys_sendmsg+0x1a1/0x260 [ 741.264314][T14395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.264354][T14395] ? do_syscall_64+0xbe/0xfa0 [ 741.264381][T14395] do_syscall_64+0xfa/0xfa0 [ 741.264401][T14395] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.264422][T14395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.264441][T14395] ? clear_bhb_loop+0x60/0xb0 [ 741.264463][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.264480][T14395] RIP: 0033:0x7f953eecefc9 [ 741.264496][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.264511][T14395] RSP: 002b:00007f953d12e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.264529][T14395] RAX: ffffffffffffffda RBX: 00007f953f125fa0 RCX: 00007f953eecefc9 [ 741.264543][T14395] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 741.264554][T14395] RBP: 00007f953ef51f91 R08: 0000000000000000 R09: 0000000000000000 [ 741.264566][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.264577][T14395] R13: 00007f953f126038 R14: 00007f953f125fa0 R15: 00007fff05853308 [ 741.264608][T14395] [ 741.264862][T14395] Kernel Offset: disabled